![Zyxel XGS4700-48F [235/358] Private vlan overview](/img/pdf.png)
Zyxel XGS4700-48F [235/358] Private vlan overview
![Zyxel XGS4700-48F [235/358] Private vlan overview](/views2/1169518/page235/bgeb.png)
Ethernet Switch CLI Reference Guide
235
CHAPTER 57
Private VLAN Commands
This chapter explains how to use commands to configure private VLANs on the Switch.
57.1 Private VLAN Overview
Private VLAN allows you to do port isolation within a VLAN in a simple way. You specify
which port(s) in a VLAN is not isolated by adding it to the promiscuous port list. The Switch
automatically adds other ports in this VLAN to the isolated port list and block traffic between
the isolated ports. A promiscuous port can communicate with any port in the same VLAN.
While an isolated port can communicate with the promiscuous port(s) only.
Figure 9 Private VLAN Example
If you change the VLAN settings, make sure you keep at least one port in the
promiscuous port list for a VLAN with private VLAN enabled. Otherwise, this
VLAN is blocked from the whole network.
Isolated ports: 2 ~ 6
Promiscuous port: 10
VLAN 123
2
6
10
Содержание
- Cli reference guide 1
- Default login details 1
- Ethernet switch 1
- Firmware version 3 9 3 0 3 0 and 4 0 edition 1 03 2011 1
- Www zyxel com 1
- About this cli reference guide 3
- This guide is intended as a command reference for a series of products therefore many commands in this guide may not be available in your product see your user s guide for a list of supported features and details about feature implementation 3
- Document conventions 5
- Notes tell you other important information for example other things you may need to configure or helpful tips or recommendations 5
- Warnings tell you about things that could harm you or your device see your user s guide for product specific warnings 5
- Document conventions 7
- Ethernet switch cli reference guide 7
- Figures in this guide may use the following generic icons the switch icon is not an exact representation of your device 7
- Icons used in figures 7
- Contents overview 9
- Introduction 3 9
- Reference a g 9 9
- Reference h m 03 9
- Reference n s 05 10
- Appendices and index of commands 27 11
- Reference t z 83 11
- Introduction 13
- Accessing the cli 15
- Console port 15
- Hapter 15
- How to access and use the cli 15
- Telnet 15
- Logging in 16
- The switch automatically logs you out of the management interface after five minutes of inactivity if this happens to you simply log back in again 16
- Using shortcuts and getting help 16
- Logging out 17
- Saving your configuration 17
- You should save your changes after each cli session all unsaved configuration changes are lost once you restart the switch 17
- Hapter 19
- Privilege level and command mode 19
- Privilege levels 19
- Privilege levels for commands 19
- Privilege levels for login accounts 19
- Privilege levels for sessions 20
- Command modes 21
- Command modes for privilege levels 0 12 21
- Chapter 2 privilege level and command mode 22
- Command modes for privilege levels 13 14 22
- Each command is usually in one and only one mode if a user wants to run a particular command the user has to change to the appropriate mode the command modes are organized like a tree and users start in enable mode the following table explains how to change from one mode to another 22
- Ethernet switch cli reference guide 22
- If the session s privilege level is 13 14 the allowed commands are in one of several modes 22
- Table 7 command modes for privilege levels 13 14 and the types of commands in each one 22
- Table 8 changing between command modes for privilege levels 13 14 22
- Listing available commands 23
- Changing the administrator password 25
- Changing the enable password 25
- Hapter 25
- Initial setup 25
- Afterwards you have to use the new ip address to access the switch 26
- Changing the management ip address 26
- Changing the out of band management ip address 26
- Prohibiting concurrent logins 26
- Chapter 3 initial setup 27
- Ethernet switch cli reference guide 27
- Looking at basic system information 27
- Looking at the operating configuration 27
- See chapter 85 on page 317 for more information about these attributes 27
- This is illustrated in the following example 27
- Use this command to look at general system information about the switch 27
- Use this command to look at the current operating configuration 27
- Reference a g 29
- Aaa commands 31
- Command summary 31
- Hapter 31
- Chapter 4 aaa commands 32
- Ethernet switch cli reference guide 32
- Table 10 command summary aaa accounting continued 32
- Table 11 aaa authorization command summary 32
- Arp commands 33
- Command examples 33
- Command summary 33
- Hapter 33
- Chapter 5 arp commands 34
- Ethernet switch cli reference guide 34
- Table 13 show ip arp continued 34
- Arp inspection commands 35
- Command summary 35
- Hapter 35
- Chapter 6 arp inspection commands 36
- Ethernet switch cli reference guide 36
- Table 16 command summary arp inspection log 36
- Table 17 command summary interface arp inspection 36
- Table 18 command summary arp inspection vlan 36
- Chapter 6 arp inspection commands 37
- Command examples 37
- Ethernet switch cli reference guide 37
- Table 19 show arp inspection filter 37
- The following table describes the labels in this screen 37
- This example looks at log messages that were generated by arp packets and that have not been sent to the syslog server yet 37
- This example looks at the current list of mac address filters that were created because the switch identified an unauthorized arp packet when the switch identifies an unauthorized arp packet it automatically creates a mac address filter to block traffic from the source mac address and source vlan id of the unauthorized arp packet 37
- Chapter 6 arp inspection commands 38
- Ethernet switch cli reference guide 38
- Table 20 show arp inspection log 38
- The following table describes the labels in this screen 38
- This example displays whether ports are trusted or untrusted ports for arp inspection 38
- Chapter 6 arp inspection commands 39
- Ethernet switch cli reference guide 39
- Table 21 show arp inspection interface port channel 39
- The following table describes the labels in this screen 39
- Arp learning commands 41
- Command examples 41
- Command summary 41
- Hapter 41
- Bandwidth commands 43
- Command summary 43
- Hapter 43
- Chapter 8 bandwidth commands 44
- Command examples ingress 44
- Ethernet switch cli reference guide 44
- Note the sum of cirs cannot be greater than or equal to the uplink bandwidth 44
- Table 24 command summary bandwidth control bandwidth limit 44
- The following section lists the commands for this feature 44
- This example sets the outgoing traffic bandwidth limit to 5000 kbps and the incoming traffic bandwidth limit to 4000 kbps for port 1 44
- Chapter 8 bandwidth commands 45
- Command examples cir pir 45
- Ethernet switch cli reference guide 45
- This example deactivates the outgoing bandwidth limit on port 1 45
- This example displays the bandwidth limits configured on port 1 45
- This example sets the guaranteed traffic bandwidth limit on port 1 to 4000 kbps and the maximum traffic bandwidth limit to 5000 kbps for port 1 45
- Broadcast storm commands 47
- Command summary 47
- Hapter 47
- 128 broadcast packets per second 256 multicast packets per second 48
- Chapter 9 broadcast storm commands 48
- Command example bmstorm limit 48
- Command example broadcast limit multicast limit dlf limit 48
- Ethernet switch cli reference guide 48
- Table 26 command summary storm control bmstorm limit and bstorm control continued 48
- This example enables broadcast storm control on port 1 and limits the combined maximum rate of broadcast multicast and dlf packets to 128 kbps 48
- This example enables broadcast storm control on the switch and configures port 1 to accept up to 48
- 64 dlf packets per second 49
- Chapter 9 broadcast storm commands 49
- Ethernet switch cli reference guide 49
- Cfm commands 51
- Cfm overview 51
- Hapter 51
- How cfm works 51
- Cfm term definition 52
- Chapter 10 cfm commands 53
- Ethernet switch cli reference guide 53
- Table 27 cfm term definitions 53
- Table 28 cfm command user input values 53
- This section lists the common term definition appears in this chapter refer to user s guide for more detailed information about cfm 53
- User input values 53
- Chapter 10 cfm commands 54
- Command summary 54
- Ethernet switch cli reference guide 54
- Table 29 cfm command summary 54
- The following section lists the commands for this feature 54
- Chapter 10 cfm commands 55
- Ethernet switch cli reference guide 55
- Note if you set the format to vid the vlan id should be the same as the vlan id you use to identify the ma 55
- Table 29 cfm command summary continued 55
- Chapter 10 cfm commands 56
- Ethernet switch cli reference guide 56
- Table 29 cfm command summary continued 56
- Command examples 57
- Remember to save new settings using the write memory command 57
- Chapter 10 cfm commands 58
- Ethernet switch cli reference guide 58
- Table 30 show cfm action mipccmdb 58
- The following table describes the labels in this screen 58
- This example displays all neighbors mep port information in the mip ccm databases 58
- This example lists all cfm domains in this example only one md md1 is configured the ma3 with the associated mep port 1 is under this md1 58
- This example starts a loopback test and displays the test result on the console 58
- Chapter 10 cfm commands 59
- Ethernet switch cli reference guide 59
- This example assigns a virtual mac address to port 3 and displays the mac addresses of the ports 2 4 the assigned virtual mac address should be unique in both the switch and the network to which it belongs 59
- This example sets the switch to carry its host name and management ip address 192 68 00 in cfm packets 59
- This example shows remote mep database information the remote mep has been configured to carry its host name and a specified ip address in cfm packets 59
- Classifier commands 61
- Command summary 61
- Hapter 61
- Chapter 11 classifier commands 62
- Ethernet switch cli reference guide 62
- In an ipv4 packet header the protocol field identifies the next level protocol the following table shows some common ipv4 protocol types and the corresponding protocol number refer to http www iana org assignments protocol numbers for a complete list 62
- In an ipv6 packet header the next header field identifies the next level protocol the following table shows some common ipv6 next header values 62
- Table 32 common ethernet types and protocol number 62
- Table 33 common ipv4 protocol types and protocol numbers 62
- Table 34 common ipv6 next header values 62
- The following table shows some other common ethernet types and the corresponding protocol number 62
- Command examples 63
- Cluster commands 65
- Command summary 65
- Hapter 65
- Chapter 12 cluster commands 66
- Command examples 66
- Ethernet switch cli reference guide 66
- Table 36 show cluster member 66
- The following table describes the labels in this screen 66
- This example creates the cluster cmanage in vlan 1 then it looks at the current list of candidates for membership in this cluster and adds two switches to cluster 66
- Chapter 12 cluster commands 67
- Ethernet switch cli reference guide 67
- Table 37 show cluster 67
- The following table describes the labels in this screen 67
- This example logs in to the cli of member 00 13 49 00 00 01 looks at the current firmware version on the member switch logs out of the member s cli and returns to the cli of the manager 67
- This example looks at the current status of the switch s cluster 67
- Command summary 69
- Date and time commands 69
- Hapter 69
- Chapter 13 date and time commands 70
- Command examples 70
- Ethernet switch cli reference guide 70
- Table 39 time command summary continued 70
- Table 40 timesync command summary 70
- This example sets the current date current time time zone and daylight savings time 70
- Chapter 13 date and time commands 71
- Ethernet switch cli reference guide 71
- Table 41 show timesync 71
- The following table describes the labels in this screen 71
- This example looks at the current time server settings 71
- Command summary 73
- Dhcp commands 73
- Hapter 73
- Chapter 14 dhcp commands 74
- Ethernet switch cli reference guide 74
- Note you have to configure the vlan before you configure a dhcp relay for the vlan you have to disable dhcp smart relay before you can enable dhcp relay 74
- Table 43 dhcp relay command summary 74
- Table 44 dhcp relay broadcast command summary 74
- Table 45 dhcp server command summary 74
- Chapter 14 dhcp commands 75
- Command examples 75
- Ethernet switch cli reference guide 75
- Figure 3 example global dhcp relay 75
- In this example the switch relays dhcp requests for the vlan1 and vlan2 domains there is only one dhcp server for dhcp clients in both domains 75
- In this example there are two vlans vids 1 and 2 in a campus network two dhcp servers are installed to serve each vlan the switch forwards dhcp requests from the dormitory rooms vlan 1 to the dhcp server with ip address 192 68 00 dhcp requests from the academic buildings vlan 2 are sent to the other dhcp server with ip address 172 6 0 00 75
- This example shows how to configure the switch for this configuration dhcp relay agent information option 82 is also enabled 75
- Vlan1 vlan2 75
- In this example the switch is a dhcp server for clients on vlan 1 and vlan 2 the dhcp clients in vlan 1 are assigned ip addresses in the range 192 68 00 to 192 68 00 and clients on vlan 2 are assigned ip addresses in the range 172 6 0 to 172 6 30 76
- This example shows how to configure the dhcp server for vlan 1 with the configuration shown in figure 5 on page 76 it also provides the dhcp clients with the ip address of the default gateway and the dns server 76
- This example shows how to configure these dhcp servers the vlans are already configured 76
- Command summary 77
- Dhcp snooping dhcp vlan commands 77
- Hapter 77
- Chapter 15 dhcp snooping dhcp vlan commands 78
- Command examples 78
- Enables dhcp snooping switch sets up an external dhcp snooping database on a network server with ip address 172 6 7 7 78
- Ethernet switch cli reference guide 78
- Table 46 dhcp snooping command summary continued 78
- Table 47 dhcp vlan command summary 78
- The following table describes the dhcp vlan commands 78
- This example 78
- Chapter 15 dhcp snooping dhcp vlan commands 79
- Enables dhcp snooping on vlans 1 2 3 200 and 300 sets the switch to add the slot number port number and vlan id to dhcp requests that it broadcasts to the dhcp vlan sets ports 1 5 as dhcp snooping trusted ports sets the maximum number of dhcp packets that can be received on ports 1 5 to 100 packets per second configures a dhcp vlan with a vlan id 300 displays dhcp snooping configuration details 79
- Ethernet switch cli reference guide 79
- Command summary 81
- Diffserv commands 81
- Hapter 81
- Command summary 83
- Display commands 83
- Hapter 83
- Command summary 85
- Dvmrp commands 85
- Dvmrp overview 85
- Hapter 85
- Chapter 18 dvmrp commands 86
- Command examples 86
- Enables igmp and dvmrp on the switch enables dvmrp on the following routing domains 10 0 0 24 172 6 24 displays dvmrp settings configured on the switch 86
- Ethernet switch cli reference guide 86
- Figure 6 dvmrp network example 86
- In this example the switch is configured to exchange dvmrp information with other dvmrp enabled routers as shown next the switch is a dvmrp router c dvmrp is activated on ip routing domains 10 0 0 24 and 172 6 24 so that it can exchange dvmrp information with routers a and b 86
- Table 50 command summary dvmrp continued 86
- Cpu protection overview 87
- Error disable and recovery commands 87
- Error disable recovery overview 87
- Hapter 87
- User input values 87
- Chapter 19 error disable and recovery commands 88
- Command summary 88
- Ethernet switch cli reference guide 88
- Table 52 cpu protection command summary 88
- Table 53 errdisable recovery command summary 88
- The following section lists the commands for this feature 88
- Chapter 19 error disable and recovery commands 89
- Command examples 89
- Ethernet switch cli reference guide 89
- Limit the number of arp packets that port 7 can handle to 100 packets per second set to shut down port 7 when the number arp packets the port should handle exceeds the rate limit display the cpu protection settings that you just set for port 7 display the error disable status and action mode for arp packet handling 89
- Table 53 errdisable recovery command summary continued 89
- This example shows you how to configure the following 89
- Chapter 19 error disable and recovery commands 90
- Ethernet switch cli reference guide 90
- This example enables the disabled port recovery function and the recovery timer for the loopguard feature on the switch if a port is shut down due to the specified reason the switch activates the port 300 seconds the default value later this example also shows the number of the disabled port s and the time left before the port s becomes active 90
- Command summary 91
- Ethernet oam commands 91
- Hapter 91
- Ieee 802 ah link layer ethernet oam implementation 91
- Chapter 20 ethernet oam commands 92
- Command examples 92
- Ethernet switch cli reference guide 92
- Table 54 ethernet oam command summary continued 92
- This example enables ethernet oam on port 7 and sets the mode to active 92
- Chapter 20 ethernet oam commands 93
- Ethernet switch cli reference guide 93
- Table 55 show ethernet oam discovery 93
- The following table describes the labels in this screen 93
- This example performs ethernet oam discovery from port 7 93
- Chapter 20 ethernet oam commands 94
- Ethernet switch cli reference guide 94
- Table 55 show ethernet oam discovery continued 94
- This example looks at the number of oam packets transferred on port 1 94
- Chapter 20 ethernet oam commands 95
- Ethernet switch cli reference guide 95
- Table 56 show ethernet oam statistics 95
- Table 57 show ethernet oam summary 95
- The following table describes the labels in this screen 95
- This example looks at the configuration of ports on which oam is enabled 95
- Chapter 20 ethernet oam commands 96
- Ethernet switch cli reference guide 96
- Table 57 show ethernet oam summary continued 96
- Command summary 97
- External alarm commands 97
- Hapter 97
- Chapter 21 external alarm commands 98
- Command examples 98
- Ethernet switch cli reference guide 98
- This example configures and shows the name and status of the external alarm s 98
- Command summary 99
- Garp commands 99
- Garp overview 99
- Hapter 99
- Chapter 22 garp commands 100
- Command examples 100
- Ethernet switch cli reference guide 100
- In this example the administrator looks at the switch s garp timer settings and decides to change them the administrator sets the join timer to 300 milliseconds the leave timer to 800 milliseconds and the leave all timer to 11000 milliseconds 100
- Command examples 101
- Command summary 101
- Gvrp commands 101
- Hapter 101
- Reference h m 103
- Command summary 105
- Hapter 105
- Https server commands 105
- Chapter 24 https server commands 106
- Command examples 106
- Ethernet switch cli reference guide 106
- Table 62 show https 106
- The following table describes the labels in this screen 106
- This example shows the current https settings statistics and sessions 106
- Chapter 24 https server commands 107
- Ethernet switch cli reference guide 107
- Table 62 show https continued 107
- Table 63 show https session 107
- The following table describes the labels in this screen 107
- This example shows the current https sessions 107
- Chapter 24 https server commands 108
- Ethernet switch cli reference guide 108
- Table 63 show https session continued 108
- Command summary 109
- Guest vlan overview 109
- Hapter 109
- Ieee 802 x authentication commands 109
- Chapter 25 ieee 802 x authentication commands 110
- Command examples 110
- Ethernet switch cli reference guide 110
- Specifies radius server 1 with ip address 10 0 0 port 1890 and the string secretkey as the password 2 specifies the timeout period of 30 seconds that the switch will wait for a response from the radius server 3 enables port authentication on the switch 4 enables port authentication on ports 4 to 8 110
- Table 64 port access authenticator command summary continued 110
- This example configures the switch in the following ways 110
- Command summary 113
- Hapter 113
- Igmp and multicasting commands 113
- Igmp overview 113
- Chapter 26 igmp and multicasting commands 114
- Command examples 114
- Ethernet switch cli reference guide 114
- Sets the switch to flood unknown multicast frames sets the switch to non querier mode 114
- Table 65 igmp command summary continued 114
- Table 66 ipmc command summary 114
- This example configures igmp on the switch with the following settings 114
- Command summary 117
- Hapter 117
- Igmp snooping commands 117
- Chapter 27 igmp snooping commands 118
- Ethernet switch cli reference guide 118
- Table 68 igmp snooping command summary continued 118
- Chapter 27 igmp snooping commands 119
- Ethernet switch cli reference guide 119
- Table 68 igmp snooping command summary continued 119
- Table 69 igmp snooping vlan command summary 119
- Table 70 interface igmp command summary 119
- Chapter 27 igmp snooping commands 120
- Ethernet switch cli reference guide 120
- Table 70 interface igmp command summary continued 120
- Chapter 27 igmp snooping commands 121
- Command examples 121
- Ethernet switch cli reference guide 121
- Host timeou 121
- Table 70 interface igmp command summary continued 121
- This example enables igmp snooping on the switch sets the 121
- Value to 30 seconds and sets the switch to drop packets from unknown multicast groups 121
- Chapter 27 igmp snooping commands 122
- Ethernet switch cli reference guide 122
- Table 71 show multicast 122
- The following table describes the labels in this screen 122
- This example limits the number of multicast groups on port 1 to 5 122
- This example shows the current multicast groups on the switch 122
- This example shows the current multicast vlan on the switch 122
- Chapter 27 igmp snooping commands 123
- Ethernet switch cli reference guide 123
- This example restricts ports 1 4 to multicast ip addresses 224 55 55 through 225 55 55 55 123
- Command summary 125
- Hapter 125
- Igmp filtering commands 125
- Chapter 28 igmp filtering commands 126
- Command examples 126
- Ethernet switch cli reference guide 126
- This example restricts ports 1 4 to multicast ip addresses 224 55 55 through 225 55 55 55 126
- Command summary 127
- Hapter 127
- Interface commands 127
- Chapter 29 interface commands 128
- Ethernet switch cli reference guide 128
- Table 73 interface command summary continued 128
- Chapter 29 interface commands 129
- Command examples 129
- Ethernet switch cli reference guide 129
- Table 74 show interfaces 129
- The following table describes the labels in this screen 129
- This example looks at the current status of port 1 129
- Chapter 29 interface commands 130
- Ethernet switch cli reference guide 130
- Table 74 show interfaces continued 130
- Chapter 29 interface commands 131
- Ethernet switch cli reference guide 131
- Sets the default port vid to 200 2 sets these ports to accept only tagged frames 131
- Sets the ieee 802 p quality of service priority to four 4 2 sets the name test 3 sets the speed to 100 mbps in half duplex mode 131
- Table 74 show interfaces continued 131
- This example configures ports 1 3 4 and 5 in the following ways 131
- This example configures ports 1 5 in the following ways 131
- Command examples 133
- Command summary 133
- Hapter 133
- Interface route domain mode 133
- Command summary 135
- Hapter 135
- Ip commands 135
- Chapter 31 ip commands 136
- Command examples 136
- Ethernet switch cli reference guide 136
- Table 77 tcp and udp command summary continued 136
- Table 78 show ip tcp 136
- The following table describes the labels in this screen 136
- This example shows the tcp statistics and listener ports see rfc 1213 for more information 136
- Chapter 31 ip commands 137
- Ethernet switch cli reference guide 137
- Table 78 show ip tcp continued 137
- Chapter 31 ip commands 138
- Ethernet switch cli reference guide 138
- Table 78 show ip tcp continued 138
- Table 79 show ip udp 138
- The following table describes the labels in this screen 138
- This example shows the udp statistics and listener ports see rfc 1213 for more information 138
- Command examples 139
- Command summary 139
- Hapter 139
- Ip source binding commands 139
- Chapter 32 ip source binding commands 140
- Ethernet switch cli reference guide 140
- Table 81 show ip source binding continued 140
- Hapter 141
- Ipv6 addressing 141
- Ipv6 commands 141
- Ipv6 overview 141
- Ipv6 terms 142
- A loopback address 0 0 0 0 0 0 0 1 or 1 allows a host to send packets to itself it is similar to 127 in ipv4 143
- Chapter 33 ipv6 commands 143
- Ethernet switch cli reference guide 143
- Loopback 143
- Multicast scope allows you to determine the size of the multicast group a multicast address has a predefined prefix of ff00 8 the following table describes some of the predefined multicast addresses 143
- Table 84 predefined multicast address 143
- Table 85 reserved multicast address 143
- The following table describes the multicast addresses which are reserved and can not be assigned to a multicast group 143
- Eui 64 144
- Chapter 33 ipv6 commands 148
- Command summary 148
- Ethernet switch cli reference guide 148
- In the following mld snooping proxy example all connected upstream ports 1 7 are treated as one interface the connection between ports 8 and 9 is blocked by stp to break the loop if there is one query from a router x or mld done or report message from any upstream port it will be broadcast to all connected upstream ports 148
- Report 148
- Table 86 ipv6 user input values 148
- Table 87 ipv6 address command summary 148
- The following section lists the commands for this feature 148
- The following table describes user input values available in multiple commands for this feature 148
- Chapter 33 ipv6 commands 149
- Ethernet switch cli reference guide 149
- Note make sure an ipv6 router is available in the vlan network before using this command on the switch 149
- Table 87 ipv6 address command summary continued 149
- Chapter 33 ipv6 commands 150
- Ethernet switch cli reference guide 150
- Table 87 ipv6 address command summary continued 150
- Table 88 ipv6 dhcp relay command summary 150
- Chapter 33 ipv6 commands 151
- Ethernet switch cli reference guide 151
- Note the switch applies the time interval in increments of 10 for example if you set a time interval from 1280 to 1289 milliseconds the switch uses the time interval of 1280 milliseconds 151
- Table 89 ipv6 icmp and ping6 command summary 151
- Table 90 ipv6 mld snooping proxy command summary 151
- Chapter 33 ipv6 commands 152
- Ethernet switch cli reference guide 152
- Table 90 ipv6 mld snooping proxy command summary continued 152
- Chapter 33 ipv6 commands 153
- Ethernet switch cli reference guide 153
- Table 90 ipv6 mld snooping proxy command summary continued 153
- Chapter 33 ipv6 commands 154
- Ethernet switch cli reference guide 154
- Table 90 ipv6 mld snooping proxy command summary continued 154
- Chapter 33 ipv6 commands 155
- Ethernet switch cli reference guide 155
- Table 91 ipv6 nd command summary 155
- Chapter 33 ipv6 commands 156
- Ethernet switch cli reference guide 156
- Table 91 ipv6 nd command summary continued 156
- Table 92 ipv6 neighbor command summary 156
- Chapter 33 ipv6 commands 157
- Command examples 157
- Ethernet switch cli reference guide 157
- Table 92 ipv6 neighbor command summary continued 157
- This example shows how to enable ipv6 in vlan 1 and display the link local address the switch automatically generated and other ipv6 information for the vlan 157
- This example shows how to manually configure two ipv6 addresses one uses the eui 64 format one doesn t in vlan 1 and then display the result before using ipv6 address commands you have to enable ipv6 in the vlan and this has the switch generate a link local address for the interface 157
- Chapter 33 ipv6 commands 158
- Ethernet switch cli reference guide 158
- There are three addresses created in total for vlan 1 the address 2001 db8 c18 1 219 cbff fe00 1 64 is created with the interface id 219 cbff fe00 1 generated using the eui 64 format the address 2001 db8 c18 1 12b 64 is created exactly the same as what you entered in the command 158
- This example shows the switch owns l displays in the t field two manually configured permanent ip addresses 2001 1234 and fe80 219 cbff fe00 1 it also displays a neighbor fe80 2d0 59ff feb8 103c in vlan 1 is reachable from the switch 158
- Chapter 33 ipv6 commands 159
- Ethernet switch cli reference guide 159
- Table 93 show ipv6 neighbor 159
- The following table describes the labels in this screen 159
- This example sends ping requests to an ethernet device with ipv6 address fe80 2d0 59ff feb8 103c in vlan 1 the device also responds the pings 159
- By default windows xp and windows 2003 support ipv6 this example shows you how to use the ipv6 install command on windows xp 2003 to enable ipv6 this also displays how to use the ipconfig command to see auto generated ip addresses 160
- Chapter 33 ipv6 commands 160
- Ethernet switch cli reference guide 160
- Example enabling ipv6 on windows xp 2003 160
- This example configures a static ipv6 route to forward packets with ipv6 prefix 2100 and prefix length 64 to the gateway with ipv6 address fe80 219 cbff fe01 101 in vlan 1 160
- Example http accessing the switch using ipv6 161
- How you access the switch using http varies depending on the operating system os and the type of browser you use and the type of address you want to access 161
- Ipv6 is installed and enabled by default in windows vista use the ipconfig command to check your automatic configured ipv6 address as well you should see at least one ipv6 address available for the interface on your computer 161
- It s recommended to use internet explorer 7 or firefox to access the switch s web gui 161
- Make sure you have enabled ipv6 on your computer see section 33 use the ipconfig command in the command prompt to check the ipv6 address on your computer the example uses an interface with address fe80 2d0 59ff feb8 103c to 161
- This example shows you how to access the switch using http on windows xp 161
- Command summary 165
- Hapter 165
- Layer 2 protocol tunnel l2pt commands 165
- Chapter 34 layer 2 protocol tunnel l2pt commands 166
- Command examples 166
- Ethernet switch cli reference guide 166
- Table 95 l2pt command summary continued 166
- This example enables l2pt on the switch and sets the destination mac address for encapsulating layer 2 protocol packets received on an access port 166
- Chapter 34 layer 2 protocol tunnel l2pt commands 167
- Ethernet switch cli reference guide 167
- This example displays l2pt settings and status on port 3 you can also see how many cdp stp vtp lacp pagp and udld packets received on this port are encapsulated decapsulated or dropped 167
- This example enables l2pt for stp cdp and vtp packets on port 3 it also sets l2pt mode to access for this port 167
- This example sets l2pt mode to tunnel for port 4 167
- Hapter 169
- Link layer discovery protocol lldp commands 169
- Lldp overview 169
- Chapter 35 link layer discovery protocol lldp commands 170
- Command summary 170
- Ethernet switch cli reference guide 170
- Table 96 lldp command summary 170
- The following section lists the commands for this feature 170
- Chapter 35 link layer discovery protocol lldp commands 171
- Ethernet switch cli reference guide 171
- Note make sure the lldp packet transmitting interval is shorter than its ttl to have the switch s device information being updated in the neighboring devices before it ages out 171
- Table 96 lldp command summary continued 171
- Chapter 35 link layer discovery protocol lldp commands 172
- Command examples 172
- Ethernet switch cli reference guide 172
- Table 96 lldp command summary continued 172
- This example enables lldp on the switch sets port 2 to send and receive lldp packets and allows the switch to send optional basic management tlvs such as management address port description and system description tlvs on port 2 this example also shows the lldp settings on port 2 and global lldp settings on the switch 172
- Command summary 173
- Hapter 173
- Load sharing commands 173
- Load sharing overview 173
- Chapter 36 load sharing commands 174
- Command examples 174
- Ethernet switch cli reference guide 174
- This example enables equal cost multipath ecmp routing on the switch and sets the switch to use a packet s source and destination ip addresses to determine the routing path for the packet 174
- Command examples 175
- Command summary 175
- Hapter 175
- Logging commands 175
- Command summary 177
- Hapter 177
- Login account commands 177
- Password encryption 177
- Chapter 38 login account commands 178
- Command examples 178
- Ethernet switch cli reference guide 178
- This example creates a new user user2 with privilege 13 178
- Command summary 179
- Hapter 179
- Loopguard commands 179
- Chapter 39 loopguard commands 180
- Command examples 180
- Ethernet switch cli reference guide 180
- Table 101 show loopguard 180
- The following table describes the labels in this screen 180
- This example enables loopguard on ports 1 3 180
- Command summary 181
- Hapter 181
- Mac address commands 181
- Chapter 40 mac address commands 182
- Command examples 182
- Ethernet switch cli reference guide 182
- Table 102 mac mac aging time and mac flush command summary continued 182
- Table 103 show mac address table 182
- The following table describes the labels in this screen 182
- This example shows the current mac address table 182
- Command summary 183
- Hapter 183
- Mac authentication commands 183
- Mac authentication overview 183
- Chapter 41 mac authentication commands 184
- Command examples 184
- Ethernet switch cli reference guide 184
- Table 104 mac authentication command summary continued 184
- This example enables mac authentication on the switch specifies the name prefix clientname and the mac authentication password lech89 next mac authentication is activated on ports 1 5 and configuration details are displayed 184
- Command summary 185
- Hapter 185
- Mac filter commands 185
- Command example 186
- Command example filter source 186
- Command summary 187
- Hapter 187
- Mac forward commands 187
- Command summary 189
- Hapter 189
- Mirror commands 189
- Chapter 44 mirror commands 190
- Command examples 190
- Ethernet switch cli reference guide 190
- Table 108 mirror command summary continued 190
- Table 109 mirror filter command summary 190
- This example enables port mirroring and copies outgoing traffic from ports 1 4 5 and 6 to port 3 190
- Chapter 44 mirror commands 191
- Ethernet switch cli reference guide 191
- This example displays the mirror settings of the switch after you configured in the example above 191
- Command summary 193
- Hapter 193
- Mrstp commands 193
- Mrstp overview 193
- Chapter 45 mrstp commands 194
- Command examples 194
- Enables mrstp on the switch activates tree 1 and sets the bridge priority hello time maximum age and forward values for this rstp configuration activates mrstp for ports 1 5 and sets path cost on these ports to 127 adds ports 1 5 to tree index 1 194
- Ethernet switch cli reference guide 194
- In this example we enable mrstp on ports 21 24 port 24 is connected to the host while ports 21 23 are connected to another switch 194
- Note an edge port becomes a non edge port as soon as it receiveds a bridge protocol data units bpdu 194
- Table 110 command summary mrstp 194
- This example configures mrstp in the following way 194
- Command summary 195
- Hapter 195
- Mstp commands 195
- Chapter 46 mstp commands 196
- Command examples 196
- Ethernet switch cli reference guide 196
- Table 112 mstp instance command summary 196
- This example shows the current mstp configuration 196
- Chapter 46 mstp commands 197
- Ethernet switch cli reference guide 197
- Table 113 show mstp 197
- The following table describes the labels in this screen 197
- This example shows the current cist configuration mstp instance 0 197
- Chapter 46 mstp commands 198
- Ethernet switch cli reference guide 198
- Table 114 show mstp instance 198
- The following table describes the labels in this screen 198
- Command examples 201
- Command summary 201
- Hapter 201
- Multiple login commands 201
- Command summary 203
- Hapter 203
- Mvr commands 203
- Command examples 204
- Reference n s 205
- Command summary 207
- Hapter 207
- Ospf commands 207
- Ospf overview 207
- Chapter 49 ospf commands 208
- Ethernet switch cli reference guide 208
- Table 118 ospf command summary continued 208
- Chapter 49 ospf commands 209
- Ethernet switch cli reference guide 209
- Note you cannot set two routing protocols to have the same administrative distance 209
- Table 118 ospf command summary continued 209
- Chapter 49 ospf commands 210
- Command examples 210
- Ethernet switch cli reference guide 210
- Figure 7 ospf network example 210
- In this example the switch a is an area border router abr in an ospf network 210
- Table 118 ospf command summary continued 210
- In this example the switch z is a redistributor between a rip network and an ospf network it summarizes 4 routing entries 192 68 24 192 68 1 24 learned from rip router a into 192 68 22 and then sends it to ospf router b 211
- Is also set to 1 as this router should participate in router elections 211
- This example configures an ospf interface for the 172 6 24 network and specifies to use simple authentication with the key 1234abcd the priority for the 211
- This example enables ospf on the switch sets the router id to 172 6 configures an ospf area id as 0 backbone and enables simple authentication 211
- Chapter 49 ospf commands 212
- Ethernet switch cli reference guide 212
- From the example above the third octet of all the four network ip addresses is 00001000 00001001 00001010 000001011 respectively the first 4 digits 000010 are the common part among these ip addresses so 192 68 22 can be used to represent all of the 4 networks the following example shows you how to configure the ospf summary address and then show all redistribution entries 212
- This example shows you how to enable the redistribution for rip protocol and then show all redistribution entries 212
- Command summary 213
- Hapter 213
- Password commands 213
- Password encryption 213
- Command examples 214
- Command summary 215
- Hapter 215
- Poe commands 215
- Chapter 51 poe commands 216
- Command examples 216
- Ethernet switch cli reference guide 216
- This example enables power over ethernet poe on ports 1 4 and enables traps when the power usage reaches 25 216
- This example shows the current status and configuration of power over ethernet 216
- Chapter 51 poe commands 217
- Ethernet switch cli reference guide 217
- Note if the management mode is set to consumption this field shows na 217
- Note the switch must have at least 16 w of remaining power in order to supply power to a poe device even if the poe device requested less than 16 w 217
- Table 121 show pwr 217
- The following table describes the labels in this screen 217
- Command summary 219
- Hapter 219
- Policy commands 219
- Chapter 52 policy commands 220
- Ethernet switch cli reference guide 220
- Table 122 policy command summary 220
- Chapter 52 policy commands 221
- Command examples 221
- Ethernet switch cli reference guide 221
- Table 122 policy command summary 221
- This example creates a policy highpriority for the traffic flow identified via classifier vlan3 see the classifier example in chapter 11 on page 61 this policy replaces the ieee 802 priority field with the ip tos priority field value 7 for vlan3 packets 221
- Chapter 52 policy commands 222
- Ethernet switch cli reference guide 222
- This example creates a policy policy1 for the traffic flow identified via classifier class1 see the classifier example in chapter 11 on page 61 this policy forwards class1 packets to port 8 222
- Command summary 223
- Hapter 223
- Policy route commands 223
- 9 it then shows the policy routing information 224
- By default the switch forwards all packets to the default gateway this example configures a layer 3 classifier class 1 to group traffic with source ip address 192 68 3 this example also creates a policy routing rule in profile profile 1 to set the 224
- Chapter 53 policy route commands 224
- Command examples 224
- Ethernet switch cli reference guide 224
- To forward packets that match the layer 3 classifier to the gateway with ip address 224
- Command summary 225
- Hapter 225
- Port security commands 225
- Chapter 54 port security commands 226
- Command examples 226
- Ethernet switch cli reference guide 226
- Table 124 port security command summary continued 226
- This example enables port security on port 1 and limits the number of learned mac addresses to 5 226
- Command examples 227
- Command summary 227
- Hapter 227
- Port based vlan commands 227
- Hapter 229
- Port state 229
- Pppoe ia commands 229
- Pppoe intermediate agent overview 229
- Chapter 56 pppoe ia commands 230
- Command summary 230
- Ethernet switch cli reference guide 230
- Table 126 pppoe intermediate agent command summary 230
- The following section lists the commands for this feature 230
- The switch discards pado and pads packets which are sent from a pppoe server but received on an untrusted port 230
- Chapter 56 pppoe ia commands 231
- Ethernet switch cli reference guide 231
- Table 126 pppoe intermediate agent command summary continued 231
- Chapter 56 pppoe ia commands 232
- Command examples 232
- Ethernet switch cli reference guide 232
- This example is more advanced it assumes a pppoe ia client is connected to port 2 and a pppoe ia server is connected to port 5 if we want pppoe ia to work port 2 and port 5 must be belong to the some vlan and the pppoe ia must be enabled globally and in this corresponding vlan we also need to set port 5 as trust port then the last thing we need to do is to decide which sub options the received padi padr or padt packet needs to carry here assume both circuit id and remote id should be carried 232
- This is an example of how to enable and configure pppoe ia for vlans 232
- This is an example of how to enable and disable pppoe ia on the switch 232
- This is an example of how to set a pppoe ia trust port 232
- Because we didn t assign the appended string for remote id in examples 1 and 2 the switch appends a string to carry the client s mac address as default if we want the remote id to carry the forportvlanremoteidtest information for a specific vlan on a port we can add the following configuratio 233
- Similarly we can let the circuit id carry the information which we configure 233
- The following examples show you how to configure the vendor specific tag for pppoe ia they assume there is a pppoe ia client connected to port 2 and pppoe ia server or up link port connected to port 5 233
- This is a variation of the previous one and uses the same initial setup client on port 2 server on port 5 233
- Vendor specific tag examples 233
- Additionally we can let the circuit id or remote id carry the user configured information from a specific port whose priority is less than the specific vlan on a port setting 234
- Chapter 56 pppoe ia commands 234
- Ethernet switch cli reference guide 234
- Since we didn t assign the appended string for remote id in example 1 and 2 it will carry the client s mac address as default 234
- Hapter 235
- Private vlan commands 235
- Private vlan overview 235
- Chapter 57 private vlan commands 236
- Command examples 236
- Command summary 236
- Ethernet switch cli reference guide 236
- Table 127 private vlan command summary 236
- The following section lists the commands for this feature 236
- This example sets a private vlan rule that applies to vlan 123 ports 7 and 8 are the promiscuour ports in vlan 123 other ports in this vlan are added to the isolated port list automatically and cannot communicate with each other the isolated ports in vlan 123 can send and receive traffic from ports 7 and 8 this example also shows all private vlan rules configured on the 236
- Command summary 237
- Hapter 237
- Protocol based vlan commands 237
- Protocol based vlan overview 237
- Chapter 58 protocol based vlan commands 238
- Command examples 238
- Ethernet switch cli reference guide 238
- Note protocols in the hexadecimal number range 0x0000 to 0x05ff are not allowed 238
- Table 128 protocol based vlan command summary continued 238
- This example creates an ip based vlan called ip_vlan on ports 1 4 with a vlan id of 200 and a priority 6 238
- Hapter 239
- Queuing commands 239
- Queuing overview 239
- Chapter 59 queuing commands 240
- Command summary port by port configuration 240
- Ethernet switch cli reference guide 240
- For example using the default setting q0 on port 1 gets a guaranteed bandwidth of 240
- Note some models only support 4 queues 240
- Table 129 queuing command summary 240
- The following section lists the commands for this feature 240
- Weighted fair queuing wfq guarantees each queue s minimum bandwidth based on its bandwidth weight portion when there is traffic congestion wfq is activated only when a port has more traffic than it can handle queues with larger weights get more guaranteed bandwidth than queues with smaller weights this queuing mechanism is highly efficient in that it divides any available bandwidth across the different traffic queues by default the weight for q0 is 1 for q1 is 2 for q2 is 3 and so on guaranteed bandwidth is calculated as follows 240
- Weighted round robin scheduling wrr services queues on a rotating basis and is activated only when a port has more traffic than it can handle a queue is a given an amount of bandwidth based on the queue weight value queues with larger weights get more service than queues with smaller weights this queuing mechanism is highly efficient in that it divides any available bandwidth across the different traffic queues and returns to queues that have not yet emptied hybrid mode wrr spq or wfq spq some switch models allow you to configure higher priority queues to use spq and use wrr or wfq for the lower level queues 240
- Chapter 59 queuing commands 241
- Command examples port by port configuration 241
- Ethernet switch cli reference guide 241
- Table 129 queuing command summary continued 241
- This example configures wfq on ports 1 5 and assigns weight values 1 2 3 4 12 13 14 15 to the physical queues q0 to q8 241
- Chapter 59 queuing commands 242
- Command examples system wide 242
- Command summary system wide configuration 242
- Ethernet switch cli reference guide 242
- Note some models only support 4 queues 242
- Table 130 queueing command summary 242
- The following section lists the commands for this feature 242
- This example configures the switch to use wrr as a queueing method but configures the gigabit ports 9 12 to use spq for queues 5 6 and 7 242
- This example configures wfq on the switch and assigns weight values 1 2 3 4 12 13 14 15 to the physical queues q0 to q8 242
- Command summary 243
- Hapter 243
- Radius commands 243
- Chapter 60 radius commands 244
- Command examples 244
- Ethernet switch cli reference guide 244
- Table 132 radius accounting command summary continued 244
- This example sets up one primary radius server 172 6 0 0 and one secondary radius server 172 6 0 1 the secondary radius server is also the accounting server 244
- Command summary 245
- Hapter 245
- Remote management commands 245
- Chapter 61 remote management commands 246
- Command examples 246
- Ethernet switch cli reference guide 246
- Table 135 service control command summary continued 246
- This example allows computers in subnet 172 6 7 24 to access the switch through any service except snmp allows the computer at 192 68 0 to access the switch only through snmp and prevents other computers from accessing the switch at all 246
- This example disables all snmp and icmp access to the 246
- Command summary 247
- Hapter 247
- Rip commands 247
- Rip overview 247
- Chapter 62 rip commands 248
- Command examples 248
- Enables rip enters the ip routing domain 172 6 with subnet mask 255 55 55 sets the rip direction in this routing domain to both and the version to 2 with subnet broadcasting v2b the switch will send and receive rip packets in this routing domain 248
- Ethernet switch cli reference guide 248
- Note you cannot set two routing protocols to have the same administrative distance 248
- Table 136 rip command summary continued 248
- This example 248
- Hapter 249
- Rmon overview 249
- User input values 249
- Chapter 63 rmon 250
- Command summary 250
- Ethernet switch cli reference guide 250
- Table 139 rmon command summary 250
- The following section lists the commands for this feature 250
- Chapter 63 rmon 251
- Ethernet switch cli reference guide 251
- Event index number 2 enable event logging and snmp traps yes the trap s community public who will handle this alarm operator additional description for this event entry test 251
- Rmon alarm command example 251
- Rmon event command example 251
- Syntax 251
- This example also shows how to display the setting results 251
- This example shows how to configure the switch s action when an rmon event using the following settings 251
- Alarm index number 2 variable getting the number of errored packets received on port 1 how often to get a data sample every 60 seconds sampling method delta when to send an alarm when the value is higher than the rising threshold the rising threshold 50 which event s action should be taken for the rising alarm 2 see section 63 on page 251 the falling threshold 0 which event s action should be taken for the falling alarm 0 see section 63 on page 251 who will handle this alarm operator 252
- Chapter 63 rmon 252
- Ethernet switch cli reference guide 252
- This example shows you how to configure an alarm using the following settings 252
- Chapter 63 rmon 253
- Ethernet switch cli reference guide 253
- Rmon statistics command example 253
- The ethernet statistics table entry s index number 1 collecting data samples from which port 12 253
- This example also shows how to display the data collection results 253
- This example also shows how to display the setting results 253
- This example shows how to configure the settings to display current network traffic statistics using the following settings 253
- Chapter 63 rmon 254
- Ethernet switch cli reference guide 254
- Rmon history command example 254
- The history control table entry s index number 1 how many data sampling data you want to store 10 time interval between data samplings 10 seconds collecting data samples from which port 12 254
- This example also shows how to display the data collection results 254
- This example shows how to configure the settings to display historical network traffic statisticsusing the following settings 254
- Command summary 255
- Hapter 255
- Running configuration commands 255
- Switch configuration file 255
- Chapter 64 running configuration commands 256
- Command examples 256
- Ethernet switch cli reference guide 256
- Table 141 running config command summary 256
- The following section lists the commands for this feature 256
- This example copies all attributes of port 1 to port 2 and copies selected attributes active bandwidth limit and stp settings from port 1 to ports 5 8 256
- This example resets the switch to the factory default settings 256
- Command summary 257
- Hapter 257
- Sflow overview 257
- Chapter 65 sflow 258
- Command examples 258
- Ethernet switch cli reference guide 258
- Table 142 sflow command summary continued 258
- This example enables the sflow agent on the switch and configures an sflow collector with the ip address 10 8 and udp port 6343 this example also enables sflow on ports 1 2 3 and 4 and configures the same collector sample rate and poll interval for these ports 258
- Hapter 259
- Smart isolation commands 259
- Smart isolation overview 259
- Command summary 260
- The uplink port connected to the internet should be the root port otherwise with smart isolation enabled the isolated ports cannot access the internet 260
- Chapter 66 smart isolation commands 261
- Command examples 261
- Ethernet switch cli reference guide 261
- Table 144 show smart isolation 261
- The following table describes the labels in this screen 261
- This example enables smart isolation and displays smart isolation status and information on the switch you should have configured rstp or mrstp on the switch in order to have smart isolation work by adding the designated port s to the isolated port list you also have created vlan 200 and configured a private vlan rule for vlan 200 to put ports 3 4 and 5 in the isolated port list in this example the designated port 7 is added to the isolated port list after smart isolation is enabled 261
- Chapter 66 smart isolation commands 262
- Ethernet switch cli reference guide 262
- Table 144 show smart isolation continued 262
- Command summary 263
- Hapter 263
- Snmp server commands 263
- Chapter 67 snmp server commands 264
- Ethernet switch cli reference guide 264
- Note the settings on the snmp manager must be set at the same security level or higher than the security level settings on the switch 264
- Table 146 snmp server command summary continued 264
- Table 147 snmp server trap destination enable traps command summary 264
- Chapter 67 snmp server commands 265
- Ethernet switch cli reference guide 265
- Table 147 snmp server trap destination enable traps command summary continued 265
- Chapter 67 snmp server commands 266
- Command examples 266
- Ethernet switch cli reference guide 266
- This example shows you how to display all snmp user information on the switch 266
- This example shows you how to display the snmp information on the switch 266
- Command summary 267
- Hapter 267
- Stp and rstp commands 267
- Chapter 68 stp and rstp commands 268
- Command examples 268
- Enables stp on the switch 2 sets the bridge priority of the switch to 0 3 sets the hello time to 4 maximum age to 20 and forward delay to 15 4 enables stp on port 5 with a path cost of 150 5 sets the priority for port 5 to 20 268
- Ethernet switch cli reference guide 268
- Note an edge port becomes a non edge port as soon as it receiveds a bridge protocol data units bpdu 268
- Table 148 spanning tree command summary continued 268
- This example configures stp in the following ways 268
- Chapter 68 stp and rstp commands 269
- Ethernet switch cli reference guide 269
- Table 149 show spanning tree config 269
- The following table describes the labels in this screen 269
- This example shows the current stp settings 269
- Chapter 68 stp and rstp commands 270
- Ethernet switch cli reference guide 270
- In this example we enable rstp on ports 21 24 port 24 is connected to the host while ports 21 23 are connected to another switch 270
- Table 149 show spanning tree config continued 270
- Command examples 271
- Command summary 271
- Hapter 271
- Ssh commands 271
- Chapter 69 ssh commands 272
- Ethernet switch cli reference guide 272
- Table 151 show ssh 272
- The following table describes the labels in this screen 272
- This example shows the general ssh settings 272
- Command summary 273
- Hapter 273
- Static multicast commands 273
- Command examples 274
- Command summary 275
- Hapter 275
- Static route commands 275
- Chapter 71 static route commands 276
- Command examples 276
- Ethernet switch cli reference guide 276
- For example you cannot create an active static route that routes traffic for 192 68 0 24 to 192 68 276
- Is in 172 6 7 24 or 127 16 you cannot create an active static route to other ip addresses 276
- Table 154 show ip route 276
- The following table describes the labels in this screen 276
- This example shows the current routing table 276
- You can create this static route if it is inactive however 276
- Chapter 71 static route commands 277
- Ethernet switch cli reference guide 277
- You can create an active static route that routes traffic for 192 68 0 24 to 172 6 7 54 277
- Command summary 279
- Hapter 279
- Subnet based vlan commands 279
- Subnet based vlan overview 279
- Chapter 72 subnet based vlan commands 280
- Command examples 280
- Ethernet switch cli reference guide 280
- Table 155 subnet based vlan command summary continued 280
- This example configures a subnet based vlan subnet1vlan with priority 6 and a vid of 200 for traffic received from ip subnet 172 6 7 24 280
- Command summary 281
- Hapter 281
- Syslog commands 281
- Reference t z 283
- Command summary 285
- Hapter 285
- Tacacs commands 285
- Command summary 287
- Hapter 287
- Tftp commands 287
- Command summary 289
- Hapter 289
- Trunk commands 289
- Chapter 76 trunk commands 290
- Command examples 290
- Ethernet switch cli reference guide 290
- Table 164 lacp command summary 290
- Table 165 show trunk 290
- The following table describes the labels in this screen 290
- This example activates trunk 1 and places ports 5 8 in the trunk using static link aggregation 290
- This example disables trunk one t1 and removes ports 1 3 4 and 5 from trunk two t2 290
- This example looks at the current trunks 290
- Chapter 76 trunk commands 291
- Ethernet switch cli reference guide 291
- Table 165 show trunk continued 291
- Table 166 show lacp 291
- The following table describes the labels in this screen 291
- This example shows the current lacp settings 291
- Command summary 293
- Hapter 293
- Trtcm commands 293
- Trtcm overview 293
- Chapter 77 trtcm commands 294
- Command examples 294
- Ethernet switch cli reference guide 294
- Sets the switch to inspect the dscp value of the packets color aware mode enables trtcm on ports 1 5 sets the committed information rate cir to 4000 kbps sets the peak information rate pir to 4500 kbps specifies dscp value 7 for green packets 22 for yellow packets and 44 for red packets 294
- Table 167 trtcm command summary continued 294
- This example activates trtcm on the switch with the following settings 294
- Hapter 295
- Vlan commands 295
- Vlan configuration overview 295
- Vlan overview 295
- Command summary 296
- See chapter 29 on page 127 for interface port channel commands 296
- The following section lists the commands for the ingress checking feature 296
- The following section lists the commands for this feature 296
- Vlan ingress checking implementation differs across switch models 296
- Chapter 78 vlan commands 297
- Command examples 297
- Ethernet switch cli reference guide 297
- Some models enable or disable vlan ingress checking on all the ports via the vlan1q ingress check command other models enable or disable vlan ingress checking on each port individually via the ingress check command in the config interface mode 297
- Table 169 vlan1q ingress check command summary 297
- Table 170 ingress check command summary 297
- This example configures ports 1 to 5 as fixed and untagged ports in vlan 2000 297
- This example deletes entry 2 in the static vlan table 297
- This example shows the vlan table 297
- Chapter 78 vlan commands 298
- Ethernet switch cli reference guide 298
- Table 171 show vlan 298
- The following table describes the labels in this screen 298
- This example enables ingress checking on ports 1 5 298
- Chapter 78 vlan commands 299
- Ethernet switch cli reference guide 299
- Table 172 show vlan counters 299
- The following table describes the labels in this screen 299
- This example displays concurrent incoming packet statistics for vlan 1 299
- Chapter 78 vlan commands 300
- Ethernet switch cli reference guide 300
- Table 172 show vlan counters continued 300
- Command summary 301
- Hapter 301
- Ip interfaces overview 301
- Vlan ip commands 301
- Chapter 79 vlan ip commands 302
- Command examples 302
- Ethernet switch cli reference guide 302
- See section 3 on page 26 for an example of how to configure a vlan management ip addressusing ipv4 see chapter 33 on page 148 for ipv6 vlan commands 302
- Table 173 vlan ip address command summary continued 302
- Command summary 303
- Hapter 303
- Vlan mapping commands 303
- Chapter 80 vlan mapping commands 304
- Command examples 304
- Ethernet switch cli reference guide 304
- This example enables vlan mapping on port 4 304
- This example enables vlan mapping on the switch and creates a vlan mapping rule to translate the vlan id from 123 to 234 in the packets received on port 4 304
- Command summary 305
- Hapter 305
- Vlan port isolation commands 305
- Command summary 307
- Hapter 307
- Vlan stacking commands 307
- A 37 24 308
- B 48 24 308
- Chapter 82 vlan stacking commands 308
- Command examples 308
- Customer a customer a 308
- Customer b customer b 308
- Ethernet switch cli reference guide 308
- Figure 10 example vlan stacking 308
- In the following example figure both a and b are service provider s network spn customers with vpn tunnels between their head offices and branch offices respectively both have an identical vlan tag for their vlan group the service provider can separate these two vlans within its network by adding tag 37 to distinguish customer a and tag 48 to distinguish customer b at edge device x and then stripping those tags at edge device y as the data frames leave the network 308
- Table 176 vlan stacking command summary continued 308
- Vlan 24 vlan 24 308
- Chapter 82 vlan stacking commands 309
- Ethernet switch cli reference guide 309
- This example shows how to configure ports 1 and 2 on the switch to tag incoming frames with the service provider s vid of 37 ports are connected to customer a network this example also shows how to set the priority for ports 1 and 2 to 3 309
- Command summary 311
- Hapter 311
- Vlan trunking commands 311
- Command summary 313
- Hapter 313
- Vrrp commands 313
- Vrrp overview 313
- Chapter 84 vrrp commands 314
- Command examples 314
- Ethernet 314
- Ethernet switch cli reference guide 314
- Figure 11 example vrrp 314
- Table 178 vrrp command summary continued 314
- The following figure shows a vrrp network example with the switches a and b implementing one virtual router vr1 to ensure the link between the host x and the uplink gateway g host x is configured to use vr1 192 68 54 as the default gateway switch a has a higher priority so it is the master router switch b having a lower priority is the backup router 314
- Chapter 84 vrrp commands 315
- Ethernet switch cli reference guide 315
- This example shows how to create the ip routing domains and configure the switch to act as router a in the topology shown in figure 11 on page 314 315
- Chapter 84 vrrp commands 316
- Ethernet switch cli reference guide 316
- This example shows how to create the ip routing domains and configure the switch to act as router b in the topology shown in figure 11 on page 314 316
- Additional commands 317
- Command summary 317
- Hapter 317
- Chapter 85 additional commands 318
- Ethernet switch cli reference guide 318
- Table 180 command summary additional enable mode continued 318
- Chapter 85 additional commands 319
- Command examples 319
- Ethernet switch cli reference guide 319
- Table 180 command summary additional enable mode continued 319
- Table 181 command summary additional configure mode 319
- This example checks the cable pairs on port 7 319
- Chapter 85 additional commands 320
- Ethernet switch cli reference guide 320
- Table 182 ping 320
- Table 183 show alarm status 320
- The following table describes the labels in this screen 320
- This example sends ping requests to an ethernet device with ip address 172 6 7 54 320
- This example shows the current status of the various alarms in the switch 320
- Chapter 85 additional commands 321
- Ethernet switch cli reference guide 321
- Table 183 show alarm status continued 321
- Table 184 show cpu utilization 321
- The following table describes the labels in this screen 321
- This example shows the current and recent cpu utilization 321
- Chapter 85 additional commands 322
- Ethernet switch cli reference guide 322
- Table 185 show hardware monitor 322
- The following table describes the labels in this screen 322
- This example looks at the current sensor readings from various places in the hardware 322
- Chapter 85 additional commands 323
- Ethernet switch cli reference guide 323
- Table 185 show hardware monitor continued 323
- Table 186 show multicast vlan 323
- Table 187 show poe status 323
- The following table describes the labels in this screen 323
- This example displays multicast vlan configuration on the 323
- This example shows the current status of power over ethernet 323
- Chapter 85 additional commands 324
- Ethernet switch cli reference guide 324
- Note if the management mode is set to consumption this field shows na 324
- Note the switch must have at least 16 w of remaining power in order to supply power to a poe device even if the poe device requested less than 16 w 324
- Table 187 show poe status continued 324
- Table 188 show system information 324
- The following table describes the labels in this screen 324
- This example looks at general system information about the switch 324
- Chapter 85 additional commands 325
- Ethernet switch cli reference guide 325
- For temperature voltage transmission bias transmission and receiving power as shown 325
- This example displays run time sfp small form facter pluggable parameters on port 21 on the 325
- This example displays run time sfp small form facter pluggable parameters on ports 9 the first sfp port 0 with an sfp transceiver installed and 10 the second sfp port 1 no sfp transceiver installed on the 325
- This example displays the firmware version the switch is currently using 325
- You can also see the alarm and warning threasholds 325
- Chapter 85 additional commands 326
- Ethernet switch cli reference guide 326
- This example displays route information to an ethernet device with ip address 326
- This example runs an internal loopback test on ports 3 6 326
- Appendices and index of commands 327
- Default values 329
- Ppendix 329
- Certifications 331
- Copyright 331
- Legal information 331
- Ppendix 331
- Zyxel limited warranty 332
- Index of commands 335
- Use of undocumented commands or misconfiguration can damage the unit and possibly render it unusable 335
- Ethernet switch cli reference guide 336
- Index of commands 336
- Ethernet switch cli reference guide 337
- Index of commands 337
- Ethernet switch cli reference guide 338
- Index of commands 338
- Ethernet switch cli reference guide 339
- Index of commands 339
- Ethernet switch cli reference guide 340
- Index of commands 340
- Ethernet switch cli reference guide 341
- Index of commands 341
- Ethernet switch cli reference guide 342
- Index of commands 342
- Ethernet switch cli reference guide 343
- Index of commands 343
- Ethernet switch cli reference guide 344
- Index of commands 344
- Ethernet switch cli reference guide 345
- Index of commands 345
- Ethernet switch cli reference guide 346
- Index of commands 346
- Ethernet switch cli reference guide 347
- Index of commands 347
- Ethernet switch cli reference guide 348
- Index of commands 348
- Ethernet switch cli reference guide 349
- Index of commands 349
- Ethernet switch cli reference guide 350
- Ethernet switch cli reference guide 351
- Index of commands 351
- Ethernet switch cli reference guide 352
- Index of commands 352
- Ethernet switch cli reference guide 353
- Index of commands 353
- Ethernet switch cli reference guide 354
- Index of commands 354
- Ethernet switch cli reference guide 355
- Index of commands 355
- Ethernet switch cli reference guide 356
- Index of commands 356
- Ethernet switch cli reference guide 357
- Index of commands 357
Похожие устройства
- Zyxel XGS4700-48F Технические характеристики
- HP pavilion 17-f153nr, k1x74ea Инструкция по эксплуатации
- HP pavilion 17-f154nr, k1x75ea Инструкция по эксплуатации
- HP pavilion 17-f155nr, k1x76ea Инструкция по эксплуатации
- HP pavilion 17-f156nr, k1x77ea Инструкция по эксплуатации
- HP pavilion 17-f157nr, k1x78ea Инструкция по эксплуатации
- HP pavilion 17-f201ur, l1t85ea Инструкция по эксплуатации
- HP pavilion 17-f204ur, l1t88ea Инструкция по эксплуатации
- HP pavilion 17-f207ur, l1t91ea Инструкция по эксплуатации
- HP pavilion 17-f208ur, l1t92ea Инструкция по эксплуатации
- HP pavilion 17-f209ur, l1t94ea Инструкция по эксплуатации
- HP pavilion 17-f210ur, l1t96ea Инструкция по эксплуатации
- HP pavilion 17-f211ur, l1t98ea Инструкция по эксплуатации
- HP pavilion 17-f252ur, l2e35ea Инструкция по эксплуатации
- HP pavilion 17-f253ur, l2e36ea Инструкция по эксплуатации
- HP pavilion 17-f254ur, l2e37ea Инструкция по эксплуатации
- HP pavilion 17-f255ur, l2e38ea Инструкция по эксплуатации
- HP pavilion 17-f256ur, l2e39ea Инструкция по эксплуатации
- HP pavilion 17-f257ur, l2e41ea Инструкция по эксплуатации
- HP pavilion 17-f258ur, l2e43ea Инструкция по эксплуатации