D-Link DES-3550 manuel d'utilisation

DES-3550 Layer 2 Switch Command Line Interface Reference Manual First Edition (Feb ruary 200 4) 651ES35500 15 Printed In Taiwan RECYCLABLE[...]

ii Wichtige Si cherheitshinw eise 1. Bitte lesen Sie sich di ese Hinweise sorgfältig durch. 2. Heben Sie diese A nleitung für den spätern G ebrauch auf. 3. Vor jedem Reinigen i st das Ger ät vom Stromnetz zu trennen. Vervenden Sie kei ne Flüssig- oder Aer osolreiniger. Am besten di ent ein a ngefeuchtetes Tuch zur Reinigung. 4. Um ei ne Besch?[...]

iii Limited Warranty Hardware: D-Link warrants each of its hardware products to b e free from de fects in workmansh ip and materials under no rmal use and service for a period commencing on the date of purchase from D-Lin k or its Authorized Reseller and extending for the le ngth of time stipulated by th e Authorized Reseller or D-Link Branch Offic[...]

iv Subjec t to t he terms and cond iti ons set f ort h herein , D-L ink Syst ems, Inc. (“D-Link”) provides this Limite d warranty for its pr oduct only to the person or entity that originally purchased the product from:  D-Link or it s authorize d rese ller or distribut or and  Prod uc ts p ur cha sed a nd del iver ed w ithi n th e fi fty[...]

v inventory c learance or liquidat ion sales or ot her sale s in whic h D-Lin k, the se llers, or the liquidators expre ssly disclaim the ir warranty obligation pertaining to the product. Re pair by anyone othe r than D-Lin k or an Authorized D-Link Se rvice Office will void this Warranty. Disclaimer of Other Warranties: EXCEPT FOR THE LIMITED WARR[...]

[...]

Table of Contents Introduction ........ ............ ............. ........................ ............. ........................ ........... .......... ........ ........... ........ .......... .......... ......... .......... . 1 Using the Consol e CLI ... ........... .......... .......... ........... .......... ........ .......... ........... ...[...]

Single IP Ma nagement Comm ands .............. .......... ........... ........ .......... .......... ........... .......... .......... .... ................ .......... ........... ........ 187 Comm and Histor y List...... ........... .......... .......... ........ ........... .......... .......... ......... .......... .......... .. ...... .........[...]

1 1 I NTRODUCTION The Switch c an be ma naged through the Switch’s serial port, Telnet, or the Web-based management agent. The Comm and Line Interface (CLI) can be used to confi gure and ma nage the Switc h via the seri al port or Te lnet interface s. This ma nual provides a reference for al l of the comm ands contained in the CLI. Confi guration[...]

2 Figure 1-2. Boot Screen The Swit ch’s MAC address can also be found in the Web ma nagement program on t he Switch Inform ation (Basic Settings) window on the Configuration menu. The IP address for the switch must be set before it can be mana ged with the Web-based manage r. The Switch IP address can be automat ically se t using BOOTP or DHCP pr[...]

3 In the above exam ple, the Switch was assi gned an IP address of 10.53.13.144/8 wit h a subnet ma sk of 255.0.0.0. The system message Success indicates that the comm and was executed successfully. The Swit ch can now be configured and m anaged via Telnet, SNMP M IB browser and the CLI or via the Web-ba sed ma nagement agent using the above IP add[...]

4 2 U SING THE C ONSOLE CLI The DES-3550 supports a console m anagement interface that allows t he user to connect to the switch’s ma nagement age nt via a serial port and a t erminal or a computer runni ng a termi nal emula tion program. The console can also be used over the network using the TCP/ IP Telnet protocol. The console program can be u[...]

5 Comm ands are entere d at the com mand prom pt, DES-3550:4# . There are a number of hel pful features included in the CLI. Entering the ? c omm and will display a list of all of the top-le vel comm ands. Figure 2-2. The ? Command When you enter a command wi thout its require d paramete rs, the CLI will prom pt you with a Next possible completions[...]

6 Figure 2-4. Using the Up Arrow to Re-enter a Command In the above exam ple, the comm and config account was entere d without t he required param eter <username> , the CLI retur ned the N ext possible co mpletions: <username> prompt. The up arrow cursor control key was pressed to re-enter the previous comm and ( config a ccount ) at th[...]

7 Figure 2-6. Next possible completions: Show Command In the above exam ple, all of the possi ble next param eters for the show comm and are display ed. At the next com mand prompt , the up arrow was us ed to re-enter the show command, fol lowed by the accou nt paramete r. The CLI then di splays the user accounts configured on the Switc h.[...]

8 3 C OMMA ND S YNT AX The following symbols are used to describe how command ent ries are made and val ues and arguments are spec ified in this manual. The online help cont ained in the CLI and available through the console interface uses the same synt ax. Note: All comm ands are case-sensi tive. Be sure to disable Caps Lock or any other unwanted [...]

9 {braces} Description In the above syntax exa mple, you have th e option to s pecify config or detail . It is not n ecess ary to spec ify either opt ional valu e, however the effect of t he system reset is de pendent on wh ich, if any, v alue is specified. The refore, with t his example there are thre e possible outcomes of performing a sy stem re[...]

10 4 B ASIC S WITCH C OMMANDS The basic switch com mands in the Comma nd Line Interface (CLI ) are list ed (along with the appropri ate param eters) in the following table . Command Parameters create account [admin|user] <username 15> config account <username 15> show account delete account <username 15> show session show sw itch [...]

11 Example usa ge: To create an admini strator-level user account wit h the username “dlink”. DES-3550:4#create ac count admin dlink Command: create account admin dlink Enter a case-sensitive new passw ord:**** Enter the new passwo rd again for confirmation:**** Success. DES-3550: 4# config account Purpose Used to configure use r accounts Synta[...]

12 show account Description Dis plays all use r accounts created on th e switch. U p to 8 user accounts can exist on the switch at one time. Parameters No ne. Restrictions Only Adm inistrator-level users can issue this command. Example usage : To display the accounts that ha ve been creat ed: DES-3550:4#show account Command: show account Current Ac[...]

13 show session Syntax show session Description This command displays a list of all the users that are lo gged-in at the time the com mand is issued. Parameters None Restrictions None. Example usa ge: To display the way that the users logged in: DES-3550: 4#show sess ion Command: show s ession ID Login Time Li ve Time From Level Name -- -----------[...]

14 Syste m Locati on : 7th_flr_ea st_cab inet System Contact : Juli us_Erving_212-555-6666 Spanning Tree : Disabled GVRP : Disa bled IGMP Snoopi ng : Disabled TELNET : Enabled (TCP 23) WEB : Enabled (TCP 80 ) RMON : Ena bled A sym metric VLA N : Dis abled DES-3550:4# show serial_port Purpose Used to display the curren t serial port set tings. Synt [...]

15 config serial_port 19200, 38400, 11 5200. never − No time limit on the le ngth of ti me the console can be op en with no user inpu t. 2_minutes − The console will log out the curr ent user if ther e is no user input for 2 minu tes. 5_minutes − The console will log out the curr ent user if ther e is no user input for 5 minu tes. 10_minutes [...]

16 DES-3550:4 #enable clipaging Command: enable clipaging Success. DES-3550 :4# disable clipaging Purpose Used to disable t he pausing of the co nsole screen scroll ing at the en d of each page when the s how command d isplays more than one screen of in formation. Syntax disable clipaging Description This command is used to disable th e pausing of [...]

17 DES-3550:4 #enable tel net 23 Command : enable telne t 23 Success. DES-3550 :4# disable telnet Purpose Used to disable the Teln et protocol on the switch. Syntax disable telnet Description This command is used to disable t he Telnet prot ocol on the swit ch. Parameter s None. Restrictions Only administrat or-level users can issue th is command. [...]

18 DES-3550:4# enable w eb 80 Command: enable w eb 80 Success. DES-3550: 4# disable web Purpose Used to disable the HTTP-based ma nagement softw are on the switch. Syntax disable web Description This command dis ables the Web- based manage ment softwar e on the switch. Parameters None. Restrictions Only administrat or-level users can issue thi s co[...]

19 DES-355 0:4#sav e Command: save Saving all configurations to NV-RAM... Done. DES-3550: 4# reboot Purpose Used to restart the switch. Syntax reboot Description This command is used to restart the switch. Parameter s None. Restrictions None. Example usa ge: To restart the switch: DES-3550:4#reboot Command: reboot Are you sure want to proceed with [...]

20 To re store all of the sw itch’s pa rameters to th eir defa ult values: DES-3550:4 #reset config Command: reset config Are you sur e to proceed with system reset? (y/ n) Success. DES-3550 :4# login Purpose Used to log in a user to th e switch’s console. Syntax login Description This command is u sed to initiate the login pr ocedure. The user[...]

21 5 S WITCH P ORT C OMMAN DS The switch port comm ands in the Com mand Line Inte rface (CLI) are li sted (along with t he appropriate param eters) in the follow ing tab le. Command Parameters config ports [<portlist | all> { speed [auto | 10_ half | 10_full |100_half | 10 0_full | 1000_ful l} | flow_contro l [enable | di sable] | learnin g [[...]

22 To configure the spe ed of port 3 to be 10 Mbps, full duplex, wi th learning a nd state enable d: DES-3550:4#c onfig ports 1-3 sp eed 10_full learning enabled state enabled Command: config ports 1-3 sp eed 10_full learning enabled state enabled Success. DES-3550:4# show ports Purpose Used to display the current conf iguratio n of a range of po r[...]

23 Example usa ge: To display the confi guration of all ports on a switch, with descripti on: DES-3550:4# show por ts description Command: show ports description Port Port Settings Connection Address Sta te Spee d/Duplex/Flow Ctrl Speed/Duplex/Flow C trl Lea rning ------ -------- ---------- ----------- ------------------ --- -------- 1 Enabled Auto[...]

24 6 P ORT S ECURITY C OMM ANDS The switch port securit y comm ands in the Com mand Line Interface (CLI) a re listed (along wi th the appropriate parameters) in the follo wing tab le. Command Parameters config por t_security ports [<portlist>| all ] {admin_state [enable| disable] |max_learning_ad dr <max_lock_no 0- 10> | lock_addr ess_m[...]

25 To configure the port securit y: DES-3550:4# config port_security ports 1- 5 admin_state en able max_learni ng_addr 5 lock_address_ mode DeleteOnRe set Command: config port_se curity ports 1-5 admin_state enabl e max_learni ng_addr 5 lock_address_ mode DeleteOnRe set Success. DES-3550: 4# delete port_security_entry Purpose Used to delete a po rt[...]

26 clear port_security_entry to the por t security fu nction. Parameters <portlist> − specifies a port or port ra nge the user wishe s to clear. Restrictions Only administrat or-level users can issue thi s command. Example usage : To clear a port securi ty entry by port: DES-3550:4# c lear port_secu rity _entry port 6 Command: clear port_se[...]

27 7 N ETWORK M ANAGEM ENT (SNMP) C OMMA N DS The network m anageme nt comm ands in t he Comm and Line Interface (CLI) a re listed (along wit h the appropriate param eters) in the following ta ble. The DES-3550 supports the Sim ple Network Management Protocol (SNMP) versions 1, 2c, and 3. You can spec ify which version of the SNMP you want to use t[...]

28 Command Parameters engineID show snmp engineID create s nmp group <groupname 32> {v1 | v2c |v3 [noauth_no priv | auth_no priv | auth_priv ]} {r ead_view <view _name 32> | write_ view <view_name 32> | notify _view <view_name 32>} delete snmp group <groupname 32> show sn mp groups create s nmp host <ipaddr> { v1[...]

29 create snmp user group that is also crea ted by this command . Syntax create snmp user <username 32> <groupname 32> {encry pted [by_passw ord auth [md5 <a uth_passw or d 8-16 > | sha <auth_passw ord 8-20 >] priv [none | des <priv_passw ord 8- 16> ]|by_key auth [md5 <auth_ key 32-32>| s ha <auth_key 40- 40&g[...]

30 To create an SNMP user on the switch: DES-3550:4# create snmp user dli nk default encry pted by_password auth md5 auth_passw ord priv none Command: create snmp use r dlink default encrypted by_password auth md5 auth_passw ord priv none Success. DES-3550:4# delete snmp user Purpose Used to r emove an SNMP u ser from an SNMP gr oup and als o to de[...]

31 DES-3550:4#s how snmp user Command: show snmp user Username Group Name Ver Auth Priv --------------- --- ----------- ----- -------- ------- initial initia l V3 None None Total Entries: 1 DES-3550:4# create snmp view Purpose Used to a ssign views t o community strings to l imit which MIB objects and SNMP mana ger can access. Syntax create snmp v [...]

32 delete snmp view Syntax delete s nmp view <view _na me 32> [all | <oid>] Description The delete snmp v iew command is used to remove an SNMP view previously cre ated on the switc h. Parameters <view_name 32> − An alphanumeric s tring of up to 32 characters that identifies the SN MP view to be deleted. all − Specifies that a[...]

33 restrict ed 1 .3.6.1.6.3.10 .2.1 Included restrict ed 1 .3.6.1.6.3.11 .2.1 Included restrict ed 1 .3.6.1.6.3.15 .1.1 Included CommunityView 1 Included CommunityView 1 .3.6.1.6.3 Excluded CommunityView 1 .3.6.1.6.3.1 Included Total Entries: 11 DES-3550:4 # create snmp community Purpose Used to create an SNMP community string to def ine the relati[...]

34 DES-3550:4#c reate snmp community dlink view ReadView read_w rite Command: create snmp community dlink view ReadView read_w rite Success. delete snmp community Purpose Used to remove a specif ic SNMP commun ity string fro m the switch. Syntax delete snmp community <community_string 32> Description The delete snmp community comma nd is used[...]

35 DES-3550:4#show snmp community Command: show snmp community SNMP Community Table Community Name V iew Name A ccess Right ----------------- --------------- -- ------------- ---------------- - ------------ dlink Re adView read_w rite private Communit yView read_ w rite public CommunityView read_only Total Entries: 3 DES-3550 :4# config snmp engine[...]

36 show snmp engineID Restrictions No ne. Example usage : To display the current name of the SNMP engi ne on the swi tch: DES-3550:4#show snmp engineID Command: show snmp engineID SNMP Engine I D : 0035636666 DES-3550: 4# create snmp group Purpose Used to c reate a ne w SNMP grou p, or a table that maps SNMP users to SNMP views. This will set then [...]

37 create snmp group manager . auth_nop riv − Speci fies that aut horization will be required, but th ere will be no encryp tion of packe ts sent betwee n the switch an d a remote SNMP manager. auth_priv − Specifies that authorizatio n will be required, and that packets sent b etween the switch and a remote SNMP manger will be encrypted. read_v[...]

38 To delete t he SNMP group nam ed “sg1”. DES-3550:4#delete snmp group sg1 Command: delete snmp group sg1 Success. DES-3550:4 # show snmp groups Purpose Used to display the group-na mes of SNMP groups cu rrently configured on t he switch. The securit y model, leve l, and status of each group ar e also displayed. Syntax show snmp groups Descrip[...]

39 WriteVie w Name : WriteVie w Notify View Name : N otify View Security Model : SNMPv3 Security Level : authPr iv Group Name : Group7 ReadView Name : ReadView WriteVie w Name : WriteVie w Notify View Name : N otify View Security Model : SNMPv3 Securit y Level : authPr iv Group Name : initial ReadView Name : restricted WriteVie w Name : Notify View[...]

40 create snmp host auth_nopriv | auth_priv] <auth_string 32>] Description The create snmp host command crea tes a recipient o f SNMP traps generated by the switch’s SNMP agent. Parameters <ipaddr> − The IP address of the remot e management station that will serve as the S NMP host for t he switch. v1 – Specifies that SNMP versi o[...]

41 DES-3550 :4#create snmp host 10.4 8.74.100 v3 auth_priv public Command: create snmp host 10.48.74.100 v3 auth_priv public Success. DES-3550 :4# delete snmp host Purpose Used to remove a recipient of SNMP traps ge nerated by the switch’s SNMP agent. Syntax delete snmp host <ipaddr> Description The delete snmp host comman d deletes a reci [...]

42 DES-3550:4#s how snmp host Command: show snmp host SNMP Host Table Host IP Address SN MP Version C ommunity Name/SNMPv3 User Name --------------- -------------- ------- --------------------- --------- 10.48.7 6.23 V2c privat e 10.48.7 4.100 V3 a uthpriv public Total Entries: 2 DES-3550:4# create trusted_host Purpose Used to create the trusted h [...]

43 show trusted_host the switch using th e create trusted_host command above. Parameters <ipaddr> − The IP address of the trusted host . Restrictions none. Example Usage : To displa y the list of trust ho sts: DES-3550:4#show trusted_host Command: show trusted_host Management Stations IP Address ---------------- ------- 10.53.13. 94 Total E[...]

44 enable snm p traps Syntax enable snmp traps Description The enable snmp traps com mand is used to enable SNMP trap support on th e switch. Parameters no ne. Restrictions Only administ rator-level use rs can issue this command. Example usage: To enable SNMP t rap support on the switch: DES-3550 :4#enable snmp tra ps Command: enable snm p traps Su[...]

45 show snmp traps currently config ured on the Switch. Parameters no ne. Restrictions Only administrat or-level users can issue th is command. Example usa ge: To view the current SNMP trap support: DES-3550:4#show snmp traps Command: show snmp traps SNMP Traps : Enable d Authenticate Traps : Ena bled DES-3550: 4# disable snmp traps Purpose Used to[...]

46 disable snmp auth enticate_tr aps Parameters no ne. Restrictions Only administ rator-level use rs can issue this command. Example Usage : To disable the S NMP authenti cation trap support : DES-3550:4# disable snmp authent icate_traps Command: disable snmp aut henticate_traps Success. DES-3550: 4# config snmp system_contact Purpose Used to enter[...]

47 config snmp system_location characters can be use d. Parameters < sw_location> - A maximum of 255 ch aracters is allowed. A N ULL string is accept ed if there is no locat ion desired. Restrictions Only administrat or-level users can issue th is command. Example usa ge: To configure the switch loca tion for “ HQ 5F ”: DES-3550:4#config [...]

48 enable rmon Description This command is us ed, in conjunc tion with the disable rmon command below, to enable and di sable remote monit oring (RMON) on the s witch. Parameters no ne. Restrictions Only administ rator-level use rs can issue this command. Example Usage : To enable RMON: DES-3550:4 #enable rmon Command: enable rmon Success. DES-3550[...]

49 8 S WITCH U TILITY C OMMA ND S The download/upload com mands in the C ommand Li ne Interface (CLI ) are listed (al ong with the appropriate para mete rs) in the follow ing tab le. Command Parameters download [ firmware <ipadd r> <path_filena me 64> {section_i d <int 1-2>} configuration <ipa ddr> <path_file name 64> [...]

50 To download a configuration fi le: DES-3550:4#dow nload c onfiguration 10.48.74.1 21 c:cfgse tting.txt Command: dow nload configuration 10.48.74.121 c:cfgsetting.tx t Connecting to server...... ............. Done. Dow nload configuration. ............ Done. DES-3550 :4# config firmware Purpose Used to configu re the firmware section as a boo[...]

51 show firmware information Restriction s None. Example usa ge: To display the current firm ware information on the switch: DES-3550:4 #show firmw are informa tion Command: show firm w are information ID Version Size(B ) Update Time From U ser -- -------- ------- ----------------- -- ------------------ --------------- 1 1.00-B 00 1360471 00000 da [...]

52 To upload a configuration file: DES-3550:4#upload c onfiguration 10.48.74 .121 c:cfglog. txt Command: upload configuration 10.48.74.1 21 c:cfglog.txt Connecting to server...... ............. Done. Upload configuration. ..................Done . DES-3550 :4# ping Purpose Us ed to test th e connec tivity between network d evices. Syntax ping &l[...]

53 9 N ETWORK M ONITORING C O MMAN DS The network m onitoring com mands i n the Comm and Line Interface (CLI) are listed (along wit h the appropriate pa rameters) i n the following ta ble. Command Parameters show packet port s <portlist> show error port s <p ortlist> show utilitz ation [cpu | ports {<portlist>}] clear counters por[...]

54 DES-3550:4# show packet port 2 Port number : 2 Frame Size Frame Counts Frame/sec Frame Type Total Total/sec ------------ ------------ ---------- ---------- ------- --------- 64 327 5 10 RX Bytes 40897 3 1657 65-12 7 755 10 R X Frames 395 19 128-2 55 316 1 256-51 1 145 0 TX B ytes 79 18 178 512-10 23 15 0 TX Frames 111 2 1024- 1518 0 0 Unicas t R[...]

55 show utilization Purpose Used to display real-time port and cpu utiliz ation statistics. Syntax show utilization [cpu | ports {<portlist>}] Description This command will display the real-time port and cpu utilization statist ics for the switch . Parameters cpu – Entering this paramete r will display the cu rrent cpu utilization of the sw[...]

56 To display t he current cpu utili zation: DES-3550:4 #show utilization c pu Command: show utilization cpu CPU utilization : ---------------- ------------ ---------------- ---------------- ------------- ------ Five seconds - 15% One minute - 25% Five minutes - 14% DES-3550:4# clear counters Purpose Used to clear the swit ch’s statistics count e[...]

57 DES-3550:4 #clear log Command: cl ear log Success. DES-3550 :4# show log Purpose Used to display the swit ch history log. Syntax show log {index <value>} Description This command will display t he contents of the switch’s history log. Parameters index <value > − This command will display the hi story log, beginning at 1 and end i[...]

58 Example usage : To the syslog funct ion on the swi tch: DES-3550:4# enable syslog Command: enabl e sysl og Success. DES-3550: 4# disable syslog Purpose Used to enable th e system log to be sent to a remote host. Syntax disable sy slog Description The disable syslog command enables th e system log to be sent to a remote host. Parameters None. Res[...]

59 DES-3550:4#show syslog Command: show syslog Syslog Global State: Enabled DES-3550 :4# create syslog host Purpose Used to create a new syslog h ost. Syntax create syslog host <index 1-4> ipaddress <ipaddr> {severity [informational|w arning| all]| facility[local0| local1|local2|loca l3| local4|local5|local6|local7] |udp_port<udp_por[...]

60 create syslog host facility − Some of the operating sys tem daemons and proc esses have been assigned Fa cility values. Proce sses and daemons that have not been explicitly assigned a Facility ma y use any of the"local use" facilities or they may use the "user-level" Facility. Those Facilities that have been designated are [...]

61 create syslog host remote ho st. This cor responds to number 16 fro m the list ab ove. local1 − Specifies tha t local use 1 messages wi ll be sent to the remote ho st. This cor responds to number 17 fro m the list ab ove. local2 − Specifies tha t local use 2 messages wi ll be sent to the remote ho st. This cor responds to number 18 fro m the[...]

62 config syslog host <index 1-4> − Spec ifies that the command will be applied to an index of hosts. Ther e are four ava ilable indexes , numbered 1 through 4. severity − Severity level indica tor. These are desc ribed in the follow ing: Bold font in dicates that t he corresponding sev erity leve l is currently supported on the switch. N[...]

63 config syslog host 11 FTP daemon 12 NTP subsys tem 13 log audit 14 log alert 15 clock daemon 16 local use 0 (loca l0) 17 local use 1 (loca l1) 18 local use 2 (loca l2) 19 local use 3 (loca l3) 20 local use 4 (loca l4) 21 local use 5 (loca l5) 22 local use 6 (loca l6) 23 local use 7 (loca l7) local0 − Specifies tha t local use 0 messages wi ll [...]

64 DES-3550:4#c onfig syslog host 1 severity all facility local0 Command: config syslo g host all sev erity all facility local0 Success. DES-3550:4# Example usage : To configure a syslog host for all hosts: DES-3550:4#c onfig syslog host all severity all facility local0 Command: config syslog host all sever ity all fa cility local0 Success. DES-355[...]

65 show syslog host Parameters <index 1-4> − Specifies that the command will be applie d to an index of hosts. There are fo ur available inde xes, number ed 1 throug h 4. Restrictions None. Example usa ge: To show Syslog host inform ation: DES-3550:4#show syslog host Command: show syslog host Syslog Global S tate: Disabled Host Id H ost IP [...]

66 10 S P ANNING T RE E C OMM ANDS The switc h supports 802.1d STP and 802.1w Rapid STP. The spa nning tree com mands in t he Comm and Line Interfa ce (CLI) are listed (along wi th the appropriate param eters) in the following table. Command Parameters config stp {maxage <value 6- 40> | hellotime <value 1-10> | forwardde lay <value 4[...]

67 config stp • stp – Selc t this parameter for IEEE 802.1 d STP and for IEEE 802.1w STP compatibility mode. • rstp - Select this par amter for IEE E 802.1w Rap id STP mode. txholdcount <1 -10> - the maximum number of Hello packets transmitted per inter val. Default value = 3. fbpdu [enab le | disable] − Allo ws the forwarding o f STP[...]

68 config stp ports portion of t he segment. edge [true | false] – true designate s the port as an edg e port. Edge ports cann ot create loo ps, howeve r an edge por t can los e edge por t status if a t opology change creat es a potentia l for a loop. An edg e port normally should not recei ve BPDU packets. If a BPDU packet is received it automat[...]

69 DES-3550:4# enable stp Command: enable stp Success. DES-3550: 4# disable stp Purpose Used to globally dis able STP on the switch. Syntax disable stp Description This comman d allows th e Spanning Tree Proto col to be globally disabl ed on the s witch. Parameters Non e. Restrictions Only administrat or-level users can issue th is command. Example[...]

70 DES-3550: 4#show stp Command: show stp Bridge Parameters Settings STP Status : Enabled Max Age : 20 Hello Time : 2 Forw ard Delay : 15 Priority : 32 768 STP Version : RSTP TX Hold Count : 3 Forw arding BPDU : Enabled Designated Root Bridge : 00-00-51 -43-70-00 Root Priority : 32768 Cost to R oot : 200000 Root Port : 10 Last Topology Change : 53s[...]

71 show stp ports Description This command displa ys the switch’s curren t per-port group S TP configuratio n. Parameters <portlist> − Specifies a po rt or range o f ports to be displayed. Restrictions None Example usa ge: To display STP stat e of port 1-9 of module 1: DES-3550:4#show stp ports Command: show ports Port De signated Bridge [...]

72 11 F ORW ARDING D A T ABASE C OMM ANDS The layer 2 forwa rding database com mands in the Com mand Line Interface (CLI) are liste d (along with t he appropriate paramet ers) in the following tabl e. Command Parameters create fdb <vlan_name 32 > <macaddr> port <port> create multicast_ fdb <vlan_name 32> <macaddr> conf[...]

73 DES-3550:4# create fdb default 00-00- 00-00-01-02 port 5 Command: create fdb defaul t 00-00-0 0-00-01-02 port 5 Success. DES-3550:4# create multicast_fdb Purpose Used to cre ate a static entry to the multicast MAC addr ess forwarding tab le (database) Syntax create multi cast_fdb <vla n_name 32> <mac addr> Description This command wi[...]

74 config multicast_fdb <portlist> − Specifies a ra nge of ports to be configured. Restrictions Only admi nistrator-leve l users can issue this command . Example usage : To add mul ticast MAC forwarding: DES-3550:4#config multicast_fdb default 01-00 -00-00-00- 01 add 1-5 Command: config mult icast _fdb default 01 -00-00-00- 00-01 add 1- 1-5[...]

75 delete fdb Purpose Used to delete an entry t o the swit ch’s forwardin g database . Syntax delete fdb <vlan_na me 32> <macaddr> Description This command is used to d elete a previous e ntry to the swit ch’s MAC addres s forward ing databa se. Parameters <vlan_name 32> − The name of the VL AN on which the MAC address resid[...]

76 clear fdb through this po rt. all − Clears all dynamic en tries to the switc h’s forward ing database. Restrictions Only administ rator-lev el users can issue this command. Example usage : To clear all FDB dynami c entries : DES-3550:4 #clear fdb all Command: clear fdb all Success. DES-3550 :4# Example usage : To display multicast MAC addres[...]

77 show fdb Purpose Used to display the current un icast MAC address forwa rding databas e. Syntax show fdb {port <port> | vlan <vlan_name 32> | mac_address <macaddr> | static | aging_time} Description This command will display the current conte nts of the switch ’s forward ing databa se. Parameters <port> − The port nu [...]

78 config multicast port_filtering_mode Purpose Used to configur e the multicast pack et filtering mode on a port per port basis. Syntax config mu lticast port_fi lterin g_mode [<port list> | all] [forw ard_all_groups | forw ard_unregistered_groups | filter_unregistered_groups] Description This command w ill configure the multicast packet fil[...]

79 DES-3550:4 #show multicas t port_filter ing_mode Command: show multicas t port_filtering_mode Port Mult icast Filte r Mode ------ ---------------- ----------- 1 forw ard_unregistered_groups 2 forw ard_unregistered_groups 3 forw ard_unregistered_groups 4 forw ard_unregistered_groups 5 forw ard_unregistered_groups 6 forw ard_unregistered_groups 7 [...]

80 12 B ROADCAST S TOR M C ONTROL C OMM ANDS The broadcast storm c ontrol comm ands in the Comm and Line Interfa ce (CLI) are listed (al ong with the appropriate para meters) in the follo wing tab le. Command Parameters config traffic c ontrol [<storm_group list 1-8> | all ] { broadcast [enabled | dis abled] | multicast [en abled | disabled ][...]

81 show traffic control Purpose Used to display curren t traf fic control settings. Syntax show traffic control {gr oup_list <storm_grouplist>} Description This command display s the current storm t raffic control configurat ion on the swit ch. Parameters grou p_list <stor m_grouplist> − Used to specify a broadcast storm control group[...]

82 13 Q O S C OMM ANDS The DES-3550 switch supports 802.1p priority queui ng. The switch has 4 priorit y queues. These priorit y queues are numbered from 3 (Class 3) — the highest pri ority queue — to 0 (Cla ss 0) — the lowest pri ority queue. The eight priority tags specified i n IEEE 802.1p (p0 to p7) are mappe d to the switc h’s priority[...]

83 config bandwidth_control bandwidth o n a by-p ort basis. Parameters <portlist> − Specifies a po rt or range o f ports to be configur ed. rx_rate − Specifies th at one of the p arameters belo w ( no_limit or <value 1-1000> ) will be ap plied to the rate a t which the above specifie d ports will be allowed to re ceive packets  n[...]

84 To display bandwidth control setti ngs: DES-3550:4#show bandw idth_control 1-10 Command: show bandw idth_control 1-10 Bandwidth Control Table Port RX Rate (Mbit/se c) TX_RATE (Mbit/ sec) ---- ------------- ----------- ------ ---------------- 1:1 no_limit 1 0 1:2 no_limit 1 0 1:3 no_limit 1 0 1:4 no_limit 1 0 1:5 no_limit 1 0 1:6 no_limit 1 0 1:7[...]

85 config scheduling transmitted 3 pa ckets. Th e process will then repe at. The max_late ncy paramete r allows you to specify the maximum amount of t ime that pa ckets are delayed be fore being tr ansmitted to a given har dware prior ity queue. A value betwe en 0 and 255 can be specified. Thi s number is then multip lied by 16 ms to dete rmine the[...]

86 show scheduling Parameters None. Restrictions None. Example usage : To display the current schedul ing configuration: DES-3550:4# show scheduling Command: show scheduling QOS Output Scheduling Class ID MAX. Packet s MAX. Lat ency ------------ ------- ------------ ------ ------------- - Class-0 100 150 Class-1 99 100 Class-2 91 101 Class-3 21 201[...]

87 config 802.1p user_priority queue). <priority 0-7> − The 802.1p user pr iority you want to assoc iate with the <class_id 0-3 > (the number of t he hardware qu eue) with. <class_id 0-3> − The number of the switch’s har dware pr iority queue. The switc h has four h ardware p riority queues a vailable. They are numbered b et[...]

88 config 802.1p default_priority Purpose Us ed to configu re the 802.1p d efault priori ty settings on the switch . If an untagg ed packet is received by th e switch, the priority configured wi th this command will be written to th e packet’s priority field. Syntax config 802.1p default_priority [< portlist> | all] <priority 0-7> Des[...]

89 DES-3550:4# show 802.1p default_pri ority Command: show 802.1p default_priority Port Priority ------- ----------- 1 0 2 0 3 0 4 0 5 0 6 0 7 0 8 0 9 0 10 0 11 0 12 0 13 0 14 0 15 0 16 0 17 0 18 0 19 0 20 0 CTRL+C ESC q Quit Space n Next P age Enter Next Entry a All[...]

90 14 P ORT M IRRORING C OM MANDS The port mirroring comm ands in t he Comm and Line Interfa ce (CLI) are liste d (along with the appropriate param eters) in the following table . Command Parameters config mir ror port <por t> [add | delete] sou rce por ts <por tlist> [rx | tx | both] enable mirror disable mirror show mirror Each comman[...]

91 config mirror port level user s can issue this comman d. Example usa ge: To add the mirroring ports: DES-3550:4# config mirror port 1 add source ports 2-7 both Command: config mirror port 1 add source ports 2-7 both Success. DES-3550 :4# config mirror delete Purpose Used to delete a port mirroring c onfiguration | Syntax config mirror port <p[...]

92 enable mirror Purpose Used to enable a pre viously ent ered port mirroring configuratio n. Syntax enable mirror Description This command , combined with the disable mirror co mmand below, allows you to enter a po rt mirroring configuration in to the switch, and then turn the port mirror ing on and off withou t having to modify the port mirrorin [...]

93 show mirror Purpose Used to show the cu rrent port mirro ring configura tion on the sw itch. Syntax show mirror Description This co mmand displays the c urrent por t mirroring c onfiguration on the switch. Parameters Non e Restrictions None. Example usa ge: To display m irroring configurati on: DES-3550:4 #show mirror Command: show mirror Curren[...]

94 15 VLAN C OMM ANDS The VLAN comm ands in the Command Li ne Interface (CLI) are l isted (along with the appropriat e parameters) in the following table. Command Parameters create vlan <vlan_name 32> {tag <vlanid 1- 4094> | advertisement} delete vlan <vlan_name 32> config vl an <vlan_name 32> {[add [t agged | untagged | for[...]

95 DES-3550 :4#create vlan v1 ta g 2 Command: create vlan v1 tag 2 Success. DES-3550 :4# delete vlan Purpose Used to delete a previously configured VLAN on the switch. Syntax delete vlan <vlan_name 32> Descriptio n Th is command w ill delete a pr eviously configur ed VLAN on the switch. Parameters <vlan_name 32> − The VLAN name of the[...]

96 config vlan delete − Deletes the above specif ied VLAN from t he switch. <portlist> − A port or range of ports to add to the VLAN. advertisement [e nable|disable] − Enables or disables GVRP on th e specified VLAN. Restrictions Only administ rator-level use rs can issue this command. Example usage : To add 4 through 8 as t agged ports[...]

97 To set the ingress checking status, the send ing and receivin g GVRP informatio n : DES-3550:4#c onfig gvrp 1-4 state ena ble ingress_chec king enable acceptable_frame tagged_only pv id 2 Command: config gvrp 1- 4 state enable ingress_checking enable acceptable_frame tagged_only pv id 2 Success. DES-3550:4# enable gvrp Purpose Used to en able GV[...]

98 DES-3550:4 #disable gvrp Command: disable gvrp Success. DES-3550 :4# show vlan Purpose Used to display the current VLAN configur ation on the switch Syntax show vlan {<v lan_name 32>} Description This command displays summary informa tion about each VLAN including th e VLAN ID, VL AN name, the Tagging|Untaggin g status, and the Member|No n[...]

99 show gvrp status is to be displayed. Restrictions None. Example usa ge: To display GVRP port status: DES-3550:4#show gvrp Command: show gvrp Global GVRP : Disabled Port P VID GVRP Ingress C hecking Accept able Frame Type ------ ---- -------- ----------- ----- ----------------------- ---- 1 1 Disabled Enabled All Frames 2 1 Disabled Enabled All F[...]

100 16 A SY MMET RI C VLAN C OMM ANDS The asym metric VLAN comm ands in the Comma nd Line Interface (CLI) a re listed (a long with the appropri ate param eters) in the follo wing tab le. Command Parameters enable asymmet ric_vlan disable asymm etric_vlan show as ymmetric_vlan Each command is lis ted, in deta il, in the fo llowing se ctions. enable [...]

101 DES-3550:4 #disable asy mmetric_vl an Command: disable asymmetric_vlan Success. DES-3550:4 # show asymmetric_vlan Purpose Used to view the asymmetric VLAN state on th e switch. Syntax show asym metric_v lan Description This command displa ys the asymmet ric VLAN stat e on the switch Parameters Non e. Restrictions Only administrat or-level users[...]

102 17 L INK A GGREGA TION C OMMANDS The link aggre gation c ommands in the Command Line Interf ace (CLI) ar e listed ( along wi th the ap propr iate parameter s) in the following table . Command Parameters create link_aggregatio n group_id <va lue 1-6> { type [l acp | stat ic]} delete link_aggregatio n group_id <va lue 1-6> config link[...]

103 create link_aggregation Restrictions Only administrat or-level users can issue th is command. Example usa ge: To create a link aggregation group: DES-3550:4#create link _aggregation group_id 1 Command: create link_aggregation group_id 1 Success. DES-3550:4 # delete link_aggregation group_id Purpose Used to delete a previou sly configur ed link [...]

104 config link_aggregation Parameters group _id<va lue> − Specifies the gr oup id. The switch al lows up to 6 link aggregat ion groups to be configured. Th e group number identifies each of the groups . master_port<p ort> − Master po rt ID. Specif ies which port (by port number) of the link aggr egation group will be the master por[...]

105 config link_aggrega tion algorithm ip_sourc e_dest − Indica tes that the switch s hould examine th e IP sourc e address and the destination a ddress. Restrictions Only administra tor-level users can issu e this command. Example usa ge: To configure l ink aggregation a lgorithm for m ac-source-dest: DES-3550:4#conf ig link_aggreg ation algorit[...]

106 config lacp_ports Purpose Used to configure se ttings for LACP compliant po rts. Syntax config lacp_ports <portlist> mode [activ e | passive] Description This command i s used to configure ports that have be en previo usly designated as LA CP ports (see create link_aggregat ion). Paramete rs <portlist> − Specifies a port or range [...]

107 To display LACP port mode setti ngs: DES-3550 :4#show lacp_port 1-10 Command: show lacp_port 1-10 Port Activi ty ------ -------- 1 A ctive 2 A ctive 3 A ctive 4 A ctive 5 A ctive 6 A ctive 7 A ctive 8 A ctive 9 A ctive 10 A ctive DES-3550 :4#[...]

108 18 B ASIC IP C OMMANDS The IP interfa ce comm ands in the Command Line Int erface (CLI) are li sted (along w ith the appropri ate param eters) in the following table . Command Parameters config ipif <ipif_name 12> [{ipaddr e ss <network_a ddress> | vlan < vlan_name 32> |state [e nable | disable] } bootp |dh cp] show ipif <i[...]

109 DES-3550:4 #config ipif Sy stem ipaddress 10.48.7 4.122/8 Command: config ipif System ipaddress 10 .48.74.122/8 Success. DES-3550:4 # show ipif Purpose Used to display t he configura tion of an IP in terface on the switch . Syntax show ipif <ipif_name 12> Description This command will disp lay the config uration of an IP interface o n the[...]

110 19 IGMP S NOOPING C OMMANDS The switch port com mands in the Comm and Line Interfac e (CLI) are list ed (along with the appropri ate param eters) in t he following table . Command Parameters config igmp_sn ooping [<vlan_name 3 2> | all] {host_ti meout <sec 1-1671 1450> | router_t imeout < sec 1-16711450 > | leave_ timer < s[...]

111 config igmp_snooping seconds. state [enable | disable] − Allows you to enable or disab le IGMP snooping for th e specified VLA N. Restrictions Only administrat or-level users can issue th is command. Example usa ge: To configure the igm p snooping: DES-3550:4#config igmp_snooping de fault host_timeout 250 state enable Command: config igmp_sno[...]

112 config igmp_sn ooping querier • Other quer ier prese nt interval—Amo unt of time that must pass before a mult icast router de cides that ther e is no longer another mult icast router tha t is the querier . This interval is calculated a s follows: ( robustness variable x query interva l) + (0.5 x qu ery response int erval). • Last member q[...]

113 config router_ports <portlist> − Specifies a port or range of ports that will be configured as router ports. Restrictions Only administrat or-level users can issue th is command. Example usa ge: To set up static router ports: DES-3550: 4#config router_ ports default add 1-10 Command: config router_ ports default add 1-10 Success. DES-35[...]

114 disable igmp_snooping traffic to flo od within a give n IP interface. Parameters forward_mcrouter_only – Adding this pa rameter to th is command will disable for warding all mul ticast tr affic to a multicast-en abled routers .The switch will then forwar d all multicast tr affic to any IP router. Entering th is command withou t the parameter [...]

115 DES-3550:4#show igmp_snooping Command: show igmp_snooping IGMP Snooping Global State : Disabled Multicast router Only : Disable d VLAN N ame : default Query Interval : 125 Max Response Time : 10 Robust ness Value : 2 Last Member Query Interval : 1 Host Tim eout : 260 Route Time out : 260 Leave Timer : 2 Querier St ate : Disa bled Querier Router[...]

116 DES-3550:4#show igmp_snooping group Command: show igmp_snooping group VLAN Name : default Multicast group: 224.0.0.2 MAC address : 01-00- 5E-00-00-02 Reports : 1 Port Member : 2,5 VLAN Name : default Multicast group: 224.0.0.9 MAC address : 01-00- 5E-00-00-09 Reports : 1 Port Member : 6,8 VLAN Name : default Multicast group: 234.5.6.7 MAC addre[...]

117 show router_ports Parameters <vlan_name 32> − The name of the VL AN on which the rout er port resides. static − Displays ro uter ports th at have been s tatically configure d. dynamic − Displa ys router ports th at have been dynamically configured. Restrictions None. Example usa ge: To display the router ports. DES-3550:4#show route[...]

118 show igmp_snoop ing group Purpose Used to display th e current I GMP snoo ping config uration on the switch. Syntax show igmp_snooping group {vlan <vlan_name 32>} Description This command will display the current IGMP setup currently configured on the sw itch. Parameters <vlan_name 32> − The name of the VL AN for w hich you wa nt [...]

119 Multicast group: 239.255.255.250 MAC address : 01-00-5E-7F-FF-FA Reports : 2 Port Member : 18,20 VLAN Name : default Multicast group: 239.255.255.254 MAC address : 01-00-5E-7F-FF-FE Reports : 1 Port Member : 22,24 Total Entries : 6 DES-XX XXS:4#[...]

120 20 802.1X C OMM ANDS The DES-3550 imple ments t he server-side of the IEEE 802.1x Po rt-based Net work Access Control . This m echanism is intended to allow only authorized users, or other network device s, access to network resources by establishi ng criteria for e ac h port on the switc h that a user or net work device m ust meet before allow[...]

121 Example usa ge: To enable 802.1x switch wide: DES-3550: 4#enable 802.1x Command : enable 802.1x Success. DES-3550 :4# disable 802.1x Purpose Used to disa ble the 802.1x server on the switch. Syntax disable 802.1x Description The disable 802.1x c ommand is use d to disable the 802.1x Port- based Network A ccess control server ap plication on the[...]

122 show 802.1x auth_configuration by mac address or by port. Authenticatio n Protocol: Radius_Eap − Shows the authentica tion protocol suite in use between t he switch and a Ra dius server. May read Radius _Eap or Radius_P ap. Port number − Shows the physical po rt number on th e switch. Capability : Authent icator|None − Shows the capabilit[...]

123 DES-3550 :4#show 802.1x au th_configuration ports 1 Command: show 802.1x au th_configuration ports 1 802.1X : Enabled Authentication Mode : Po rt_based Authentication Protoc ol : Radius_Eap Port number : 1 Capability : None AdminCrlDir : Both OpenCrlD ir : Bo th Port Control : Auto QuietPeriod : 60 s ec TxPeriod : 30 sec SuppTimeout : 30 sec Se[...]

124 show 802.1x auth_state Restrictions Only ad ministrator-le vel users can issue th is command. Example usage : To display the 802.1x auth stat e: DES-3550:4#s how 802.1x auth_st ate Command: show 802.1x auth_s tate Port A uth PAE Sta te B ackend Stat e Port St atus ------ ------------------ ----- ----------------- ---- ----------------- 1 ForceA[...]

125 config 802.1x capability ports all − Specifies all of the ports on the swit ch. authenticat or − A user must pas s the authen tication proce ss to gain access to the netwo rk. none − The port is no t controlled by the 802.1x f unctions. Restrictions Only administrat or-level users can issue th is command. Example usa ge: To configure 802.[...]

126 config 802.1x auth_parameter • auto − Allows the port’s s tatus to reflect the outcome of the authentica tion proces s. • forc e_unauth − For ces the Authen ticator for the po rt to become unauthorized. Network access will be blocked. quiet_period <s ec 0-65535> − Config ures the t ime inte rval betwe en authentica tion failur[...]

127 config 802.1x init addresse s operating fr om a specified range of po rts. Parameters p ort_based – This instruct s the switch to initializ e 802.1x func tions based on ly on the port n umber. Ports app roved for initializa tion can then be specif ied. mac_based ports − This instruct s the switch to initiali ze 802.1x functions b ased only [...]

128 DES-3550:4 #config 802. 1x auth_mode mac _based Command: config 802.1x auth_mode mac_based Success. DES-3550 :4# config 802.1x reauth Purpose Used to configure the 802.1x re- authentication featur e of the switc h. Syntax config 802.1x reauth {port_base d ports [ <portlist> | all] | mac_based [ports] [<portlist> | all ] {mac_address[...]

129 config radius add Description The config radius add command is used to configur e the set tings the switch will use to communicate with a RADI US server. Parameters <s erver_inde x 1-3> − As signs a nu mber to the cu rrent set of RADIUS se rver se ttings. Up to 3 groups of RADIUS s erver se ttings can be enter ed on the switch. <serv[...]

130 DES-3550:4#c onfig radius delete 1 Command: config radius delete 1 Success. DES-3550:4# config radius Purpose Used to config ure the switch’s RADIUS settings. Syntax config radius <server_index 1-3> {ipaddress <server_ip> | ke y <passw d 32> | auth_port < udp_port_number 1-65535> | acct_port <udp_port_ number 1-6553[...]

131 DES-3550:4# config radius 1 10 .48.74.1 21 key dlink default Command: config radius 1 10 .48.74.121 key dlink default Success. DES-3550: 4# show radi us Purpose Used to display th e curr ent RADIUS co nfigurations on the switch. Syntax show radius Description The show radius com mand is used to displa y the current RADIUS configuratio ns on the[...]

132 21 A CCESS C ONTROL L IST (ACL) C OM MANDS The DES-3550 impl ements Access Control Lists that enable the switch t o deny network access to spec ific devices or device groups based on IP settings or M AC address. Command Parameters create access_profile [ ethernet{ vlan | source_mac <macmask> | destination_mac <macmask> | 802.1p | et[...]

133 Creating an access profil e is divided into two basic part s. First, an access profile m ust be created using the create access_profile command. For exam ple, if you want to deny all traf fic to the subnet 10.42.73.0 to 10.42.73.255, you m ust first create an access profil e that instruc ts the switch to exami ne all of the relevant fiel ds of [...]

134 create access_profile the config access_p rofile command, below. Parameters ethernet − Specifie s that the s witch will exa mine the layer 2 pa rt of each pack et header. • vlan − Specifies that the switch w ill examine the VLAN part of each packet head er. • source_mac <macmask> − Sp ecifies a MAC a ddress mask for the source M[...]

135 create a ccess_profile • flag _mask [ all | {urg | ack | psh | r st | syn | fin }] – Enter the appropriate flag _mask parameter . All incoming pack ets have TCP port number s containe d in them as the forwardi ng criterion. Th ese numbers have flag bits asscociat ed with th em which are parts of a packet that determine what to do with the p[...]

136 DES-3550:4# create access_prof ile ip vl an source_ip_m ask 20.0.0.0 destination_ip_ mask 10.0.0.0 ds cp icmp type code permit profile_id 101 Command: creat e access_profile ip vlan source_ ip_mask 20.0.0.0 destination_ip_ mask 10.0.0.0 ds cp icmp type code permit profile_id 101 Success. DES-3550:4# delete access_profile Purpose Used to delete [...]

137 config access_profile syn | fin}]} | udp {src_port <value 0-65535> | dst_port <value 0-65535>} | protocol_id <value 0 - 255> {user_define <hex 0x0-0xfffffff f><hex 0x0-0xfffff fff><hex 0x0-0xfff fffff><hex 0x0- 0xffffffff><hex0x 0-0xffffffff>} ]} | packet_con tent_mask {o ffset_0- 15 <hex0x0-0x[...]

138 config access_profile profile will apply to only packe ts with this destination IP address . • dscp < value 0-63> − Specifies that the ac cess profile will ap ply only to pac kets tha t have this va lue in their Type-of-S ervice (DiffSer v code point, DS CP) field in t heir IP packet header. • priority <value 0-7> − Specifie[...]

139 config access_profile Datagram Proto col (UDP) fie ld in each pa cket. • src_port <value 0-65535> − Specif ies that the a ccess profile will apply only to packets that have this UDP source port in their header . • dst_por t <value 0-65535> − Specifies that the access prof ile will apply only to packets that ha ve this UDP de[...]

140 Example usage : To configure t he access profile with the profile ID of 1 to filter fra mes t hat have IP addre sses in the range between 10.42.73.0 to 10.42.73.255: DES-3550:4# confi g access_profil e profile_id 2 add ac cess_id 1 ip source_ip 10.42.73.1 deny Command: config ac cess_profile profile_id 1 add access_id 1 ip source_ip 10.4 2.73.1[...]

141 Ports : All Masks : Source IP Addr --------------- 255. 0.0.0 ID Mode --- ------ ------- -------- Access Profil e ID : 247 Type : Ethernet Frame Filter Ports : All Masks : 802.1p - ----- ID Mode --- ------ ------ Access Profil e ID : 248 Type : Ethernet Frame Filter Ports : All Masks : VLAN ---------------- ID Mode --- ------ ------- --------- [...]

142 ID Mode --- ------ -- -------------- Access Prof ile ID : 251 Type : Ethernet Frame Filter Ports : All Masks : VLAN ---------------- ID Mode --- ------ -- -------------- Access Prof ile ID : 252 Type : Ethernet Frame Filter Ports : All Masks : VLAN ---------------- ID Mode --- ------ -- -------------- Access Prof ile ID : 253 Type : Ethernet Fr[...]

143 22 T RAFFIC S EGMENT A TION C O MMAN DS Traffic segm entation allows you to further sub-divide VLANs i nto smal ler groups of ports that wi ll help to reduce t raffic on th e VLAN. The VLAN rules t ake precedence, and then the traffic se gmentati on rules are applied. Command Parameters config traffic_s egmentation [<portlist> ] forward_l[...]

144 show traffi c_segmentation Syntax show traffic_ segmen tation <portlist> Description The show traffic_segmentation command is us ed to display the current traf fic segmenta tion confi guration on the swit ch. Parameters <portlist> − Specifies a po rt or range of p orts for which t he current traffic segmen tation configur ation on[...]

145 23 T IME AND SNTP C O MMA ND S The Simpl e Network Tim e Protocol (SNTP ) (an adaptati on of the Network Tim e Protocol (NPT)) commands in the Comm and Line Interface (C LI) are listed (along with the appropriate paramet ers) in the following table. Command Parameters config sntp {primary <ipaddr> | secon dary <ipadd r> | poll-inter[...]

146 config sntp Restrictions Only administ rator-level users can issue this command. S NTP service must be enabled for this command to function (enable sn tp). Example usage : To configure SNTP settings: DES-3550:4#config sntp primary 10.1.1.1 secondary 10 .1.1.2 poll-interv al 30 Command: config snt p primary 10.1.1.1 sec ondary 10.1.1.2 poll-int [...]

147 enable sntp will override any manually conf igured system time settings. Parameters Non e. Restrictions Only administrat or-level users can issue this comm and. SNTP settings must be con figured for SNTP to fun ction (con fig sntp). Example usa ge: To enable the SNTP function: DES-3550:4 #enable sntp Command: enable sntp Success. DES-3550:4 # d[...]

148 config time month, and four numerical char acters for the year. For examp le: 03aug2003. time – Express the system time usin g the forma t hh:mm:ss, that is, two numerical cha racters each for th e hour using a 24-h our clock, the minute and second. Fo r example: 1 9:42:30. Restrictions Only admi nistrator-leve l users can issue this comma nd[...]

149 config dst Purpose Used to en able and co nfigure time adjus tments to allow for the use of Daylight Sav ings Time (DST). Syntax config dst [disable | repeati ng {s_week <start_w eek 1-4,last> | s_day <start_day sun-sat> | s_mth <start_mth 1-12> | s_time start_time hh:mm > | e_w eek <end_week 1-4,last> | e_day <end[...]

150 config dst e-mth - Config ure the month in which DST ends. <end_mth 1-1 2> - The month to end DST express ed as a numb er. s-time – Co nfigure the time of da y to begin DST. Time is expressed using a 24- hour clock . e-time - Con figure the time of day to end DST. Time is ex pressed using a 24- hour clock . s-date - Config ure the speci[...]

151 DES-3550:4#s how time Command: show time Current Time Source : System Clock Current Time : 2 Days 01:43: 41 Time Zone : GMT +02:30 Daylight Sav ing Time : Repeating Offset in Minutes : 30 Repeating From : Apr 2nd Tue 15:00 To : Oct 2n d Wed 15: 30 Annual From : 29 Apr 00:00 To : 12 Oct 0 0:00 DES-3550:4#[...]

152 24 ARP C OMM ANDS The ARP com mands in t he Comm and Line Interface (CLI) are listed (a long with the appropri ate param eters) in the fol lowing table. Command Parameters create arpent ry <ipaddr> <macaddr> config arpent ry <ipaddr> <macaddr> delete arpentry {[<ipaddr> | all]} show arpentry {ipif <ipif_ name 12[...]

153 config arpentry address of an entry in the switch’s ARP table. Parameters <ipaddr> − The IP address of the en d node or stat ion. <macaddr> − The MAC address cor responding to the IP addr ess above. Restrictions Only administrat or-level users can issue th is command. Example Usage : To configure a st atic arp entry for the IP[...]

154 config arp_aging time Syntax config arp_aging time <value 0-65535> Description This command sets the maximum amount of time, in minu tes, that an ARP entry can remain in the switch’s ARP table, without bein g accessed, bef ore it is dropped f rom the table. Parameters time <value> − Th e ARP age- out time, in min utes. The valu [...]

155 System 10.0.0 .0 FF- FF-FF-FF-FF-FF Local /Broadcast System 1 0.1.1.169 00-5 0-BA-7 0-E4-4E Dynamic System 10.1 .1.254 00-01- 30-FA-5F- 00 Dynamic System 10 .9.68.1 00-A 0-C9-A 4-22-5B Dynamic System 10 .9.68.4 00-8 0-C8-2E- C7-45 Dynamic System 10.1 0.27.51 00-80 -C8-48- DF-AB Dynamic System 10.1 1.22.145 00-80 -C8-93 -05-6B Dynamic System 10.[...]

156 25 R OUTING T ABLE C OMM ANDS The routing tabl e comm ands in the Com mand Line Interfac e (CLI) are listed (al ong with the appropriate paramet ers) in the following table . Command Parameters create ipro ute default <ipaddr> {<metric 1-65535>} delete iprou te default show ipr oute {<networ k_addres s>} {static} Each command [...]

157 delete iproute default Descriptio n This command will d elete an exis ting default en try from the s witch’s IP routing tab le. Parameters no ne Restrictions Only admini strator-level users can issue this command. Example usa ge: To delete the default IP route 10.53.13.254: DES-3550:4#d elete iprou te default 10.53 .13.254 Command: delete ipr[...]

158 26 MAC N OTIFICA TION C OMMANDS The MAC Notifi cation Com mands in t he Comma nd Line Interface (CLI) are l isted, in the followi ng table, along wi th their appropriate param eters. Command Parameters enable mac_no tification disable mac_not ificatio n config mac_n otification {interval <in t 1-214748 3647> | historysiz e <int 1-500&g[...]

159 disable mac_notification Parameters Non e. Restrictions Only administrat or-level users can issue th is command. Example Usage : To disable MAC notifi cation wit hout changing basic configuration: DES-3550:4 #disable mac_noti fication Command: disable mac _notifica tion Success. DES-3550:4 # config mac_notification Purpose Used to configure MA [...]

160 config mac_notification ports Descr iption MAC addres s notificiation is used to mon itor MAC addr esses lear ned and entered in to the FDB. Parameters <p ortlist> Speci fy a port or range of ports to be configur ed. all – Entering this command wil l set all ports on th e system. enable / disa ble – These co mmands will enable or dis [...]

161 show mac_notifi cation ports Purpose Used to display the swit ch’s MAC address ta ble notifi cation status settings Syntax show mac_noti ficati on ports <portlist> Description This command i s used to disp lay the sw itch’s MAC ad dress table notificat ion status set tings. Parameters <portlist> - Specify a por t or group of p o[...]

162 27 A CCESS A UTHENTICA TION C ONTROL C OM MANDS The TACACS / XT ACACS / TA CACS+ command s let you se cure acc ess to the s witch usin g the TACACS / XT ACACS / TACACS+ protoc ols. When a user logs i n to the swit ch or tries t o access the admi nistrator l evel privel ege, he or she is prompt e d for a password. If TACACS / XTACACS / TACACS+ a[...]

163 Command Parameters enable authen_ policy disable auth en_policy show auth en_policy create auth en_login method_list _name <strin g 15> config authen_ login [default | method_l ist_name <string 15>] m ethod {tacacs | xtacacs | tacacs+ | serv er_group <string 15> | lo cal | none} delete authen _login method_list _name <strin[...]

164 enable authen_policy Purpose Used to en able system access aut hentication policy. Syntax enable authen_policy Description This command w ill enable an administrato r-defined authentication policy for u sers trying t o access the swi tch. When en abled, th e device will check the me thod list and choose a technique for user authenticatio n upon[...]

165 show authen_policy Purpose Used to display t he system access authe ntication p olicy stat us on the switch. Syntax show authen_policy Description This command will sho w the current stat us of the access authenticat ion policy on t he switch Parameters Non e. Restrictions None. Example usa ge: To display the system acce ss authenticati on poli[...]

166 config authen_login Purpose Used to config ure a user-defin ed or default method list of authentica tion meth ods for user login. Syntax config authen_login [default | method_list_name <s tring 15>] method {tacacs | xtacac s | tacacs+ | server_group <string 15> | local | none} Description This command will config ure a user-defined [...]

167 config authen_login name defin ed by th e user. The user may add one, or a comb ination of up to fou r (4) of th e following aut hentication metho ds to this method list:  tacacs – Adding this p arameter will requ ire the user to be authentic ated usin g the tacacs protocol from a remote tacacs server.  xtacacs – Adding this parameter[...]

168 DES-3550:4#config authen_l ogin default me thod xtacacs tacacs+ lo cal Command: config authen_logi n default me thod xtacacs tacacs+ lo cal Success. DES-3550:4# delete authen_lo gin method_list_name Purpose Used to delete a pr eviously conf igured user define d method list of authentica tion methods f or users logging on to th e switch. Syntax [...]

169 show authen_login methods currewnt ly configure d on the switch. The window wil l display the follo wing paramet ers:  Method List Name – The name of a previously configured method list name.  Prio rity – Defines wh ich order the method list protoco ls will be queried for authent ication wh en a user attempts to log on to the s witch.[...]

170 create authen_enable method_list_name to gain admini strator privil eges on the switch, wh ich is defined by the Administra tor. A maximu m of eight (8) enab le method lists can be implemented on the switch. Parameters <string 15> Enter an alphan umeric string of up to 15 ch aracters to define the give n enable method list the user w ishe[...]

171 config authen_enable  tacacs – Adding this parameter will requir e the user to be authenticat ed using the ta cacs protocol fr om the remot e tacacs ser ver hosts of the tacacs server group list.  xtacacs – Adding this paramete r will require the user to be authenticat ed using the x ta cacs protocol from the rem ote xtacacs server ho[...]

172 DES-3550:4#config authen_ena ble method_list_name Trinity method tacacs xtacacs local Command: config authen_enabl e method_list_name Trinity method tacacs xtacacs local Success. DES-3550:4# Example usage : To configure the defa ult met hod list wi th authentica tion met hods xtacacs, t acacs+ and l ocal, in tha t order: DES-3550:4#config authe[...]

173 show authen_enable Purpose Use d to displa y the method lis t of authentica tion methods f or promoting normal u ser level priveled ges to Administrat or level priveledge s on the switch. Syntax show authen_enable [default | method_list_name <string 15> | all] Description This command is used to d elete a user-defin ed method list of auth[...]

174 DES-3550 :4#show authen _enable all Command: show authen_enable all Method List Name Priority Method Name Comment ---------------- -------- --------------- ----------------- - Permit 1 tacacs+ Built-in Group 2 tacacs Built-in Group 3 Darren User-defined Group 4 loca l Keyw ord default 1 tacacs+ Built-in Group 2 lo cal Keyw ord Total Entries : 2[...]

175 config authen application authenticat ion using the de fault method list. method_list_ name <string 15> - Use this pa rameter to config ure an application for user authen tication using a prevoisly configured method list. Enter a alphan umeric string of up to 15 characte rs to define a previo usly configured me thod list. Restrictions Onl[...]

176 create authen server_host Purpose Used to create an authenticatio n server h ost. Syntax create authen se rver_host <ipa ddr> protocol [tacacs | xtacacs | tacacs+] {port <int 1-65535> | key [<key _ string 254> | none] | timeout <int 1-255> | retransmit < 1-255>} Description This command will create an authen ticati[...]

177 DES-3550:4 #create authen serv er_host 10.1.1.121 protocol tacacs+ port 12 34 timeout 10 retransmit 5 Command: create authe n server_ hos t 10.1.1.121 protocol tacacs+ port 1234 time out 10 retransmit 5 Success. DES-3550:4 # config authen server_host Purpose Used to config ure a user-defi ned authent ication serv er host. Syntax create authen s[...]

178 config authen server_host change how many time s the dev ice will resend an aut henticat ion request when the TACACS serv er does not resp ond. This fiel d is inoperable f or the tacacs+ prot ocol. Restrictions Only administ rator-level use rs can issue this command. Example usage : To configure a TACACS+ authenticati on server host, w it h por[...]

179 DES-3550:4#delet e authen server_host 10.1.1.121 protoc ol tacacs+ Command: delete authen server_host 10 .1.1.1 21 protocol tacacs+ Success. DES-3550:4 # show authen server_host Purpose Used to view a use r-defined a uthentication server ho st. Syntax show authen serve r_host Description This command is used t o view user-def ined authen ticati[...]

180 DES-3550:4#show aut hen server_host Command: show authen serv er_host IP Address Protocol Po rt Timeout Re transmit Key --------------- -------- ----- ------- --------------- ----- --- 10.53.13 .94 TACAC S 49 5 2 No Use Total Entries : 1 DES-3550:4# create authen server_group Purpose Used to create a user-defin ed authentic ation server group. [...]

181 config authen server_group authenticat ion server h osts may be adde d to any parti cular group Parameters server_group - The user may define the group by p rotocol groups built into the switch(tacacs/x tacacs/tacacs+), or by a use r-defined group pr eviously crea ted using the create authen s erver_gr oup command.  tacacs – Use this param[...]

182 delete authen server_group Purpose Used to delete a user-defined authenticat ion server g roup. Syntax delete authen server_group <string 15> Description This command will delete an authentica tion server group. Parameters <string 15> Enter an alph anumeric string o f up to 15 ch aracters to define the pr eviously c reated serve r g[...]

183 DES-3550:4#show authen server_group Command: show authen server_group Group Name IP Address Protocol -------------- - --------------- -------- Darren 10.53.13.2 TACACS tacacs 10.5 3.13.94 TACA CS tacacs+ (This group has no entry) xtacacs (This gr oup has no entry) Total Entries : 4 DES-3550:4 # config authen paramete r response_timeout Purpose [...]

184 config authen parameter attempt authenticated after the set amount of a ttempts will be de nied access to the switc h and wi ll be locke d out of fur ther authen tication attempts. Command line interface user s will have to wait 60 seconds before ano ther authentic ation attempt. Telnet u sers will be disconnected from the switch. Parameters pa[...]

185 DES-3550:4#show authen parameter Command: show authen parameter Response timeout: 60 seconds User attemp ts : 5 DES-3550 :4# enable admin Purpose Used to p romote user level priv ileges t o administrat or level privileges Syntax enable admin Description This command is for user s who have logged on to the switch on th e normal user leve l, to b[...]

186 config admin local_enable Parameters <password 15> - After entering this command, th e user will be prompted to enter the old pas sword, then a new pas sword in an alphanumer ic string of no more than 15 charac ters, and finally prompted to e nter the new password again to con firm. See the example below. Restrictions Only administ rator-[...]

187 28 S INGLE IP M ANAGEMENT C OMMA ND S Simply put, Single IP Manage ment is a concept that will stack switc hes together over Ethernet instead of using stacking ports or modul es. Switches usi ng Single IP Ma nagement(l abeled here as SIM) must conform t o the following rule s:  SIM is a n optional feature on the switch a nd can easily be [...]

188 6. The CaS can be configured through the CS to becom e a MS. After confi guring one switch to operat e as the CS of a SIM group, additional DES-3550 switches m ay join the group by either an automatic method or by m anually configur ing the switch to be a MS. The CS will then se rve as the in band entry point for access to the M S. The CS’s I[...]

189 DES-3550:4 #enable sim Command: enabl e sim Success. DES-3550:4 # disable sim Purpose Used to disable Sing le IP Management(SIM) on th e switch Syntax disable sim Description This command will disa ble SIM globally on the switch.. Parameters Non e. Restrictions Only administrat or-level users can issue th is command. Example usa ge: To disable [...]

190 show sim (L3). Platform – S witch Description in cluding name and model n umber. SIM Stat e –Displays the current Single I P Management State of t he switch, whet her it be enab led or disabled . Role Stat e – Display s the current role the switch is ta king, includin g Commander, Member or Candidate. A Stand-alone s witch will always hav[...]

191 Platform : DES-355 0 Fast-Eth ernet Sw itc h SIM State : Enabled Role Stat e : Comma nder Discovery Interval : 60 sec Hold Time : 180 sec DES-3550:4 # To show the candidate inform ation in summ ary, if the candidate id is specifie d: DES-3550 :4#show sim ca ndidate Command: show sim candidate ID MAC A ddress Platform / Hold Firmw a re Device N [...]

192 ID MAC A ddress Platform / H old Firmw are Device N ame Capabil ity Time Version --- -------------- --- ------------------------ ----- --------- ----------- ----- *1 00-0 1-02-03 -04-00 DE S-3550 L2 Sw itch 40 1.00- B06 Trini ty 2 00-55-55-00-55 -00 DES-3550 L2 Switch 140 1.00-B06 default mas ter SIM Group Name : SIM2 ID MAC A ddress Platform /[...]

193 reconfig switch the user desires to conf igure. exit – Thi s command is u sed to exit from mana ging the memb er switch and will retur n to managing the commander switch. Restrictions Only administrat or-level users can issue th is command. Example usa ge: To connect to the MS, with m ember id 2, through the CS , using the comm and line inter[...]

194 config sim  hold time – Usin g this parameter, the user may set t he time, in seconds, the switch wil l hold informat ion sent to it from other switches, utilizing the disco very interval protocol. The user a my set the ho ld time from 1 to 180 se conds. Restrictions Only administ rator-level use rs can issue this command. To change the ti[...]

195 DES-3550:4# config sim commander group_name Trinity Command: config sim comma nder group_name Trinity Success. DES-3550:4 # download sim_ms Purpose Used to download f irmware or configur ation file to a n indicated device. Syntax dow nload sim_ms [ firmw are | configuration] <ipaddr> <path_filename 64> {members <mslist> | all}[...]

196 Dow nload Stat us : ID MAC A ddress Result --- ---------------- - ---------------- 1 00-0 1-02-03-0 4-00 Success 2 00-0 7-06-05-0 4-03 Success 3 00-07 -06-05-04 -03 Success DES-3550:4# To download configurati on files: DES-3550:4# dow nload sim_ms configura tion 10.53.13.94 c:/des3550 .txt members a ll Command: dow nload sim_ms firmw are 1 0.53[...]

197 Example usa ge: To upload configuration files to a TFTP server: DES-3550:4 # upload sim_ms configuration 10.55. 47.1 D:configuration.txt 1 Command: upload sim_ms c onfiguration 10.55.47.1 D:configuration.txt 1 Success. DES-3550:4 #[...]

198 29 C OMM AND H ISTORY L IST The switch history com mands in the Comm and Line Interface (CLI) are liste d (along with the appropri ate paramet ers) in the following table . Command Parameters ? dir config command_histor y <value 1-40> show command_histor y Each command is lis ted, in deta il, in the fo llowing se ctions. ? Purpose Used to[...]

199 config 802.1x reaut h config access _profile profile_i d config account config admin local_enable config arp_aging time config arpentry config authen application CTRL+C ESC q Quit SPACE n Next P age ENTER Next Entry a All dir Purpose Used to display all commands in the Comm and Line I nterface (CLI). Syntax dir Description This command will dis[...]

200 config arpentry config authen application CTRL+C ESC q Quit SPACE n Next P age ENTER Next Entry a All config command_history Purpose Used to configu re the comman d history. Syntax config command_hist ory <value 1-40> Descrip tion This command is used to configur e the command history. Parameters <value 1-4 0> − the number o f pre[...]

201 A T ECHNICAL S PECIFICA TIONS Physical and Environmental AC input & Externa l Redundant power Supply: 100 - 240 VAC, 50-60 Hz (interna l universal po wer supply) Redundant po wer supply – will ta ke over when int ernal power supply fails. Power Consumption: 90 watts maximum DC fans: 2 built-in 40 x 40 x10 mm fans Operating Temperature: 0 [...]

202 General Fiber Optic n|a 2000Mbps SFP (Mini GBI C) Suppor t IEEE 80 2.3z 1000BA SE-LX (DEM -310GT transcei ver) IEEE 80 2.3z 1000BAS E-SX (DEM-311GT transce iver) IEEE 80 2.3z 1000BAS E-LH (DEM-314G T transceiver) IEEE 80 2.3z 1000BA SE-ZX (DEM -315GT tran sceiver) Network C ables: 10BASE-T: 100BASE-TX: UTP Cat.5, Cat.5 Enhanc ed for 1000Mbps UT[...]