D-Link DGS-3400 manual

® CLI Manual Product Model : xStack ® DGS-3400 Series Layer 2+ Gigabit Ethernet Managed Switch Release 2.6 .[...]

July 2009 651GS3400095G RECYCLABLE .[...]

Table of Contents INTRODUCTION ............................................................................................................................... ...........................1  USING THE CONSOLE CLI ........................................................................................................................................[...]

D–LINK SINGLE IP MANAGEMENT (SIM) COMMAN DS ......................................................................................296  POE COMMANDS ............................................................................................................................... .....................306  COMMAND HISTORY LIST ...................[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 1 1 I NTRODUCTION The xS tack ® DGS–3400 Series is a memb er of the D–Link xStack ® switch family. xStack ® is a complete family of stackable switches that range from edg e 10/100M bps swi tches to c ore Giga bit sw itches. xStac k ® provi des unsurpass ed perfor mance, f[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual Boot Proced ure 1 .00–B13 ––––––––––––– –––––––––––– ––––––––––– –––---------- --------- --–––––––––– ––––––––– Power On Se lf Test..... ........... .............[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 2 U SING THE C ONSOLE CLI The Switch supports a console m anagement interface t hat allows th e use r to connect to the Switch’s m anagement agen t via a seria l port and a t erminal o r a computer running a terminal emulation program. The c onsole ca n also be use d over t he [...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 4 ? cable_diag po rts clear clear address _binding dhc p_snoop bin ding_entry po rts clear arptabl e clear attack_ log clear counter s clear dhcp_bi nding clear fdb clear jwac au th_state clear log clear mac_bas ed_access_co ntrol auth_ state clear port_se curity_entry port clear[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 5 DGS–3426:5#co nfig account Command: confif ac count N ext possible completions : < username> DGS–3426:5#co nfig account Command: confif ac count N ext possible completions : < username> DGS–3426:5# Figure 2– 4. Using the Up Arrow to Re–enter a Command In t[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 6 DGS–3426:5#sh ow Command: show N ext possible completions : 802.1p 802.1 x access_pr ofile account A ccounting acct_ client address_b inding arpentry attack_log auth_ client auth_diag nostics auth_session_ statistics auth_stat istics authen authen_enable authe n_login authen_[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 3 C OMMAND S YNTAX The followi ng sym bols are us ed to descri be how command ent ries ar e made and val ues and arguments are s pecified in this m anual. The online help contained in the CLI and available through the consol e interface uses the sam e syntax. Note: All commands a[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 8 (parentheses) Purpose Indicates at least one or more of the values or arguments in the preceding syntax enclosed by braces must be specifie d. Syntax config dhcp_relay {hops <v alue 1-16> | time <sec 0-655 35 >}(1) Description In the above sy ntax example, users hav[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 9 4 B ASIC S WITCH C OMMANDS The basic switch commands in the C ommand Line Interface (CLI) are listed (along with the appropriate parameters) i n the following table. Command Parameters create account [admin | operator | user] <username 15> config account <username> [...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual Each command is listed, in detail, in the following sections. create account Purpose Used to create user accounts. Syntax create account [admin | operator | use r] <username 15> Description This command is used to create user ac counts that consist of a case sen sitive user[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 11 To configure the user password of “d link” account: DGS–3426:5#co nfig account dlink Command: config ac count dlink Enter a old p assword:**** Enter a case- sensitive ne w password: **** Enter the new password ag ain for con firmation:*** * Success. DGS–3426:5# show ac[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 12 enable password encryption Purpose Used to enable password encryption. Syntax enable password encryption Description The user account conf iguration information will be stored in the configuration file, and can be applied to the system later. If the password encryption is enab[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 13 show module_info Purpose Used to display information about installed modules. Syntax show module_info Description Displays information about optional modules that may be installed on the Switch . Parameters None. Restrictions Non e. Example usage: To display i nform ation abou[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 14 show session Purpose Used to display a list of currently logged–in users. Syntax show session Description This command displays a li st of all t he users that are logged–in at the time the command is issued. Parameters None. Restrictions Only Administrator and Oper ator-le[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 15 DGS–3426:5#sh ow switch Command: show swit ch Device Type : DGS–3 426 Gigabit Ethernet Swi tch MAC Address : 00–01 –02–03–04–0 5 IP Address : 172.1 8.211.246 ( Manual) VLAN Name : defau lt Subnet Mask : 255.2 55.255.0 Default Gatew ay : 0.0.0 .0 Boot PROM Ver sio[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 16 DGS–3427:4#sh ow serial_port Command: show seri al_port Baud Rate : 115200 Data Bits : 8 Parity Bits : None Stop Bits : 1 Auto–Logout : 10 mins DGS–3427:4# config serial_port Purpose Used to configure the serial port. Syntax config serial_port {baud_rate [9600 | 1 9200 |[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 17 DGS–3426:5#en able clipaging Command: enable cl ipaging Success. DGS–3426:5# disable clipaging Purpose Used to disable the pau sing of the cons ole screen scrolling at the end of each p age when a command displays more than one scre en of information. Syntax disable clipag[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 18 enable telnet Purpose Used to enable communi cation with an d management of the Switch using the Telnet protocol. Syntax enable telnet <tcp_port_number 1–655 35> Description This command is used to enable the Tel net proto col on the Switch. The user can specify the TC[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 19 DGS–3426:5#en able web 80 Command: enable we b 80 Note: SSL wil l be disable d if web is enabled. Success. DGS–3426:5# disable web Purpose Used to disable the HTTP–based management soft wa re on the Switch. Syntax disable w eb Description This command disable s the We b?[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 20 reboot Purpose Used to restart the Switch. Syntax reboot {<string>} Description This command is used to restart the Switch. Parameters <string > – This parameter is used to perform the command without prompt if a user enters / y for yes or / n for no. Restriction[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 21 login Purpose Used to log in a user to the Switch’s console. Syntax login Description This command is used to initiate t he login procedure. The user will be prompted for a Username and Passw ord. Parameters None. Restrictions Non e. Example usage: To initiate the login proc[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 22 DGS-3426:5#sh ow trusted_hos t Command: show trus ted_host Management St ations IP Address ------------- -- 10.0.0.0/8 Total Entries : 1 DGS-3426:5# delete trusted_host Purpose Used to delete a trusted host entry made using the create trusted_host comm and above. Syntax delete[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 23 5 S WITCH P ORT C OMMANDS The switch port commands in the C ommand Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config ports [ <portlist> | all ] {medium_type [fi ber | copper]} {speed [auto {cap abili[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 24 config ports auto_negotiation restart_ an - Restart the auto-negotiation pro cess . flow_control [enable | disable] – Enable or disable flo w co ntrol for t he specified ports. learning [enable | disable] − Enables or disa bles the MAC address learning on the specified ran[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 25 DGS–3426:5#sh ow ports Command: show port s Port Por t Settings Co nnection Add ress St ate Spee d/Duplex/Fl owCtrl Speed /Duplex/F lowCtrl Le arning ––––––– ––– ––––– ––––– ––––––––––– ––––– –––?[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 26 DGS–3426:5#sh ow ports descripti on Command: show ports descr iption Port Por t Settings Co nnection Add ress St ate Spee d/Duplex/Fl owCtrl Speed /Duplex/F lowCtrl Le arning ––––––– ––– ––––– ––––– ––––––––––– ?[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 27 6 P ORT S ECURITY C OMMANDS The Switch’s port security c ommands i n the Comm and Line Inte rface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config port_security ports [<portlist> | all] {admin_state [enable| dis[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 28 DGS–3426:5#co nfig port_se curity port s 1:1–1:5 adm in_state enable max_learning_ addr 5 lock_ address_mod e DeleteOnRes et Command: config po rt_security port s 1:1–1:5 admin_st ate enable max_lea rning_add r 5 lock_addres s_mode Delet eOnReset Success. DGS–3426:5# d[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 29 clear port_security_entry Purpose Used to clear MAC address entries learned from a specified p ort for the port security function. Syntax clear port_security_entr y port <portlist> Description This command is used to cl ear MAC ad dress entries which were learne d by the[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 30 DGS–3426:5#sh ow port_securi ty ports 1:1–1:5 Command: show port_securi ty ports 1: 1–1:5 Port Admin S tate Max. Learning A ddr. Lock A ddress Mo de –––– ––––––– –––– –––– ––––––––––– –––– ––––?[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 31 7 S TACKING C OMMANDS The stacking configuration commands in the Command Line Interface (C LI) are listed (along with the appropriate param eters) in the following table. Command Parameters config box_priority current_box_id <value 1–12> pri ority <value 1–63> [...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 32 Usage example: To change a box ID: DGS–3426:5#co nfig box_id curren t_box_id 1 new_box _id 2 Command: config bo x_id current_box _id 1 new_box_id 2 Success. DGS–3426:5# show stack_information Purpose Used to display the stack information table. Syntax show stack_informatio[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual config stacking mode Purpose Used to configure the stacking mode. Syntax config stacking mode [disable | enable] {<string >} Description This command will ena ble or disable the stacking mode for the switch. When enabled, the 10G ports on the rear of the switch will be enab[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 34 Usage example: To display the stacking devi c es: DGS–3426:5#sh ow stack_devic e Command: show stac k_device Box ID Box T ype H/W Version S erial Number ------ ---------- -- ----------- -------- ----------- - 2 DGS-3 426 2A1 G a vc DGS–3426:5#[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 35 8 N ETWORK M ANAGEMENT (SNMP) C OMMANDS The network managem ent commands in the Com mand Line Interface (C LI) are lis ted (along with the ap propriate pa rameters) i n the following table. The xStack ® DGS–3400 Se ries supports the Simple Net work Manage ment Prot ocol (SN[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 36 Command Parameters delete snmp group <groupname 32> show snmp gr oups create snmp [host <ipaddr> | v6host <ipv6addr>] [v1 | v2c | v3 [noauth_nopriv | auth_nopriv | auth_priv]] <auth_string 32> delete snmp [host <ipaddr> | v6host <ipv6addr>] [...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 37 disable snmp Purpose Used to disable SNMP on the Switch. Syntax disable snmp Description This command is used to disable t he Simple Network Management Protocol (SNMP) on the Switch. Parameters None. Restrictions Only Administrator and Oper ator-level users can issue this co m[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 38 config snmp linkchange_traps Purpose Used to configure S NMP linkchange traps on the Swit ch. Syntax config snmp linkchange_ traps ports [all|<portlist>][enable|disable] Description This comma nd is used to configure SNMP linkchange traps o n the Switch. Parameters all ?[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 39 create snmp user Purpose Used to create a new SNMP user and a dds the user to an SNMP group that is al so created by this command. Syntax create snmp user <username 32> <gr oupname 32> {encry pted [by _password auth [md5 <auth_pass word 8–16> | sha <auth[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 40 DGS–3426:5#cr eate snmp user dlin k default en crypted by _ password auth md5 canadian priv none Command: crea te snmp use r dlink d efault encry pted by _ password a uth md5 c anadian priv none Success. DGS–3426:5# delete snmp user Purpose Used to remo ve an SNMP user fro[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 41 create snmp view Purpose Used to assign views to community stri ngs to limit which MIB objects and SNMP manager can access. Syntax create snmp view <vie w_name 32> <oid> view_type [included | exclude d] Description This command is used to assign views to community [...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 42 show snmp view Purpose Used to display an SNMP view previously created on the Switch. Syntax show snmp view {<view_name 32>} Description This command is used to display an SNMP view previously create d on the Switch. Parameters <view_name 32> − An alphanumeric st[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 43 create snmp community Purpose Used to create an SNMP community string to define the relationship betwe en th e SNMP manager and an agent. The comm unity string a cts like a password to permit access to the agent on the Switch. One or more of the following cha racteristics can [...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 44 DGS–3426:5#de lete snmp co mmunity dli nk Command: delete sn mp community dlink Success. DGS–3426:5# show snmp community Purpose Used to display SNMP community strings configured on the Switch. Syntax show snmp community <community_string 32> Description This command[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 45 show snmp engineID Purpose Used to display the identificat ion of the SNMP engine on the Switch. Syntax show snmp engineID Description This command displ ays the ident ification of the SNMP engine on the Switch. Parameters None. Restrictions Non e. Example usage: To display th[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 46 create snmp group Restrictions Only Administrator and Oper ator-level users can issu e this command. Example usage: To create an SNMP group named “sg1:” DGS–3426:5#cr eate snmp gr oup sg1 v3 noauth_nopriv read_vie w v1 write_v iew v1 notify_view v 1 Command: create sn mp[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 47 Notify View N ame : restricted Security Mode l : SNMPv3 Security Leve l : NoAuthNoPri v Group Name : public ReadView Name : CommunityVi ew WriteView Nam e : Notify View N ame : CommunityVi ew Security Mode l : SNMPv1 Security Leve l : NoAuthNoPri v Group Name : public ReadView[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 48 create snmp host Purpose Used to create a recipient of SNMP traps generated by the Switch’s SNMP agent . Syntax create snmp [host <ipaddr> | v6host <ipv 6addr>] [v1 | v 2c | v3 [noauth_nopriv | auth_nopriv | auth_priv] <auth_ string 32>] Description This co[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 49 delete snmp host Purpose Used to remove a recipient of SNMP traps generated by the Switch’s SNMP agent. Syntax delete snmp [host <ipaddr> | v6host <ipv6addr>] Description This command is used to delete a reci pient of SNMP traps generat ed by the Switch’s SNMP [...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 50 DGS–3426:5#sh ow snmp host Command: show snmp host SNMP Host Tab le Host IP Addre ss SNMP V ersion Community Na me/SNMPv3 User Name ––––––––––––– –– –––––– ––––––––– –––––––––––– ––––[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 51 DGS–3426:5#en able snmp traps Command: enable sn mp traps Success. DGS–3426:5# enable snmp authenticate traps Purpose Used to enable SNMP authentication trap support. Syntax enable snmp authenticate traps Description This command is used to enable SNMP authentication trap [...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 52 disable snmp traps Purpose Used to disable SNMP trap support on the Switch. Syntax disable snmp traps Description This command is used to disable SNMP trap su ppo rt on the Switch. Parameters None. Restrictions Only Administrator and Oper ator-level users can issue this comman[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 53 DGS–3426:5#co nfig snmp sy stem_contac t MIS Departm ent II Command: config sn mp system_contac t MIS Department II Success. DGS–3426:5# config snmp system_location Purpose Used to enter a description of the locatio n of the Switch. Syntax config snmp system_location <s[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 54 To enab le RMON: DGS–3426:5#en able rmon Command: enable rm on Success. DGS–3426:5# disable rmon Purpose Used to disable RMON on the Switch. Syntax disable rmon Description This command is used to di sabl e remote monitoring (R MON) on the Switch. Parameters None. Restrict[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 55 9 S WITCH U TILITY C OMMANDS The switch utility commands in the Comman d Line Interface (CLI) are listed (along w ith the a ppropriate parameters) in the following table. Command Parameters download [ firmware_fromTFTP [<ipaddr> |<ip v6addr>] <path_filename 64&g[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 56 download • config − Download a new config uratio n on the switch from a TFTP server. • <ipaddr> − The IPv4 address of the TFTP server. • <ipv6addr> − The IPv6 address of the T FTP serve r. • <path_filename 64> − The DOS path and filename o f t[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 57 config configuration Purpose Used to designate a stored configuration file section ID as a boot up configuration, active configuration or to delete the configuratio n file. Syntax config configuration <config_id 1–2 > [boot_up | delete | a ctive] Description This comma[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 58 DGS-3426:5#co nfig firmware imag e_id 1 boot_up Command: config fi rmware image_id 1 boot _up Success. DGS-3426:5# show firmware information Purpose Used to display the firmware section informatio n. Syntax sho w firmware information Description This command is used to disp la[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 59 show config Purpose Used to display the current or saved version of the configuration settings of the switch. Syntax show config [current_config | config_in_nv ram <config_id 1–2> | information] Use this command to display all the configuration settings that are saved [...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 60 DGS–3426:5#sh ow config current_ config Command: show config curr ent_config #–––––––––––– –––––––––––– ––––––––––– ––––––––––––– ––––––––– –––––––[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 61 upload Purpose Used to upload switch settings or the switch history log to a TFTP server. Syntax upload [cfg_toTFTP [<ipaddr> | <ipv6addr>] <path_filename 64> {<c onfig _id 1–2>} | log_toTFTP [<ipaddr> | <ipv 6addr>] <path_filename 64&g[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 62 DGS–3426:5#up load attack_lo g_toTFTP 10.53.1 3.23 c:attackl og1 unit 1 Command: upload at tack_log_toTF TP 10.53.13.23 c:attacklog1 uni t 1 Connecting to server..... ........... Done. Upload attack log. ............. .....Done. DGS–3426:5# show attack_log Purpose Used t[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual DGS–3426:5# enable autoconfig Purpose Used to activate the aut o-configuration function for the Switch. This will load a configuration from the TFTP server spec ified in the re ply. Syntax enable autoconfig Description When autoconfiguration is enabl ed on the Switch, the DHCP [...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual DGS–3426:5# c reate iprout e default 1 72.18.212.253 1 Command: crea te iproute d efault 172. 18.212.253 1 Success. DGS–3426:5# DGS–3426:5##– –––––––––––– ––––––––––– ––––––––––––– ––––––?[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 65 DGS–3426:5#sh ow autoconfig Command: show auto config Autoconfig St ate: Disable d. DGS–3426:5# ping Purpose Used to test the conne ctivity between network devices. Syntax ping <ipaddr> {times <value 1–255>} {timeout <sec 1–99>} Description This comma[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 66 Example usage: To ping the IPv6 address 2009::2 80 :C8FF:FE3C:5C8A four times: DGS–3426:5#pi ng6 2009::28 0:C8FF:FE3C :5C8A times 4 timeout 10 Command: ping 6 2009::280: C8FF:FE3C:5 C8A times 4 t imeout 10 Reply from 20 09::280:C8FF :FE3C:5C8A, bytes=100 ti me<10 ms Reply[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 67 10 N ETWORK M ONITORING C OMMANDS The network monitorin g comm ands in the C ommand Li ne Interface (C LI) are listed (along with the appr opriate parameters) in the following table. Command Parameters show packet ports <portlist> show error ports <portlist> show u[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 68 Example usage: To display the packets analys is for port 7 of swit c h 1: DGS–3426:5#sh ow packet po rts 1:7 Command: show packet port s 1:7 Port number : 1:7 ============ ============ =========== ============= ========= ====== Frame Size/T ype Fr ame Counts Frame s/sec ----[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 69 DGS–3426:5#sh ow error ports 1:3 Command: show error ports 1:3 Port number : 1:3 RX Fr ames TX Frames ----- ---- --------- CRC Error 0 Excessive Deferral 0 Undersize 0 CRC Error 0 Oversize 0 Late Colli sion 0 Fragment 0 Excessive Collision 0 Jabber 0 Single Col lision 0 Drop[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 70 DGS–3426:5#sh ow utilization ports Command: show utilization ports Port TX/s ec RX/se c Util Port T X/sec RX/sec Ut il ––––– ––––– ––––– –––––– –––– –––– ––––– –– –––––––– –––––[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 71 clear counters Purpose Used to c lear the Switch’s statistics counters. Syntax clear counters {ports<portlist>} Description This command will clear the counters used by the Switch to compile statistics. Parameters ports <portlist> − Specifies a port or rang e o[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 72 Example usage: To display the switch h istory log : DGS–3426:5#sh ow log index 1–5 Command: show log inde x 1–5 Index Date Time Log Text ––––– –––––– ––– –––––––– – ––––––––– ––––––––––?[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 73 create syslog host Purpose Used to create a new syslog host. Syntax create syslog host <index 1–4> {sev erity [informational | warning | all] | facility [local0 | local1 | local2 | local3 | lo cal4 | local5 | local6 | local7] | udp_por t <udp_port_number> | ipa d[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 74 create syslog host 18 local use 2 (local2) 19 local use 3 (local3) 20 local use 4 (local4) 21 local use 5 (local5) 22 local use 6 (local6) 23 local use 7 (local7) local0 − Specifies that local use 0 messages will be sent to the remote host. Thi s corresponds to number 16 fro[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 75 config syslog host Switch. Numerical Severity Code 0 Emergency: system is unusable 1 Alert: action must be taken immediately 2 Critical: critical conditions 3 Error: error conditions 4 Warning: warning conditions 5 Notice: normal but significant condition 6 Informational: info[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 76 config syslog host local5 − Specifies that local use 5 messages will be sent to the remote host. Thi s corresponds to number 21 from the list a bove. local6 − Specifies that local use 6 messages will be sent to the remote host. Thi s corresponds to number 22 from the list [...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 77 config syslog host all Code 0 Emergency: system is unusable 1 Alert: action must be taken immediately 2 Critical: critical conditions 3 Error: error conditions 4 Warning: warning conditions 5 Notice: normal but significant condition 6 Informational: informational messages 7 De[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 78 config syslog host all local6 − Specifies that local use 6 messages will be sent to the remote host. Thi s corresponds to number 22 from the list a bove. local7 − Specifies that local use 7 messages will be sent to the remote host. Thi s corresponds to number 23 from the l[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 79 DGS–3426:5#de lete syslog host 4 Command: delete sy slog host 4 Success. DGS–3426:5# show syslog host Purpose Used to display the syslog hosts currently configured on the Switch. Syntax show syslog host {<index 1–4>} Description This command is used to display the [...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 80 config system_severity Purpose To configure severity level of an aler t required for log entry or trap message. Syntax config system_severity [trap | log | all] [critical | warning | information] Description This command is used to configure the system severity levels on the S[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 81 config log_save_timing Purpose Used to configure the method of saving log files to the switch’s flash memory. Syntax config log_save_timing [time_interval <m in 1–65535> | on_de mand | log_trigger] Description This command allows the user to config ure the time metho[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 82 11 M ULTIPLE S PANNING T REE P ROTOCOL (MSTP) C OMMANDS This Switch supports three versions of the Spanning Tree Protocol; 802 .1d STP, 802. 1w Rapid STP and 802.1 s MSTP. Multiple Spanning Tree Protocol, or MSTP, is a standard defined by th e IEEE community th at allows multi[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 83 Command Parameters show stp mst_config_id Each command is listed, in detail, in the following sections. enable stp Purpose Used to globally enable STP on the Switch. Syntax enable stp Description This command allows the Spanning Tree Protocol to be globally enabled on the Swit[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 84 config stp version Restrictions Only Administrator and Oper ator-level users can issue this command. Example usage: To set the Switch globally for the Multiple Spanning Tree Protocol (MSTP): DGS–3426:5#co nfig stp version mstp Command: config st p version mstp Success. DGS?[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 85 config stp loopback has been detected. After the timer ha s expired the Switch che cks for an STP loopback, if no loopback detected, STP will be re sum ed. Entering 0 will disable LBD recovery. nni_bpdu_addr [dot1d | dot1ad] – Used to determin e the BPDU protocol address for[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 86 config stp ports loops, however an edge port can lose edge po rt status if a topology change creates a potential for a loop. An edge port normally should not receive BPDU packets. If a BPDU packet is received it automatically loses edge port status. false indicates that the po[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 87 DGS–3426:5#cr eate stp instance_ id 2 Command: create st p instance_id 2 Success. DGS–3426:5# config stp instance_id Purpose Used to add or delete vlans for instance ID. Syntax config stp instance_id <value 1–15> [add_v lan | remove_vlan] <v idlist> Descripti[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 88 delete stp instance_id Purpose Used to delete a STP instance ID from the Switch. Syntax delete stp instance_id <value 1–15 > Description This command allows the user to delete a previously configured STP instance ID from the Switch. Parameters <value 1–15> – [...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 89 config stp mst_config_id Parameters revision_level <int 0–65535> – Enter a number between 0 and 65535 to identify the MSTP region. This value, along with the name will identify the MSTP region configured on the Switch. The default setting is 0 . name <string> ?[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 90 To designate p orts 1 to 2 on modul e 1, with instance ID 0, t o have an aut o internalCost a nd a priori ty of 0: DGS–3426:5#co nfig stp mst_ports 1:1 – 1 :2 instance _ id 0 interna lCost auto priority 0 Command: conf ig stp mst_p orts 1:1–1: 2 instance_id 0 intern alCo[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 91 Status 3 : STP enabled for MSTP DGS–3426:5#show stp Command: show stp STP Bridge Global S ettings ––––––––––––––––––– –––––––– STP Status : Enabled STP Version : MSTP Max Age : 20 Forward Delay : 15 Max Hops : 20 TX Hold [...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 92 show stp instance Purpose Used to display the Switch’s STP instance configurati on Syntax sho w stp instance <value 0–15> Description This comma nd is used to display the Switch’s cu rre nt STP Instance Settings and the STP Instance Operational Status. Parameters &[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 93 DGS–3426:5#sh ow stp mst_config_ id Command: show stp mst_ config_id Current MST Configura tion Identific ation –––––––––––– –––––––––––– ––––––––––– ––––– Configuratio n Name : 00: 19:5B:3D:7C :[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 94 12 F ORWARDING D ATABASE C OMMANDS The layer 2 forwarding dat abase commands in the C ommand Li ne Interface (CLI) are listed (a long with the appropriate parameters) in the following table. Command Parameters create fdb <vlan_name 32> <macaddr> po rt <p ort>[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 95 create multicast_fdb Purpose Used to create a static entry to the mu lticast MAC ad dre ss forwarding table (databa se) Syntax create multicast_fdb <v lan_name 32> <macaddr> Description This command is used to make a n entry in the Switch’s multicast MAC addre ss[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 96 config fdb aging_time Purpose Used to set the aging time of the forwarding database. Syntax config fdb aging_time <sec 10–100 00 00> Description The aging time affects the learning pro cess of the Switch. Dynamic forwarding tab l e entries, which are made up of the sou[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 97 DGS–3426:5#de lete fdb default 01–0 0–00–00–01– 02 Command: delete fd b default 01–00–00 –00–01–02 Success. DGS–3426:5# clear fdb Purpose Used to clear the Switch’s forwardi ng database of all dynamically learned MAC addresses. Syntax clear fdb [vlan [...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 98 DGS–3426:5#sh ow multicast _fdb vlan d efault Command: show multicast_f db vlan def ault VLAN Name : default MAC Address : 01–00–5E –00–00–00 Egress Ports : 1:1–1:5 Mode : Static Total Entries : 1 DGS–3426:5# show fdb Purpose Used to display the current unicast[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 99 DGS–3426:5#sh ow fdb Command: show fdb Unicast MAC A ddress Aging Time = 300 VID VLAN Na me MAC Address Po rt Type –––– –––––––– ––––––– ––––––––––– –––––– ––– ––– ––– –––––?[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 100 show multicast filtering_mode Purpose Used to show the multicast packet f iltering mode as configured for the VLANs. Syntax show multicast filtering_m ode {vlan <vlan_name 32>} Description This command is used to display the cu rrent multicast packet filt ering mode for[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 101 DGS–3426:5#sh ow ipfdb Command: show ipfd b Interface IP Address Port Learned –––––––––––– –––––––––– –––– ––––– – –––––––––– –– System 10.0.0.1 1:13 Dynamic System 10.0.0.2 1:13 Dynamic[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 102 13 T RAFFIC C ONTROL C OMMANDS On a com puter network, packet s such as Multicast packets and Broa dcast pack ets continually flood the network as normal procedure. At tim es, this traf fic may i ncrease do to a mal icious endstat ion on t he network or a m alfunctionin g dev[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 103 config traffic control Purpose Used to configure broadcast/multicast/dlf traffic contro l. Syntax config traffic control [<portlis t> | all] broadcast [enable | disable] | multicas t [enable | disable] | dlf [enable | disable] | actio n [drop | shutdo wn] | threshold &l[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 104 Example usage: To configure t raffic cont rol and enabl e broadcast storm cont rol system wi de: DGS–3426:5#co nfig traffic control al l broadcast e nable Command: config tr affic control all broa dcast enable Success. DGS–3426:5# config traffic control_recover Purpose Us[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 105 Example usage: To configure t raffic cont rol and enabl e broadcast storm cont rol system wi de: DGS–3426:5#co nfig traffic trap sto rm_occurred Command: config tr affic trap storm_o ccurred Success. DGS–3427:4# show traffic control Purpose Used to display current traffic[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 106 14 Q O S C OMMANDS The xStack ® DGS–3400 Series supports 80 2.1p priority queuing . The Switc h has eigh t priority queues, on e of which is internal and not c onfigura ble. These priority q ueues are numbered from 6 (Class 6) — the highest priority queue — to 0 (Class[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 107 config bandwidth_control Purpose Used to configure bandwidt h control on a port–by– port basis. Syntax config bandwidth_control [ <portlis t>| all ]{rx _rate [ no_limit | <value 64-10 000000>] | tx_rate [ no_limit | <value 64-1 0000000>]} (1) Description[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 108 show bandwidth_control Purpose Used to display the bandwidth control table. Syntax show bandwidth_control {<portlist>} Description This command is used to display the current bandwidth control co nfiguration on the Switch, on a port–by–port basis. Parameters <por[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 109 config scheduling Purpose Used to configure the traffic scheduling mechanism for ea ch QoS queue. Syntax config scheduling <class_id 0–6> {max_packet <v alue 0–15>} (1) Description The Switch contains eight hardware pr iority queues, one of which is internal a[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 110 DGS–3426:5#sh ow scheduling Command: show sche duling QOS Output Schedul ing Class ID MAX. Packe ts ––––––––––– –––––––––– ––– Class–0 1 Class–1 2 Class–2 3 Class–3 4 Class–4 5 Class–5 6 Class–6 7 DGS–3426:5# c[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 111 show 802.1p user_priority Purpose Used to display the current mapping between an in co ming packet’s 802.1p priority value and one of the Switch’s seven hardwa re priority que ues. Syntax show 802.1p user_priority Description This command is used to display the current ma[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 112 Example usage: To configure 802.1p defau lt prio rity on the Switch: DGS–3426:5#co nfig 802.1p defaul t_priority all 5 Command: config 80 2.1p default_pri ority all 5 Success. DGS–3426:5# show 802.1 default_priority Purpose Used to display the currently configured 802.1p [...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 113 config scheduling_mechanism Purpose Used to configure the scheduling mecha nism for the QoS function Syntax config scheduling_mechanis m [strict | weight_fair] Description This command is used to to select between a weight fair and a Strict mechanism for emptying the priority[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 114 DGS–3426:5#sh ow scheduling_ mechanism Command: show sche duling_mechan ism QOS scheduling_m echanism CLASS ID M echanism –––––––– – –––––––––– Class–0 strict Class–1 strict Class–2 strict Class–3 strict Class–4 strict Class?[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 115 show hol_prevention Purpose Used to show HOL prevention. Syntax show hol_prev ention Description This command is used to di splay the Head of Line prevention state. Parameters None. Restrictions Non e. Example usage: To view the HOL prevention status: DGS–3426:5#sh ow hol_p[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 116 15 P ORT M IRRORING C OMMANDS The port m irroring com mands in t he Comma nd Line Interface (CLI ) are listed (along with the appropriate parameters) i n the following table. Command Parameters config mirror port <port> [add | delete] so urce ports <portlist> [rx [...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 117 To add the mirrorin g ports: DGS–3426:5# c onfig mirror port 1:1 a dd source por ts 1:2–1: 7 both Command: config mi rror port 1:1 add source po rts 1:2–1:7 both Success. DGS–3426:5# Example usage: To delete the mirroring ports: DGS–3426:5#co nfig mirror port 1:1 de[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 118 DGS–3426:5#di sable mirror Command: disable mirror Success. DGS–3426:5# show mirror Purpose Used to show the current port mirroring configuration on the Switch. Syntax show mirror Description This command is used to display the cu rrent port mirroring conf iguration on th[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 119 16 VLAN C OMMANDS Along with normal VLAN co nfigurations, this Switch now incorporate Q-in-Q VLANs. Also known as Dou ble VLANs, Q-in-Q VLANs allow network providers to expand their VLAN configurations to place VL ANs within a larger inclusive VLAN, which adds a new layer to [...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 120 create vlan Purpose Used to create a VLAN on the Switch. Syntax create vlan <vlan_name 32> {tag <vlanid 2-4094 > | type 1q_vlan | advertisement} Description This command is us ed to create VLANs on the Switch. Parameters <vlan_name 32> − The name of the VL[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 121 config vlan Purpose Used to add addition al ports to a previously configured VLAN. Syntax config vlan <vlan_name 32> {[add [tagged | untagged | forbidde n] | delete] <portlist> | adv ertisem ent [enable | disable]} (1) Description This command is used to add ports[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 122 config gvrp Purpose Used to configure GVRP on the Switch. Syntax config gvrp [<portlist> | all] {state [enable | disabl e] | ingress_checking [enable | disable] | acceptable_fram e [tag ged_only | admit_all] | pv id <vlanid 1–4094>} (1 ) Description This command[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 123 DGS–3426:5#en able gvrp Command: enable gv rp Success. DGS–3426:5# disable gvrp Purpose Used to disable GVRP on the Switch. Syntax disable gvrp Description This command, along with enable gvrp , is used to enable an d disa ble GVRP on the Switch, without changing the GVRP[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 124 DGS-3426:5#sh ow vlan Command: show vlan VID : 1 VLAN Na me : defa ult VLAN Type : Static Adverti sement : Enab led Member Ports : 1:1-1:24 Static Ports : 1:1-1:24 Current Tagge d Ports : Current Untag ged Ports: 1 :1-1:24 Static Tagged Ports : Static Untagged Po rts : 1:1-1:[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 125 DGS–3426:5#sh ow gvrp Command: show gvrp Global GVRP : Disabled Port PVID GVRP I ngress Chec king Accepta ble Frame Type ––––––– –––– –––––––– – ––––––––––– –––– ––––––– ––––––?[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 126 disable double_vlan Purpose Used to disable the Q-in-Q VLAN feature on the Switch. Syntax disable double_vlan Description This command, along with the enable d ouble_vlan command, enables a nd disables the Q-in-Q Tag VLAN. When Q-in -Q VLANs are e nabled, the system configura[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 127 config double_vlan Purpose Used to config the parameters for a p r eviously created Q-in-Q VLAN (Doubl e VLAN) on the Switch. Syntax config double_vlan <vlan_name> {[[add [ac cess | uplink] | delete] <portlist> | tpid <hex 0x0–0xffff>]} (1) Description Thi[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 128 DGS–3426:5#co nfig double_ vlan Tiberi us delete 1:4 –1:8 Command: conf ig double_vl an Tiberius delete 1:4–1 :8 Success. DGS–3426:5# show double_vlan Purpose Used to display the Q-in-Q VLAN settings on the Switch. Syntax show double_vlan {<vlan_name>} Descripti[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 129 DGS–3426:5#en able pvid auto_ass ign Command: enable pv id auto_assign Success. DGS–3426:5# disable pvid auto_assign Purpose Used to disable auto–assign PVID Syntax disable pvid auto_assign Description The command is used to enable auto–a ssi gn PVID. If “PVID auto_[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 130 17 ISM VLAN C OMMANDS The ISM VLAN comm ands in the Command Li ne Interface (CLI) are listed (along with the appropriate parameters) in t he following table. Command Parameters create igmp_snoopin g mul ticast_vlan <vlan_name 32> <vlanid 2–4094> delete igmp_snoo[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 131 DGS–3426:5#de lete igmp_sn ooping mult icast_vlan te st Command: delete ig mp_snooping mult icast_vlan test Success. DGS–3426:5# config igmp_snooping multicast_vlan Purpose Used to configure an ISM VLAN on the Switch, add source port, member port to this VLAN, and set sta[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 132 DGS–3426:5#co nfig vlan default del ete 10–20 Command: config vl an default delete 10–2 0 Success. DGS–3426:5#cr eate vlan v10 Command: create vl an v10 Success. DES–3426:4#cr eate vlan v20 Command: create vl an v20 Success. DGS–3426:5#co nfig vlan v10 add untag g[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 133 DGS–3426:5#co nfig igmp_sn ooping mult icast_vlan_gr oup test add 225.1.1. 1– 225.1.1.10,22 5.1.1.20 Command: conf ig igmp_snoo ping multic ast_vlan_grou p test ad d 225.1.1.1– 225.1.1.10,22 5.1.1.20 Success. DGS–3426:5# show igmp_snooping multicast_vlan Purpose Used [...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 18 L INK A GGREGATION C OMMANDS The link aggre gation comm ands in the Co mmand Line Interface (CL I ) are listed (along with the appropriate parameters) in the following table. Command Parameters create link_aggregation group_id <value 1–32> {type [lacp | static]} delete[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 135 delete link_aggregation group_id Purpose Used to delete a previously configured link aggre gati on group. Syntax delete link_aggregation group_id <v alue 1–32> Description This command is used to delete a previously configured link a ggregation group. Parameters <v[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 136 DGS–3426:5#co nfig link_ag gregation g roup_id 1 mas ter_port 1:5 ports 1: 5–1:7,1:9 Command: conf ig link_aggr egation gro up_id 1 maste r_port 1: 5 ports 1:5– 1:7,1:9 Success. DGS–3426:5# config link_aggregation algorithm Purpose Used to configure the link aggregati[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 137 DGS–3426:5#sh ow link_aggreg ation Command: show link _aggregation Link Aggregat ion Algorith m = MAC–sou rce–dest Group ID : 1 Type : LACP Master Port : 1:5 Member Port : 1:5–1:7,1:9 Active Port : Status : Disable d Flooding Port : DGS–3426:5# config lacp_port Purp[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 138 show lacp_port Purpose Used to display current LACP port mod e settings. Syntax show lacp_port {<portlis t>} Description This command is used to display the LACP mode settings as they are currently configured. Parameters <portlist> – Specifies a port or range of[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 19 IP–MAC-P ORT B INDING (IMPB) C OMMANDS The IP net work layer uses a fo ur–byte IP address. T he Ethernet l ink layer uses a six–by te MAC address. Bindi ng these two address types t ogether allo ws the transm ission of data between t he layers . The prim ary purpose of I[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 140 Command Parameters create address_bi nding ip _mac ipaddres s <ipaddr> mac_address <m acaddr> {ports [ <po rtlist> | all]} config address_binding ip_ mac ipa ddress <ipaddr> ma c_address <m acaddr> {ports [ <po rtlist> | all]} config addres[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 141 DGS–3426:5#cr eate address _binding ip _mac ipaddres s 10.1.1. 3 mac_addres s 00–00– 00–00–00–04 Command: create ad dress_binding ip_mac ipaddress 10. 1.1.3 mac_addre ss 00–00–00– 00–00–04 Success. DGS–3426:5# Once an entry has bee n created and some I[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 142 config address_binding ip_mac ipaddress Purpose Used to configure an IP–MAC-Port Binding entry. Syntax config address_binding ip_mac ipaddress <ipaddr> mac_a ddr ess <macaddr> {ports [<portlist> | all]} Description This command is used to configure an IP?[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 143 config address_binding ip_mac ports port with its IMPB entries. If the IP-MAC pair in the packet matches the IMPB entry, the MAC address will be unblocked and sub seq uent pa ckets sent from this client will be forwarded. On the other hand, if a port is se t to Loose state, a[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 144 DGS–3426:5#co nfig address _binding ip _mac ports 1: 2 state e nable Command: config ad dress_binding ip_mac ports 1:2 state enable Success. DGS–3426:5# show address_binding Purpose Used to display IP–MAC-Port Binding e ntries. Syntax show address_binding [ip_mac {[all [...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 145 delete address_binding Purpose Used to delete IP–MAC-Port Binding entries. Syntax delete address_binding [ip_mac [ipadd ress <ipaddr> {mac_address <macaddr>} | all] | blocked [all | vlan_name <v lan_name> mac _address <macaddr >]] Description This co[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 146 disable address_binding trap_log Purpose Used to disable the trap/log for the IP–MAC-Port Binding function. Syntax disable address_binding trap_log Description This command, along with the enable a ddress_binding trap_log , will enable a nd disable the sending of trap/log m[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 147 Example usage: To disable IMPB debug gi n g on the Swit c h: DGS–3426:5#no debug addre ss_binding Command: no debug addr ess_binding Success. DGS–3426:5# enable address_binding dhcp_snoop Purpose To enable the DHCP snooping option for IMPB. Syntax enable address_binding d[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 148 disable address_binding dhcp_snoop Purpose To disable the DHCP snooping option for IMPB. Syntax disable address_binding dhcp_snoop Description When the DHCP snoop function is disa bl ed, all of the auto-learned binding entries will be removed. Parameters None. Restrictions On[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 149 DGS–3426:5#show address_binding dhcp_snoop Command: show address_binding dhcp_snoop DHCP_Snoop : Enabled DGS–3426:5# To display an address b inding DHCP sn oop binding entry: Note: “Inactive” indicated that the entry is curren tly in active due to port link down. DGS?[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 150 config address_binding dhc p_snoop max_entry ports Purpose Specifies the maximum number of entri es which can be dynami cally learned (DHCP snooped) by the specified ports. Syntax config address_binding dhcp_snoop max_entry ports [<portlist> | all] limit [<v alue 1-5[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 151 20 IP C OMMANDS (I NCLUDING IP V 6) The IP interface comm ands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters create ipif <ipif_name 12> {<net work_address>} <vlan_nam e 32> {[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 152 DGS–3426:5#cr eate ipif p1 10.1.1.1/8 Tiberius sta te enable Command: crea te ipif p1 1 0.1.1.1/8 T iberius state enable Success. DGS–3426:5# config ipif Purpose Used to configure the System IP interface. Syntax config ipif <ipif_name 12> [{ipaddress <n etwork_ad[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 153 DGS–3426:5#co nfig ipif Ti berius ipv6 ipv6address 3ffe:501: ffff:100::1/ 64 Command: conf ig ipif Tibe rius ipv6 i pv6address 3f fe:501:ff ff:100::1/64 Success. DGS–3426:5# show ipif Purpose Used to display the configuration of an IP interface on the Switch. Syntax show [...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 154 DGS–3426:5#en able ipif s2 Command: enable ip if s2 Success. DGS–3426:5# disable ipif Purpose Used to disable the configurati on of an IP interface on the Switch. Syntax disable ipif {<ipif_name 12> | all} Description This command is used to disable an IP interface [...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual enable autoconfig Purpose Used to activate the aut o-configuration function for the Switch. This will load a configuration file for current use. Syntax enable autoconfig Description When auto-c onfiguration is enabled on the Swit ch, the DHCP reply will contain a configuration fi[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 156 show autoconfig Purpose Used to display the auto-configuration status. Syntax show autoconfig Description The command is used to di splay the auto-configu ratio n status. Parameters None. Restrictions Only Administrator and Oper ator-level users can issue this command. Exampl[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 157 disable ipif_ipv6_link_local_auto Purpose Disables the auto configuration of lin k local addresses whe n no IPv6 addresses are configured. Syntax disable ipif_ipv6_link_local_auto [<ipif_name 12> | all ] Description This command is use d to disable the a uto-configurati[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 158 21 IP V 6 N EIGHBOR D ISCOVERY C OMMANDS The following commands a re used to detect IPv6 neig hbors of the s witch and t o keep a runni ng databa se about these neigh bor devices. The IPv6 Neighbor Discovery co mmands in the Command Line Interface (CLI) a re listed (along wit[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 159 delete ipv6 neighbor_cache ipif Purpose Used to remove a static IPv6 neighbor. Syntax delete ipv6 neighbor_cache ipif [<ipif_name 12> | all][<ipv 6addr> |sta tic |dy namic | all] Description This command is used to remove a stat ic IPv6 neighbor from an existing I[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 160 config ipv6 nd ra ipif Purpose Used to configure the parameters for ro uter advertisement packet s being sent from the switch. Syntax config ipv6 nd ra ipif <ipif_name 12> {s tate [enable | disable] | life_time <value 0– 9000> | reachable_ time <v alue 0–36[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 161 DGS–3426:5#co nfig ipv6 nd ra ipif tr iton state en able life _time 1000 reachable_tim e 10000 retr ans_time 50 000 hop_limit 10 manag ed_flag enab le other_config_ flag enable min_rt r_adv_interv al 50 max_rtr_adv_ interval 10 0 Command: config ip v6 nd ra ipif triton stat[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 162 config ipv6 nd ns ipif Purpose Used to configure the parameters for Neighbor solicita tion messages to be sent from the switch. Syntax config ipv6 nd ns ipif <ipif_name 12> retrans_time <uint 0– 4294967295> Description This command is used to configure t he para[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 163 Example usage: To display the neigh bor detection parameters for IPv6: DGS–3426:5#sh ow ipv6 nd Command: show ipv6 nd Interface Nam e : Syst em Hop Limit : 64 NS Retransmit Time : 0 (m s) Router Advert isement : Disa bled RA Max Router AdvInterval : 600 (s) RA Min Router Ad[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 164 22 IGMP S NOOPING C OMMANDS The IGMP S nooping commands i n the C ommand Li ne Interface (CLI) are listed (al ong wi th the ap propriate para meters) in the following table. Command Parameters config igmp_snooping [ vlan <vlan_name 32> |all] { host_timeout <sec 1-167[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 165 config igmp_snooping Purpose Used to configure IGMP snooping on the Switch. Syntax config igmp_snooping [ vlan <vlan_name 32> |all] { host_timeout <sec 1 -1 6711 450> | router_timeout <sec 1-16711 450> | leave_timer <sec 1-167 11 450> | state [enable|d[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 166 config igmp_snooping querier Purpose Used to configure the IGMP snooping querie r. Syntax config igmp_snooping querier [ vlan <vlan_ name 32> |all] { query _interval <sec 1- 65535> | max_response_ time <sec 1-25> | robustness_v ariable <value 1-255> | [...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 167 create igmp_snooping static_group Purpose Used to create IGMP snooping static group information on the Switch. Syntax create igmp_snooping static_group [ vlan <vlan_name 32> | vlanid <vidlist> ] <ipaddr> Description This command allows the cre ation of an IG[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual DGS–3426:5#co nfig igmp_snoo ping static_grou p vlanid 1 226.1.1.1 add 5 Command: config ig mp_snooping stat ic_group vlanid 1 226.1.1.1 add 5 Success. DGS–3426:5# delete igmp_snooping static_group Purpose Used to delete the current IGMP snoo pi ng static group on the Switch.[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 169 DGS–3426:5#sh ow igmp_snoopi ng static_group Command: show igmp_snoopi ng static_g roup VLAN ID/Name IP Ad dress S tatic Mem ber Ports ------------- ------------ --- ----- ---------- - --------- ------ 1/default 225.1 .1.1 1 -3 Total Entrie s : 1 DGS–3426:5# config router[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 170 config router_ports_forbidden Purpose Used to configure ports as forbidden mul t icast router p orts. Syntax config router_ports_forbidden <v lan_name 32> [add | delete ] <portlist> Description This command is used to desig nate a port or range of ports as being f[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 171 disable igmp_snooping Purpose Used to disable IGMP snooping on the Switch. Syntax disable igmp_snooping {forward_mcrouter_only } Description This command is used to di sabl e IGMP snooping on the Switch. IGMP snooping can b e disabled only if IP multicast routing is not being[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 172 DGS–3426:5#sh ow igmp_snoopi ng Command: show igmp _snooping IGMP Snooping Global Stat e : Enabled Multicast ro uter Only : Enable d VLAN Name : defaul t Query Interv al : 40 Max Response Time : 10 Robustness V alue : 2 Last Member Query Interv al : 5 Host Timeout : 90 Rout[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 173 show igmp_snooping group Purpose Used to display the current IGMP snooping group configuration on the Switch. Syntax show igmp_snooping group {v lan <v lan_name 32>} Description This command is used to display the current IGMP Snooping Group configuration setup currentl[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 174 23 MLD S NOOPING C OMMANDS Multicast Listener Discovery (MLD) Snoop ing is an IPv6 fun ction u s ed similarly to IGMP snooping in IPv4. It is used to discover ports on a VL AN that are requesti ng multicast dat a. Instead of floo ding all ports on a selected VLAN with multica[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 175 enable mld_snooping Purpose Used to enable MLD snooping globally on the switch. Syntax enable mld_snooping {for ward_mcrouter_only } Description This command, in conjuncti on with the disable mld_s nooping will enable and disable MLD snooping globally on the Switch without af[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 176 config mld_snooping Purpose Used to configure MLD snoopin g on the Switch. Syntax config mld_snooping [vlan <vlan_name 32> | all] {node_ timeo ut <sec 1–16711450 > | router_timeout <sec 1–16711 450> | done_timer <sec 1– 167 11450> | state [enable[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 177 config mld_snooping mrouter_ports Purpose Used to configure ports as static router p orts on the Switch. Syntax config mld_snooping mrouter_ports <v lan_name 32> [add | delete] <portlist> Description This command is used to designate a range of port s a s bein g c[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 178 DGS–3426:5#co nfig mld_snoop ing mrouter_port s_forbidden default add 1:11– 1:20 Command : con fig mld_snoo ping mroute r_ports_forbi dden defa ult add 1:11 –1:20 Success DGS–3426:5# config mld_snooping querier Purpose Used to configure the timers and setting s for th[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual NOTE: The robustness va riable of the MLD sn ooping querier is u sed in creating the following MLD message intervals: Group Listener Interval – This is the amount of tim e that must pass before a multicast rout er decides that there are no more listeners pres ent of a group o n[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 180 show mld_snooping group Purpose Used to display MLD snooping group configurations on the Switch. Syntax show mld_snooping group {v lan <vlan_name 3 2>} Description This command is used to display MLD snooping group configuratio ns on the Swi tch. Parameters vlan <vla[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 181 To display the MLD snooping multicast router port settings: DGS–3426:5#sh ow mld_snoopin g mrouter_ports Commands: sho w mld_snoopi ng mrouter_ ports VLAN Name : default Static mroute r port : 1–10 Dynamic mrout er port : Forbidden mro uter port : Total Entries : 1 DGS–[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 182 24 L IMITED IP M ULTICAST A DDRESS (IGMP F ILTERING ) The Limited IP Multicast Address (IGMP Filtering) commands allow users to specify which multicast address(es) reports are to be received on specified port s on the switc h. This function will t herefore limit the number of[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 183 delete limited multicast address Purpose Used to delete Limited IP multicast address range. Syntax delete limited multicast address [all | <portlist>] Description This command is used to delete all mu lticast address ranges o r a selected range based on which port or po[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 184 DGS–3426:5#sh ow limited multica st address 1:1–1:3 Command: show limi ted multicast addr ess 1:1–1:3 Port Fr om To Access Stat us –––– ––– ––––––––––– ––––––––– –––– –––––– – –––– –?[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 185 25 802.1X C OMMANDS The xStack ® DGS–3400 implements the server–sid e of the IEEE 802.1X Po rt–based and MAC –based Network Access Control. This mechanis m is int ended to allo w only auth orized use rs, or ot her network devices, ac cess to netw ork resources by est[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 186 Command Parameters create 802.1x guest_vlan <vlan_name 32> config 802.1x guest_vlan ports [<portl ist> | all] state [enable | disable] delete 802.1x guest_vlan {<vlan_nam e 32>} show 802.1x guest_vlan config 802.1x auth_failover [enable | disable] config 802[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 187 DGS–3426:5#di sable 802.1x Command: disable 802.1x Success. DGS–3426:5# show 802.1x Purpose Used to display the 802.1X gener al configurations o n the Switch. Syntax show 802.1x Description This command is used to display the 802.1X general config urations on the Switch. [...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 188 show 802.1x auth_configuration ports Purpose Used to display the current configur ation of the 802.1X server on the Switch. Syntax show 802.1x auth_configuration por ts <portlist> Description This command is used to display t he 802.1X Port–based o r MAC–based Netwo[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 189 DGS–3426:5#sh ow 802.1x au th_configur ation ports 1 :1 Command: show 802.1x auth _configurat ion ports 1:1 Port number : 1:1 Capability : None AdminCrlDir : Both OpenCrlDir : Both Port Control : Auto QuietPeriod : 60 sec TxPeriod : 30 sec SuppTimeout : 30 sec ServerTimeout[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 190 MAC 00-00-00-00-00-2 0 attempts to start authenticati on, MAC address is followed by “(P)” to indicate the port-based mode au thentication. MAC 00-00-00-0 0-00-21 fai led to pass authenti cation, MAC address is follo wed by “(P)” to in dicate the port- based mode a ut[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 191 config 802.1x capability ports Purpose Used to configure the 802. 1X capa bility of a range of ports on the Switch. Syntax config 802.1x capability ports [<port list> | all] [authenticator | none] Description This command has fou r capabilities that can be set for each [...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 192 config 802.1x auth_parameter ports Purpose Used to configure the 802.1X Authenticat ion parameters o n a range of ports. The default parameter will return all p orts in the spe c ified range to their default 802.1X settings. Syntax config 802.1x auth_parameter ports [<por [...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 193 DGS–3426:5#co nfig 802.1x auth_p arameter ports 1:1–1:20 directio n both Command: conf ig 802.1x au th_paramete r ports 1:1–1 :20 direc tion both Success. DGS–3426:5# config 802.1x init Purpose Used to initialize the 802. 1X function on a range of ports. Syntax config[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 194 config 802.1x reauth Purpose Used to configure the 802.1X r e–authentication feature of the Switch. Syntax config 802.1x reauth {port_based po r ts [<portlist> | all] | mac_based [ports] [<portlist> | all] {mac_address <maca ddr>}] Description This command[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 195 config radius add Purpose Used to configure the settings the Switch will use to communicate with a RADIUS server. Syntax config radius add <server_index 1–3> <server_ip> key <pass wd 32> [default | {auth_port <udp_port_n u mber 1–65535> | acct_ por[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 196 DGS–3426:5#co nfig radius delete 1 Command: config ra dius delete 1 Success. DGS–3426:5# config radius Purpose Used to configure the Switch’s RADIUS settings. Syntax config radius <server_index 1-3> {ipaddres s <server_ip> |ke y <passwd 32> | auth_port[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 197 To display RADIUS settings on the Switch : DGS–3426:5#sh ow radius Command: show radi us Index IP Add ress A uth–Port Ac ct–Port Timeo ut Retran smit Key (secs ) ––– –––––– ––––––––– – –––––––– –– –––––[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 198 DGS-3426:5#sh ow 802.1x user Command: show 802.1x user Current Acco unts: Username Passwor d ------------ --- ------- -------- 1 123 Total Entrie s:1 DGS–3426:5# delete 802.1x user Purpose Used to delete an 802.1X user account on the Switch. Syntax delete 802.1x user <us[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 199 show acct_client Purpose Used to display the current RADIUS accounting client. Syntax show acct_client Description This command is used to display t he current RADIUS accounting client currently configured on the Switch. Parameters None. Restrictions Non e. Example usage: To [...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 200 DGS–3426:5#sh ow auth_client Command: show auth _client radiusAuthCli ent ==> radiusAuthCl ientInvalidS erverAddres ses 0 radiusAuthCl ientIdentifi er radiusAuthSe rverEntry == > radiusAuthSe rverIndex :1 radiusAuthSe rverAddress 0.0.0.0 radiusAuthCl ientServerPo rtNu[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 201 DGS–3426:5#sh ow auth_diag nostics por ts 1:16 Command: show auth _diagnostics por ts 1:16 Port number : 1:16 EntersConnec ting 0 EapLogoffsWh ileConnectin g 0 EntersAuthen ticating 0 SuccessWhile Authenticati ng 0 TimeoutsWhil eAuthenticat ing 0 FailWhileAut henticating 0 [...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 202 DGS–3426:5#sh ow auth_sessio n_statistics por ts 1:16 Command: show auth_sessio n_statistic s ports 1:16 Port number : 1:16 SessionOctet sRx 0 SessionOctet sTx 0 SessionFrame sRx 0 SessionFrame sTx 0 SessionId SessionAuthenti cMethod Remote Authentic ation Server SessionTim[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 203 create 802.1x guest_vlan Purpose Used to configure a pre–existing VLAN as a 802.1X Guest VLAN. Syntax create 802.1x guest_v lan <vlan_name 32> Description This command is used to configure a pre–defined VLAN as a 80 2.1X Gue st VLAN. Guest 802.1X VLAN clients are th[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 204 DGS–3426:5#co nfig 802.1x guest_ vlan ports 1:1–1:5 state enable Command: config 80 2.1x guest_vlan po rts 1:1–1:5 state enab le Warning! The ports are mo ved to Gues t VLAN! Success. DGS–3426:5# show 802.1x guest_vlan Purpose Used to view the configurations for a 802[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 205 config 802.1x auth_failover Purpose Used to configure 8 02.1X authentication failover. Syntax config 802.1x auth_failover [enable | disable] Description When the authentication failover is di sab l ed, if the RADIUS server s are unreachable, the authentication will fail. When[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 206 config 802.1x fwd_pdu ports Purpose Used to c onfigure the forwarding of EAPOL PDU. Syntax config 802.1x fw d_pdu ports [<po rtlilst>| all] [enable | disable] Description This command is a per port setting used to control the forwarding of EAPOL PDU. When 802.1X functio[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 207 config 802.1x max_users Purpose Used to configure the max number of users that can be learned via 802.1X authentication. Syntax config 802.1x max_users [<v alue 1 –4000> | no_limit] Description The setting is a global limitation on the maximum number of u sers that ca[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 208 show accounting service Restrictions Non e. Example usage: To display the accounting service: DGS–3426:5#sh ow accounting serv ice Command: show acco unting service Accounting St ate ------------- ------ Network : Dis abled Shell : Ena bled System : Dis abled DGS–3426:5#[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 209 26 A CCESS C ONTROL L IST (ACL) C OMMANDS The xStack ® DGS–3400 implements Access Control Lists that enable th e Switch to deny network access to specific de vices or device groups based on IP set tings an d MAC address. Access profiles allows establishment of a criteria t[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 210 Command Parameters {src_port <value 0-6553 5> | dst_port <value 0-6553 5>} | protocol_id <value 0 - 255> {user_define <hex 0x0-0xffffffff>}]} (1) port [< portlist> | all] [permit {priority <value 0-7> {rep lace_prio rity} | rx_r ate {no_lim[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 211 create access_profile (for Ethernet) Purpose Used to create an access profile on the Sw itch by examining the Ethernet part of the packet header. Masks entered can be combined wi th the values the Switch finds in the specified frame header fields. Specifi c value s for the ru[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 212 config access_profile profile_id (for Ethernet) access profile when it is created with the crea te ac cess_profile command. The lowe r the profile ID, the higher the priority the rule will be given. add access_id <value 1–128> – Adds an addition al rule to the abo v[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 213 config access_profile profile_id (for Ethernet) target port must be set. deny – Specifies that packets that match t he access profile are not permitted to be forwarded by the Switch and will be filtered. {time_range <range _nam e 32>} – Choose this parameter an d en[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 214 create access_profile (IP) Parameters • type − Specifies that the Switch will exam ine each frame’s IGMP Type field. • tcp − Specifies that the Switch will examine each frames Transpor t Control Protocol (TCP) field. • src_port_mask <hex 0x 0–0xffff> − S[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 215 config access_profile profile_id (IP) Parameters profile_id <value 1–6> – Enter an integer between 1 and 6 that is used to ide ntify the access profile that will be configured with th is command. This valu e is assigned to the access profile when it is created with [...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 216 config access_profile profile_id (IP) permit – Specifies that packets that mat ch the a ccess profile are pe rmitted to be forwarded by the Switch. • priority <value 0–7 > − This param eter is specified if you want to re–write the 802.1p default priority previ[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 217 create access_profile (packet content ) Purpose Used to create an access profile on the Sw itch by examining the Ethernet part of the packet header. Packet content masks entered will specify certain bytes of the packet header to be identified by the Switch. When the Switch re[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 218 config access_profile profile_id (packet content) Description This command is used to set the rule for a previously configured access profile setting based on packet content mask. These rules will determine if the Switch will forward or filter the identified packets, based on[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 219 config access_profile profile_id (packet content) deny – Specifies that packets that match t he access profile are not permitted to be forwarded by the Switch and will be filtered. {time_range <range _nam e 32>} – Choose this parameter an d enter the name of the Tim[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 220 DGS–3426:5#cr eate access_ profile pro file_id 4 ipv 6 class f lowlabel Command: create ac cess_profile pro file_id 4 ipv6 class flowlabel Success. DGS–3426:5# config access_profile profile_id (ipv6) Purpose Used to configure the IPv6 access profile on the Switch and to d[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 221 config access_profile profile_id (ipv6) • priority <value 0–7 > − This param eter is specified to re–write the 802.1p default priority previously set in the Switch, wh ich is used to determine the CoS queue to which packets are fo rward ed to. Once this field is[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 222 delete access_profile Purpose Used to delete a previously created access profile. Syntax delete access_profile {profile_id <v alue 1–6> | all} Description This command is used to delete a previously created acce ss p rofile on the Switch. Parameters profile_id <val[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 223 DGS–3426:5#sh ow access _ profile Command: show acce ss_profile Access Profile Tab le Access Profil e ID: 1 TYPE : Et hernet ============= ============ =========== ============= ========= ========== MASK Option : VLAN 802.1p ––––––––––– –––––[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 224 create cpu access_profile 0x0–0xffffffff> <hex 0x0–0xfffff fff> <h ex 0x0–0x ffff ffff> <h ex 0x 0–0xffff ffff> | offset 64–79 <hex 0x0–0xffffffff> <hex 0x0 –0xfff fffff> <hex 0x0–0xff ffffff> <hex 0x 0– 0xffffffff&g[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 225 create cpu access_profile • offset_0–15 – Enter a value in hex form to mask the packet from byte 0 to byte 15. • offset_16–31 – Enter a value in hex form to mask the packet from byte 16 to byte 31. • offset_32–47 – Enter a value in hex form to mask the packe[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 226 DGS–3426:5#de lete cpu access_pr ofile profile_ id 1 Command: dele te cpu acces s_profile p rofile_id 1 Success. DGS–3426:5# config cpu access_profile profile_id Purpose Used to configure a cpu access profile used for CPU I nterface Filtering and to define specific values[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 227 config cpu access_profile profile_id Parameters • source_ip <ipaddr> − Specifies that the access profile will apply to only packet s with this source IP address. • destination_ip <ipaddr> − Specifies that the access profile will apply to only packets with [...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 228 config cpu access_profile profile_id address. • destination_ipv6 <ipv6add r> − Sp ecifie s an IPv6 address mask for the destination IPv6 address. <portlist>| all – Enter the port or ports to which this ac ce ss profile applies. The port list is specified by [...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 229 DGS–3426:5#sh ow cpu access_prof ile Command: show cpu acce ss_profile CPU Interface Filtering S tate: Disab led CPU Interface Access Prof ile Table Access Profil e ID: 1 TYPE : Ether net ============= ============ =========== ============= ========= ============ ===== MASK[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 27 T IME R ANGE C OMMANDS The Time Range commands are used in conj unction with the Access Profile commands listed in the pr evious chapter to d etermine a starting point and an ending po int, based on days of the week , when an Access Profile conf iguration will be enab led on t[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 231 DGS–3426:5#co nfig time_ra nge time1 h ours start_ti me 6:30:0 0 end_time 2 1:40:00 weekdays mon–fri Command: config ti me_range time1 hou rs start_time 6:30 :00 end_time 21:40 :00 weekdays mon–fri Success. DGS–3426:5# show time_range Purpose To view the current confi[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 28 S AFEGUARD E NGINE C OMMANDS Periodically, malicious hosts on the net work will attack the Switc h by utilizing pac ket flooding (AR P Storm) or ot her methods. These attacks may increase the CPU utilization beyond its capability. To alleviate this problem, the Safeguard Eng i[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 233 config safeguard_engine Purpose To config ARP storm control for system. Syntax config safeguard_engine {state [enable | disable] | utilization {rising <value 20– 100> | falling <value 20–100>} | trap _log [enable | disable] | mode [strict | fu zzy ]} Descripti[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 234 DGS–3426:5#sh ow safeguard_e ngine Command: show safe guard_engine Safeguard eng ine state : Disabled Safeguard eng ine current status : normal mode ============= ============ =========== ============= ====== CPU utilization in formation: Rising : 30% Falling : 20% Trap/Log[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 235 29 T RAFFIC S EGMENTATION C OMMANDS Traffic segmentation allows you to further sub–divide VLANs into smaller groups of po rts that will help to reduce traffic on th e VLAN. The VLAN rules take precedence, and then the traffic segm entation rules are applied. Command Paramet[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 236 show traffic_segmentation Purpose Used to display the current traffic segmentation config uration on the Switch. Syntax show traffic_segmentation {<portlist>} Description This command is used to display the current traffic segmentation configuration o n the Switch. Para[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 237 30 T IME AND SNTP C OMMANDS The Sim ple Network Time Prot ocol (SN TP) (an a daptati on of the Network Tim e Protoc ol (NTP) ) comma nds in the C ommand Line Interface (CLI) are listed (along with the ap propriate parameters) in the following table. Command Parameters config [...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 238 show sntp Purpose Used to display the SNTP information. Syntax show sntp Description This command is used to display SN TP settings information incl uding the source IP address, time and poll interval. Parameters None. Restrictions Non e. Example usage: To display SNTP config[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 239 To disable SNTP: DGS–3426:5#di sable sntp Command: disable sntp Success. DGS–3426:5# config time Purpose Used to manually configure system time and date settings. Syntax config time <date ddmthyyyy > <time hh:mm:ss> Description This command is used to configur[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 240 DGS–3426:5#co nfig time_zo ne operator + hour 2 min 30 Command: conf ig time_zone operator + hour 2 min 3 0 Success. DGS–3426:5# config dst Purpose Used to enable and configure time adjustments to allow for the use of Daylight Savings Time (DST). Syntax config dst [disabl[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 241 config dst Parameters e_date – Configure the specific date (day of the month) to begin DST. • <end_date 1–31> – The e nd date is ex pressed numerically. offset [30 | 60 | 90 | 120] – Indicates number of minutes to add or to subtract during the summertime. The [...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 242 31 DHCP R ELAY C OMMANDS The DHCP relay commands in th e Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters config dhcp_relay {hops <value 1–16> | time <sec 0 –65535>} (1) config dhcp_rela[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 243 DGS–3$00:4#co nfig dhcp_rela y hops 2 time 23 Command: config dh cp_relay hops 2 time 23 Success. DGS–3426:5# config dhcp_relay add ipif Purpose Used to add an IP destination address t o the switch's DHCP/BOOTP relay table. Syntax config dhcp_relay add ipif <ipif_[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 244 config dhcp_relay option_82 state Purpose Used to configure the state of DHCP re lay agent information option 82 of the swi tch. Syntax config dhcp_relay option_82 state [enable | disab le] Description This command is used to configure the state of DHCP relay agent informatio[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 245 DGS–3426:5#co nfig dhcp_re lay option_ 82 check enab le Command: config dh cp_relay option_ 82 check enable Success. DGS–3426:5# config dhcp_relay option_82 policy Purpose Used to configure the reforwarding poli cy of relay agent information option 82 of the switch. Synta[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 246 DGS–3426:5#sh ow dhcp_relay Command: show dhcp _relay DHCP/BOOTP Re lay Status : Enabled DHCP/BOOTP Ho ps Count Lim it : 2 DHCP/BOOTP Re lay Time Thr eshold : 23 DHCP Relay Ag ent Informat ion Option 82 State : Enabled DHCP Relay Ag ent Informat ion Option 82 Check : Enable[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 247 disable dhcp_relay Purpose Used to disable the DHCP/BOOTP relay function on the Switch. Syntax disable dhcp_relay Description This command is used to disabl e the DHCP/BOOTP relay function on the Switch. Parameters None. Restrictions Only Administrator and Oper ator-level use[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 248 config dhcp_relay option_60 add Purpose This command is used to add an entry for DHCP rel ay option 60 Syntax config dhcp_relay option_60 add str ing <muti word 255> relay <ipaddr> [exact- match|partia l-match] Description This command is used to configure the opt[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 249 config dhcp_relay option_60 delete Purpose This command is used to delete dhcp_relay option_6 0 entry. Syntax config dhcp_relay option_60 delete [string <mu ti word 255> {relay <ipaddr>} |ipaddress <ipaddr>| all |default {<ipaddr>}] Description This co[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 250 DGS–3426:5#sh ow dhcp_relay opti on_60 Command: show dhcp _relay option_60 Default Proce ssing Mode: Drop Default Serve rs: Matching Rules: String Match Type IP Address ------ ----------- --------- abc Exact Match 10.90.90.1 Total Entries : 1 DGS–3426:5# config dhcp_relay[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 251 config dhcp_relay option_61 add Purpose This command is used to add a rule for DHCP rel ay option 61. Syntax config dhcp_relay option_61 add [m ac_address <macaddr > |string <desc 255>] [relay <ipaddr>| drop] Description This command is used to add a rule to[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 252 config dhcp_relay option_61 delete Purpose This command is used to delete an option 61 rule. Syntax config dhcp_relay option_61 delete [mac_add ress <macaddr> | string <d esc 255>|all] Description This command is used to delete an option 61 rule. Parameters mac_ad[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 253 32 R OUTING T ABLE C OMMANDS The Switch supports o nly static rou ting for I Pv4 and IPv6 formatte d addressing. Users can create up t o 128 static route entries for IPv4 and IPv6 com bined. Manually configured static and the local route can route IP pa ckets. For eac h devic[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 254 DGS-3426:5#cr eate iproute 10.48.74.1 21/8 10.1.1.2 55 primar y Command: crea te iproute 1 0.48.74.121 /8 10.1.1.255 primary Success. DGS-3426:5# delete iproute Purpose Used to delete an IP route entry from the Switch’s IP routing tabl e. Syntax delete iproute [default |<[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 255 DGS-3426P:5#s how iproute static Command: show ipro ute static Routing Table IP Address/Ne tmask Gatew ay Co st Protocol Backup Status ------------- ----- ----- -------- -- --- -------- ------- - -------- 10.0.0.0/8 10.1. 1.255 1 Static Primary Inactive Total Entries : 1 DGS-[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 256 delete ipv6route Purpose Used to delete an static IPv6 route ent ry from the Switch’s IP routing table. Syntax delete ipv6route [[default |<ipv 6networkaddr>] [<ipif_name 12 > <ipv 6addr> | <ipv6addr> ] |all] Description This command is used to delet[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 257 DGS–3426:5# s how ipv6rout e Command: show ipv6 route Routing Table IPv6 Prefix: 1234::/32 Pro tocol: St atic Metric : 1 Next Hop : 2D30::AC21 IPI F : Status : Inactive Total Entries : 1 DGS–3426:5#[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 258 33 MAC N OTIFICATION C OMMANDS The MAC not ification com mands in the Command Line Interface (C LI) are listed, in the following table, along with their appropriate parameters. Command Parameters enable mac_notification disable mac_notification config mac_notification {interv[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 259 DGS–3426:5#di sable mac_no tification Command: disable mac_notificati on Success. DGS–3426:5# config mac_notification Purpose Used to configure MAC address notification. Syntax config mac_notification {interval <int 1–21 47483647> | history size <int 1–500>[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 260 DGS–3426:5#co nfig mac_not ification p orts 1:7 enab le Command: config ma c_notificatio n ports 1:7 enable Success. DGS–3426:5# show mac_notification Purpose Used to display the Switch’s MAC address table notification global setting s Syntax show mac_notification Descr[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 261 DGS–3426:5#sh ow mac_notific ation ports Command: show mac_ notification por ts Port # MAC A ddress Table Notificati on State –––––– ––––––––– ––––––––––– ––––––––––––– –––––––––[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 34 A CCESS A UTHENTICATION C ONTROL C OMMANDS The TACACS / XTACACS / TACACS+ / RADI US commands allows users secure a ccess to the Switch using the TACACS / XTACACS / TACACS+ / RADIUS protocols. When a user logs in to the Switch or tries to access the administrator level privileg[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 263 Command Parameters enable authen_policy disable authen_poli cy show authen_policy create authen_login metho d_list_name <string 15> config authen_login [default | method_list_name <string 15>] method {ta cacs | xtacacs | tacacs+ | radius | server_ group <strin [...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 264 enable authen_policy Purpose Used to enable system access authentication policy. Syntax enable authen_policy Description This command is used to enable an adm inistrator– defined authentication policy for user s trying to access the Switch. When en abl ed, the device will c[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 265 DGS–3426:5#sh ow authen_poli cy Command: show auth en_policy Authenticatio n Policy: En abled DGS–3426:5# create authen_login method_list_name Purpose Used to create a user defined method list of authentication methods for u sers logging on to the Switch. Syntax create au[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual config authen_login Parameters the TACACS protocol from the remote TACACS se rver ho sts of the TACACS server group list.  xtacacs – Adding this parameter will requir e the user to be authenticated using the XTACACS protocol from the remote XTACACS server hosts of the XTACAC[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 267 DGS–3426:5#co nfig authen_lo gin default method xtacacs tacacs+ local Command: conf ig authen_lo gin default method xtaca cs tacacs + local Success. DGS–3426:5# delete authen_login method_list_name Purpose Used to delete a previously configured us er defined method list o[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 268 Example usage: To view the authentication log in method list named Tiberius: DGS–3426:5#sh ow authen_lo gin method_ list_name Tib erius Command: show auth en_login method_ list_name Tiber ius Method List N ame Priori ty Method Name Comm ent ------------- --- ------ -- -----[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 269 config authen_enable that point, the Switch will restart the same sequence with the following protocol listed, xtacacs . If no authentication takes place using the xtacacs list, the local_enable password set in the Switch is used to authenticate the user. Successful authentic[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 270 DGS–3426:5#co nfig authen_en able method_list _name Tiberius met hod tacacs xtac acs local Command: config au then_enable meth od_list_nam e Tiberius method taca cs xtacacs local Success. DGS–3426:5# Example usage: To configure t he default method lis t with authe nticati[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 271 show authen_enable Purpose Used to display the method list of authentic ation methods for promoting normal user level privileges to Administrator level privileges on the Switch. Syntax show authen_enable [default | metho d_list_n ame <string 15> | all] Description This [...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 272 config authen application Purpose Used to configure various applications on the Switch for authe nticat ion using a previously configured method list. Syntax config authen application [console | telnet | ssh | http | all] [login | enable] [de fault | method_list_name <stri[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 273 DGS–3426:5#sh ow authen ap plication Command: show authen appl ication Application Login Meth od List E nable Method List ––––––––––––– –––––––––– –––––––– –– ––––––––––––– –––[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 274 DGS–3426:5#cr eate authen server_host 10.1.1.121 p rotocol t acacs+ port 1234 timeout 10 re transmit 5 Command: crea te authen se rver_host 1 0.1.1.121 pro tocol tac acs+ port 12 34 timeout 10 re transmit 5 Success. DGS–3426:5# config authen server_host Purpose Used to co[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 275 delete authen server_host Purpose Used to delete a user–def ined authentication server h ost. Syntax delete authen serv er_host <ipa ddr> protocol [tac acs | xtacacs | tacacs + | radius] Description This command is used to delete a us er–defined authe ntication serv[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 276 DGS–3426:5#sh ow authen server_h ost Command: show authen serv er_host IP Address Protocol Port Time out Retransm it Key ––––––––––––– –––––––– ––––– –––– –– –––––––– ––––––– 10.53[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 277 config authen server_group Purpose Used to configure a user–defined authe ntication server group. Syntax config authen server_group [ta cac s | xtacacs | tacacs + | radius | <string 15>] [add | delete] server_host <ipad dr> protocol [tacac s | xtacacs | tacac s+[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 278 delete authen server_group Purpose Used to delete a user–def ined authentication se rver group. Syntax delete authen serv er_group <string 15> Description This command is used to de lete an authenticatio n se rver group. Parameters <string 15> – Enter an alp h[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 279 config authen parameter response_timeout Purpose Used to configure the amount of time the Switch will wait for a user to enter authentication before timing out. Syntax config authen parameter response_timeout <in t 0–255> Description This command is used to set the ti[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 280 show authen parameter Purpose Used to display the authentication para meters currently configured on the Switch. Syntax show authen parameter Description This command is used to display the authentication parameters curre ntly configured on the Switch, including the response [...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 281 config admin local_enable Purpose Used to configure the local enable pa ssword for admi nistrator level privileges. Syntax config admin local_enable Description This command is used to conf igure the locally enabled password for the ena ble admin command. When a user chooses [...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 282 35 SSH C OMMANDS The steps re quired to use the Secure Shell (SSH) protoc ol for sec ure comm unication between a remote PC (the SS H Client) an d the Switch (the SSH Serve r), are as follows: • Create a user account with admin–level access using t he create acc ount admi[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 283 DGS–3426:5#en able ssh Command: enable ss h TELNET will b e disabled w hen enable SSH. Success. DGS–3426:5# disable ssh Purpose Used to disable SSH. Syntax disable ssh Description This command is used to disabl e SSH on the Switch. Parameters None. Restrictions Only Admin[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 284 DGS–3426:5#co nfig ssh authmode pas sword enable Command: conf ig ssh authm ode passwor d enable Success. DGS–3426:5# show ssh authmode Purpose Used to display the SSH authentication mode setting. Syntax show ssh authmode Description This command is used to display the cu[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 285 DGS-3426P:5#c onfig ssh se rver maxses sion 3 contim eout 300 authfail 2 p ort 1 rekey 10min Command: conf ig ssh serve r maxsessio n 3 contimeou t 300 aut hfail 2 port 1 rekey 10min Success. DGS-3426P:5# show ssh server Purpose Used to display the SSH server setting. Syntax [...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual Example usage: To configure the SSH user: DGS–3426:5# c onfig ssh us er Rubio au thmode Passwo rd Command: config ss h user Rubio authmode Pas sword Success. DGS–3426:5# show ssh user authmode Purpose Used to display the SSH user setting. Syntax show ssh user authmode Descrip[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 287 config ssh algorithm Purpose Used to configure the SSH algorithm. Syntax config ssh algorithm [3DES | AES128 | AES192 | AES256 | arcfour | blo wfish | cast128 | twofish128 | t wofish192 | twofish256 | MD5 | SHA1 | RSA | DSA] [enable | disable] Description This command is used[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 288 DGS–3426:5#sh ow ssh algorithm Command: show ssh algo rithm Encryption Al gorithm ––––––––––––– –––––––––––– ––––––––– 3DES :Enable d AES128 :Enable d AES192 :Enable d AES256 :Enable d arcfour :Enable d blo[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 289 36 SSL C OMMANDS Secure Sockets Layer or SSL is a security feature that will prov ide a secu re communication path between a host and client throu gh the use of authentication, digital signatur es and encryption. These security functio ns are implemented through the use of a [...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual enable ssl Purpose To enable the SSL function on the Switch. Syntax enable ssl {ciphersuite {RSA_with_RC4_128_MD5 | RSA_with_3DES_EDE_CBC_SHA | DH E_DSS_with_3DES_EDE_CBC_S HA | RSA_EXPORT_with_RC4_40_MD5} (1) } Description This command is used to enable SSL on the Switch by impl[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 291 disable ssl Purpose To disable the SSL function on the Switch. Syntax disable ssl {ciphersuite {RSA_with_RC4_128_MD5 | RSA_with_3DES_EDE_CBC_SHA | DH E_DSS_with_3DES_EDE_CBC_S HA | RSA_EXPORT_with_RC4_40_MD5} (1) } Description This command is used to disable SSL on the Switch[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 292 Example usage: To set the SSL cachetimeout for 7200 seconds: DGS–3426:5#co nfig ssl cachetime out timeout 7200 Command: conf ig ssl cache timeout tim eout 7200 Success. DGS–3426:5# show ssl cachetimeout Purpose Used to show the SSL cache timeout. Syntax show ssl cachetime[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 293 DGS–3426:5#sh ow ssl certificate Command: show ssl cert ificate Loaded with RSA Certif icate! DGS–3426:5# download SSL certificate Purpose Used to download a certificate f ile for the SSL function on the Switch. Syntax download SSL certificate <ipaddr> certf ilename[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 294 37 J UMBO F RAME C OMMANDS Certain switches can sup port jumbo frames (fra mes larger than 1536 bytes). To tr ansmit frames of up to 9K (and 9220 Bytes tagged), t he user can increase the maxim um transm ission unit (MTU) size from the default of 1536 by enablin g the Ju mbo [...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 295 DGS–3426:5#di sable jumbo_ frame Command: disable jumbo_frame Success. DGS–3426:5# show jumbo_frame Purpose Used to display the status of the jumbo frame function on the Switch. Syntax show jumbo_frame Description This command is used to display the status of the jumbo fr[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 296 38 D–L INK S INGLE IP M ANAGEMENT (SIM) C OMMANDS Simply put, D–Link Single IP Management is a concept that will stack switches together over Eth ernet instead of using stacking ports or m odules. Swit ches using D–Link Single IP Managem ent (labeled here as SIM ) must [...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 297 With SIM enabled , the applications in the CS will redirect the packet instead of execu ting the packets. Th e applications will decode the packet from the administrator, m odify some data, then send it to the MS. After execution, the CS m ay receive a response packet from th[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 298 DGS–3426:5#en able sim Command: enable si m Success. DGS–3426:5# disable sim Purpose Used to disable Single IP Management (SIM) on the Switch. Syntax disable sim Description This command is used to disable SIM globally on the Switch. Parameters None. Restrictions Only Adm[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 299 show sim Purpose Used to view the current information regarding the SIM group on the Switch. Syntax show sim {[candidates {<candidate_id 1–100>} | members {<member_id 1–32>} | group {commander_mac <macaddr >}] | n eighbor]} Description This comma nd is u[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 300 DGS–3426:5#sh ow sim Command: show sim SIM Version : VER– 1.61 Firmware Vers ion : 2.35 –B06 Device Name : MAC Address : 00–1 9–5B–3D–7C– D6 Capabilities : L2 Platform : DGS– 3426 L2 Swi tch SIM State : Disa bled Role State : Cand idate Discovery Int erval :[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 301 DGS–3426:5#sh ow sim group Command: show sim grou p SIM Group Nam e : default ID MAC Addre ss Pl atform / Hold Firmw are Devi ce Name Ca pability Time Versi on –– – ––––––––– ––––– ––– ––––––––––– – –––?[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 302 config sim_group Purpose Used to add candidates and delete members from t he SIM group. Syntax config sim_group [add <candidate_id 1–100 > {<pa ssword>} | delete <member_id 1– 32>] Description This command is used to add ca ndida tes and delete members f[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 303 config sim Purpose Used to configure role parameters for the SIM protocol on the Switch. Syntax config sim [[commander {group_name <groupname 64> | candidate ] | dp_ interval <sec 30–90> | hold_time <sec 100 –255>] Description This command is used to con[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 304 DGS–3426:5# c onfig sim co mmander Command: config si m commander Success. DGS–3426:5# To update t he name of a gr oup: DGS–3426:5#co nfig sim commander group_name Trinit y Command: conf ig sim comma nder group_ name Trinity Success. DGS–3426:5# download sim_ms Purpos[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 305 To download configuration files: DGS–3426:5# dow nload sim configu ration_from _tftp 10.53.13. 94 c:/ dgs3426 . txt all Command: downloa d sim configuratio n_from_tftp 10.53.13.94 c:/ dgs34 26.txt all This device i s updating c onfiguratio n. Please wa it... Download Status[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 306 39 P O E C OMMANDS The xStack ® DGS–3426P suppor ts Power over Ethern et (PoE) as defined by the I EEE 802.3 af specif ication. Ports 1–24 supp ly 48 VDC power to PDs over Categor y 5 or Ca tegory 3 UTP Ethernet cables. The xStack ® DGS–3426P follow s the standard PSE[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 307 config poe system Purpose Used to configure the parameters for the whole PoE system. Syntax config poe system {units [<unitlist> | all]} {po wer_limit <value 37–370> | power_disconnect_method [deny _next_port | deny _low_priority_port] management_mode [po wer_li[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 308 config poe ports Purpose Used to configure the PoE port settings. Syntax config poe ports [all | <portlist>] {state [enable | disable] | prior i ty [critical | high | low] | power_limit [class_0 | class_1 | class_2 | class_3 | u ser_define <value 1000– 16800>]} [...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 309 DGS–3426P:5#c onfig poe po rts 1:1–1:3 state enable priority critical po wer_limit class_0 Command: conf ig poe ports 1:1–1:3 st ate enable pr iority cr itical power _limit class_0 Power limit h as been set to 15400mW( Class 0 PD up per power limit 12.95 W + power loss [...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 310 DGS–3426P:5#s how poe port s Command: show poe port s Port Stat e Priority Pow er Limit( mW) C lass Power(mW ) Voltage (decivolt ) Cur rent (mA) S tatus ============= ============ =========== ============= ========= ============ =========== 1:1 Ena bled Cr itical 12000 (Use[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 311 DGS–3426P:5#s how poe syst em Command: show poe syst em Unit 1 PoE System Info rmation ––––––––––––– –––––––––––– ––––––––––– ––––––––––––– –– Power Limit : 3 00 (watts) Po[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 312 40 C OMMAND H ISTORY L IST The switch history commands in the Com ma nd Line Interface (CLI) a re listed (along w ith the appropriate parameters) in t he following table. Command Parameters ? config command_history <value 1–40> show command_history Each command is lis[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 313 To display the parameters for a specific command: DGS–3426:5# ? config stp Command:? con fig stp Command: config st p Usage: {maxag e <value 6–4 0> | maxhop s <value1–20> | hellot ime <value 1 –10> | forwarddelay <value 4–30> | txholdco unt &[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual DGS–3426:5#sh ow command_his tory Command: show comm and_history ? ? show show vlan show command history DGS–3426:5# 314[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 315 41 M ODIFY B ANNER AND P ROMPT C OMMANDS Administ rator and Operato r level users ca n modify t he login banne r (greeting m essage) and c ommand prom pt by usin g the commands des cri be d below. Command Parameters config greeting_message {default} config command_pro mpt [&l[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 316 DGS–3426:5# c onfig greeti ng_message Command: config gr eeting_messag e Greeting Message s Editor ============= ============ =========== ============= ========= ====== DGS–34 26 Gigabit Ethernet Swit ch C ommand Line Interface F irmware: Bu ild 2.60.B26 Copyr ight(C) 200[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 317 config command prompt Purpose Used to configure the com mand prompt. Syntax config command_prompt [<string 16> | username | defaul t] Description This command is used to change the command prompt. Parameters string 16 – The command prompt can be changed by entering a [...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 318 42 JWAC C OMMANDS The Switch’s Japanese Web-base d Access Control (JWA C) commands in the Comm and Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters enable jwac disable jwac enable jwac redirect disable jwac r[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 319 Command Parameters show jwac auth_state ports <portlist> show jwac ports <portlist> config jwac auth_failover [enable | disable] config jwac authorization network {radius [enable| disable]| local [ena ble| disable]} (1) config jwac authenticate_page < japanese|[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 320 DGS–3426:5#di sable jwac Command: disable jwac Success. DGS–3426:5# enable jwac redirect Purpose Used to enable the JWAC redirect functi on. Syntax enable jwac redirect Description When redirect quarantine_serve r is enabled, the unauthenticate d host will b e redirected [...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 321 enable jwac forcible_logout Purpose Used to enable the JWAC forcible logout function. Syntax enable jwac forcible_logout Description When forcible logout is enabled, a PI NG packet from an authenticat ed host to the JWAC Switch with TTL=1 will be regarded as a l ogout request[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 322 DGS–3426:5#en able jwac udp_filt ering Command: enable jw ac udp_filtering Success. DGS–3426:5# disable jwac udp_filtering Purpose Used to disable the JWAC UDP filtering function. Syntax disable jwac udp_filtering Description This command is used to disabl e JWAC UDP filt[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 323 disable jwac quarantine_server_monitor Purpose Used to disable the JWAC quarantine server monito r. Syntax disable jwac quarantine_serv er_monitor function Description This command is used to d is able the JWAC quarantine server monitor. Parameters None. Restrictions Only Adm[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 324 config jwac redirect Purpose Used to configure redirect destin ation and delay time before an unauthenti cated host is redirected to the Quarantine Server o r the JWAC login Web page. Syntax config jwac redirect {destination [quar antine _server | j wac_login_page] | delay_ti[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual DGS–3426:5#co nfig jwac virtual_ ip 1.1.1.1 Command: config jw ac virtual_ip 1.1. 1.1 Success. DGS–3426:5# config jwac quarantine_server_url Purpose Used to configure JW AC Quarantine Server URL. Syntax config jwac quarantine_server_url <string 128> Description This com[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual DGS–3426:5#co nfig jwac clear_qu arantine_ser ver_url Command: config jw ac clear_quarant ine_server_ url Success. DGS–3426:5# config jwac update_server Purpose Used to configure the servers that the PC may need to connect to in orde r to co mplete the JWAC authentication Syn[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 327 config jwac switch_http_port Purpose Used to configure the TCP port which the JWAC Swit ch liste ns to. Syntax config jwac switch_http_port <tcp_po rt_number 1 – 65535 > {[http | https]} Description This command is used to configure the TCP port which the JWAC Switch [...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 328 config jwac ports Purpose Used to configure the JWAC port state. Syntax config jwac ports [<portl ist> | all] {state [enable | disable] | max_authenticating_hos t <v alue 0 – 50> | aging_time [infinite | <min 1 – 1440>] | idle_time [infinite | <min 1 [...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 329 config jwac radius_protocol Purpose Used to configure radius protocol used by JWA C. Syntax config jwac radius_protocol [local | pap | chap | m s_chap | ms_chapv 2 | eap_md5] Description This command is used to specify t he RADIUS protocol used by JWAC to compl ete RADIUS aut[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 330 DGS–3426:5#cr eate jwac us er 112233 Command: create jw ac user 112233 Enter a case– sensitive ne w password: *** Enter the new password ag ain for con firmation:*** Success. DGS–3426:5# config jwac user Purpose Used to update local user DB. Syntax config jwac user <[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 331 DGS–3426:5# d elete jwac u ser 112233 Command: delete jw ac user 112233 Success. DGS–3426:5# show jwac user Purpose Used to display a JWAC user in the local DB. Syntax show jwac user Description This command is used to display JWAC users in the local DB. Parameters None. [...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 332 DGS–3426:5# clea r jwac auth_state po rts all blocked Command: clea r jwac auth_ state ports all blocked Success. DGS–3426:5# show jwac Purpose Used to display the JWAC configurations. Syntax show jwac Description This command is used to show all the configuratio ns o f J[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 333 show jwac auth_state ports Purpose Used to display JWAC client host information. Syntax show jwac auth_state ports {<portlist>} Description This command is used to display the information for JWAC client hosts. If port 1 is in host-based mode: (1) mac 00-00-00-0 0-00-01[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 334 DGS-3426:5#sh ow jwac auth _state port s 1-3 Command: show jwac auth_s tate ports 1-3 Port MAC Address State VID Prio rity Aging Tim e / Idle Time B lock Time ---- -------- ---------- - ----------- -- ------- -- -------- ------------ -- ------- - 1 00-00-00-0 0-00-01 Aut hent[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 335 config jwac authentication_page element Purpose Used to customize the authentication page. Syntax config jwac authenticati on_page element [japan ese|english] [default|page_title <desc 128> |login_ window_title <desc 32>|user_name_title <d esc 16>|password_t[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 336 config jwac authorization network Purpose Used to enable or disable the ac ce pting of an authoriz ed configuration. Syntax config jwac authorization net work {radius [enable| disable]| local[enable| disable]} (1) Description This command is used by administrators to configur[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 337 show jwac authenticate _page element Purpose Used to show the element mappi ng of the customize authenticate page. Syntax show jwac authenticate_ page element Description This command is used to disaplay the elements of the cust o mize authenticate page. Parameters None Restr[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 338 43 C ABLE D IAGNOSTICS C OMMANDS The cable diag nostics comm ands in t he Comm and Line Interface (CLI ) are listed (along with the appropriate parameters) in the following table. Command Parameters cable_diag ports [<portlist> |all] Each command is listed, in detail, i[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 339 44 MAC- BASED V LAN C OMMANDS The MAC-based VLAN c ommands in the Command Line Interface (CL I) are listed (along with the appropriate parameters) in the following table. Command Parameters create mac_base d_vlan mac_address <macaddr> vlan <vlan_name 32> delete ma[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 340 DGS–3426:5#de lete mac_based _vlan mac_addres s 00–00–00–00–0 0–01 vlan defa ult Command: delete ma c_based_vlan mac mac_address 00–00 –00–00–00–0 1 vlan default Success. DGS–3426:5# show mac_based_vlan Purpose Used to display the static MAC–based VL[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 341 45 L OOP - BACK D ETECTION (LBD) G LOBAL C OMMANDS The Loop-back Detection (LBD) Global co mmands in the Command Line Interface (CLI) are listed (along w ith the appropriate parameters) in the following table. Command Parameters config loopdetect {recover_timer [ 0 | <valu[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 342 config loopdetect ports Purpose Used to configure loop – b ack dete ction function for t he port on the switch. Syntax config loopdetect ports [<portlist>| all] state [ena ble | disable ] Description This command is used to enable the loop – back detection function [...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 343 DGS–3426:5#di sable loopde tect Command: disable loopdetect Success. DGS–3426:5# show loopdetect Purpose Used to display the switch’s current loop-detect configuration. Syntax show loopdetect Description The show loop-detect com mand displays the switch’s current loop[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 344 DGS–3426:5# s how loopdete ct ports 1 –8 Command: show loopdetect ports 1–8 Port Loopde tect State Loop Stat us –––––– ––––––––– ––––––––– ––––– ––––– 1 Enable d Normal 2 Enable d Normal 3 Enable d Norm[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 345 DGS-3426P:5#c onfig loopde tect trap l oop_detected Command: config lo opdetect trap loop _detected Success. DGS–3426:5#[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 346 46 S ERIAL N UMBER C OMMANDS The Serial Number commands in the Com ma nd Line Interface (CLI) a re listed (along w ith the appropriate parameters) in t he following table. Command Parameters show switch show stack_d evice Each command is listed, in detail, in the following se[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 347 Clipaging : Enabled MAC Notification : Disabled Port Mirror : Disabled SNTP : Disabled HOL Prevention State : Enabled Syslog Global State : Disabled Single IP Management : Disabled Dual Image : Supported Password Encryption Status : Disabled DGS–3426:5# To display switch in[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 348 show stack_device Purpose Used to display the information for devices in the stack. Syntax show stack_device Description This command is used to display stack device information. Parameters None. Restrictions Non e. Example usage: To display st ack inform ation: DGS-3627:5#sh[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 349 47 802.1Q VLAN C OMMANDS The 802.1Q VLAN Function commands in the Comm and Line Interface (CLI) are listed (a long with the appropriate parameters) in the following table. Command Parameters create vlan <vlan_name 32 > tag <vlani d 1–4094> { type 1q_vla n advert[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 350 delete vlan Purpose Used to delete a previously configured VLAN on the switch. Syntax delete vlan <vlan_name> Description This comman d is used to delete a previo usly configured VLAN on the Swit ch. Parameters vlan_name – The VLAN name of the VLAN to be deleted. Rest[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 351 config vlan delete ports Purpose Used to delete one or more ports from a previously configured VLAN. Syntax config vlan <vlan_name> delete <portlist> Description This command is used to delete one or mo re ports from a previou sly config ure d VLAN. If based on VL[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 352 DGS–3426:5#en able gvrp Command: enable gv rp Success. DGS–3426:5# disable gvrp Purpose Used to disable the Generic VLAN Registration Protocol (GVRP). Syntax disable gvrp Description This command is used to di sabl e t he Generic VLAN Registration Protocol (GVRP). Paramet[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 353 DGS–3426:5#sh ow vlan Command: show vlan VID : 1 VLAN Na me : de fault VLAN TYPE : Static Adverti sement : En abled Member Ports : 1:1–1:26,2:1– 2:26 Static Ports : 1:1–1:26,2:1– 2:26 Current Tagge d Ports: Current Untag ged Ports : 1:1–1:25,2 :1–2:25 Static Tag[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 354 DGS–3426:5# s how gvrp Command: show gvrp lobal GVRP : Disabled Port PVID GVRP Ingress Che cking Accept able Fram e Type ––––––– –––– –––––––– ––––––––––– ––––– –––––– ––––––––[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 355 48 MAC- BASED A CCESS C ONTROL (MAC) C OMMANDS The MAC-based Acce ss Control (MAC) commands in the Command Li ne Interface (CLI) a re listed (a long with the appropriate parameters) in the following table. Command Parameters enable mac_based_access_ control disable mac_based_[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 356 To enable MAC-based access control: DGS–3426:5# e nable mac_ba sed_access_ control Command: enable ma c_based_acces s_control Success. DGS–3426:5# disable mac_based_access_control Purpose Used to disable MAC-based access cont rol. Syntax disable mac_based_access_ control [...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 357 config mac_based_access_control method Purpose Used to configure the MAC-based access control authenticating method. Syntax config mac_based_ac ce ss_control method [loc al | radius] Description This command is used to specify to authenticate via local databa se or via RADIUS[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 358 config mac_based_access_control ports Purpose Used to configure the parameters of MAC–based access control. Syntax config mac_based_acce ss_control ports [<portlis t> | all] {state [en able | disable] | mode [port_based | host_based] | ag ing_time [infinite | <min [...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 359 DGS–3426:5#co nfig mac_based _access_contr ol ports 1 – 8 mode port_ based Command: config ma c_based_acces s_control port s 1 – 8 mode port_based Success. DGS–3426:5# create mac_based_access_control Purpose Used to create a guest VLAN. Syntax create mac_based_ac ce s[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 360 clear mac_based_access_control auth_state Purpose Used to reset the current state of a user. The re – authentication will be started after the user traffic is received again. Syntax clear mac_based_acces s_control auth_sta te [p orts [all | portlist] | mac_ad dr <macaddr[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 361 config mac_based_access_control_local mac Purpose Used to configure the local database ent ry. Syntax config mac_based _access_control_l ocal mac <macaddr> [v lan <vlan_name 32>| vlanid <vlanid 1–4094>] Description This command is used to modify a database[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 362 show mac_based_access_control Purpose Used to display the MAC-based access control global and port settings. Syntax show mac_based_acces s_con trol {ports {<portlist> }} Description This command is used to display the MAC-b ased access control global and port settings. [...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 363 show mac_based_access_control_local Purpose Used to display a MAC-based access control local d ataba se. Syntax show mac_based_access_control_local {[mac <macaddr> | [vlan <v lan_name 32>|vlanid <vlanid 1–4094>]]} Description This command is used to displa[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 364 DGS–3426:5#sh ow mac_based_a ccess_control _local vlan defaul t Command: show mac_based_a ccess_contr ol_local vlan default MAC Address VID ––––––––––––– –––– ––––– 00–00–00–00–0 0–01 1 00–00–00–00–0 0–04 1 Tot[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 365 To configure the MAC-based access c ontrol authentication failover: DGS–3426:5#co nfig mac_based _access_contr ol auth_failov er enable Command: config ma c_based_acces s_control auth _failover enable Success. DGS–3426:5# config mac_based_access_control authorization netw[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 366 DGS–3426:5#co nfig mac_based _access_contr ol max_users 126 Command: config ma c_based_acces s_control max_ users 126 Success. DGS–3426:5#[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 367 49 Q- IN -Q C OMMANDS The Q-in-Q commands in th e Command Line In terface (CLI) are liste d (along with the appropriate parameters) in the following table. Command Parameters enable qinq disable qinq show q inq config qinq ports [<portlist>|all] {role [nni | un i] | mis[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 368 disable qinq Purpose Used to disable the Q-in-Q mode. Syntax disable qinq Description This command is used to disabl e the Q-i n-Q mode. All dynamically learned L2 address will be cl eared. All dynamically registered VL AN entries will be cleared. GVRP will disable. If you ne[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 369 config qinq ports Purpose Used to configure a Q-in-Q port. Syntax config qinq ports [<portlist>|all] {role [nni | uni] | missdrop [enable | disable] | tpid <hex 0x1–0xffff>} (1) Description The command is used to configure the Q-in-Q VLAN mode for ports, include[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 370 DGS–3426:4#sh ow qinq port 1:1-1:4 Commands: sho w qinq ports 1:1-1:4 Port Role Miss Dro p TPID ----- ------ -------- - ------ 1:1 UNI Enabled 0x88A8 1:2 UNI Enabled 0x88A8 1:3 UNI Enabled 0x88A8 1:4 NNI Disabled 0x88A8 DGS–3426: create vlan_translation ports Purpose Crea[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 371 delete vlan_translation ports Purpose Used to delete pre-created VLAN translation rule s. Syntax delete vlan_translation ports [< portlist> | all] {cvid <vidlist>} Description The command is used to delete pre-created VLAN transl ation rul es. Parameters ports −[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 372 50 LLDP C OMMANDS The Link Lay er Discove ry Protoc ol (LLDP) comm ands in the Comma nd Line Int erface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters enable lldp disable lldp config lldp message_tx_interval <sec 5-32768[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 373 enable lldp Purpose Used to enable LLDP operation on the Switch. Syntax enable lldp Description This command is used as a global cont rol for the LLDP function. When this function is enabled, the switch can start to transmi t LLDP packets and receive and pro cess the LLDP pac[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 374 DGS–3426:5#co nfig lldp message_ tx_interval 30 Command: config ll dp message_tx_in terval 30 Success. DGS–3426:5# config lldp message_tx_hold_multiplier Purpose Used to configure the message hold multiplier. Syntax config lldp message_tx_hold_multiplier <2-10> Desc[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 375 config lldp reinit_delay Purpose Change the minimum time of the reinitialization delay interval. Syntax config lldp reinit_delay <sec 1-10> Description An re-enabled LLDP port will wait fo r reinit_delay after last disable command before reinitializing. Parameters reini[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 376 config lldp ports notification Purpose Used to configure each port for sending notification to configu red SNMP trap receiver(s). Syntax config lldp ports [<portlist> | all] notifi cation [enable | disable] Description This comman d is used to enable or disa ble each po[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 377 config lldp ports mgt_addr Purpose Used to enable or disable port(s) spe c ified for advertising indicated management address instance. Syntax config lldp ports [<portlist> | all] mgt_ addr [ipv4 <ipaddr> | ipv 6 <ipv6addr>] [enable | disable] Description Th[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 378 DGS–3426:5#co nfig lldp po rts all bas ic_tlvs syste m_name en able Command: config ll dp ports all basic_tlv s system_name enab le Success. DGS–3426:5# config lldp dot1_tlv_pvid Purpose Used to configure an individual port or group of ports to exclude one or more of IEEE[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 379 DGS–3426:5#co nfig lldp po rts all dot 1_tlv_protoco l_vid vla nid 1-3 enab le Command: config ll dp ports all dot1_tlv_ protocol_vid vlanid 1-3 enable Success. DGS–3426:5# config lldp dot1_tlv_vlan_name Purpose Used to configure an individual port or group of ports to ex[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 380 config lldp dot1_tlv_protocol_identity GVRP, STP(including MSTP), and LACP protocol identity is enabled on this port a nd it is enabled to be advertised, then this proto col iden tity will be advertised. The default state is disabled. Restrictions Only Administrator and Oper [...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 381 config lldp forward_message Purpose Used to configure the forwarding of LLDPDU packets whe n LL DP is disable d. Syntax config lldp for ward_message [enable | disable] Description When LLDP is disable d an d LLDP forward_message is enabled, the received LLDPDU packets will be[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 382 show lldp mgt_addr Purpose Used to display the LLDP management address information. Syntax sho w lldp mgt_addr {[ipv4 <ipaddr> | ipv6 <ipv6addr>]} Description This comman d is used to displa ys the LLDP management address i nformation. Parameters ipv4 – The IP a[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 383 Enabled VLAN Name (None) Enabled Protocol_Identity (None) MAC/PHY Configuration/Status Disabled Power Via MDI Disabled Link Aggregation Disabled Maximum Frame Size Disabled CTRL+C ESC q Quit SPAC E n Next Page ENTER Next En try a All show lldp local_ports Purpose Used to disp[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 384 show lldp remote_ports Purpose Used to display the information learned from the neighbor. Syntax sho w lldp remote_ports {< portlist>} {mode [brief | normal | detailed]} Description This comman d is used to display the information learned from the neighbor para meters. [...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 385 show lldp statistics ports Purpose Used to display the ports LLDP statistics information. Syntax sho w lldp statistics ports {< portlist>} Description This comman d is used to display per-port LLDP statistics. Parameters <portlist> – Use this parameter to define[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 386 51 S F LOW sFlow is a feature that allows users to monitor network traffi c running through the switch to id entify n etwork proble ms through packet sampling and packet counter inform a tion of the Switch. The Switch itself is th e sFlow agent where packet data is retrie ved[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 387 enable sflow Purpose Used to enable the sFlow function on th e switch. Syntax enable sflow Description This command, along with the disable sflo w command, is used to enable the sFlow function on the switch without altering configuration s. Parameters None. Restrictions Only [...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 388 create sflow analyzer_server timeout <sec 1-20000 00 > − Used to specify the timeout for the Analyzer server. When the server times out, all sFlow samples and co unter polls associated with this serv er will be deleted. The user may set a time between 1 and 2000000 se[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 389 Example usage: T o co nfigure th e sFlow s erver: DGS-3426:5#co nfig sflow a nalyzer_ser ver 1 collect oraddress 10.90.90.9 Command: config sf low analyzer_ser ver 1 collectoradd ress 10.90.90.9 Success. DGS-3426:5# delete sflow analyzer_server Purpose Used to delete an sFlow[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 390 DGS-3426:5# create sflow counter_poller ports Purpose Used to create the counter poller for the sFlow function of the switch. Syntax create sflow counter_poller ports [<portlist> | all] analyzer_server_id <value 1-4 > {interval [disable | <sec 20-12 0>]} Des[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 391 DGS-3426:5#co nfig sflow c ounter_poll er ports 1 in terval 50 Command: create sf low counter_poll er ports 1 interval 50 Success. DGS-3426:5# delete sflow counter_poller ports Purpose Used to delete the counter poller for the sFlow function of the switch. Syntax delete sflow[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 392 create sflow flow_sampler ports Purpose Used to configure the flow sampler settings for the sF low function. Syntax create sflow flow_sampler ports [<portlist> | all] analy zer_server_id <v alue 1-4> {rate <value 0-65535> | m axheadersiz e <v alue 18-256&[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 393 config sflow flow_sampler ports Purpose Used to configure the flow sampler settings for the sFlow function. Syntax config sflow flow_sampler ports [<port list> | all] {rate <value 0-65535> | maxheadersize <v alue 18-256>} (1) Description This command is used[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 394 show sflow flow_sampler Purpose Used to display the sFlow sampler information for the sFlow function of the switch. Syntax show sflow flow_sampler Description This command is used to display t he Switch’s sFlow flow sample r information. Parameters None. Restrictions Non e.[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 395 52 DHCP S ERVER C OMMANDS For this release, the Switch now has the capability to act as a DHCP server to devices within its locally attached network. DHC P, or Dynam ic Host Confi guration P rotocol, al lows the swit ch to dele gate IP addresses, su bnet masks, default gat ew[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 396 Command Parameters show dhcp exclud ed_ address show dhcp pool { <pool_name 12>} Each command is listed in detail in the fo llowing sections. create dhcp pool Purpose Used to create a DHCP pool. Syntax create dhcp pool <pool_name 12> Description This command is us[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 397 create dhcp pool manual_binding Purpose Used to create a DHCP pool manual binding entry. Syntax create dhcp pool manual_binding <pool_name 12> <ipad dr> hard ware_address <macaddr> {type [Ethern et | IEEE802]} Description This command is used to create a DHC[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 398 show dhcp pool manual_binding Purpose Used to display the manual binding settings for a DHCP pool. Syntax show dhcp pool manual_binding {<pool_name 12>} Description This command is used to display the manual bin ding entries for the selected DHCP pool. Parameters <p [...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 399 clear dhcp_binding Purpose Used to clear the DHCP binding information. Syntax clear dhcp_binding {<pool_name 12>} Description This command is used to clear the DHCP binding settings for a particular created DHCP pool. Parameters <p ool_name 1 2> − Enter the name[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 400 Example usage: To configure t he Ping tim eout: DGS-3426:5#co nfig dhcp ping_tim eout 500 Command: config dh cp ping_timeout 50 0 Success. DGS-3426:5# config dhcp pool boot_file Purpose Used to specify the Boot File that will be used as the boot image of the DHCP client Synta[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 401 config dhcp pool dns_server_address Purpose Used to configure the IP addresses of DNS serve rs for a specific DHCP pool. Syntax config dhcp pool dns_server_address <pool_n ame 12> <ipaddr> {<ip addr>} {<ipaddr>} Description This command is used to conf[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 402 config dhcp pool lease Purpose Used to configure the lease time of DCHP clients within a DHCP pool. Syntax config dhcp pool lease<pool_name 12> [<day 0-365> <hour 0-23> <minute 0-59 > | infinite] Description This command is used to specify the leas e t[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 403 config dhcp pool netbios_node_type Purpose Used to set the Net BIOS node type for the DHCP server. Syntax config dhcp pool netbios_node_type <pool_name 12> [broadcast | peer_to _peer | mixed | hybrid] Description This command is used to allow users to set the type of no[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 404 config dhcp pool next_server Purpose Used to configure the IP address of the server that has the boot file for the DHCP pool. Syntax config dhcp pool next_server <pool_name 12> <ip addr> Description This command is used to configure the IP address of the se rver t[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 405 DGS-3426:5#disable dhcp_server Command: disable dhcp_server Success. DGS-3426:5# show dhcp_server Purpose Used to display the DHCP server settings. Syntax show dhcp_server Description This command is used to display the DHCP server setting s fo r its Global state, Ping packet[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 406 delete dhcp excluded_address Purpose Used to delete IP addresses that hav e been configured as ex cluded from the DHCP Server pool of addresses. Syntax delete dhcp excluded_address [begin_addre ss <ipaddr> end_addres s <ipaddr> | all] Description This command is u[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 407 show dhcp pool Purpose Used to show the DHCP pool information. Syntax show dhcp pool {<pool_name 12>} Description This command is used to display the DHCP pool information. Entering the comm and without the pool name will display all DHCP pool information on the switch.[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 408 53 DHCP S ERVER S CREENING C OMMANDS The DHCP Server Screening Commands in th e Command Line Interface (CLI) are listed (a long with the appropriate parameters) in the following table. The DHCP Server Screeni ng commands allow y ou not only to restrict all DHCP server packets[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 409 Example usage: To add an entry fro m the DHCP server/c lient filter list in the switch’s datab ase: DGS-3426:5#co nfig filter dhcp _ server add pe rmit serve r _ ip 10.1.1.1 clie nt _ mac 00-00-00-00-0 0-01 ports 1:1-1:3 Command: conf ig filter dh cp_server a dd permit ser [...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 410 config filter dhcp_server trap_log Purpose Used to configure the trap and log re lated to the DHCP server screening. Syntax config filter dhcp_server trap_log [enable | disable] Description This command is used to e nable or di sable trap/log related to DHCP server filter. Pa[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 411 54 RSPAN C OMMANDS The Remote Swi tched Port Anal yzer (RSPAN ) function com mands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters enable rspan disable rspan create rspan vlan [vlan_name <vla[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 412 disable rspan Purpose Used to disable RSPAN Syntax disable rspan Description This command is used to disabl e the RS PAN function. Parameters None. Restrictions Only Administrator and Oper ator-level users can issue this command. Example usage: To disable RSPAN: DGS-3426:5# d[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 413 delete rspan vlan Purpose Used to delete an RSPAN VLAN. Syntax delete rspan vlan [vlan_name <v lan_name> | v lan_id <value 1-4094 >] Description This command is used to delete an RSPAN VLAN. Parameters vlan_name – Deletes the RSPAN VLAN by VLAN name. vlan_id –[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual NOTE: If the ACL function has been use d to implement per flow RSPAN, the source needs to be set otherwise the per port RSPAN will not work. Example usage: To config RSPAN V LAN by VLAN name: DGS-3426:5#co nfig rspan v lan vlan_na me vlan2 sour ce add po rts 2-5 rx Command: confi[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 415 To configure R SPAN redi rect: DGS-3426:5#co nfig rspan v lan vlan_id 2 redirect a dd port 1 :18 Command: conf ig rspan vla n vlan_id 2 redirect add port 1:1 8 DGS-3426:5# show rspan Purpose Used by display RSPAN configuration. Syntax show rspan {[v l an_name <v lan_name&g[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 416 55 ACL FLOW M ETERING C OMMANDS ACL Flow Me tering i s used t o configu re per-flo w Bandwi dth Contr ol. Befo re configu ring the ACL Flow M eter, her e is a list of acronyms and terms users will need to know. trTCM – Two Rate Three C olor Marke r. Thi s, along with t he s[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 417 config flow_meter profile_id Purpose Used to configure the flow metering function for ACL.. Syntax <value 1-6> access_id <v alue 1-128>[ [ tr_ tcm cir <value 1-156249> {cb s <value 1- 16384>} pir <value 1-156 249> {pbs <value 1-1 638 4>} | [...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 418 config flow_meter profile_id • permit – Enter this parameter to allow packe t flows that are in the yellow flow. • replace_dscp <value 0-63 > − Packets th at are in the yellow flow may have their DSCP field rewritten using this param eter and entering the DSCP v[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 419 Example usage: T o display ACL fl ow m etering: DGS-3426:5#sh ow flow_meter prof ile_id 1 access_id 1 Command: show flow _meter profile_i d 1 access_id 1 Profile ID : 1 Acce ss ID : 1 Mode: t rTCM CIR: 1000(64k bps) CBS: 20 0(Kbyte) P IR: 2000(64kb ps) PBS : 200(Kbyte) Action[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 420 56 L AYER 2 P ROTOCOL T UNNELING (L2PT) C OMMANDS Users at different sites connect ed across a service- provider netwo rk need to use vari ous Layer 2 pr otocols to scale t heir topol ogies to include all remote sites, as well as the local sites. STP mu st run properly, and e[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 421 show bpdu_tunnel Purpose Used to display the L2PT global state, tunnel destinat ion MAC address, and port state. Syntax show bpdu_tunnel Description This command is used to display L2PT global state, tunnel dest ination MAC address, and port state. Parameters None. Restrictio[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 422 DGS-3426:5#di sable bpdu_t unnel Command: disable bpdu_tunnel Success. DGS-3426:5#[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 423 57 ARP AND G RATUITOUS ARP C OMMANDS The ARP commands in the Command Line Interface (CLI) are listed (along with the appropriate param eters) in the following table. Command Parameters create arpentry <ipaddr> <macaddr> delete arpentry [<ipaddr> | all] show [...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 424 delete arpentry Purpose Used to delete a static entry into the ARP table. Syntax delete arpentry [<ipaddr> | all] Description This command is used to de lete a static ARP entry, made u sing the create arpe ntry command above, by specifying either th e IP address of the [...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 425 Example usage: To display the ARP tab le : DGS-3426:5#sh ow arpentry Command: show arpe ntry ARP Aging Tim e : 20 Interface IP Address MAC Address Type ------------- ---------- ----- ---- ------------- ------- -------- System 10.0.0.0 FF-F F-FF-FF-FF-FF Local/B roadcast Syste[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 426 Example usage: To configure a static ARP entry for th e IP address 10.48.74.1 2 and MAC address 00:50:BA:00 :07:36: DGS-3426:5#co nfig arpentry 10.4 8.74.12 00-50- BA-00-07-36 Command: config ar pentry 10.48.74. 12 00-50-BA-00- 07-36 Success. DGS-3426:5# config gratuitous_arp[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 427 Example Usage: To enable send a gratuitous A RP request when a duplicate IP is detected: DGS-3426:5#co nfig gratuit ous_arp sen d duplicate_i p_detecte d enable Command: config gr atuitous_arp sen d duplicate_ip_ detected enabl e Success. DGS-3426:5# config gratuitous_arp lea[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 428 disable gratuitous_arp Purpose Used to disable gratuitous ARP trap and log state. Syntax disable gratuitous_arp {ipif <ipif_n a me 12>} {trap |log} (1) Description This command is used to di sabl e gr atuitous ARP trap and log state. When the trap and log are disabled, [...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 429 Example usage: To display gratuitous ARP log and trap state: DGS-3426:5#sh ow gratuitous_ arp Command: show grat uitous_arp Send on IPIF status up : Disa bled Send on Dupli cate_IP_Dete cted : Disa bled Gratuitous AR P Learning : Disa bled IP Interface Name : Syste m Gratu it[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 430 58 C OMPOUND A UTHENTICATION C OMMANDS The Compound Authentication commands in th e Command Lin e Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters create authentication guest_vlan [vlan <vlan_name 32> | vlanid[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 431 delete authentication guest_vlan Purpose Used to delete a configured authenticati on guest VLAN. Syntax delete authentication gu est_vlan [vlan <v lan_name 32> | v lanid <vlanid 1-4094 >] Description This command is used to delete the guest VLAN settings, but will[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 432 config authentication ports Purpose This command is used to configure security ports. Syntax config authentica tion ports [<portlist>| all] {auth_mode [por t_based | host_based] | multi_authen_methods [none | any | dot1x_impb | impb_jwac |]} (1) Description This co mman[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 433 show authentication guest_vlan Purpose This command is used to display the guest VLAN settings. Syntax show authentication guest_vl an Description This command is used to s how the information of the guest VLAN. Parameters None. Restrictions Non e. Example usage: To display t[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 434 enable authorization network Purpose To enable authorization on the Switch. Syntax enable authorization network Description This command is used to enable authorization of the netwo rk. When the authorization fo r netwo rk is enabl ed, whether the authori zed d ata assigned b[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 435 Example usage: To display au thorization : DGS-3426:5#sh ow authorizati on Command: show auth orization Authorization for Network: Enabled DGS-3426:5#[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 436 59 W EB - BASED A CCESS C ONTROL (WAC) C OMMANDS The Web-based Access Control (WAC) commands in the Command Li ne Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command Parameters enable wac disable wac config wac ports [<portlis[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 437 DGS-3426:5#en able wac Command: enable wa c Success. DGS-3426:5# disable wac Purpose Used to disable Web-based acce ss control on the Swi t ch. Syntax disable w ac Description This command is used to di sable the WAC function o n the Switch. Parameters None. Restrictions Only[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 438 config wac method Purpose Used to configure the global para meter of the web authentication. Syntax config wac method [local | radius] Description This command is used to configur e the global pa rameter for Web authentication. Parameters method – Specifies the authenticate[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 439 config wac default_redirpath Restrictions Only Administrator and Oper ator-level users can issue this command. Example usage: To configure t he WAC de fault redirect path: DGS-3426:5#co nfig wac default_r edirpath http: //2.3.2.3 Command: config wa c default_redirp ath http:/[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 440 Example usage: To configu re the WAC vi rtual IP: DGS-3426:5#co nfig wac virtual_i p 1.1.1.1 Command: config wa c virtual_ip 1.1.1 .1 Success. DGS-3426:5# config wac switch_http_port Purpose Used to configure the TCP por t that the WAC Switch listens to. Syntax config wac swi[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 441 create wac user Purpose Used to create a user account for We b-b ased Access control. Syntax create wac user <usern a me 15> {[vlan <v lan_name 32> | vlanid <v lanid 1-4094>]} Description This command is used to create acc ounts for Web-ba sed a ccess contro[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 442 config wac user Purpose Used to configure the VLAN ID of the user account. Syntax config wac user <userna me 15> [vlan <vlan_name 32> | v lanid <vlanid 1-4094> | clear_vlan] Description This command is used to change the VLAN associate d with a user. Paramet[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 443 show wac Purpose Used to display the Web authentication global setting s. Syntax show wac Description This command is used to display the WA C global settings. Parameters None. Restrictions Non e. Example usage: To display WAC: DGS-3426:5#show wac Command: show wac Web-Base A[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 444 show wac user Purpose Used to display the Web Authentication user. Syntax show wac user Description This command is used to display the Web Authenticati on account. Parameters None. Restrictions Non e. Example usage: To show Web Authenticaiton account: DGS-3426:5#sh ow wac us[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 445 DGS-3426:5# s how wac auth _state port s 1-3 Command: show wac auth_st ate ports 1 :1-1:3 Port MAC Addr ess State VID Prior ity Ag ing Time / Idle Time Block Tim e ---- -------- ----------- ----------- -- ------- -- -------- ------------ -- -------- 1 00-00-00-00- 00-01 Authe[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 446 Example usage: To clear WAC authentication state: DGS-3426:5#cl ear wac auth _state port s 1-5 Command: clea r wac auth_s tate ports 1:1-1:5 Success. DGS-3426:5#[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 447 60 P ROTOCOL VLAN G ROUP C OMMANDS For brid ges that i mplem ent Port-and -Protocol -based VLA N classifi cation, the VID ass ociated wit h an Un tagged o r Priori ty-tagged Frame is deter mined base d on the Po rt of arri val of the frame into t he bridge and on t he protoc [...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 448 config dot1v_protocol_group Purpose Used to configure the parameters for a protocol VLAN gro up. Syntax config dot1v_protocol_group group_id <id> [add | delete] protocol [ethern et_2 | ieee802.3_snap | ieee802.3_llc] <p rotocol_value> Description This command is u[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 449 Example usage: To delete a protocol VL AN group: DGS-3426:5#de lete dot1v_p rotocol_gro up group_id 1 Command: delete do t1v_protocol_ group group_id 1 Success. DGS-3426:5# show dot1v_protocol_group Purpose Used to display the configurations for a protocol VLAN gro up. Syntax[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 450 config port dot1v Purpose Used to bind a VLAN with a protocol template on one or more po rts. Syntax config port dot1v ports [ <portlist> | all] [add protocol_group group_id <id> [vlan < vlan_name 32 > | v lanid <vlanid>] | delete protocol_group [group[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 451 Example usage: To configure t he po rt s fo r a prot ocol VLAN gr o up: DGS-3426:5#sh ow port dot1v ports 1:6 -1:8 Command: show port dot1v ports 1:6-1:8 Port: 1:6 Protocol Grou p ID VLAN N ame ------------- ------------ ------ ---------- 1 RG1 Port: 1:7 Protocol Grou p ID VL[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 452 61 M ULTICAST VLAN R EPLICATION C OMMANDS The Multicast VLAN Replication commands in the Co mmand Line Interface (CLI) are listed (a lo ng with the appropriate parameters) in the following table. Command Parameters enable ipmc_vlan_replication disable ipmc_vlan_re plication c[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 453 Example usage: To disable the static IP multicast VLAN replication: DGS-3426:5#di sable ipmc_v lan_replica tion Command: disable ipmc_vlan_repl ication Success. DGS-3426:5# config ipmc_vlan_replication Purpose Used to configure the IP mult icast VLAN replication global settin[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 454 Example usage: To create an IP multicast VLAN replication entry: DGS-3426:5#cr eate ipmc_vlan _replication_ entry rg1 Command: create ip mc_vlan_repli cation_entry rg1 Success. DGS-3426:5# config ipmc_vlan_replication_entry source Purpose Used to configure the source traffic [...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 455 config ipmc_vlan_rep lication_entry destination Purpose Used to configure the destination of an IP multicast V LAN replication entry. Syntax config ipmc_vlan_replication_entry destination <name 16> [add|delete] [vlan <vlan_name 32> | vlanid <vidlist>] ports [...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 456 show ipmc_vlan_replication Purpose Used to display the IP multicast VLAN replication global setting s. Syntax show ipmc_vlan_replication Description This command is used to display the IP multicast VLAN replicatio n global settings. Parameters None. Restrictions Non e. Exampl[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 457 Appendix A T ECHNICAL S PECIFICATIONS Specifications listed here app ly to all Switches in the xStack ® DGS–3400 Series except whe re othe rwise noted. General Standards IEEE 802.3 10BASE–T Ethernet IEEE 802.3u 100BASE–TX Fast Ethernet IEEE 802.3ab 1000BASE–T Gigabit[...]

xStack ® DGS -340 0 Series Layer 2 Gigabit Managed Switch CLI Manual 458 Physical and Environmental Internal power supply Redundant po wer supply AC Input: 100 – 240 VAC, 50–60 Hz Power Consumption DGS–3400 Series S witch DGS–3426 (78.2 Watts) DGS–3426P (517.0 Watts) DGS–3427 (86.68 Watts) DGS–3450 (144.47 Watts) Module Inserts DEM?[...]