Home

D-Link TM DES-6500 User's Manual

1. DES 6500 4 Purpose Used to save changes in the Switch s configuration to non volatile RAM Syntax save Description This command is used to enter the current switch configuration into non volatile RAM The saved switch configuration will be loaded into the Switch s memory each time the Switch is restarted Parameters Entering just the save command will save only the Switch configuration to NV Ram Restrictions Only administrator level users can issue this command Example usage To save the Switch s current configuration to non volatile RAM DES 6500 4 save Command save Saving all configurations to NV RAM Done DES 6500 4 af NOTE The DES 6500 does not support a change in box mode from Auto l to Static 20 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual Purpose Used to restart the Switch Syntax reboot Description This command is used to restart the Switch Parameters None Restrictions None Example usage To restart the Switch DES 6500 4 reboot Command reboot Are you sure want to proceed with the system reboot y n Please wait the Switch is rebooting Purpose Used to reset the Switch to the factory default settings Syntax reset config system Description This command is used to restore the Switch s configuration to the default settings assigned from the factory Parameters config If the keyword config
2. 269 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual delete iproute default Purpose Used to delete a default IP route entry from the Switch s IP routing table Syntax delete iproute default lt ipaddr gt Description This command will delete an existing default entry from the Switch s IP routing table Parameters lt ipaddr gt The gateway IP address for the next hop router Restrictions Only administrator level users can issue this command Example usage To delete the default IP route 10 53 13 254 DES 6500 4 delete iproute default 10 53 13 254 Command delete iproute default 10 53 13 254 Success DES 6500 4 show iproute Purpose Used to display the Switch s current IP routing table Syntax show iproute lt network_address gt static rip ospf Description This command will display the Switch s current IP routing table Parameters lt network_address gt IP address and netmask of the IP interface that is the destination of the route The address and mask information can be specified using the traditional format for example 10 1 2 3 255 0 0 0 or in CIDR format 10 1 2 3 8 static Use this parameter to display static iproute entries rip Use this parameter to display RIP iproute entries ospf Use this parameter to display OSPF iproute entries Restrictions None Example Usage To display the contents of the IP routing tabl
3. To trace the routed path between the Switch and 10 48 74 121 DES 6500 4 traceroute 10 48 74 121 probe 3 Command traceroute 10 48 74 121 probe 3 1 lt 10ms 10 254 254 251 2 lt 10ms 10 55 25 35 3 lt 10ms 10 22 35 1 DES 6500 4 enable autoconfig Purpose Syntax Description Parameters Restrictions Used to activate the autoconfiguration function for the Switch This will load a previously saved configuration file for current use enable autoconfig When autoconfig is enabled on the Switch the DHCP reply will contain a configuration file and path name It will then request the file from the TFTP server specified in the reply When autoconfig is enabled the ipif settings will automatically become DHCP client None When autoconfig is enabled the Switch becomes a DHCP client automatically same as config ipif System dhcp The DHCP server must have the TFTP server IP address and configuration file name and be configured to deliver this information in the data field of the DHCP reply packet The TFTP server must be running and have the requested configuration file in its base directory when the request is received from the Switch Consult the DHCP server and TFTP server software instructions for information on loading a configuration file If the Switch is unable to complete the autoconfiguration process the previously saved local configuration file present in Switch memory will be loaded
4. Example usage To disable the SSL status on the Switch DES 6500 4 disable ssl Command disable ssl Success DES 6500 4 To disable ciphersuite RSA_EXPORT_with_RC4_40_MD5 only DES 6500 4 disable ssl ciphersuite RSA_EXPORT_with_RC4_40_MD5 Command disable ssl ciphersuite RSA_EXPORT_with_RC4_40 MD5 Success DES 6500 4 186 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual config ssl cachetimeout Purpose Used to configure the SSL cache timeout Syntax config ssl cachetimeout timeout lt value 60 86400 gt Description This command will set the time between a new key exchange between a client and a host using the SSL function A new SSL session is established every time the client and host go through a key exchange Specifying a longer timeout will allow the SSL session to reuse the master key on future connections with that particular host therefore speeding up the negotiation process Parameters timeout lt value 60 86400 gt Enter a timeout value between 60 and 86400 seconds to specify the total time an SSL key exchange ID stays valid before the SSL module will require a new full SSL negotiation for connection The default cache timeout is 600 seconds Restrictions Only administrator level users can issue this command Example usage To set the SSL cachetimeout for 7200 seconds DES 6500 4 config ssl cachetimeout timeout 7200 Command config ssl cach
5. lt metric 1 65535 gt Allows the entry of a routing protocol metric entry representing the number of routers between the Switch and the IP address above The default setting is 1 primary backup The user may choose between Primary and Backup If the Primary Static Default Route fails the Backup Route will support the entry Please take note that the Primary and Backup entries cannot have the same Gateway Restrictions Only administrator level users can issue this command Example Usage To add a single static address 10 48 74 121 mask 255 0 0 0 and gateway 10 1 1 254 to the routing table DES 6500 4 create iproute 10 48 74 121 255 0 0 0 10 1 1 254 1 Command create iproute 10 48 74 121 8 10 1 1 254 1 Success DES 6500 4 268 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual create iproute default Purpose Syntax Description Parameters Restrictions Example Usage Used to create IP route entries to the Switch s IP routing table create iproute default lt ipaddr gt lt metric gt This command is used to create a default static IP route entry to the Switch s IP routing table lt ipaddr gt The gateway IP address for the next hop router lt metric gt Allows the entry of a routing protocol metric entry representing the number of routers between the Switch and the IP address above The default setting is 1 Only administrator level users c
6. show igmp group Purpose Used to display the Switch s IGMP group table Syntax show igmp group group lt group gt ipif lt ipif_name 12 gt Description This command will display the IGMP group configuration Parameters group lt group gt The ID of the multicast group to be displayed lt ipif_ name 12 gt The name of the IP interface of which the IGMP group is a member Restrictions None Example Usage To display IGMP group table DES 6500 4 show igmp group Command show igmp group Interface Multicast Group Last Reporter IP Querier IP Expire System 224 0 0 2 10 42 73 111 10 48 74 122 260 System 224 0 0 9 10 20 53 1 10 48 74 122 260 System 224 0 1 24 10 18 1 3 10 48 74 122 259 System 224 0 1 41 10 1 43 252 10 48 74 122 259 System 224 0 1 149 10 20 63 11 10 48 74 122 259 Total Entries 5 DES 6500 4 Example usage To view details regarding the IGMP group 141 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual DES 6500 4 show igmp group ipif System group 224 0 1 1 Command show igmp group ipif System group 224 0 1 1 Interface Name Multicast Group Last Reporter IP Querier IP Expire System 224 0 0 2 10 42 73 111 10 48 74 122 260 System 224 0 0 9 10 20 53 1 10 48 74 122 260 System 224 0 1 24 10 18 1 3 10 48 74 122 259 System 224 0 1 41 10 1 43 252 10 48 74 122 259 System 224 0 1 149 10 20 63 11 10 48 74 122 259 Total Entries 5 DES 6500 4 ar
7. Firmware Version Displays the current Firmware version on the Switch Device Name Displays the user defined device name on the Switch MAC Address Displays the MAC Address of the Switch Capabilities Displays the type of switch be it Layer 2 L2 or Layer 3 L3 Platform Switch Description including name and model number SIM State Displays the current Single IP Management State of the Switch whether it be enabled or disabled Role State Displays the current role the Switch is taking including Commander Member or Candidate A stand alone switch will always have the candidate role Discovery Interval Time in seconds the Switch will send discovery packets out over the network Hold time Displays the time in seconds the Switch will hold discovery results before dropping it or utilizing it Parameters candidates lt candidate_id 1 100 gt Entering this parameter will display information concerning candidates of the SIM group To view a specific candidate include that candidate s id number listed from 1 to 100 members lt member_id 1 32 gt Entering this parameter will display information concerning members of the SIM group To view a specific member include that member s ID number listed from 1 to 32 group commander_mac lt macaddr gt Entering this parameter will display information concerning the SIM group of a commander device identified by its MAC address neighbor En
8. both A notification will be generated and sent when a packet storm has been detected and cleared by the Switch Only administrator level users can issue this command To configure notifications to be sent when a packet storm control has been detected and cleared by the Switch DES 6500 4 config traffic control trap both Command config traffic control trap both Success DES 6500 4 show traffic control Purpose Syntax Description Parameters Used to display current traffic control settings show traffic control lt portlist gt This command displays the current storm traffic control configuration on the Switch lt portlist gt Used to specify port or list of ports for which to display 100 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual show traffic control traffic control settings This is specified by listing the lowest switch number and the beginning port number on that switch separated by a colon Then the highest switch number and the highest port number of the range also separated by a colon are specified The beginning and end of the port list range are separated by a dash For example 1 3 specifies switch number 1 port 3 2 4 specifies switch number 2 port 4 1 3 2 4 specifies all of the ports between switch 1 port 3 and switch 2 port 4 in numerical order Restrictions None Example usage To display traffic control setting
9. Description The config snmp system_contact command is used to enter the name and or other information to identify a contact person who is responsible for the Switch A maximum of 255 character can be used Parameters lt sw_contact gt A maximum of 255 characters is allowed A NULL string is accepted if there is no contact Restrictions Only administrator level users can issue this command Example usage To configure the Switch contact to MIS Department II DES 6500 4 config snmp system_contact MIS Department II Command config snmp system_contact MIS Department II Success DES 6500 4 config snmp system_location Purpose Used to enter a description of the location of the Switch Syntax config snmp system_location lt sw_location gt Description The config snmp system_location command is used to enter a description of the location of the Switch A maximum of 255 characters can be used Parameters lt sw_location gt A maximum of 255 characters is allowed A NULL string is accepted if there is no location desired Restrictions Only administrator level users can issue this command Example usage 49 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual To configure the Switch location for HQ 5F DES 6500 4 config snmp system_location HQ 5F Command config snmp system_location HQ 5F Success DES 6500 4 config snmp system_name Purpose Use
10. Description This command is used to setup the Spanning Tree Protocol STP for the entire switch All commands here will be implemented for the STP version that is currently set on the Switch Parameters maxage lt value 6 40 gt This value may be set to ensure that old information does not endlessly circulate through redundant paths in the network preventing the effective propagation of the new information Set by the Root Bridge this value will aid in determining that the Switch has spanning tree configuration 77 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual config stp Restrictions Example usage values consistent with other devices on the bridged LAN If the value ages out and a BPDU has still not been received from the Root Bridge the Switch will start sending its own BPDU to all other switches for permission to become the Root Bridge If it turns out that your switch has the lowest Bridge Identifier it will become the Root Bridge The user may choose a time between 6 and 40 seconds The default value is 20 maxhops lt value 1 20 gt The number of hops between devices in a spanning tree region before the BPDU bridge protocol data unit packet sent by the Switch will be discarded Each switch on the hop count will reduce the hop count by one until the value reaches zero The Switch will then discard the BDPU packet and the information held for the port will age out The user may set a hop
11. Enter an alphanumeric string of up to 15 characters to define the given method list Restrictions Only administrator level users can issue this command Example usage To create the method list Trinity 155 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual DES 6500 4 create authen_login method_list_name Trinity Command create authen_login method_list_name Trinity Success DES 6500 4 config authen_login Purpose Used to configure a user defined or default method list of authentication methods for user login Syntax config authen_login default method_list_name lt string 15 gt method tacacs xtacacs tacacs radius server_group lt string 15 gt local none Description This command will configure a user defined or default method list of authentication methods for users logging on to the Switch The sequence of methods implemented in this command will affect the authentication result For example if a user enters a sequence of methods like tacacs xtacacs local the Switch will send an authentication request to the first tacacs host in the server group If no response comes from the server host the Switch will send an authentication request to the second tacacs host in the server group and so on until the list is exhausted At that point the Switch will restart the same sequence with the following protocol listed xtacacs If no authentication takes place u
12. Ibd_recover_timer 0 lt value 60 1000000 gt This field will set the time the STP port will wait before recovering the STP state set 0 will denote that the LBD will never time out or restart until the administrator personally changes it The user may also set a time between 60 and 1000000 seconds The default is 60 seconds Only administrator level users can issue this command To configure STP with maxage 18 and maxhops of 15 78 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual Success DES 6500 4 DES 6500 4 config stp maxage 18 maxhops 15 Command config stp maxage 18 maxhops 15 config stp ports Purpose Syntax Description Parameters Used to setup STP on the port level config stp ports lt portlist gt externalCost auto lt value 1 200000000 gt hellotime lt value 1 10 gt migrate yes no edge true false p2p true false auto state enable disable Ibd enable disable This command is used to create and configure STP for a group of ports lt portlist gt Specifies a range of ports to be displayed The port list is specified by listing the lowest slot number and the beginning port number on that slot separated by a colon Then the highest slot number and the highest port number of the range also separated by a colon are specified The beginning and end of the port list range are separated by a dash For example 1 3 specif
13. Restrictions Only administrator level users can issue this command Example usage To view the current SNMP trap support DES 6500 4 show snmp traps Command show snmp traps SNMP Traps Enabled Authenticate Traps Enabled DES 6500 4 disable snmp traps Purpose Used to disable SNMP trap support on the Switch Syntax disable snmp traps Description This command is used to disable SNMP trap support on the Switch Parameters None Restrictions Only administrator level users can issue this command Example Usage To prevent SNMP traps from being sent from the Switch DES 6500 4 disable snmp traps Command disable snmp traps Success DES 6500 4 disable snmp authenticate_traps Purpose Used to disable SNMP authentication trap support Syntax disable snmp authenticate_traps Description This command is used to disable SNMP authentication support on the Switch Parameters None Restrictions Only administrator level users can issue this command 48 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual Example Usage To disable the SNMP authentication trap support DES 6500 4 disable snmp authenticate_traps Command disable snmp authenticate_traps Success DES 6500 4 config snmp system_contact Purpose Used to enter the name of a contact person who is responsible for the Switch Syntax config snmp system_contact lt sw_contact gt
14. The IP address and netmask of the destination The address and mask information can be specified using the traditional format for example 10 1 2 3 255 0 0 0 or in CIDR format 10 1 2 3 8 Restrictions None Example Usage To display DVMRP routing table DES 6500 4 show dvmrp routing_table Command show dvmrp routing_table DVMRP Routing Table Source Address Netmask Upstream Neighbor Metric Learned Interface Expire 10 0 0 0 8 10 90 90 90 2 Local System 20 0 0 0 8 20 1 1 1 2 Local ip2 117 30 0 0 0 8 30 1 1 1 2 Dynamic ip3 106 Total Entries 3 DES 6500 4 show dvmrp neighbor Purpose Used to display the DVMRP neighbor table Syntax show dvmrp neighbor ipif lt ipif_name 12 gt ipaddress lt network_address gt Description This command will display the current DVMRP neighbor table 292 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual show dvmrp neighbor Parameters lt ipif_ name 12 gt The name of the IP interface for which to display the DVMRP neighbor table ipaddress lt network_address gt The IP address and netmask of the destination The address and mask information can be specified using the traditional format for example 10 1 2 3 255 0 0 0 or in CIDR format 10 1 2 3 8 Restrictions None Example Usage To display DVMRP neighbor table DES 6500 4 show dvmrp neighbor Command show dvmrp neighbor DVMRP Neighbor Address Table In
15. state enabled disabled wense Each command is listed in detail in the following sections show packet ports Purpose Syntax Description Used to display statistics about the packets sent and received by the Switch show packet ports lt portlist gt This command is used to display statistics about packets sent and received by ports specified in the port list The results are separated into three tables labeled A B and C in the window above Table A is relevant to the size of the packets Table B is relevant to the type of packets and Table C is relevant to the type of frame associated with these packets 58 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual show packet ports Parameters lt portlist gt Specifies a range of ports to be displayed The port list is specified by listing the lowest slot number and the beginning port number on that slot separated by a colon Then the highest slot number and the highest port number of the range also separated by a colon are specified The beginning and end of the port list range are separated by a dash For example 1 3 specifies slot number 1 port 3 2 4 specifies slot number 2 port 4 1 3 2 4 specifies all of the ports between slot 1 port 3 and slot 2 port 4 in numerical order Restrictions None Example usage To display the packets analysis for port 7 of module 2 DES 6500 4 show packet port 2 7 Comman
16. 1 2 17 1 5 1 10 2 17 Disabled 131 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual config lacp_port Purpose Used to configure settings for LACP compliant ports Syntax config lacp_port lt portlist gt mode active passive Description This command is used to configure ports that have been previously designated as LACP ports see create link_aggregation Parameters lt portlist gt Specifies a range of ports to be configured The port list is specified by listing the lowest slot number and the beginning port number on that slot separated by a colon Then the highest slot number and the highest port number of the range also separated by a colon are specified The beginning and end of the port list range are separated by a dash For example 1 3 specifies slot number 1 port 3 2 4 specifies slot number 2 port 4 1 3 2 4 specifies all of the ports between slot 1 port 3 and slot 2 port 4 in numerical order mode Select the mode to determine if LACP ports will initially send LACP control frames active Active LACP ports are capable of processing and sending LACP control frames This allows LACP compliant devices to negotiate the aggregated link so the group may be changed dynamically as needs require In order to utilize the ability to change an aggregated port group that is to add or subtract ports from the group at least one of the participating devices must designa
17. Authentication Protocol Radius_Eap Shows the authentication protocol suite in use between the Switch and a RADIUS server Port number Shows the physical port number on the Switch Capability Authenticator None Shows the capability of 802 1x functions on the port number displayed above There are two 802 1x capabilities that can be set on the Switch Authenticator and None AdminCtIDir Both In Shows whether a controlled Port that is unauthorized will exert control over communication in both receiving and transmitting directions or just the receiving direction OpenCtIDir Both In Shows whether a controlled Port that is unauthorized will exert control over communication in both receiving and transmitting directions or just the receiving direction Port Control ForceAuth ForceUnauth Auto Shows the administrative control over the port s authorization status ForceAuth 193 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual show 802 1x auth_configuration forces the Authenticator of the port to become Authorized ForceUnauth forces the port to become Unauthorized QuietPeriod Shows the time interval between authentication failure and the start of a new authentication attempt TxPeriod Shows the time to wait for a response from a supplicant user to send EAP Request Identity packets SuppTimeout Shows the time to wait for a response from a supplicant user for all EA
18. Description The show auth_statistics command is used to display the current authentication statistics of the Switch on a per port basis Parameters ports lt portlist gt Specifies a range of ports The port list is specified by listing the lowest slot number and the beginning port number on that slot separated by a colon Then the highest slot number and the highest port number of the range also separated by a colon are specified The beginning and end of the port list range are separated by a dash For example 1 3 specifies slot number 1 port 3 2 4 specifies slot number 2 port 4 1 3 2 4 specifies all of the ports between slot 1 port 3 and slot 2 port 4 in numerical order all Specifies that all ports will be viewed Restrictions None Example usage To display the current authentication statistics for port 16 of module 1 207 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual DES 6500 4 show auth_statistics ports 1 16 Command show auth_statistics ports 1 16 Port number 1 16 EapolFramesRx EapolFramesTx EapolStartFramesRx EapolReqldFramesTx EapolLogoffFramesRx EapolReqFramesTx EapolRespIdFramesRx EapolRespFramesRx InvalidEapolFramesRx EapLengthErrorFramesRx oo0o0ooo0oocoo0o0oO0 LastEapolFrameVersion 0 LastEapolFrameSource 00 00 00 00 00 00 Bj Quit T Next Page HAY Next Entry J All 208 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manua
19. Example usage To manually set system time and date settings 253 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual DES 6500 4 config time 30jun2003 16 30 30 Command config time 30jun2003 16 30 30 Success DES 6500 4 config time zone Purpose Used to determine the time zone used in order to adjust the system clock Syntax config time_zone operator hour lt gmt_hour 0 13 gt min lt minute 0 59 gt Description This will adjust system clock settings according to the time zone Time zone settings will adjust SNTP information accordingly Parameters operator Choose to add or subtract time to adjust for time zone relative to GMT hour lt gmt_hour 0 13 gt Select the number hours different from GMT min lt minute 0 59 gt Select the number of minutes difference added or subtracted to adjust the time zone Restrictions Only administrator level users can issue this command Example usage To configure time zone settings DES 6500 4 config time_zone operator hour 2 min 30 Command config time_zone operator hour 2 min 30 Success DES 6500 4 config dst Purpose Used to enable and configure time adjustments to allow for the use of Daylight Savings Time DST Syntax config dst disable repeating s_week lt start_week 1 4 last gt s_day lt start_day sun sat gt s_mth lt start_mth 1 12 gt s_time lt start_time h
20. Idx IP Address Auth Port Acct Port Status Key Number Number 1 10 1 1 1 1812 1813 Active switch 2 20 1 1 1 1800 1813 Active des3226 3 30 1 1 1 1812 1813 Active dlink Total Entries 3 DES 6500 4 show acct_client Purpose Used to display the current RADIUS accounting client Syntax show acct_client Description The show acct_client command is used to display the current RADIUS accounting client currently configured on the Switch Parameters None Restrictions None Example usage To view the current RADIUS accounting client DES 6500 4 show acct_client Command show acct_client radiusAcctClient radiusAcctClientinvalidServerAddresses 0 radiusAcctClientlidentifier D Link radiusAuthServerEntry 0 radiusAccServerlndex 1 radiusAccServerAddress 10 53 13 199 radiusAccClientServerPortNumber radiusAccClientRoundTripTime radiusAccClientRequests radiusAccClientRetransmissions radiusAccClientResponses radiusAccClientMalformedResponses radiusAccClientBadAuthenticators radiusAccClientPendingRequests radiusAccClientTimeouts radiusAccClientUnknownTypes radiusAccClientPacketsDropped Bi Quit T Next Page HRGS Next Entry Jj All ooooo0ooo000009 204 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual show auth_client Purpose Used to display the current RADIUS authentication client Syntax show auth_client Description The show auth_client command is used to display the current
21. System 10 90 90 90 8 35 60 Enabled Total Entries 1 DES 6500 4 298 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual IP MULTICASTING COMMANDS The IP multicasting commands in the Command Line Interface CLI are listed along with the appropriate parameters in the following table Command Parameters group lt group gt ipaddress lt network_address gt ipif lt ipif_name 12 gt protocol inactive dvmrp pim Each command is listed in detail in the following sections show ipmc cache Purpose Used to display the current IP multicast forwarding cache Syntax show ipmc cache group lt group gt ipaddress lt network_address gt Description This command will display the current IP multicast forwarding cache Parameters group lt group gt The multicast group IP address ipaddress lt network_address gt The IP address and netmask of the source The address and mask information can be specified using the traditional format for example 10 1 2 3 255 0 0 0 or in CIDR format 10 1 2 3 8 Restrictions None Usage Example To display the current IP multicast forwarding cache DES 6500 4 show ipmc cache Command show ipmc cache Multicast Source Address Netmask Upstream Expire Routing Group Neighbor Time Protocol 224 1 1 1 10 48 74 121 32 10 48 75 63 30 dvmrp 224 1 1 1 20 48 74 25 32 20 48 75 25 20 dvmrp 224 1 2 3 10 48 75 3 3 10 48 76 6 30 dvmr
22. To display the SNMP users currently configured on the Switch DES 6500 4 show snmp user Command show snmp user Username Group Name VerAuthPriv initial initial V3 None None Total Entries 1 DES 6500 4 create snmp view Purpose Used to assign views to community strings to limit which MIB objects and SNMP manager can access Syntax create snmp view lt view_name 32 gt lt oid gt view_type included excluded Description The create snmp view command assigns views to community strings to limit which MIB objects an SNMP manager can access Parameters lt view_name 32 gt An alphanumeric string of up to 32 characters that identifies the SNMP view that will be created lt oid gt The object ID that identifies an object tree MIB tree that will be included or excluded from access by an SNMP manager included Include this object in the list of objects that an SNMP manager can access excluded Exclude this object from the list of objects that an SNMP manager can access Restrictions Only administrator level users can issue this command Example usage To create an SNMP view 35 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual DES 6500 4 create snmp view dlinkview 1 3 6 view_type included Command create snmp view dlinkview 1 3 6 view_type included Success DES 6500 4 delete snmp view Purpose Used to remove an SNMP view entry previously created
23. disable repeating s_week lt start_week 1 4 last gt s_day lt start_day sun sat gt s_mth lt start_mth 1 12 gt s_ time lt start_time hh mm gt e_week lt end_week 1 4 last gt e day lt end_day sun sat gt e_mth lt end_mth 1 12 gt e_time lt end_time hh mm gt offset 30 60 90 120 annual s_date lt start_date 1 31 gt s_mth lt start_mth 1 12 gt s_time lt start_time hh mm gt e_date lt end_date 1 31 gt e mth lt end_mth 1 12 gt e_time lt end_time hh mm gt offset 30 60 90 120 Each command is listed in detail in the following sections config sntp Purpose Syntax Description Parameters Restrictions Example usage Used to setup SNTP service config sntp primary lt ipaddr gt secondary lt ipaddr gt poll interval lt int 30 99999 gt Use this command to configure SNTP service from a NTP server SNTP must be enabled for this command to function See enable sntp primary This is the primary server the SNTP information will be taken from lt jpaddr gt The IP address of the primary server secondary This is the secondary server the SNTP information will be taken from in the event the primary server is unavailable lt ipaddr gt The IP address for the secondary server poll interval lt int 30 99999 gt This is the interval between requests for updated SNTP information The polling interval ranges from 30 to 99 999 se
24. udp Specifies that the Switch will examine the Universal Datagram Protocol UDP field in each packet e src_port lt value 0 65535 gt Specifies that the access profile will apply only to packets that have this UDP source port in their header e dst_port lt value 0 65535 gt Specifies that the access profile will apply only to packets that have this UDP destination port in 218 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual config access_profile profile_id IP their header protocol_id lt value 0 255 gt Specifies that the Switch will examine the Protocol field in each packet and if this field contains the value entered here apply the appropriate rules e user_define lt hex Ox0 Oxfffffff gt Enter a hexidecimal value that will identify the protocol to be discovered in the packet header port lt portlist gt The access profile for Ethernet may be defined for each port on the Switch The port list is specified by listing the lowest switch number and the beginning port number on that switch separated by a colon Then the highest switch number and the highest port number of the range also separated by a colon are specified The beginning and end of the port list range are separated by a dash For example 1 3 specifies switch number 1 port 3 2 4 specifies switch number 2 port 4 1 3 2 4 specifies all of the ports between switch 1 port 3 and switch 2 port 4 in numerical o
25. DES 6500 4 show traffic control 1 1 1 5 Command show traffic control 1 1 1 5 Traffic Storm Control Trap Occurred Port Thres Broadcast Multicast DLF Action Count Time Shutdown hold Storm Storm Storm down Interval Forever 1 1 128 Disabled Disabled Disabled drop 0 5 1 2 128 Disabled Disabled Disabled drop 0 5 1 3 128 Disabled Disabled Disabled drop 0 5 1 4 128 Disabled Disabled Disabled drop 0 5 1 5 128 Disabled Disabled Disabled drop 0 5 Total Entries 5 DES 6500 4 101 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual QoS COMMANDS The xStack DES 6500 supports 802 1p priority queuing This switch has eight classes of service for each port on the Switch one of which is internal and not configurable to the user These hardware classes of service are numbered from 6 Class 6 the highest hardware class of service to 0 Class 0 the lowest hardware class of service The eight priority tags specified in IEEE 802 1p p0 to p7 are mapped to the Switch s hardware classes of service as follows e Priority 0 is assigned to the Switch s Q2 class e Priority 1 is assigned to the Switch s QO class e Priority 2 is assigned to the Switch s Q1 class e Priority 3 is assigned to the Switch s Q3 class e Priority 4 is assigned to the Switch s Q4 class e Priority 5 is assigned to the Switch s Q5 class e Priority 6 is assigned to the Switch s Q6 class e Priority 7 is assigned to th
26. If this parameter is not set the VLAN cannot be configured to have forbidden ports The following parameters allow for the creation of protocol based VLANs The Switch supports 15 pre configured protocol based VLANs plus one user defined protocol based VLAN where the administrator may configure the settings for the appropriate protocol and forwarding of packets 16 total Selecting a specific protocol will indicate which protocol will be utilized in determining the VLAN ownership of a tagged packet Pre set protocol based VLANs on the Switch include protocol ip Using this parameter will instruct the Switch to forward packets to this VLAN if the tag in the packet header is concurrent with this protocol This packet header information is based on the Ethernet protocol protocol ipx802dot3 Using this parameter will instruct the Switch to forward packets to this VLAN if the tag in the packet header is concurrent with this protocol This packet header information is defined by Novell NetWare 802 3 IPX Internet Packet Exchange protocol ipx802dot2 Using this parameter will instruct the Switch to forward packets to this VLAN if the tag in the packet header is concurrent with this protocol This packet header information is defined by Novell NetWare 802 2 IPX Internet Packet Exchange protocol ipxSnap Using this parameter will instruct the Switch to forward packets to this VLAN if the tag in the packet header is concur
27. Syntax Description Parameters Restrictions Usage Example Used to enable PIM function on the Switch enable pim This command will enable PIM for the Switch PIM settings must first be configured for specific IP interfaces using the config pim command None Only administrator level users can use this command To enable PIM as previously configured on the Switch Success DES 6500 4 DES 6500 4 enable pim Command enable pim disable pim Purpose Syntax Description Parameters Restrictions Usage Example Used to disable PIM function on the Switch disable pim This command will disable PIM for the Switch Any previously configured PIM settings will remain unchanged and may be enabled at a later time with the enable pim command None Only administrator level users can use this command To disable PIM on the Switch Success DES 6500 4 DES 6500 4 disable pim Command disable pim 296 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual show pim neighbor Purpose Used to display PIM neighbor router table entries Syntax show pim neighbor ipif lt ipif_name 12 gt ipaddress lt network_address gt Description This command will list current entries in the PIM neighbor table for a specified IP interface or destination router IP address Parameters ipif lt ipif_name 12 gt The name of an IP interface for which to view t
28. class flowlabel source_ipv6_mask lt ipv6mask gt destination_ipv6_mask lt ipv6mask gt config access_ profile lt value 1 8 gt add access_id lt value 1 65535 gt ipv6 class lt value 0 profile_id 255 gt flowlabel lt hex 0x0 Oxfffff gt source_ipv6 lt ipv6addr gt destionation_ipv6 lt ipv6addr gt port lt port gt permit priority lt value 0 7 gt replace_priority deny delete lt value 1 65535 gt Each command is listed in detail in the following sections 212 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual create access _profile for Ethernet Purpose Used to create an access profile on the Switch by examining the Ethernet part of the packet header Masks entered can be combined with the values the Switch finds in the specified frame header fields Specific values for the rules are entered using the config access_ profile command below Syntax create access_profile profile_id lt value 1 8 gt ethernet vlan source_mac lt macmask gt destination_mac lt macmask gt 802 1p ethernet_type Description This command will allow the user to create a profile for packets that may be accepted or denied by the Switch by examining the Ethernet part of the packet header Specific values for rules pertaining to the Ethernet part of the packet header may be defined by configuring the config access_profile command for Ethernet as stated below Parameters profile_id lt valu
29. config ssh algorithm Purpose Used to configure the SSH algorithm Syntax config ssh algorithm 3DES AES128 AES192 AES256 arcfour blowfish cast128 twofish128 twofish192 twofish256 MD5 SHA1 DSA RSA ALL enable disable Description This command allows you to configure the desired type of SSH algorithm used for authentication encryption Parameters 3DES This parameter will enable or disable the Triple_Data Encryption Standard encryption algorithm AES128 This parameter will enable or disable the Advanced Encryption Standard AES128 encryption algorithm AES192 This parameter will enable or disable the Advanced Encryption Standard AES192 encryption algorithm 181 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual config ssh algorithm AES256 This parameter will enable or disable the Advanced Encryption Standard AES256 encryption algorithm arcfour This parameter will enable or disable the Arcfour encryption algorithm blowfish This parameter will enable or disable the Blowfish encryption algorithm cast128 This parameter will enable or disable the Cast128 encryption algorithm twofish128 This parameter will enable or disable the twofish128 encryption algorithm twofish192 This parameter will enable or disable the twofish192 encryption algorithm twofish1256 This parameter will enable or disable the twofish 256 encryption algorithm MDS5 Thi
30. delete access_id lt value 1 65535 gt Use this command to delete a specific rule from the Ethernet profile Up to 65535 rules may be specified for the Ethernet access profile Restrictions Only administrator level users can issue this command Example usage To configure a rule for the Ethernet access profile DES 6500 4 config access profile profile_id 1 add access_id 1 ethernet vlan Trinity 802 1p 1 port 1 1 permit priority 1 replace priority Command config access profile profile_id 1 add access_id 1 ethernet vlan Trinity 802 1p 1 port 1 1 permit priority 1 replace priority Success DES 6500 4 create access_profile IP Purpose Used to create an access profile on the Switch by examining the IP part of the packet header Masks entered can be combined with the values the Switch finds in the specified frame header fields Specific values for the rules are entered using the config access_profile command below create access_profile profile_id lt value 1 8 gt ip vlan source_ip_mask lt netmask gt destination_ip_mask lt netmask gt dscp icmp type code igmp type tcp src_port_mask lt hex 0x0 0Oxffff gt dst_port_mask lt hex 0x0 Oxffff gt flag_mask all ack psh rst syn fin udp src_port_mask lt hex 215 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual create access_profile IP Description Parameters 0x0 Oxffff gt dst_port_mask
31. ipv6 class flowlabel source_ipv6_mask lt ipv6mask gt destination_ipv6_mask lt ipv6mask gt delete access_profile lt value 1 8 gt profile_id config access_profile lt value 1 8 gt add access_id lt value 1 65535 gt ethernet vlan lt vlan_name 32 gt profile_id source_mac lt macaddr gt destination _mac lt macaddr gt 802 1p lt value 0 7 gt ethernet_type lt hex Ox0 Oxffff gt ip vlan lt vlan_name 32 gt source_ip lt ipaddr gt destination_ip lt ipaddr gt dscp lt value 0 63 gt icmp type lt value 0 255 gt code lt value 0 255 gt igmp type lt value 0 255 gt tcp src_port lt value 0 65535 gt dst_port lt value 0 65535 gt urg ack psh rst syn fin udp src_port lt value 0 65535 gt dst_port lt value 0 65535 gt protocol_id lt value 0 255 gt user_define lt hex Ox0 Oxffffffff gt packet_content offset_0 15 lt hex0x0 Oxffffffff gt lt nex 0x0 Oxffffffff gt lt hex Ox0 Oxffffffff gt lt nex 0x0 Oxffffffff gt offset_16 31 lt hex 0x0 Oxffffffff gt lt hex Ox0 Oxffffffff gt lt nex 0x0 Oxffffffff gt lt nex 0x0 Oxffffffff gt offset_32 47 lt hex 0x0 Oxffffffff gt lt hex Ox0 Oxffffffff gt lt hex 0x0 Oxffffffff gt lt hex 0x0 Oxffffffff gt offset_48 63 lt hex 0x0 Oxffffffff gt lt nex 0x0 Oxffffffff gt lt nex 0x0 Oxffffffff gt lt nex 0x0 Oxffffffff gt offset_64 79 lt hex Ox0 Oxffffffff gt lt hex 0x0 Oxffffffff gt lt hex 0x0 Oxfff
32. lt hex 0x0 xffff gt protocol_id user _mask lt hex 0x0 Oxffffffff gt This command will allow the user to create a profile for packets that may be accepted or denied by the Switch by examining the IP part of the packet header Specific values for rules pertaining to the IP part of the packet header may be defined by configuring the config access_ profile command for IP as stated below profile_id lt value 1 8 gt Specifies an index number between 1 and 8 that will identify the access profile being created with this command ip Specifies that the Switch will look into the IP fields in each packet with special emphasis on one or more of the following e vlan Specifies a VLAN mask e source_ip_mask lt netmask gt Specifies an IP address mask for the source IP address destination_ip_mask lt netmask gt Specifies an IP address mask for the destination IP address dscp Specifies that the Switch will examine the DiffServ Code Point DSCP field in each frame s header icmp Specifies that the Switch will examine the Internet Control Message Protocol ICMP field in each frame s header e type Specifies that the Switch will examine each frame s ICMP Type field e code Specifies that the Switch will examine each frame s ICMP Code field igmp Specifies that the Switch will examine each frame s Internet Group Management Protocol IGMP field e type Specifies that the Switch
33. none Description The config 802 1x command has two capabilities that can be set for each port authenticator and none Parameters lt portlist gt Specifies a range of ports The port list is specified by listing the lowest slot number and the beginning port number on that slot separated by a colon Then the highest slot number and the highest port number of the range also separated by a colon are specified The beginning and end of the port list range are separated by a dash For example 1 3 specifies slot number 1 port 3 2 4 specifies slot number 2 port 4 1 3 2 4 specifies all of the ports between slot 1 port 3 and slot 2 port 4 in numerical order all Specifies all of the ports on the Switch authenticator A user must pass the authentication process to gain access to the network none The port is not controlled by the 802 1x functions Restrictions Only administrator level users can issue this command Example usage To configure 802 1x capability on ports 1 10 on slot 1 DES 6500 4 config 802 1x capability ports 1 1 1 10 authenticator Command config 802 1x capability ports 1 1 1 10 authenticator Success DES 6500 4 197 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual config 802 1x auth_parameter Purpose Syntax Description Parameters Used to configure the 802 1x Authentication parameters on a range of ports The default parame
34. separated by a colon Then the highest switch number and the highest port number of the range also separated by a colon are specified The beginning and end of the port list range are separated by a dash For example 1 3 specifies switch number 1 port 3 2 4 specifies switch number 2 port 4 1 3 2 4 specifies all of the ports between switch 1 port 3 and switch 2 port 4 in numerical order permit deny Specify that the packet matching the criteria configured with command will either be permitted entry to the cpu or denied entry to the cpu delete access_id lt value 1 65535 gt Use this to remove a previously created access rule in a profile ID Restrictions Only administrator level users can issue this command Example usage To configure cpu access list entry DES 6500 4 config cpu access_profile profile_id 10 add access_id 1 ip vlan default source_ip 20 2 2 3 destination_ip 10 1 1 252 dscp 3 icmp type 11 code 32 port 1 deny Command config cpu access_profile profile_id 10 add access_id 1 ip vlan default source_ip 20 2 2 3 destination_ip 10 1 1 252 dscp 3 icmp type 11 code 32 port 1 deny Success DES 6500 4 232 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual enable cpu_interface_filtering Purpose Used to enable CPU interface filtering on the Switch Syntax enable cpu_interface_filtering Description This command is used in conjunction with the disable cpu_interf
35. separated by a dash For example 1 3 specifies switch number 1 port 3 2 4 specifies switch number 2 port 4 1 3 2 4 specifies all of the ports between switch 1 port 3 and switch 2 port 4 in numerical order Restrictions Only administrator level users can issue this command Example usage To manually recover ports 1 5 on module 1 99 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual DES 6500 4 config traffic control_recover 1 1 1 5 Command config traffic control_recover 1 1 1 5 Success DES 6500 4 config traffic control_trap Purpose Syntax Description Parameters Restrictions Example usage Used to configure the trap settings for the packet storm control mechanism config traffic control_trap none storm_occurred storm_cleared both This command will configure how packet storm control trap messages will be used when a packet storm is detected by the Switch This function can only be used for the software traffic storm control mechanism when the action field in the config traffic storm_control command is set as shutdown none No notification will be generated or sent when a packet storm control is detected by the Switch storm _occurred A notification will be generated and sent when a packet storm has been detected by the Switch storm_cleared A notification will be generated and sent when a packet storm has been cleared by the Switch
36. the Switch that match this priority are forwarded to the CoS queue specified previously by the user replace_priority Enter this parameter to re write the 802 1p default priority of a packet to the value entered in the Priority field which meets the criteria specified previously in this command before forwarding it on to the specified CoS queue Otherwise a packet will have its incoming 802 1p user priority re written to its original value before being forwarded by the Switch deny Specifies that packets that match the access profile are not permitted to be forwarded by the Switch and will be filtered delete access_id lt value 1 65535 gt Use this command to delete a specific rule from the IPv6 profile Up to 65535 rules may be specified for the IPv6 access profile Restrictions Only administrator level users can issue this command Example usage To configure a previously created access profile based on IPv6 classification DES 6500 4 config access_profile profile_id 4 add access_id 1 ipv6 class 1 flowlabel OxABCD port 1 4 deny Command config access_profile profile_id 4 add access_id 1 ipv6 class 1 flowlabel OxABCD port 1 4 deny Success DES 6500 4 delete access_profile Purpose Used to delete a previously created access profile Syntax delete access_profile profile_id lt value 1 8 gt Description The delete access_profile command is used to delete a previously created access profile on
37. 1 10 0 0 0 3 7 0 30 1 1 11 0 0 0 3 8 0 0 0 1 12 0 0 0 3 9 30 0 1 2 1 0 0 0 3 10 0 0 0 2 2 0 0 0 3 11 0 0 0 2 3 0 0 0 3 12 0 0 0 2 4 0 0 0 4 1 0 0 0 2 5 0 0 0 4 2 0 0 0 2 6 0 0 0 4 3 0 0 0 2 7 0 0 0 4 4 0 0 0 2 3 0 0 0 4 4 0 0 0 2 9 0 0 0 4 5 0 0 0 CTRL C ESC q Quit SPACE n Next Page p Previous Page r Refresh show stack_information Purpose Used to display the stack information table Syntax show stack_information Description This command display stack information Parameters None Restrictions None Usage Example To display stack information 61 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual DES 6500 4 show stack_information Command show stack_information Box Prio Prom Runtime H W ID Type Exist rity version version version 1 DES 6507 exist 16 2 00 B20 3 00 B29 1A1 2 USR NOT CFG no 3 USR NOT CFG no 4 USR NOT CFG no 5 USR NOT CFG no 6 USR NOT CFG no 7 USR NOT CFG no 8 USR NOT CFG no Topology STAR Current state MASTER Box Count 71 DES 6500 4 clear counters Purpose Used to clear the Switch s statistics counters Syntax clear counters ports lt portlist gt Description This command will clear the counters used by the Switch to compile statistics Parameters ports lt portlist gt Specifies a range of ports to be displayed The port list is specified by listing the lowest slot number and the beginning port number on that slot separated by a
38. 100 gt The user can set a percentage value of the falling CPU utilization which will trigger the Safeguard Engine function to cease Once the CPU utilization falls to this percentage the Safeguard Engine mechanism will shut down trap_log enable disable Choose whether to enable or disable the sending of messages to the device s SNMP agent and switch log once the Safeguard Engine has been activated by a high CPU utilization rate mode Used to select the type of Safeguard Engine to be activated by the Switch when the CPU utilization reaches a high rate The user may select e strict lf selected this function will instruct the Switch to minimize the IP and ARP traffic flow to the CPU by dynamically allotting an even bandwidth to all traffic flows fuzzy f selected this function will stop accepting all ARP packets not intended for the Switch and will stop receiving all unnecessary broadcast IP packets until the storm has subsided Restrictions Only administrator level users can issue this command Example usage To configure the Switch for the Safeguard Engine DES 6500 4 config safeguard_engine state enable utilization rising 50 falling 30 trap log enable strict Command config safeguard_engine state enable utilization rising 50 falling 30 trap log enable strict Success DES 6500 4 236 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual show safeguard_engine
39. 2004 2007 D Link Corporation All rights Reserved lt Function Key gt lt Control Key gt CtritC Quit without save left right Ctri W Save and quit up down Move cursor Ctrl D Delete line Ctrl X Erase all setting Ctri L Reload original setting Success DES 6500 4 show greeting_message Purpose Used to view the currently configured greeting message configured on the Switch Syntax show greeting_message Description This command is used to view the currently configured greeting message on the Switch Parameters None Restrictions None Example usage To view the currently configured greeting message DES 6500 4 show greeting_message Command show greeting_message DES 6500 Chassis Ethernet Switch Command Line Interface Firmware Build 3 00 B14 Copyright C 2004 2007 D Link Corporation All rights Reserved Success DES 6500 4 24 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual SWITCH PORT COMMANDS The switch port commands in the Command Line Interface CLI are listed along with the appropriate parameters in the following table Command Parameters config ports lt portlist gt all speed auto 10_half 10_full 100 _half 100_ full 1000_full master slave None flow_control enabled disabled learning enabled disabled state enabled disabled description lt desc 32 gt clear pots eeseption Each command is listed in
40. 6500 now implements IGMPv3 Improvements of IGMPv3 over version 2 include e The introduction of the SSM or Source Specific Multicast In previous versions of IGMP the host would receive all packets sent to the multicast group Now a host will receive packets only from a specific source or sources This is done through the implementation of include and exclude filters used to accept or deny traffic from these specific sources e In IGMPv2 Membership reports could contain only one multicast group whereas in v3 these reports can contain multiple multicast groups e Leaving a multicast group could only be accomplished using a specific leave message in v2 In v3 leaving a multicast group is done through a Membership report which includes a block message in the group report packet e For version 2 the host could respond to either a group query but in version 3 the host is now capable to answer queries specific to the group and the source IGMPv3 is backwards compatible with other versions of IGMP and all IGMP protocols must be used in conjunction with PIM DM or DVMRP for optimal use The IGMP commands in the Command Line Interface CLI are listed along with the appropriate parameters in the following table Command Parameters config igmp ipif lt ipif_name 12 gt all version lt value 1 3 gt query_interval lt sec 1 31744 gt max_response_time lt sec 1 25 gt robustness_variable lt value 1 255 gt last_member_query_in
41. C 2004 2007 D Link Corporation All rights reserved DES 6500 4 DES 6500 4 DES 6500 4 download configuration 10 41 44 44 c cfg setting txt Command download configuration 10 41 44 44 c cfg setting txt Connecting to Server Done Download configuration 00 Done The very end of the autoconfig process including the logout appears like this DES 6500 4 disable authen_policy Command disable authen_policy Success DES 6500 4 DES 6500 4 f 2nn nnn n anna nnmnnn DES 6500 4 End of configuration file for DES 6500 DES 6500 4 kkkkkkkkkk Logout kkkkkkkkkk 56 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual disable autoconfig Purpose Use this to deactivate autoconfiguration from DHCP Syntax disable autoconfig Description This instructs the Switch not to accept autoconfiguration instruction from the DHCP server This does not change the IP settings of the Switch The ipif settings will continue as DHCP client until changed with the config ipif command Parameters None Restrictions None Example usage To stop the autoconfiguration function DES 6500 4 disable autoconfig Command disable autoconfig Success DES 6500 4 Switch as a DHCP client Use the show switch command to display the iy NOTE With autoconfig enabled the Switch ipif settings now define the l new IP settings status show autoconfig Pur
42. DES 6500 4 config traffic_segmentation 1 1 1 10 forward_list 1 11 1 15 Command config traffic_segmentation 1 1 1 10 forward_list 1 11 1 15 Success DES 6500 4 238 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual show traffic_segmentation Purpose Syntax Description Parameters Used to display the current traffic segmentation configuration on the Switch show traffic_segmentation lt portlist gt The show traffic_segmentation command is used to display the current traffic segmentation configuration on the Switch lt portlist gt Specifies a range of ports for which the current traffic segmentation configuration on the Switch will be displayed The port list is specified by listing the lowest slot number and the beginning port number on that slot separated by a colon Then the highest slot number and the highest port number of the range also separated by acolon are specified The beginning and end of the port list range are separated by a dash For example 1 3 specifies slot number 1 port 3 2 4 specifies slot number 2 port 4 1 3 2 4 specifies all of the ports between slot 1 port 3 and slot 2 port 4 in numerical order Restrictions The port lists for segmentation and the forward list must be on the same switch Example usage To display the current traffic segmentation configuration on the Switch DES 6500 4 show traffic_segmentation Command show tr
43. DNS static table 283 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual DES 6500 4 config dnsr add static dns1 10 43 21 12 Command config dnsr add static dns1 10 43 21 12 Success DES 6500 4 Example Usage To delete an entry domain name dns1 IP address 10 43 21 12 from DNS static table DES 6500 4 config dnsr delete static dns1 10 43 21 12 Command config dnsr delete static dns1 10 43 21 12 Success DES 6500 4 enable dnsr Purpose Used to enable DNS relay Syntax enable dnsr cache static Description This command is used in combination with the disable dnsr command below to enable and disable DNS Relay on the Switch Parameters cache This parameter will allow the user to enable the cache lookup for the DNS rely on the Switch static This parameter will allow the user to enable the static table lookup for the DNS rely on the Switch Restrictions Only administrator level users can issue this command Example Usage To enable status of DNS relay DES 6500 4 enable dnsr Command enable dnsr Success DES 6500 4 Example Usage To enable cache lookup for DNS relay 284 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual DES 6500 4 enable dnsr cache Command enable dnsr cache Success DES 6500 4 Example Usage To enable static table lookup for DNS relay DES 6500 4 enable dnsr st
44. Dynamic router port Forbidden Router Port Total Entries 2 DES 6500 4 show igmp_snooping Purpose Used to show the current status of IGMP snooping on the Switch Syntax show igmp_snooping vlan lt vlan_name 32 gt Description This command will display the current IGMP snooping configuration on the Switch 148 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual show igmp_snooping Parameters lt vlan_name 32 gt The name of the VLAN for which to view the IGMP snooping configuration Restrictions None Example usage To show igmp snooping DES 6500 4 show igmp_snooping Command show igmp_snooping IGMP Snooping Global State Disabled Multicast router Only Disabled VLAN Name default Query Interval 2125 Max Response Time 10 Robustness Value 12 Last Member Query Interval 1 Host Timeout 260 Route Timeout 260 Leave Timer 2 Querier State Disabled Querier Router Behavior Non Querier State Disabled VLAN Name vlan2 Query Interval 125 Max Response Time 10 Robustness Value 2 Last Member Query Interval 1 Host Timeout 260 Route Timeout 260 Leave Timer 2 Querier State Disabled Querier Router Behavior Non Querier State Disabled Total Entries 2 DES 6500 4 show igmp_snooping group Purpose Used to display the current IGMP snooping group configuration on the Switch Syntax show igmp_snooping group vlan lt vlan_n
45. ForceAuth Success Authorized Ej Quit i Next Page HAA Next Entry Jj All Example usage To display the 802 1x auth state for MAC based 802 1x DES 6500 4 show 802 1x auth_state Command show 802 1x auth_state Port number 1 1 Index MAC Address Auth PAE State Backend State Port Status 1 00 08 02 4E DA FA Authenticated Idle Authorized 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 CTRL C Fl Quit SZA ff Next Page Eien Next Entry All config 802 1x auth_mode Purpose Syntax Description Parameters Restrictions Example usage Used to configure the 802 1x authentication mode on the Switch config 802 1x auth_mode port_based mac_based The config 802 1x authentication mode command is used to enable either the port based or MAC based 802 1x authentication feature on the Switch port_based mac_based ports The Switch may authenticate 802 1x by either port or MAC address Only administrator level users can issue this command 196 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual To configure 802 1x authentication by MAC address DES 6500 4 config 802 1x auth_mode mac_based Command config 802 1x auth_mode mac_based Success DES 6500 4 config 802 1x capability ports Purpose Used to configure the 802 1x capability of a range of ports on the Switch Syntax config 802 1x capability ports lt portlist gt all authenticator
46. Included NotifyView 1 3 6 Included restricted 1 3 6 1 2 1 1 Included restricted 1 3 6 1 2 1 11 Included restricted 1 3 6 1 6 3 10 2 1 Included restricted 1 3 6 1 6 3 11 2 1 Included restricted 1 3 6 1 6 3 15 1 1 Included CommunityView 1 Included CommunityView 1 3 6 1 6 3 Excluded CommunityView 1 3 6 1 6 3 1 Included Total Entries 11 DES 6500 4 create snmp community Purpose Used to create an SNMP community string to define the relationship between the SNMP manager and an agent The community string acts like a password to permit access to the agent on the Switch One or more of the following characteristics can be associated with the community string An Access List of IP addresses of SNMP managers that are permitted to use the community string to gain access to the Switch s SNMP agent An MIB view that defines the subset of all MIB objects that will be accessible to the SNMP community Read write or read only level permission for the MIB objects accessible to the SNMP community Syntax create snmp community lt community_string 32 gt view lt view_name 32 gt read_only read_write Description The create snmp community command is used to create an SNMP community string and to assign access limiting characteristics to this community string Parameters lt community_string 32 gt An alphanumeric string of up to 32 characters that is used to identify members of an SNMP community This string is used like
47. Parameters Restrictions Example usage Used to delete an existing user account delete account lt username gt The delete account command deletes a user account that has been created using the create account command lt username gt Enter the username of the account to be deleted Only Administrator level users can issue this command To delete the admin account System 12 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual DES 6500 4 delete account System Command delete account System Are you sure to delete the last administrator account y n y Success DES 6500 4 Example usage To delete the user account System2 DES 6500 4 delete account System2 Command delete account System2 Success DES 6500 4 show config Purpose Used to display a list of configuration commands entered into the Switch Syntax show config current_config config_in_ NVRAM Description This command displays a list of configuration commands entered into the Switch Parameters current_config Entering this parameter will display configurations entered without being saved to NVRAM config_in _NVRAM Entering this parameter will display configurations entered and saved to NVRAM Restrictions None Example usage To view configurations entered on the Switch that were saved to NVRAM 13 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch C
48. Purpose To display the Safeguard Engine parameters currently set in the Switch Syntax show safeguard_engine Description This command is used to show the Safeguard Engine information currently set on the Switch Parameters None Restrictions None Example usage To display current Safeguard Engine parameters DES 6500 4 show safeguard_engine Command show safeguard_engine Safeguard engine state Enabled Safeguard engine current status normal mode CPU utilization information Rising threshold 50 Falling threshold 30 Trap log state Enabled Mode Strict DES 6500 4 237 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual TRAFFIC SEGMENTATION COMMANDS Traffic segmentation allows you to further sub divide VLANs into smaller groups of ports that will help to reduce traffic on the VLAN The VLAN rules take precedence and then the traffic segmentation rules are applied The traffic segmentation commands in the Command Line Interface CLI are listed along with the appropriate parameters in the following table Command Parameters config traffic_segmentation lt portlist gt all forward_list null all lt portlist gt show traffic_segmentation lt portlist gt Each command is listed in detail in the following sections config traffic_segmentation Purpose Used to configure traffic segmentation on the Switch Syntax config traffic_segmentation lt por
49. RADIUS authentication client currently configured on the Switch Parameters None Restrictions None Example usage To view the current RADIUS authentication client DES 6500 4 show auth_client Command show auth_client radiusAuthClient radiusAuthClientinvalidServerAddresses 0 radiusAuthClientidentifier D Link radiusAuthServerEntry 0 radiusAuthServerlndex radiusAuthServerAddress radiusAuthClientServerPortNumber radiusAuthClientRoundTripTime radiusAuthClientAccessRequests radiusAuthClientAccessRetransmissions radiusAuthClientAccessAccepts radiusAuthClientAccessRejects radiusAuthClientAccessChallenges radiusAuthClientMalformedAccessResponses radiusAuthClientBadAuthenticators radiusAuthClientPendingRequests radiusAuthClientTimeouts radiusAuthClientUnknownTypes radiusAuthClientPacketsDropped Bi Quit i Next Page AIA Next Entry All o o oooo0o00000000009 show auth_diagnostics Purpose Used to display the current authentication diagnostics Syntax show auth_diagnostics ports lt portlist gt all Description The show auth_diagnostics command is used to display the current authentication diagnostics of the Switch on a per port basis Parameters ports lt portlist gt Specifies a range of ports The port list is specified by listing the lowest slot number and the beginning port number on that slot separated by a colon Then the highest slot number and the highest port number of the rang
50. RMON DES 6500 4 disable rmon Command disable rmon Success DES 6500 4 51 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual SWITCH UTILITY COMMANDS The switch utility commands in the Command Line Interface CLI are listed along with the appropriate parameters in the following table Command Parameters download firmware_fromTFTP lt ipaddr gt lt path_filename 64 gt unit all_line_card cpu lt unitid 1 8 gt cfg_fromTFTP lt ipaddr gt lt path_filename 64 gt increment cfg_toTFTP log_toTFTP lt ipaddr gt lt path_filename 64 gt lt ipaddr gt times lt value 1 255 gt timeout lt sec 1 99 gt traceroute lt ipaddr gt ttl lt value 1 60 gt port lt value 30000 64900 gt timeout lt sec 1 65535 gt ee probe lt value lt 1 9 gt enable enable autoconfig Each command is listed in detail in the following sections download Purpose Used to download and install new firmware or a switch configuration file from a TFTP server or a CompactFlash memory card Syntax firmware_fromTFTP lt ipaddr gt lt path_filename 64 gt unit all_line_card cpu lt unitid 1 8 gt cfg_fromTFTP lt ipaddr gt lt path_filename 64 gt increment Description This command is used to download a new firmware or a switch configuration file from a TFTP server or a CompactFlash memory card Parameters firmware_fromTFTP Download and install new firmware on th
51. RSTP and MSTP can coexist with standard STP however the benefits of RSTP and MSTP are not realized on a port where an 802 1d network connects to an 802 1w or 802 1s enabled network Migration should be set as yes on ports connected to network 79 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual config stp ports Restrictions Example usage stations or segments that are capable of being upgraded to 802 1w RSTP or 802 1s MSTP on all or some portion of the segment edge true false true designates the port as an edge port Edge ports cannot create loops however an edge port can lose edge port status if a topology change creates a potential for a loop An edge port normally should not receive BPDU packets If a BPDU packet is received it automatically loses edge port status false indicates that the port does not have edge port status p2p true false auto true indicates a point to point P2P shared link P2P ports are similar to edge ports however they are restricted in that a P2P port must operate in full duplex Like edge ports P2P ports transition to a forwarding state rapidly thus benefiting from RSTP A p2p value of false indicates that the port cannot have p2p status auto allows the port to have p2p status whenever possible and operate as if the p2p status were true If the port cannot maintain this status for example if the port is forced to half duplex operation the p2p status cha
52. Switch CLI Manual reconfig Purpose Used to connect to a member switch through the commander switch using telnet Syntax reconfig member_id lt value 1 32 gt exit Description This command is used to reconnect to a member switch using telnet Parameters member_id lt value 1 32 gt Select the ID number of the member switch to configure exit This command is used to exit from managing the member switch and will return to managing the commander switch Restrictions Only administrator level users can issue this command Example usage To connect to the MS with member id 2 through the CS using the command line interface DES 6500 4 reconfig member_id 2 Command reconfig member_id 2 DES 6500 4 config sim_group Purpose Used to add candidates and delete members from the SIM group Syntax config sim_group add lt candidate_id 1 100 gt lt password gt delete lt member_id 1 32 gt Description This command is used to add candidates and delete members from the SIM group by ID number Parameters add lt candidate_id 1 100 gt lt password gt Use this parameter to change a candidate switch CaS to a member switch MS of a SIM group The CaS may be defined by its ID number and a password if necessary delete lt member_id 1 32 gt Use this parameter to delete a member switch of a SIM group The member switch should be defined by it ID number Restrictions Only administrator l
53. The DES 6500 has four ways of creating access profile entries on the Switch which include Ethernet MAC Address IP Packet Content and IPv6 Due to the present complexity of the access profile commands it has been decided to split this command into four pieces to be better understood by the user and therefore simpler for the user to configure The beginning of this section displays the create access_profile and config access_profile commands in their entirety The following table divides these commands up into the defining features necessary to properly configure the access profile Remember these are not the total commands but the easiest way to implement Access Control Lists for the Switch Due to a backward compatability issue when a user upgrades to R3 firmware 3 00 B21 all settings previously configured for any ACL function CPU ACL included on the Switch will be lost We recommend that the user save a configuration file of current settings before upgrading to R3 firmware 211 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual Command Parameters create access _profile profile_id lt value 1 8 gt ethernet vlan source_mac lt macmask gt destination_mac lt macmask gt 802 1p ethernet_type config access_ profile lt value 1 8 gt add access_id lt value 1 65535 gt ethernet vlan profile_id lt vlan_name 32 gt source_mac lt macaddr gt destination_mac lt macaddr gt 802 1p lt value 0 7 gt e
54. Then the highest slot number and the highest port number of the range also separated by a colon are specified The beginning and end of the port list range are separated by a dash For example 1 3 specifies slot number 1 port 3 2 4 specifies slot number 2 port 4 1 3 2 4 specifies all of the ports between slot 1 port 3 and slot 2 port 4 in numerical order Restrictions None Example usage To show stp ports 1 through 9 on switch one DES 6500 4 show stp ports 1 1 1 9 Command show stp ports 1 1 1 9 MSTP Port Information Port Index 1 1 Hello Time 2 2 Port STP enabled LBD No External PathCost Auto 200000 Edge Port No No P2P Auto Yes Msti Designated Bridge Internal PathCost Prio Status Role 0 8000 0050BA7120D6 200000 128 Forwarding Root 1 8001 0053131A3324 200000 128 Forwarding Master CTRL C ESC q Quit SPACE n Next Page p Previous Page r Refresh show stp instance_id Purpose Used to display the Switch s STP instance configuration Syntax show stp instance_id lt value 0 15 gt Description This command displays the Switch s current STP Instance Settings and the STP Instance Operational Status Parameters lt value 0 15 gt Enter a value defining the previously configured instance_id on the Switch An entry of 0 will display the STP 86 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual show stp instance_id configuration for the CIST internally set
55. VLAN part of each packet header source_mac lt macmask gt Specifies to examine the source MAC 227 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual create cpu access_profile address mask destination_mac lt macmask gt Specifies to examine the destination MAC address mask ethernet_type Specifies that the switch will examine the Ethernet type value in each frame s header ip Specifies that the switch will examine the IP address in each frame s header vlan Specifies a VLAN mask source_ip_mask lt netmask gt Specifies an IP address mask for the source IP address destination_ip_mask lt netmask gt Specifies an IP address mask for the destination IP address dscp Specifies that the switch will examine the DiffServ Code Point DSCP field in each frame s header icmp Specifies that the switch will examine the Internet Control Message Protocol ICMP field in each frame s header e type Specifies that the switch will examine each frame s ICMP Type field e code Specifies that the switch will examine each frame s ICMP Code field igmp Specifies that the switch will examine each frame s Internet Group Management Protocol IGMP field e type Specifies that the switch will examine each frame s IGMP Type field tcp Specifies that the switch will examine each frames Transport Control Protocol TCP field e src_port_mask
56. VRRP COMMANA Si a a e a E O E E E A E a ees S EEA 261 Routing Table Commands sas sesona dey anae e rera Ara nEn r DANA EEEn NaN vedo Aaa Ee NAARAAT EENE Era iA 268 Route Redistribution Command serre en E A R N Mew eee A A 271 DHCP Relay ConinandS ranore vedo ace ner tees ove EENIA vse I ENAREN Wee Se vee oa va EIRATA LE CENERE AA 277 DNS Relay COnmTApd S eei eE E EAT E E E EEE 283 RIP Commana S sree ext eh ee ee eee ah a aks a a a e as tea ea e eas a a a aa a 287 DVIMERP Command KANEEN EEEE E E E EE T SSE IT RE ETS Ss Fa oe bates eke 290 PIM Commands errand Aa ae ee ee ea 295 IP Muilticdsting Command i cv cicccovi vec veg scene gn van vaste PEN AAEE TINEA TENEI AA Vane o EG Ves Ved ode va vey une EEEE TAA Vee Vea see 299 MDY Configuration Commands ii govsdsenteesieeeees esis bee ER Gee oa a ea Pande ee a NE ee one 301 OSPF Configuration Commands so arenan a eeren debe sees AREEN EAEE r eer dnr EIT Sbcagichversenas E 303 dumbo frame Commands sarirani aranana A AE A O AA T S E E pata 323 Command Histoty List 2x02 serves vecveceeees ir tee eae eat ees he ENET CE OR EASA EA ge Dee Fh a eee 325 Technical Specifications reres aAa e EE ES EE DE aver ERE A OAN eoeedienaeeas meee ees 328 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual INTRODUCTION The xStack DES 6500 layer 3 modular chassis Ethernet switch is a member of the D Link xStack family Ranging from 10 100Mbps edge switches to core gigabit switches the xSt
57. a password to give remote SNMP managers access to MIB objects in the Switch s SNMP agent view lt view_name 32 gt An alphanumeric string of up to 32 characters that is used to identify the group of MIB objects that a remote SNMP manager is allowed to access on the Switch read_only Specifies that SNMP community members using the community string created with this command can only read the contents of the MIBs on the Switch read_write Specifies that SNMP community members using the community string created with this command can read from and write to the contents of the MIBs on the Switch Restrictions Only administrator level users can issue this command 37 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual Example usage To create the SNMP community string dlink DES 6500 4 create snmp community dlink view ReadView read_write Command create snmp community dlink view ReadView read_write Success DES 6500 4 delete snmp community Purpose Used to remove a specific SNMP community string from the Switch Syntax delete snmp community lt community_string 32 gt Description The delete snmp community command is used to remove a previously defined SNMP community string from the Switch Parameters lt community_string 32 gt An alphanumeric string of up to 32 characters that is used to identify members of an SNMP community This string is used like a passwor
58. are listed along with the appropriate parameters in the following table Command Parameters Each command is listed in detail in the following sections enable jumbo_frame Purpose Used to enable the jumbo frame function on the Switch Syntax enable jumbo_frame Description This command will allow ethernet frames larger than 1536 bytes to be processed by the Switch The maximum size of the jumbo frame may not exceed 9216 bytes Parameters None Restrictions None Example usage To enable the jumbo frame function on the Switch DES 6500 4 enable jumbo_frame Command enable jumbo_frame Success DES 6500 4 disable jumbo_frame Purpose Used to disable the jumbo frame function on the Switch Syntax disable jumbo_frame Description This command will disable the jumbo frame function on the Switch Parameters None Restrictions None 323 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual Example usage To enable the jumbo frame function on the Switch DES 6500 4 disable jumbo_frame Command disable jumbo_frame Success DES 6500 4 show jumbo_frame Purpose Used to show the status of the jumbo frame function on the Switch Syntax show jumbo_frame Description This command will show the status of the jumbo frame function on the Switch Parameters None Restrictions None Usage Example To show the jumbo frame status currently
59. at the command line prompt enter the commands config ipif System ipaddress XXX XXX XXX XXX Vyy yyy yyy yyy Where the x s represent the IP address to be assigned to the IP interface named System and the y s represent the corresponding subnet mask 2 Alternatively you can enter config ipif System ipaddress xxx xxx xxx xxx z Where the x s represent the IP address to be assigned to the IP interface named System and the z represents the corresponding number of subnets in CIDR notation The IP interface named System on the Switch can be assigned an IP address and subnet mask which can then be used to connect a management station to the Switch s Telnet or Web based management agent xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual DES 6500 Chassis Ethernet Switch Command Line Interface Firmware Build 3 80 B29 Copyright C 2004 2007 D Link Corporation All rights reserved UserName PassWord DES 65800 4 config ipif System ipaddress 10 53 13 144 255 0 0 0 Command config ipif System ipaddress 10 53 13 144 8 Success DES 6500 4 Figure 1 3 Assigning an IP Address In the above example the Switch was assigned an IP address of 10 53 13 144 with a subnet mask of 255 0 0 0 The system message Success indicates that the command was executed successfully The Switch can now be configured and managed via Telnet and the CLI or via the Web based management agent using the above IP address to connect to the Swit
60. authen parameter attempt 5 Command config authen parameter attempt 5 Success DES 6500 4 show authen parameter Purpose Used to display the authentication parameters currently configured on the Switch Syntax show authen parameter Description This command will display the authentication parameters currently configured on the Switch including the response timeout and user authentication attempts This command will display the following fields Response timeout The configured time allotted for the Switch to wait for a response of authentication from the user attempting to log in from the command line interface or telnet interface User attempts The maximum number of attempts the user may try to become authenticated by the Switch before being locked out Parameters None Restrictions None Example usage To show the authentication parameters currently located on the Switch 173 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual DES 6500 4 show authen parameter Command show authen parameter Response timeout 60 seconds User attempts 5 DES 6500 4 enable admin Purpose Used to promote user level privileges to administrator level privileges Syntax enable admin Description This command is for users who have logged on to the Switch on the normal user level to become promoted to the administrator level After logging on to the Switch users will ha
61. command creates a recipient of SNMP traps generated by the Switch s SNMP agent Parameters lt jpaddr gt The IP address of the remote management station that will serve as the SNMP host for the Switch v1 Specifies that SNMP version 1 will be used The Simple Network Management Protocol SNMP version 1 is a network management protocol that provides a means to monitor and control network devices v2c Specifies that SNMP version 2c will be used The SNMP v2c supports both centralized and distributed network management strategies It includes improvements in the Structure 43 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual create snmp host of Management Information SMI and adds some security features v3 Specifies that the SNMP version 3 will be used SNMP v3 provides secure access to devices through a combination of authentication and encrypting packets over the network SNMP v3 adds Message integrity Ensures that packets have not been tampered with during transit Authentication Determines if an SNMP message is from a valid source Encryption Scrambles the contents of messages to prevent it being viewed by an unauthorized source noauth_nopriv Specifies that there will be no authorization and no encryption of packets sent between the Switch and a remote SNMP manager auth_nopriv Specifies that authorization will be required but there will be
62. configuration commands in the Command Line Interface CLI are listed along with the appropriate parameters in the following table Command Parameters create md5 key lt key_id 1 255 gt lt password 16 gt config md5 key lt key_id 1 255 gt lt password 16 gt delete md5 key lt key_id 1 255 gt show md5 key lt key_id 1 255 gt Each command is listed in detail in the following sections create md5 key Purpose Used to create a new entry in the MD5 key table Syntax create md5 key lt key_id 1 255 gt lt password 16 gt Description This command is used to create an entry for the MD5 key table Parameters lt key_id 1 255 gt The MD5 key ID The user may enter a key ranging from 1 to 255 lt password gt An MD5 password of up to 16 bytes Restrictions Only administrator level users can issue this command Usage Example To create an entry in the MDS key table DES 6500 4 create md5 key 1 dlink Command create md5 key 1 dlink Success DES 6500 4 config md5 key Purpose Used to enter configure the password for an MD5 key Syntax config md5 key lt key_id 1 255 gt lt password 16 gt Description This command is used to configure an MD5 key and password Parameters lt key_id 1 255 gt The previously defined MD5 key ID lt password 16 gt The user may change the MD5 password for the md5 key A new password of up to 16 characters can be created Restrictions Only adminis
63. configured on the Switch DES 6500 4 show jumbo_frame Command show jumbo_frame Off DES 6500 4 324 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual COMMAND HISTORY LIST The command history list commands in the Command Line Interface CLI are listed along with the appropriate parameters in the following table Command Parameters lt command gt config command_history lt value 1 40 gt Each command is listed in detail in the following sections Purpose Used to display all commands in the Command Line Interface CLI Syntax lt command gt Description This command will display all of the commands available through the Command Line Interface CLI Parameters lt command gt Entering the question mark with an appropriate command will list all the corresponding parameters for the specified command along with a brief description of the commands function and similar commands having the same words in the command Restrictions None Example usage To display all of the commands in the CLI DES 6500 4 clear clear arptable clear counters clear fdb clear log config 802 1p default_priority config 802 1p user_priority config 802 1x auth_mode config 802 1x auth_parameter ports config 802 1x auth_protocol config 802 1x capability ports config 802 1x init config 802 1x reauth config access profile profile_id config account config
64. customize scheduling to set up weighted or round robin class clearing the max_packets values need to be changed Example usage To configure traffic scheduling DES 6500 4 config scheduling 0 max_packet 15 Command config scheduling 0 max_packet 15 Success DES 6500 4 Example usage To configure a Combination Queue with a Class 6 priority class with strict priority and the remaining classes as weighted round robin WRR scheduling DES 6500 4 config scheduling 6 max_packet 0 Command config scheduling 6 max_packet 0 Success DES 6500 4 106 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual show scheduling Purpose Syntax Description Parameters Restrictions Example usage Used to display the currently configured traffic scheduling on the Switch show scheduling The show scheduling command displays the current configuration for the maximum number of packets max_packets assigned to the seven hardware priority classes on the Switch At this value it will empty the seven hardware priority classes in order from the highest priority queue 6 to the lowest priority queue 0 None None To display the current scheduling configuration with Class 1 as the strict priority class of a Combination Queue Class 0 Class 1 Class 2 Class 3 Class 4 Class 5 Class 6 DES 6500 4 DES 6500 4 show scheduling Command show scheduling QO
65. detail in the following sections config ports Purpose Used to configure the Switch s Ethernet port settings Syntax lt portlist gt all speed auto 10_half 10_full 100_half 100_full 1000_full master slave None flow_control enabled disabled learning enabled disabled state enabled disabled description lt desc 32 gt clear Description This command allows for the configuration of the Switch s Ethernet ports Only the ports listed in the lt portlist gt will be affected Parameters all Configure all ports on the Switch lt portlist gt Specifies a range of ports to be configured The port list is specified by listing the lowest switch number and the beginning port number on that switch separated by a colon Then the highest switch number and the highest port number of the range also separated by a colon are specified The beginning and end of the port list range are separated by a dash For example 1 3 specifies switch number 1 port 3 2 4 specifies switch number 2 port 4 1 3 2 4 specifies all of the ports between switch 1 port 3 and switch 2 port 4 in numerical order auto Enables auto negotiation for the specified range of ports 10 100 1000 Configures the speed in Mbps for the specified range of ports half full Configures the specified range of ports as either full or half duplex master slave None The master and slave p
66. display the SSH server setting show ssh server This command allows you to display the current SSH server setting None None 179 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual DES 6500 4 show ssh server Command show ssh server SSH Server Status Disabled SSH Max Session 3 Connection timeout 120 sec Authenticate failed attempts 2 Rekey timeout Never Listened Port Number 22 DES 6500 4 config ssh user Purpose Used to configure the SSH user Syntax config ssh user lt username 15 gt authmode Hostbased hostname lt string gt hostname_IP lt string gt lt ipaddr gt Password Publickey None Description This command allows you to configure the SSH user authentication method Parameters lt username 15 gt Enter a username of no more than 15 characters to identify the SSH user authmode Specifies the authentication mode of the SSH user wishing to log on to the Switch The administrator may choose between Hostbased This parameter should be chosen to use a remote SSH server for authentication purposes Choosing this parameter requires the user to input the following information to identify the SSH user hostname lt string gt Enter an alphanumeric string of up to 31 characters identifying the remote SSH user hostname_IP_ lt string gt lt ipaddr gt Enter the hostname and the corresponding IP address of the SSH user Pass
67. even if the high CPU utilization is not caused by the high reception rate of broadcast IP packets b When fuzzy is chosen the Switch will minimize the IP packet bandwidth received by the Switch by adjusting the bandwidth for all IP packets by setting a acceptable bandwidth for both unicast and broadcast IP packets The Switch uses an internal algorithm to filter IP packets through while adjusting the bandwidth dynamically IP packets may also be limited by the Switch by configuring only certain IP addresses to be accepted This method can be accomplished through the CPU Interface Filtering mechanism explained in the previous section Once the user configures these acceptable IP addresses other packets containing different IP addresses will be dropped by the Switch thus limiting the bandwidth of IP packets To keep the process moving fast be sure not to add many conditions on which to accept these acceptable IP addresses and their packets this limiting the CPU utilization Once in Exhausted mode the packet flow will decrease by half of the level that caused the Switch to enter Exhausted mode After the packet flow has stabilized the rate will initially increase by 25 and then return to a normal packet flow NOTICE When the Safeguard Engine is enabled the Switch will allot om bandwidth to various traffic flows ARP IP using the FFP Fast Filter Processor metering table to control the CPU utilization and limit traffic This may limit the s
68. group list server_group lt string 15 gt Adding this parameter will require the user to be authenticated using a user defined server group previously configured on the Switch local Adding this parameter will require the user to be 156 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual config authen_login authenticated using the local user account database on the Switch none Adding this parameter will require no authentication to access the Switch method_list_name Enter a previously implemented method list name defined by the user The user may add one or a combination of up to four 4 of the following authentication methods to this method list tacacs Adding this parameter will require the user to be authenticated using the TACACS protocol from a remote TACACS server xtacacs Adding this parameter will require the user to be authenticated using the XTACACS protocol from a remote XTACACS server tacacs Adding this parameter will require the user to be authenticated using the TACACS protocol from a remote TACACS server radius Adding this parameter will require the user to be authenticated using the RADIUS protocol from a previously configured RADIUS server server_group lt string 15 gt Adding this parameter will require the user to be authenticated using a user defined server group previously configured on the Switch local Adding this parameter will requir
69. gt protocol_id lt value 0 255 gt user_define lt hex 0x0 Oxffffffff gt permit deny packet_content offset_0 15 lt hex 0x0 Oxffffffff gt lt hex 0x0 Oxffffffff gt lt hex 0x0 Oxffffffff gt lt hex 0x0 Oxffffffff gt offset_16 31 lt hex 0x0 Oxffffffff gt lt hex 0x0 Oxffffffff gt lt hex 0x0 Oxffffffff gt lt hex 0x0 Oxffffffff gt offset_32 47 lt hex 0x0 Oxffffffff gt lt hex 0x0 Oxffffffff gt lt hex 0x0 Oxffffffff gt lt hex 0x0 Oxffffffff gt offset_48 63 lt hex 0x0 Oxffffffff gt lt hex 0x0 Oxffffffff gt lt hex 0x0 Oxffffffff gt lt hex 0x0 Oxffffffff gt offset_64 79 lt hex 0x0 Oxffffffff gt lt hex 0x0 Oxffffffff gt lt hex 0x0 Oxffffffff gt lt hex 0x0 Oxffffffff gt port lt portlist gt all permit deny delete access id lt value 1 100 gt Description The config cpu access_profile command is used to configure a cpu access profile for CPU Interface Filtering and to enter specific values that will be combined using a logical AND operation method with masks entered with the create cpu access_profile command above Parameters profile_id lt value 1 5 gt Enter an integer used to identify the access profile that will be configured with this command This value is assigned to the access profile when it is created with the create access_profile command The profile ID sets the relative priority for the profile and specifies an index number that will identify the access profile being
70. gt lt hex 0x0 Oxffffffff gt lt hex0x0 OxffffffffrH port lt port gt permit priority lt value 0 7 gt replace_priority replace_dscp lt value 0 63 gt deny delete lt value 1 65535 gt This command is used to set the rule for a previously configured access profile setting based on packet content mask These rules will determine if the Switch will forward or filter the identified packets based on user configuration specified in this command Users will set bytes to identify by entering them in hex form offset from the first byte of the packet profile_id lt value 1 8 gt Enter an integer between 1 and 8 that is used to identify the access profile that will be configured with this command This value is assigned to the access profile when it is created with the create access_profile command The lower the profile ID the higher the priority the rule will be given add access_id lt value 1 65535 gt Adds an additional rule to the above specified access profile The value specifies the relative priority of the additional rule Up to 65535 different rules may be configured for the Packet Content access profile packet_content Specifies that the Switch will mask the packet header beginning with the offset value specified as follows e offset_0 15 Enter a value in hex form to mask the packet from the beginning of the packet to the 15th byte offset_ 16 31 Enter a value in hex form to mask the packet from byte
71. hex 0x0 Oxfffff gt source_ipv6 lt ipv6addr gt destionation_ipv6 lt ipv6addr gt port lt port gt permit priority lt value 0 7 gt replace_priority deny delete lt value 1 65535 gt This command is used to define the rules used by the Switch to either filter or forward packets based on the IPv6 part of each packet header profile_id lt value 1 8 gt Enter an integer between 1 and 8 that is used to identify the access profile that will be configured with this command This value is assigned to the access profile when it is created with the create access_profile command The lower the profile ID the higher the priority the rule will be given add access_id lt value 1 65535 gt Adds an additional rule to the above specified access profile The value specifies the relative priority of the additional rule Up to 65535 different rules may be configured for the IPv6 access profile ipv6 Specifies that the Switch will look into the IPv 6 fields in each packet with emphasis on one or more of the following fields e class lt value 0 255 gt Entering this parameter will instruct the Switch to examine the class field of the IPv6 header This class field is a part of the packet header that is similar to the Type of Service ToS or Precedence bits field in IPv4 flowlabel lt hex Ox0 fffff gt Entering this parameter will instruct the Switch to examine the flow label field of the IPv6 header This flow label fiel
72. in IPv4 flowlabel Entering this parameter will instruct the Switch to examine the flow label field of the IPv6 header This flow label field is used by a source to label sequences of packets such as non default quality of service or real time service packets source_ipv6_mask lt ipv6mask gt Specifies an IP address mask for the source IPv6 address destination_ipv6_mask lt ipv6mask gt Specifies an IP address mask for the destination IPv6 address Restrictions Only administrator level users can issue this command Example usage To create an access profile based on IPv6 classification DES 6500 4 create access_profile ipv6 class flowlabel profile_id 4 Command create access_profile ipv6 class flowlabel profile_id 4 Success DES 6500 4 223 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual config access_profile profile_id ipv6 Purpose Description Parameters Used to configure the IPv6 access profile on the Switch and to define specific values for the rules that will be used to by the Switch to determine if a given packet should be forwarded or filtered Masks entered using the create access_profile command will be combined using a logical AND operational method with the values the Switch finds in the specified frame header fields config access_profile profile_id lt value 1 8 gt add access_id lt value 1 65535 gt ipv6 class lt value 0 255 gt flowlabel lt
73. interface settings for a specific OSPF interface DES 6500 4 show ospf ipif ipif2 Command show ospf ipif ipif2 Interface Name ipif2 Network Medium Type BROADCAST Area ID 1 0 0 0 Priority 1 DR Address 123 234 12 34 Hello Interval 10 Transmit Delay 1 Authentication None Total Entries 1 DES 6500 4 IP Address 123 234 12 34 24 Link Up Metric 1 Administrative State Enabled DR State DR Backup DR Address None Dead Interval 40 Retransmit Time 5 show ospf all Purpose Used to display the current OSPF settings of all the OSPF interfaces on the Switch Syntax show ospf all Description This command will display the current OSPF settings for all OSPF interfaces on the Switch Parameters None Restrictions None Usage Example To display the current OSPF interface settings for all OSPF interfaces on the Switch DES 6500 4 show ospf all Command show ospf all Interface Name System Network Medium Type BROADCAST Area ID 0 0 0 0 Priority 1 DR Address 10 42 73 10 Hello Interval 10 Transmit Delay 1 Authentication None Interface Name ipif2 Network Medium Type BROADCAST Area ID 1 0 0 0 Priority 1 DR Address 123 234 12 34 Hello Interval 10 Transmit Delay 1 Authentication None Total Entries 2 DES 6500 4 IP Address 10 42 73 10 8 Link Up Metric 1 Administrative State Enabled DR State DR Backup DR Address None
74. local2 local use 3 local3 local use 4 local4 local use 5 local5 local use 6 local6 local use 7 local7 OANDOARWN O local0 Specifies that local use 0 messages will be sent to the remote host This corresponds to number 16 from the list above local1 Specifies that local use 1 messages will be sent to the remote host This corresponds to number 17 from the list above local2 Specifies that local use 2 messages will be sent to the remote host This corresponds to number 18 from the list above local3 Specifies that local use 3 messages will be sent to the remote host This corresponds to number 19 from the list above local4 Specifies that local use 4 messages will be sent to the remote host This corresponds to number 20 from the list above local5 Specifies that local use 5 messages will be sent to the remote host This corresponds to number 21 from the list above local6 Specifies that local use 6 messages will be sent to the remote host This corresponds to number 22 from the list above local7 Specifies that local use 7 messages will be sent to the 68 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual config syslog host remote host This corresponds to number 23 from the list above udp_port lt udp_port_number gt Specifies the UDP port number that the syslog protocol will use to send messages to the remote host ipaddress lt ipaddr gt Sp
75. local5 local use 6 local6 local use 7 local7 local0 Specifies that local use 0 messages will be sent to the remote host This corresponds to number 16 from the list above OANDARWBN OO local1 Specifies that local use 1 messages will be sent to the remote host This corresponds to number 17 from the list above local2 Specifies that local use 2 messages will be sent to the remote host This corresponds to number 18 from the list above local3 Specifies that local use 3 messages will be sent to the remote host This corresponds to number 19 from the list above local4 Specifies that local use 4 messages will be sent to the remote host This corresponds to number 20 from the list above local5 Specifies that local use 5 messages will be sent to the remote host This corresponds to number 21 from the list above local6 Specifies that local use 6 messages will be sent to the remote host This corresponds to number 22 from the list above local7 Specifies that local use 7 messages will be sent to the remote host This corresponds to number 23 from the list above udp_port lt udp_port_number gt Specifies the UDP port number that the syslog protocol will use to send messages to the remote host ipaddress lt ipaddr gt Specifies the IP address of the remote host 66 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual create syslog host where syslog messages wi
76. lt hex Ox0 Oxffff gt Specifies a TCP port mask for the source port e dst_port_mask lt hex Ox0 Oxffff gt Specifies a TCP port mask for the destination port flag_mask all urg ack psh rst syn fin Enter the appropriate flag_mask parameter All incoming packets have TCP port numbers contained in them as the forwarding criterion These numbers have flag bits associated with them which are parts of a packet that determine what to do with the packet The user may deny packets by denying certain flag bits within the packets The user may choose between all urg urgent ack acknowledgement psh push rst reset syn synchronize and fin finish udp Specifies that the switch will examine each frame s Universal Datagram Protocol UDP field e src_port_mask lt hex Ox0 Oxffff gt Specifies a UDP port mask for the source port 228 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual create cpu access_profile e dst_port_mask lt hex 0x0 0xffff gt Specifies a UDP port mask for the destination port protocol_id Specifies that the Switch will examine each frame s Protocol ID field e user_define_mask lt hex Ox0 Oxffffffff gt Specifies that the rule applies to the IP protocol ID and the mask options behind the IP header packet_content_mask Specifies that the switch will mask the packet header beginning with the offset value specified as follows
77. lt int 1 255 gt retransmit lt int 1 255 gt delete authen server_host lt ipaddr gt protocol tacacs xtacacs tacacs radius 153 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual Command Parameters config authen parameter lt int 1 255 gt response_timeout config authen parameter lt int 1 255 gt attempt config admin local_ enable lt password 15 gt Each command is listed in detail in the following sections enable authen_policy Purpose Used to enable system access authentication policy Syntax enable authen_policy Description This command will enable an administrator defined authentication policy for users trying to access the Switch When enabled the device will check the method list and choose a technique for user authentication upon login Parameters None Restrictions Only administrator level users can issue this command Example usage To enable the system access authentication policy DES 6500 4 enable authen_policy Command enable authen_policy Success DES 6500 4 disable authen_policy Purpose Used to disable system access authentication policy Syntax disable authen_policy Description This command will disable the administrator defined authentication policy for users trying to access the Switch When disabled the Switch will access the local user account database for username and password verification In addition the Switch will n
78. member of a SIM group Parameters lt ipaddr gt Enter the IP address of the TFTP server to which to upload a configuration file lt path_filename gt Enter a user defined path and file name on the TFTP server to which to upload configuration files lt member_id 1 32 gt Enter this parameter to specify the member to which the user prefers to upload a switch configuration file The user may specify a member or members by adding the ID number of the specified member Restrictions Only administrator level users can issue this command Example usage To upload configuration files to a TFTP server DES 6500 4 upload sim_ms configuration 10 55 47 1 D configuration txt 1 Command upload sim_ms configuration 10 55 47 1 D configuration txt 1 Success DES 6500 4 250 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual TIME AND SNTP COMMANDS The Simple Network Time Protocol SNTP an adaptation of the Network Time Protocol NTP commands in the Command Line Interface CLI are listed along with the appropriate parameters in the following table Command config sntp show sntp enable sntp disable sntp config time config time_zone config dst show time Parameters primary lt ipaddr gt secondary lt ipaddr gt poll interval lt int 30 99999 gt lt date ddmthyyyy gt lt time hh mm ss gt operator hour lt gmt_hour 0 13 gt min lt minute 0 59 gt
79. method list TACACS XTACACS TACACS RADIUS local none for authentication These techniques will be listed in an order preferable and defined by the user for normal user authentication on the Switch and may contain up to eight authentication techniques When a user attempts to access the Switch the Switch will select the first technique listed for authentication If the first technique goes through its server hosts and no authentication is returned the Switch will then go to the next technique listed in the server group for authentication until the authentication has been verified or denied or the list is exhausted Please note that user granted access to the Switch will be granted normal user privileges on the Switch To gain access to admin level privileges the user must enter the enable admin command and then enter a password which was previously configured by the administrator of the Switch 152 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual En NOTE TACACS XTACACS and TACACS are separate entities and are re not compatible The Switch and the server must be configured exactly the d same using the same protocol For example if the Switch is set up for TACACS authentication so must be the host server The Access Authentication Control commands in the Command Line Interface CLI are listed along with the appropriate parameters in the following table C eaen SSCS awam O method_list_name c
80. of a group on a network This interval is calculated as follows robustness variable x query 144 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual config igmp_snooping querier Restrictions Example usage To configure the igmp snooping interval 1 x query response interval Other querier present interval Amount of time that must pass before a multicast router decides that there is no longer another multicast router that is the querier This interval is calculated as follows robustness variable x query interval 0 5 x query response interval Last member query count Number of group specific queries sent before the router assumes there are no local members of a group The default number is the value of the robustness variable By default the robustness variable is set to 2 You might want to increase this value if you expect a subnet to be lossy last_member_query_interval lt sec 1 25 gt The maximum amount of time between group specific query messages including those sent in response to leave group messages Lower this interval to reduce the amount of time it takes a router to detect the loss of the last member of a group state enabled disabled Allows the Switch to be specified as an IGMP Querier or Non querier Only administrator level users can issue this command Success DES 6500 4 DES 6500 4 config igmp_snooping querier default query_interval 125 s
81. of the VLAN for which to display a summary of settings Restrictions None Example usage To display the Switch s current VLAN settings DES 6500 4 show vian Command show vlan VID id VLAN Name default VLAN TYPE 1QVLAN Protocol ID i UserDefinedPid Advertisement Enabled Encap Member ports zd 1 1 24 2 1 2 24 Static ports 1 1 1 24 2 1 2 24 Untagged ports gi 1 1 24 2 1 2 24 Forbidden ports VID 2 VLAN Name v1 VLAN TYPE PROTOCOL Protocol ID ip UserDefinedPid Advertisement Disabled Encap Member ports gt 1 1 1 24 2 1 2 24 Static ports 1 24 2 24 Untagged ports Forbidden ports Total Entries 2 DES 6500 4 125 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual show gvrp Purpose Syntax Description Parameters Restrictions Example usage To display GVRP port status Used to display the GVRP status for a port list on the Switch show gvrp lt portlist gt This command displays the GVRP status for a port list on the Switch lt portlist gt Specifies a range of ports for which the GVRP status is to be displayed The port list is specified by listing the lowest slot number and the beginning port number on that slot separated by a colon Then the highest slot number and the highest port number of the range also separated by a colon are specified The beginning and end of the port list range are separated by a dash For example 1
82. on the Switch Syntax delete snmp view lt view_name 32 gt all lt oid gt Description The delete snmp view command is used to remove an SNMP view previously created on the Switch Parameters lt view_name 32 gt An alphanumeric string of up to 32 characters that identifies the SNMP view to be deleted all Specifies that all of the SNMP views on the Switch will be deleted lt oid gt The object ID that identifies an object tree MIB tree that will be deleted from the Switch Restrictions Only administrator level users can issue this command Example usage To delete a previously configured SNMP view from the Switch DES 6500 4 delete snmp view dlinkview all Command delete snmp view dlinkview all Success DES 6500 4 show snmp view Purpose Used to display an SNMP view previously created on the Switch Syntax show snmp view lt view_name 32 gt Description The show snmp view command displays an SNMP view previously created on the Switch Parameters lt view_name 32 gt An alphanumeric string of up to 32 characters that identifies the SNMP view that will be displayed Restrictions None Example usage To display SNMP view configuration DES 6500 4 show snmp view 36 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual Command show snmp view Vacm View Table Settings View Name Subtree View Type ReadView 1 Included WriteView 1
83. on the Switch Once a user acquires normal user level privileges on the Switch he or she must be authenticated by a method on the Switch to gain administrator privileges on the Switch which is defined by the Administrator A maximum of eight 8 enable method lists can be implemented on the Switch Parameters lt string 15 gt Enter an alphanumeric string of up to 15 characters to define the given enable method list to create Restrictions Only administrator level users can issue this command Example usage To create a user defined method list named Permit for promoting user privileges to Administrator privileges 159 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual DES 6500 4 create authen_enable method_list_name Permit Command show authen_login method_list_name Permit Success DES 6500 4 config authen_enable Purpose Used to configure a user defined method list of authentication methods for promoting normal user level privileges to Administrator level privileges on the Switch Syntax config authen_enable default method_list_name lt string 15 gt method tacacs xtacacs tacacs radius server_group lt string 15 gt local_enable none Description This command is used to promote users with normal level privileges to Administrator level privileges using authentication methods on the Switch Once a user acquires normal user level privileges on the Switch he
84. only have one Commander Switch CS e All switches in a particular SIM group must be in the same IP subnet broadcast domain Members of a SIM group cannot cross a router e ASIM group accepts up to 33 switches numbered 0 32 including the Commander Switch numbered 0 e There is no limit to the number of SIM groups in the same IP subnet broadcast domain however a single switch can only belong to one group e If multiple VLANs are configured the SIM group will only utilize the default VLAN on any switch e SIM allows intermediate devices that do not support SIM This enables the user to manage a switch that are more than one hop away from the CS The SIM group is a group of switches that are managed as a single entity The Switch may take on three different roles Commander Switch CS This is a switch that has been manually configured as the controlling device for a group and takes on the following characteristics It has an IP Address n It is not a commander switch or member switch of another Single IP group 7 It is connected to the member switches through its management VLAN Member Switch MS This is a switch that has joined a single IP group and is accessible from the CS and it takes on the following characteristics n It is not a CS or MS of another IP group It is connected to the CS through the CS management VLAN Candidate Switch CaS This is a switch that is ready to join a SIM group but is n
85. packet to determine if it is to be filtered or forwarded based on one or more of the following e vlan lt vlan_name 32 gt Specifies that the access profile will apply to only this previously created VLAN source_mac lt macaddr gt Specifies that the access profile will apply to only packets with this source MAC address MAC address entries may be made in the following format 000000000000 FFFFFFFFFFFF destination_mac lt macaddr gt Specifies that the access profile will apply to only packets with this destination MAC address MAC address entries may be made in the following format 000000000000 FFFFFFFFFFFF 802 1p lt value 0 7 gt Specifies that the access profile will apply only to packets with this 802 1p priority value ethernet_type lt hex Ox0 Oxffff gt Specifies that the access profile will apply only to packets with this hexadecimal 802 1Q Ethernet type value in the packet header port lt portlist gt The access profile for Ethernet may be defined for each port on the Switch The port list is specified by listing the lowest switch number and the beginning port number on that switch separated by a colon Then the highest switch number and the highest port number of the range also separated by a colon are specified The beginning and end of the port list range are separated by a dash For example 1 3 specifies switch number 1 port 3 2 4 specifies switch number 2 port 4 1 3 2 4 specifies all of the p
86. pausing of the console screen at the end of each page when the show command would display more than one screen of information Parameters None Restrictions Only administrator level users can issue this command Example usage To disable pausing of the screen display when show command output reaches the end of the page DES 6500 4 disable clipaging Command disable clipaging Success DES 6500 4 enable telnet Purpose Used to enable communication with and management of the Switch using the Telnet protocol Syntax enable telnet lt tcp_port_number 1 65535 gt Description This command is used to enable the Telnet protocol on the Switch The user can specify the TCP or UDP port number the Switch will use to listen for Telnet requests Parameters lt tcp_port_number 1 65535 gt The TCP port number TCP ports are numbered between 1 and 65535 The well known TCP port for the Telnet protocol is 23 Restrictions Only administrator level users can issue this command Example usage To enable Telnet and configure port number DES 6500 4 enable telnet 23 Command enable telnet 23 Success DES 6500 4 18 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual disable telnet Purpose Used to disable the Telnet protocol on the Switch Syntax disable telnet Description This command is used to disable the Telnet protocol on the Switch Parameters None Re
87. permanently set in the Switch Keyword refers to authentication using a technique instead of TACACS XTACACS TACACS and RADIUS which are local authentication through the user account on the Switch and none no authentication necessary to access any function on the Switch Parameters default Entering this parameter will display the default method list for users logging on to the Switch method_list_name lt string 15 gt Enter an alphanumeric string of up to 15 characters to define the given method list to view all Entering this parameter will display all the authentication login methods currently configured on the Switch Restrictions Only administrator level users can issue this command Example usage To view all method list configurations DES 6500 4 show authen_login all Command show authen_login all Method List Name Priority Method Name Comment Darren 1 tacacst Built in Group default 1 radius Built in Group GoHabs 1 Newfie User defined Group Trinity 1 local Keyword DES 6500 4 create authen_enable method_list_name Purpose Used to create a user defined method list of authentication methods for promoting normal user level privileges to Administrator level privileges on the Switch Syntax create authen_enable method_list_name lt string 15 gt Description This command is used to promote users with normal level privileges to Administrator level privileges using authentication methods
88. session The user may choose any combination of the following RSA_with_RC4_128 MD5 This ciphersuite combines the RSA key exchange stream cipher RC4 encryption with 128 bit keys and the MD5 Hash Algorithm RSA_with_3DES_EDE_CBC_SHA This ciphersuite combines the RSA key exchange CBC Block Cipher 3DES_EDE encryption and the SHA Hash Algorithm DHE_DSS_with_3DES_EDE_CBC_SHA This ciphersuite combines the DSA Diffie Hellman key exchange CBC Block Cipher 3DES_EDE encryption and SHA Hash Algorithm RSA_EXPORT_with_RC4_40_MD5 This ciphersuite combines the RSA Export key exchange stream cipher RC4 encryption with 40 bit keys The ciphersuites are enabled by default on the Switch yet the SSL status is disabled by default Enabling SSL with a ciphersuite will not enable the SSL status on the Switch Restrictions Only administrator level users can issue this command Example usage To enable SSL on the Switch for all ciphersuites DES 6500 4 enable ssl Command enable ssl Note Web will be disabled if SSL is enabled Success DES 6500 4 E NOTE Enabling SSL on the Switch will enable all ciphersuites upon initial configuration To utilize a particular ciphersuite the user must eliminate Wy other ciphersuites by using the disable ssl command along with the appropriate ciphersuites 185 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual Pe a NOTE En
89. the Switch called a server host and it must include usernames and passwords for authentication When the user is prompted by the Switch to enter usernames and passwords for authentication the Switch contacts the TACACS XTACACS TACACS server to verify and the server will respond with one of three messages A The server verifies the username and password and the user is granted normal user privileges on the Switch B The server will not accept the username and password and the user is denied access to the Switch C The server doesn t respond to the verification query At this point the Switch receives the timeout from the server and then moves to the next method of verification configured in the method list The switch has four built in server groups one for each of the TACACS XTACACS TACACS and RADIUS protocols These built in server groups are used to authenticate users trying to access the Switch The users will set server hosts in a preferable order in the built in server group and when a user tries to gain access to the Switch the Switch will ask the first server host for authentication If no authentication is made the second server host in the list will be queried and so on The built in server group can only have hosts that are running the specified protocol For example the TACACS server group can only have TACACS server hosts The administrator for the Switch may set up 6 different authentication techniques per user defined
90. the Switch using the config ssh user command There are three choices as to the method SSH will use to authorize the user and they are password publickey and hostbased The user may also choose none to use no authentication Configure the encryption algorithm that SSH will use to encrypt and decrypt messages sent between the SSH Client and the SSH Server Finally enable SSH on the Switch using the enable ssh command After following the above steps you can configure an SSH Client on the remote PC and manage the Switch using secure in band communication The Secure Shell SSH commands in the Command Line Interface CLI are listed along with the appropriate parameters in the following table Command Parameters enablessh PO C CCizC config ssh authmode password publickey hostbased enable disable config ssh server maxsession lt int 1 8 gt timeout lt sec 120 600 gt authfail lt int 2 20 gt rekey 10min 30min 6Omin never port lt tcp_port_number 1 65535 gt mows OOOO config ssh user lt username gt authmode Hostbased hostname lt string gt hostname_IP lt string gt lt ipaddr gt Password Publickey show ssh user authmode config ssh algorithm SDES AES128 AES192 AES256 arcfour blowfish cast128 twofish128 twofish192 twofish256 MD5 SHA1 DSA RSA ALL enable disable Each command is listed in detail in the following sections 176
91. the agent to receive packets for the host g lt auth_key 32 32 gt Enter an alphanumeric sting of exactly 32 characters in hex form to define the key that will be used to authorize the agent to receive packets for the host sha Specifies that the HMAC SHA 96 authentication level will be used lt auth password 8 20 gt An alphanumeric sting of between 8 and 20 characters that will be used to authorize the agent to receive packets for the host n lt auth_key 40 40 gt Enter an alphanumeric sting of exactly 40 characters in hex form to define the key that will be used to authorize the agent to receive packets for the host priv Adding the priv privacy parameter will allow for encryption in addition to the authentication algorithm for higher security The user may choose e des Adding this parameter will allow for a 56 bit encryption to be added using the DES 56 standard using lt priv_password 8 16 gt An alphanumeric string of between 8 and 16 characters that will be used to encrypt the contents of messages the host sends to 33 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual create snmp user the agent lt priv_key 32 32 gt Enter an alphanumeric key string of exactly 32 characters in hex form that will be used to encrypt the contents of messages the host sends to the agent none Adding this parameter will add no encryption Restrictions Only adminis
92. the highest slot number and the highest port number of the range also separated by a colon are specified The beginning and end of the port list range are separated by a dash For example 1 3 specifies slot number 1 port 3 2 4 specifies slot number 2 port 4 1 3 2 4 specifies all of the ports between slot 1 port 3 and slot 2 port 4 in numerical order all Configure port security for all ports on the Switch admin_state enabled disabled Enable or disable port security for the listed ports max_learning_addr lt max_lock_no 0 64 gt Use this to limit the number of MAC addresses dynamically listed in the FDB for the ports lock_address_mode Permanent DeleteOnTimeout DeleteOnReset Indicates the method of locking addresses The user has three choices Permanent The locked addresses will not age out after the aging timer expires DeleteOnTimeout The locked addresses will age out after the aging timer expires DeleteOnReset The locked addresses will not age out until the Switch has been reset Only administrator level users can issue this command 28 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual Example usage To configure the port security DES 6500 4 config port_security ports 5 1 5 5 admin_state enabled max_learning_addr 5 lock_address_mode DeleteOnReset Command config port_security ports 5 1 5 5 admin_state enabled max_learning_addr 5 lock_add
93. the highest slot number and the highest port number of the range also separated by a colon are specified The beginning and end of the port list range are separated by a dash For example 1 3 specifies slot number 1 port 3 2 4 specifies slot number 2 port 4 1 3 2 4 specifies all of the ports between slot 1 port 3 and slot 2 port 4 in numerical order all Specifies all of the ports on the Switch state enabled disabled Enables or disables GVRP for the ports specified in the port list ingress_checking enabled disabled Enables or disables ingress checking for the specified port list acceptable_frame tagged_only admit_all This parameter states the frame type that will be accepted by the Switch for this function Tagged_only implies that only VLAN tagged frames will be accepted while admit_all implies tagged and untagged frames will be accepted by the Switch pvid Specifies the default VLAN ID associated with the port Only administrator level users can issue this command To set the ingress checking status the sending and receiving GVRP information 123 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual DES 6500 4 config gvrp 1 1 1 4 state enabled ingress_checking enabled acceptable_frame tagged_only pvid 2 Command config gvrp 1 1 1 4 state enabled ingress_checking enabled acceptable_frame tagged_only pvid 2 Success DES 6500 4 enable gvr
94. the ports between slot 1 port 3 and slot 2 port 4 in numerical order Only administrator level users can issue this command To display LACP port mode settings eee ee ee ee ee ee ONOoahWN gt O lt p Active DES 6500 4 DES 6500 4 show lacp_port 1 1 1 8 Command show lacp_port 1 1 1 8 Port Activity 133 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual IP COMMANDS INCLUDING MULTIPLE IP INTERFACES PER VLAN Multiple IP interfaces per VLAN is a function that allows multiple IP interfaces to be assigned to the same VLAN This is beneficial to the administrator when the number of IPs on the original interface is insufficient and the network administrator wishes not to resize the interface Multiple IP interfaces per VLAN is a function that enables the Switch to be capable of assigning another IP interface on the same VLAN without affecting the original stations or settings of the original interface Two types of interfaces are configured for multiple IP interfaces per VLAN primary and secondary and every IP interface must be classified as one of these A primary interface refers to the first interface created on a VLAN with no exceptions All other interfaces created will be regarded as secondary only and can only be created once a primary interface has been configured There may be five interfaces per VLAN one primary and up to four secondary and they are in most cases
95. the receipt of Hello packets from a neighbor router before the selected area declares that router down An interval between 1 and 65535 seconds can be specified The Dead Interval must be evenly divisible by the Hello Interval authentication Enter the type of authentication preferred The user may choose between e none Choosing this parameter will require no authentication simple lt password 8 gt Choosing this parameter will set a simple authentication which includes a case sensitive password of no more than 8 characters md5 lt key_id 1 255 gt Choosing this parameter will set authentication based on md5 encryption A previously configured MD5 key ID 1 to 255 is required Restrictions Only administrator level users can issue this command Usage Example To create an OSPF virtual interface DES 6500 4 create ospf virtual_link 10 1 12 20 1 1 1 hello_interval 10 Command create ospf virtual_link 10 1 12 20 1 1 1 hello_interval 10 Success DES 6500 4 319 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual config ospf virtual_link Purpose Used to configure the OSPF virtual interface settings Syntax config ospf virtual_link lt area_id gt lt neighbor_id gt hello_interval lt sec 1 65535 gt dead_interval lt sec 1 65535 gt authentication none simple lt password 8 gt md5 lt key_id 1 255 gt Description This command is used to configure the OSPF
96. users can issue this command Example usage 229 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual To delete the cpu access profile with a profile ID of 1 DES 6500 4 delete cpu access_profile profile_id 1 Command delete cpu access_profile profile_id 1 Success DES 6500 4 config cpu access_profile Purpose Used to configure a cpu access profile used for CPU Interface Filtering and to define specific values that will be used to by the Switch to determine if a given packet should be forwarded or filtered Masks entered using the create cpu access_profile command will be combined using a logical AND operation with the values the Switch finds in the specified frame header fields Specific values for the rules are entered using the config cpu access_profile command below config cpu access_profile profile_id lt value 1 5 gt add access_id lt value 1 100 gt ethernet vlan lt vlan_name 32 gt source_mac lt macaddr gt destination_mac lt macaddr gt ethernet_type lt hex 0x0 Oxffff gt permit deny ip vlan lt vlan_name 32 gt source_ip lt ipaddr gt destination_ip lt ipaddr gt dscp lt value 0 63 gt icmp type lt value 0 255 gt code lt value 0 255 gt igmp type lt value 0 255 gt tcp src_port lt value 0 65535 gt dst_port lt value 0 65535 gt urg ack psh rst syn fin udp src_port lt value 0 65535 gt dst_port lt value 0 65535
97. virtual interface settings Parameters lt area_id gt A 32 bit number in the form of an IP address XXX XXX XXX XXX that uniquely identifies the OSPF area in the OSPF domain lt neighbor_id gt The OSPF router ID for the remote area This is a 32 bit number in the form of an IP address XXX XXX XXX XXX that uniquely identifies the remote area s Area Border Router hello_interval lt sec 1 65535 gt Allows the specification of the interval between the transmission of OSPF Hello packets in seconds Between 1 and 65535 seconds can be specified The Hello Interval Dead Interval Authorization Type and Authorization Key should be the same for all routers on the same network dead_interval lt sec 1 65535 gt Allows the specification of the length of time between the receipt of Hello packets from a neighbor router before the selected area declares that router down An interval between 1 and 65535 seconds can be specified The Dead Interval must be evenly divisible by the Hello Interval authentication Enter the type of authentication preferred The user may choose between e none Choosing this parameter will require no authentication simple lt password 8 gt Choosing this parameter will set a simple authentication which includes a case sensitive password of no more than 8 characters md5 lt key_id 1 255 gt Choosing this parameter will set authentication based on md5 encryption A previously con
98. virtual_link lt area_id gt lt neighbor_id gt Description This command will display the current OSPF virtual interface configuration Parameters lt area_id gt A 32 bit number in the form of an IP address XXX XXX XXX XXX that uniquely identifies the OSPF area in the OSPF domain lt neighbor_id gt The OSPF router ID for the remote area This is a 32 bit number in the form of an IP address xxx xxx xxx xxx that uniquely identifies the remote area s Area Border Router This is the router ID of the neighbor router Restrictions None Usage Example To display the current OSPF virtual interface configuration 321 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual DES 6500 4 show ospf virtual_link Command show ospf virtual_link Virtual Interface Configuration Transit Virtual Hello Dead Authentication Link Area ID Neighbor Router Interval Interval Status 10 0 0 0 20 0 0 0 10 60 None DOWN Total Entries 1 DES 6500 4 322 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual JUMBO FRAME COMMANDS Certain switches can support jumbo frames frames larger than the standard Ethernet frame size of 1518 bytes To transmit frames of up to 9216 bytes and 9220 bytes tagged the user can increase the maximum transmission unit MTU size from the default of 1536 by enabling the Jumbo Frame command The jumbo frame commands in the Command Line Interface CLI
99. which members of the SIM group will receive the firmware or switch configuration e all Add this parameter to specify all members of the SIM group will receive the firmware or switch configuration Only administrator level users can issue this command Example usage To download firmware DES 6500 4 DES 6500 4 download sim_ms firmware 10 53 13 94 c dgssri had members all Command download sim_ms firmware 10 53 13 94 c dgssri had members all This device is updating firmware Please wait Download Status ID MAC Address Result 00 01 02 03 04 00 Success 1 2 00 07 06 05 04 03 Success 3 00 07 06 05 04 03 Success To download configuration files 249 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual DES 6500 4 download sim_ms configuration 10 53 13 94 c dgssri txt members all Command download sim_ms configuration 10 53 13 94 c dgssri txt members all This device is updating configuration Please wait Download Status ID MAC Address Result 00 01 02 03 04 00 Success 1 2 00 07 06 05 04 03 Success 3 00 07 06 05 04 03 Success DES 6500 4 upload sim_ms configuration Purpose User to upload a configuration file to a TFTP server from a specified member of a SIM group Syntax upload sim_ms configuration lt ipaddr gt lt path_filename gt lt member_id 1 32 gt Description This command will upload a configuration file to a TFTP server from a specified
100. will examine each frame s IGMP Type field tcp Specifies that the Switch will examine each frames Transport Control Protocol TCP field e src_port_mask lt hex 0x0 Oxffff gt Specifies a TCP port mask for the source port e dst_port_mask lt hex 0x0 Oxffff gt Specifies a TCP port mask for the destination port flag_mask all urg ack psh rst syn fin Enter the appropriate flag_mask parameter All incoming packets have TCP port numbers contained in them as the forwarding criterion These numbers have flag bits associated with them which are parts of a packet that determine what to do with the packet The user may deny packets by denying certain flag bits within the packets The user may choose between all urg urgent ack acknowledgement psh push rst reset syn synchronize and fin finish udp Specifies that the Switch will examine each frame s Universal Datagram Protocol UDP field e src_port_mask lt hex 0x0 Oxffff gt Specifies a UDP port mask for the source port e dst_port_mask lt hex 0x0 Oxffff gt Specifies a UDP port 216 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual create access_profile IP mask for the destination port protocol_id Specifies that the Switch will examine each frame s Protocol ID field e user_define lt hex Ox0 Oxfffffff gt Enter a hexidecimal value that will identify the protocol to be discover
101. 0 Repeating From Apr 2nd Tue 15 00 To Oct 2nd Wed 15 30 Annual From 29 Apr 00 00 To 12 Oct 00 00 DES 6500 4 256 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual ARP COMMANDS The ARP commands in the Command Line Interface CLI are listed along with the appropriate parameters in the following table show arpentry lt ipaddr gt ipaddress config arp_aging time lt value 0 65535 gt Each command is listed in detail in the following sections create arpentry Purpose Used to make a static entry into the ARP table Syntax create arpentry lt ipaddr gt lt macaddr gt Description This command is used to enter an IP address and the corresponding MAC address into the Switch s ARP table Parameters lt jpaddr gt The IP address of the end node or station lt macaddr gt The MAC address corresponding to the IP address above Restrictions Only administrator level users can issue this command Example Usage To create a static ARP entry for the IP address 10 48 74 121 and MAC address 00 50 BA 00 07 36 DES 6500 4 create arpentry 10 48 74 121 00 50 BA 00 07 36 Command create arpentry 10 48 74 121 00 50 BA 00 07 36 Success DES 6500 4 delete arpentry Purpose Used to delete a static entry into the ARP table Syntax delete arpentry lt ipaddr gt all Description This command is used to delete a static ARP entry made using the create ar
102. 0 90 8 0 0 0 0 Disabled Link DOWN 1 ip2 20 1 1 1 8 0 0 0 0 Disabled Link DOWN 1 ip3 30 1 1 1 8 0 0 0 0 Disabled Link DOWN 1 Total Entries 3 OSPF Area Settings Area ID Type Stub Import Summary LSA Stub Default Cost 0 0 0 0 Normal None None 10 0 0 0 Normal None None 10 1 1 1 Normal None None 20 1 1 1 Stub Enabled 1 Total Entries 4 Virtual Interface Configuration Transit Virtual Hello Dead Authentication Link Area ID Neighbor Router Interval Interval Status 10 0 0 0 20 0 0 0 10 60 None DOWN 10 1 1 1 20 1 1 1 10 60 None DOWN Total Entries 2 OSPF Area Aggregation Settings Area ID Aggregated LSDB Advertise Network Address Type Total Entries 0 OSPF Host Route Settings Host Address Metric Area ID Total Entries 1 DES 6500 4 306 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual create ospf area Purpose Used to configure OSPF area settings Syntax create ospf area lt area_id gt type normal stub stub_summary enabled disabled metric lt value 0 65535 gt Description This command is used to create an OSPF area and configure its settings Parameters lt area_id gt The OSPF area ID The user may enter a 32 bit number in the form of an IP address xxx xxx xxx xxx that uniquely identifies the OSPF area in the OSPF domain type normal stub The OSPF area mode of operation stub or normal stub_summary enabled disabled Enables or disables
103. 0 sec TxPeriod 30 sec SuppTimeout 30 sec ServerTimeout 30 sec MaxReq 2 times ReAuthPeriod 3600 sec ReAuthenticate Disabled Bi Quit i Next Page ANEY Next Entry All 194 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual show 802 1x auth_state Purpose Used to display the current authentication state of the 802 1x server on the Switch Syntax show 802 1x auth_state ports lt portlist gt all Description The show 802 1x auth_state command is used to display the current authentication state of the 802 1x Port based Network Access Control server application on the Switch The following details what is displayed Port number Shows the physical port number on the Switch Auth PAE State Initialize Disconnected Connecting Authenticating Authenticated Held ForceAuth ForceUnauth Shows the current state of the Authenticator PAE Backend State Request Response Fail Idle Initialize Success Timeout Shows the current state of the Backend Authenticator Port Status Authorized Unauthorized Shows the result of the authentication process Authorized means that the user was authenticated and can access the network Unauthorized means that the user was not authenticated and cannot access the network Parameters ports lt portlist gt Specifies a range of ports The port list is specified by listing the lowest slot number and the beginning port num
104. 00 4 config account Figure 2 3 Example Command Parameter Help In this case the command config account was entered with the parameter lt username gt The CLI will then prompt to enter the lt username gt with the message Next possible completions Every command in the CLI has this feature and complex commands have several layers of parameter prompting In addition after typing any given command plus one space you can see all of the next possible sub commands in sequential order by repeatedly pressing the Tab key To re enter the previous command at the command prompt press the up arrow cursor key The previous command will appear at the command prompt DES 6500 4 config account Command config account Next possible completions lt username gt DES 6500 4 config account Figure 2 4 Using the Up Arrow to Re enter a Command In the above example the command config account was entered without the required parameter lt username gt the CLI returned the Next possible completions lt username gt prompt The up arrow cursor control key was pressed to re enter the previous command config account at the command prompt Now the appropriate User name can be entered and the config account command re executed All commands in the CLI function in this way In addition the syntax of the help prompts are the same as presented in this manual angle brackets lt gt indicate a numerical value or character string braces
105. 1 0x11111111 0x11111111 0x11111111 offset_16 31 0x11111111 0x11111111 0x11111111 0x11111111 port 1 1 deny Success DES 6500 4 222 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual create access_profile ipv6 Purpose Used to create an access profile on the Switch by examining the IPv6 part of the packet header Masks can be entered that will be combined with the values the Switch finds in the specified frame header fields Specific values for the rules are entered using the config access_profile command below Syntax create access_profile ipv6 profile_id lt value 1 8 gt class flowlabel source_ipv6_mask lt ipv6mask gt destination_ipv6_mask lt ipv6mask gt Description This command is used to identify various parts of IPv6 packets that enter the Switch so they can be either forwarded or filtered Parameters profile_id lt value 1 8 gt Specifies an index number between 1 and 8 that will identify the access profile being created with this command ipv6 Denotes that IPv6 packets will be examined by the Switch for forwarding or filtering based on the rules configured in the config access_ profile command for IPv6 IPv6 packets may be identified by the following e class Entering this parameter will instruct the Switch to examine the class field of the IPv6 header This class field is a part of the packet header that is similar to the Type of Service ToS or Precedence bits field
106. 16 to byte 31 offset_32 47 Enter a value in hex form to mask the packet from byte 32 to byte 47 offset_48 63 Enter a value in hex form to mask the packet from byte 48 to byte 63 offset_64 79 Enter a value in hex form to mask the packet from byte 64 to byte 79 port lt portlist gt The access profile for Ethernet may be defined for each port on the Switch The port list is specified by listing the lowest switch number and the beginning port number on that switch separated by a colon Then the highest switch number and the highest port number of the range also separated by a colon are specified The beginning and end of the port list range are separated by a dash For example 1 3 specifies switch number 1 port 3 2 4 221 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual config access_profile profile_id packet content mask specifies switch number 2 port 4 1 3 2 4 specifies all of the ports between switch 1 port 3 and switch 2 port 4 in numerical order permit Specifies that packets that match the access profile are permitted to be forwarded by the Switch e priority lt value 0 7 gt This parameter is specified to re write the 802 1p default priority previously set in the Switch which is used to determine the CoS queue to which packets are forwarded to Once this field is specified packets accepted by the Switch that match this priority are forwarded to the CoS queue specif
107. 1p priority tag that will be assigned to an incoming untagged packet before being forwarded to its destination Parameters lt portlist gt Specifies a port or range of ports to be viewed The port list is specified by listing the lowest slot number and the beginning port number on that slot separated by a colon Then the highest slot number and the highest port number of the range also separated by a colon are specified The beginning and end of the port list range are separated by a dash For example 1 3 specifies slot number 1 port 3 2 4 specifies slot number 2 port 4 1 3 2 4 specifies all of the ports between slot 1 port 3 and slot 2 port 4 in numerical order Restrictions None 109 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual Example usage To display the current 802 1p default priority configuration on the Switch DES 6500 4 show 802 1p default_priority Command show 802 1p default_priority Port Priority GHBNAGHRWH OS 10 A 2 2 2 2 2 2 2S 2 S S o oOoo0o0o0o000000000000 00000000 DES 6500 4 config scheduling_mechanism Purpose Used to configure the scheduling mechanism for the QoS function Syntax config scheduling mechanism strict weight_fair Description The config scheduling_mechanism command allows the user to select between a Weight Fair WRR and a Strict mechanism for emptying the priority classes of service of the QoS
108. 2 1x user Current Accounts Username Password Darren Trinity Total entries 1 DES 6500 4 192 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual delete 802 1x user Purpose Used to delete an 802 1x user account on the Switch Syntax delete 802 1x user lt username 15 gt Description The delete 802 1x user command is used to delete the 802 1x Port based or MAC based Network Access control local users currently configured on the Switch Parameters lt username 15 gt A username can be as many as 15 alphanumeric characters Restrictions Only administrator level users can issue this command Example Usage To delete 802 1x users DES 6500 4 delete 802 1x user dtremblett Command delete 802 1x user dtremblett Success DES 6500 4 show 802 1x auth_configuration Purpose Used to display the current configuration of the 802 1x server on the Switch Syntax show 802 1x auth_configuration ports lt portlist gt all Description The show 802 1x command is used to display the current configuration of the 802 1x Port based or MAC based Network Access Control server application on the Switch The following details what is displayed 802 1x Enabled Disabled Shows the current status of 802 1x functions on the Switch Authentication Mode Displays the type of authentication mode of the 802 1x function on the Switch This field may read Port_based or MAC based
109. 2 3x 1000BASE LX DEM 331T Transceiver IEEE 802 3x 1000BASE LX DEM 331R Transceiver XFP 10G Support IEEE 802 3ae 10GBASE ER DEM 421XT Transceiver IEEE 802 3ae 10GBASE ER DEM 422XT Transceiver IEEE 802 3ae 10GBASE ER DEM 423XT Transceiver Topology Network Cables UTP Cat 5 Cat 5 Enhanced for 1000Mbps UTP Cat 5 for 100Mbps UTP Cat 3 4 5 for 10Mbps EIA TIA 568 100 ohm screened twisted pair STP 100m 330 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual
110. 3 specifies slot number 1 port 3 2 4 specifies slot number 2 port 4 1 3 2 4 specifies all of the ports between slot 1 port 3 and slot 2 port 4 in numerical order None SGo NDR 11 h h h h m mh mh h d ek M ek ek ek ek ek So 18 DES 6500 4 show gvrp Command show gvrp Global GVRP Disabled PVID d 2 2 2 2 M A _ GVRP Ingress Checking Acceptable Frame Type Disabled Enabled All Frames Disabled Enabled All Frames Disabled Enabled All Frames Disabled Enabled All Frames Disabled Enabled All Frames Disabled Enabled All Frames Disabled Enabled All Frames Disabled Enabled All Frames Disabled Enabled All Frames Disabled Enabled All Frames Disabled Enabled All Frames Disabled Enabled All Frames Disabled Enabled All Frames Disabled Enabled All Frames Disabled Enabled All Frames Disabled Enabled All Frames Disabled Enabled All Frames Disabled Enabled All Frames CTRL C ESC q Quit SPACE n Next Page p Previous Page r Refresh 126 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual LINK AGGREGATION COMMANDS The link aggregation commands in the Command Line Interface CLI are listed along with the appropriate parameters in the following table Command Parameters create link_aggregation group_id lt value 1 32 gt type lacp static delete link_aggregation group_id lt value 1 32 gt config link_aggregation group_id lt value1
111. 32 gt master_port lt port gt ports lt portlist gt state enabled disabled config link_aggregation mac_source mac_destination mac_source_dest ip_source algorithm ip_destination ip_source_destl show link_aggregation group_id lt value 1 32 gt algorithm config lacp_port lt portlist gt mode active passive show lacp_port lt portlist gt Each command is listed in detail in the following sections create link_aggregation Purpose Used to create a link aggregation group on the Switch Syntax create link_aggregation group_id lt value 1 32 gt type lacp static Description This command will create a link aggregation group with a unique identifier Parameters lt value 1 32 gt Specifies the group ID The Switch allows up to 32 link aggregation groups to be configured The group number identifies each of the groups type Specify the type of link aggregation used for the group If the type is not specified the default type is static lacp This designates the port group as LACP compliant LACP allows dynamic adjustment to the aggregated port group LACP compliant ports may be further configured see config lacp_ports LACP compliant must be connected to LACP compliant devices static This designates the aggregated port group as static Static port groups can not be changed as easily as LACP compliant port groups since both linked devices must be manually configured
112. 4 79 lt hex 0x0 Oxffffffff gt lt nex Ox0 Oxffffffff gt lt nex 0x0 Oxffffffff gt lt nex 0x0 Oxffffffff gt 209 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual Command Parameters delete cpu profile_id lt value 1 5 gt access_profile config cpu profile_id lt value 1 5 gt add access_id lt value 1 100 gt ethernet vlan lt vlan_name access_ profile 32 gt source_mac lt macaddr gt destination_mac lt macaddr gt ethernet_type lt hex Ox0 Oxffff gt ip vlan lt vlan_name 32 gt source_ip lt ipaddr gt destination_ip lt ipaddr gt dscp lt value 0 63 gt icmp type lt value 0 255 gt code lt value 0 255 gt igmp type lt value 0 255 gt tcp src_port lt value 0 65535 gt dst_port lt value 0 65535 gt urg ack psh rst syn fin udp src_port lt value 0 65535 gt dst_port lt value 0 65535 gt protocol_id lt value 0 255 gt user_define lt hex 0x0 Oxffffffff gt packet_content offset_0 15 lt hex Ox0 Oxffffffff gt lt hex 0x0 Oxffffffff gt lt hex 0x0 Oxffffffff gt lt nex 0x0 Oxffffffff gt offset_16 31 lt hex Ox0 Oxffffffff gt lt nex 0x0 Oxffffffff gt lt hex Ox0 Oxffffffff gt lt nex 0x0 Oxffffffff gt offset_32 47 lt hex Ox0 Oxffffffff gt lt nex 0x0 Oxffffffff gt lt hex 0x0 Oxffffffff gt lt hex 0x0 Oxffffffff gt offset_48 63 lt hex 0x0 Oxffffffff gt lt hex Ox0 Oxffffffff gt lt hex 0x0 Oxffffffff gt lt hex 0x0 Oxffffff
113. 4 disable ipif s2 Command disable ipif s2 Success DES 6500 4 delete ipif Purpose Used to delete the configuration of an IP interface on the Switch Syntax delete ipif lt ipif_name 12 gt all Description This command will delete the configuration of an IP interface on the Switch Parameters lt ipif_name 12 gt The name of the IP interface to delete all Entering this parameter will delete all the IP interfaces currently configured on the Switch Restrictions None Example usage To delete the IP interface named s2 DES 6500 4 delete ipif s2 Command delete ipif s2 Success DES 6500 4 137 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual show ipif Purpose Used to display the configuration of an IP interface on the Switch Syntax show ipif lt ipif_name 12 gt Description This command will display the configuration of an IP interface on the Switch Parameters lt ipif_name 12 gt The name created for the IP interface to be viewed Restrictions None Example usage To display IP interface settings DES 6500 4 show ipif System Command show ipif System IP Interface Settings Interface Name System Secondary FALSE IP Address 10 48 74 122 MANUAL Subnet Mask 255 0 0 0 VLAN Name default Admin State Enabled Link Status Link UP Member Ports 1 1 1 24 DES 6500 4 E NOTE In the IP Inte
114. 4 show ospf neighbor Command show ospf neighbor IP Address of Router ID of Neighbor Neighbor Neighbor Neighbor Priority State 10 48 74 122 10 2 2 2 1 Total Entries 1 DES 6500 4 show ospf virtual_neighbor Used to display the current OSPF virtual neighbor router table Purpose Syntax show ospf virtual_neighbor lt area_id gt lt neighbor id gt This command will display the current OSPF virtual neighbor router table Description 314 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual show ospf virtual_neighbor Parameters lt area_id gt A 32 bit number in the form of an IP address XXX XXX XXX XXX that uniquely identifies the OSPF area in the OSPF domain lt neighbor_id gt The OSPF router ID for the neighbor This is a 32 bit number in the form of an IP address xxx xxx xxx xxx that uniquely identifies the remote area s Area Border Router Restrictions None Usage Example To display the current OSPF virtual neighbor table DES 6500 4 show ospf virtual_neighbor Command show ospf virtual_neighbor Transit Router ID of IP Address of Virtual Neighbor Area ID Virtual Neighbor Virtual Neighbor State 10 1 1 1 10 2 3 4 10 48 74 111 Exchange Total Entries 1 DES 6500 4 config ospf ipif Purpose Used to configure the OSPF interface settings Syntax config ospf ipif lt ipif_name 12 gt area lt area_id gt priority lt value gt he
115. 5 seconds retransmit lt int 1 255 gt Enter the value in the retransmit field to change how many times the device will resend an authentication request when the TACACS XTACACS TACACS or RADIUS server does not respond Only administrator level users can issue this command To create a TACACS authentication server host with port number 1234 a timeout value of 10 seconds and a retransmit count of 5 DES 6500 4 create authen server_host 10 1 1 121 protocol tacacs port 1234 timeout 10 retransmit 5 Command create authen server_host 10 1 1 121 protocol tacacs port 1234 timeout 10 retransmit 5 Success DES 6500 4 config authen server_host Purpose Syntax Description Parameters Used to configure a user defined authentication server host config authen server_host lt ipaddr gt protocol tacacs xtacacs tacacs radius port lt int 1 65535 gt key lt key_string 254 gt none timeout lt int 1 255 gt retransmit lt 1 255 gt This command will configure a user defined authentication server host for the TACACS XTACACS TACACS and RADIUS security protocols on the Switch When a user attempts to access the Switch with authentication protocol enabled the Switch will send authentication packets to a remote TACACS XTACACS TACACS RADIUS server host on a remote host The TACACS XTACACS TACACS RADIUS server host will then verify or deny the request and return the appropriate message
116. 500 4 show access_profile Command show access_ profile Access Profile Table Access Profile ID 1 TYPE Ethernet MASK Option VLAN 802 1p Access ID 1 Mode Permit replaced priority 1 Ports 1 1 MASK Option Protocol ID Access ID 2 Mode Deny Ports 1 2 226 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual MASK Option Offset 0 15 OxFFFFFFFF OxFFFFFFFF OxFFFFFFFF OxFFFFFFFF Offset 16 31 OxOOOOFFFF OxFFFF0000 0x0000000F 0x0F000000 Access ID 1 Mode Deny Ports 1 1 Offset 0 15 0x11111111 0x11111111 0x11111111 0x11111111 Offset 16 31 0x00001111 0x11110000 0x00000001 0x01000000 Total Entries 3 DES 6500 4 create cpu access_profile Purpose Used to create an access profile specifically for CPU Interface Filtering on the Switch and to define which parts of each incoming frame s header the Switch will examine Masks can be entered that will be combined with the values the Switch finds in the specified frame header fields Specific values for the rules are entered using the config cpu access_profile command below create cpu access_profile profile_id lt value 1 5 gt ethernet vlan source_mac lt macmask gt destination_mac lt macmask gt ethernet_type ip vlan source_ip_mask lt netmask gt destination_ip_mask lt netmask gt dscp icmp type code igmp type tcp src_port_mask lt hex 0x0 0xffff gt dst_port_mask lt hex 0x0 0xf
117. 55 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual NOTE Dual purpose DHCP TFTP server utility software may require entry of the l configuration file name and path within the user interface Alternatively the DHCP software may require creating a separate ext file with the configuration file name p and path in a specific directory on the server Consult the documentation for the DCHP server software if you are unsure When autoconfig is enabled and the Switch is rebooted the normal login screen will appear for a few moments while the autoconfig request i e download configuration is initiated The console will then display the configuration parameters as they are loaded from the configuration file specified in the DHCP or TFTP server This is exactly the same as using a download configuration command After the entire Switch configuration is loaded the Switch will automatically logout the server The configuration settings will be saved automatically and become the active configuration Upon booting up the autoconfig process is initiated the console screen will appear similar to the example below The configuration settings will be loaded in normal order Example usage To enable autoconfiguration on the Switch DES 6500 4 enable autoconfig Command enable autoconfig Success DES 6500 4 DES 6500 Chassis Ethernet Switch Command Line Interface Firmware Build 3 00 B29 Copyright
118. 5535 gt state enabled disabled Description This command is used to configure all of the OSPF interfaces on the Switch using a single group of parameters at one time Parameters area lt area_id gt A 32 bit number in the form of an IP address XXX XXX XXX XXX that uniquely identifies the OSPF area in the OSPF domain priority lt value gt The priority used in the election of the Designated Router DR A number between 0 and 255 hello_interval lt sec 1 65535 gt Allows the specification of the 316 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual config ospf all Restrictions Usage Example interval between the transmission of OSPF Hello packets in seconds Between 1 and 65535 seconds can be specified The Hello Interval Dead Interval Authorization Type and Authorization Key should be the same for all routers on the same network dead_interval lt sec 1 65535 gt Allows the specification of the length of time between the receipt of Hello packets from a neighbor router before the selected area declares that router down An interval between 1 and 65535 seconds can be specified The Dead Interval must be evenly divisible by the Hello Interval metric lt value 1 65535 gt The interface metric 1 to 65535 Entering a 0 will allow automatic calculation of the metric authentication Enter the type of authentication preferred The user may choose between e none
119. Agent Information Option 82 Policy Replace Interface Server 1 Server 2 Server 3 Server 4 System 10 58 44 6 DES 6500 4 Example usage To show a single IP destination of the DHCP relay configuration DES 6500 4 show dhcp_relay ipif System Command show dhcp_relay ipif System Interface Server 1 Server 2 Server 3 Server 4 System 10 58 44 6 DES 6500 4 enable dhcp_relay Purpose Used to enable the DHCP BOOTP relay function on the switch Syntax enable dhcp_relay Description This command is used to enable the DHCP BOOTP relay function on the switch Parameters None Restrictions Only administrator level users can issue this command Example usage To enable DHCP relay DES 6500 4 enable dhcp_relay Command enable dhcp_relay Success DES 6500 4 281 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual disable dhcp_relay Purpose Used to disable the DHCP BOOTP relay function on the switch Syntax disable dhcp_relay Description This command is used to disable the DHCP BOOTP relay function on the switch Parameters None Restrictions Only administrator level users can issue this command Example usage To disable DHCP relay DES 6500 4 disable dhcp_relay Command disable dhcp_relay Success DES 6500 4 282 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual DNS RELAY COMMANDS The DNS relay co
120. CACS protocol may be added to this group radius Use this parameter to utilize the built in RADIUS server protocol on the Switch Only server hosts utilizing the RADIUS protocol may be added to this group lt string 15 gt Enter an alphanumeric string of up to 15 characters to define the previously created server group This group may add any combination of server hosts to it regardless of protocol add delete Enter the correct parameter to add or delete a server host from a server group server_host lt ipaddr gt Enter the IP address of the previously configured server host to add or delete protocol Enter the protocol utilized by the server host There are four options tacacs Use this parameter to define the protocol if the server host is using the TACACS authentication protocol xtacacs Use this parameter to define the protocol if the server host is using the XTACACS authentication protocol tacacs Use this parameter to define the protocol if the server host is using the TACACS authentication protocol radius Use this parameter to define the protocol if the server host is using the RADIUS authentication protocol Restrictions Only administrator level users can issue this command Example usage To add an authentication host to server group group_ 1 DES 6500 4 config authen server_group group_1 add server_host 10 1 1 121 protocol tacacs Command config authen serv
121. Choosing this parameter will require no authentication simple lt password 8 gt Choosing this parameter will set a simple authentication which includes a case sensitive password of no more than 8 characters md5 lt key_id 1 255 gt Choosing this parameter will set authentication based on md5 encryption A previously configured MD5 key ID 1 to 255 is required metric lt value 1 65535 gt This field allows the entry of a number between 1 and 65 535 that is representative of the OSPF cost of reaching the selected OSPF interface The default metric is 1 state enable disable Used to enable or disable this function Only administrator level users can issue this command To configure all of the OSPF interfaces on the Switch with a single group of parameters Success DES 6500 4 DES 6500 4 config ospf all state enable Command config ospf all state enable show ospf ipif Purpose Syntax Description Parameters Restrictions Usage Example Used to display the current OSPF interface settings for the specified interface name show ospf ipif lt ipif_name 12 gt This command will display the current OSPF interface settings for the specified interface name lt ipif_ name 12 gt The IP interface name for which to display the current OSPF interface settings None 317 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual To display the current OSPF
122. D Link Building Networks for People RELEASE 3 Table of Contents Introd ction eiaeia eee eee ee ne eee eer eee ee eee ee er ee ee eee een 1 Using the Console Ci eraser eee eaves eons fesuaea senna duaweatgatea sbeebs cect A A E a ia 4 Command Ayma enn aa Pes a Be eet ae dh oak a Ee aa Ye eee Ng EE a Ee 8 Basie Switch Command sities eevee Ea re A ea Belen Ua ey aaa as ve ea deh Sie TT Pe eet ET bande Les 10 Switch Port Command os sat vees vans udev hes vgs gn veo ve ove o Vac Ves suede due seg Wve vag aeqavy age oban Vas obvious TENENTE vac AEA a ieena 25 Por Security COMMAS os5 a ise Sa eas RNAS ESE LSS aes cae eee eh eet ea aed 28 Network Management SNMP Commands eisereen an aaia ei ri iere ian E en k 31 Switch Utility Commands eri ya A E EE AEU E T A O A E R E T E A 52 Network Monitoring Commands 0 0 cceceeeeeceeccncceeceeeeeeeeeeeceecsecseeeeeeeeeeeseeeeceeeeeeeseeeeeeeaeeeeeeseeeeeeaeeenes 58 Multiple Spanning Tree Protocol MSTP Commands ciecceecseeeeceneceeceeceeeeeeeeceeceaeeceeeeeeeeaseaeeaeaees 75 Forwarding Database Commands ii ic cecaecesedepaede pied een elsuedeee boadednndenderdedeencascwbeshseds A aE ra Ea 89 Broadcast Storm Control Commands atiran naan a Weed cls ee A vied eee aL Neel ahaa 97 OOS Command Sreser Fe an E asia E Ss win wie Unig Tee Taw oo nw vee ea ede a vn ales Ree de a Uae aes eas tas Cae ees 102 Port Mirroring Command So iiss ze sca shies E ces cahuss A Ges wang oweins woke vceede
123. Dead Interval 40 Retransmit Time 5 IP Address 123 234 12 34 24 Link Up Metric 1 Administrative State Enabled DR State DR Backup DR Address None Dead Interval 40 Retransmit Time 5 318 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual create ospf virtual_link Purpose Used to create an OSPF virtual interface Syntax create ospf virtual_link lt area_id gt lt neighbor_id gt hello_interval lt sec 1 65535 gt dead_interval lt sec 1 65535 gt authentication none simple lt password 8 gt md5 lt key_id 1 255 gt Description This command is used to create an OSPF virtual interface Parameters lt area_id gt A 32 bit number in the form of an IP address XXX XXX XXX XXX that uniquely identifies the OSPF area in the OSPF domain lt neighbor_id gt The OSPF router ID for the remote area This is a 32 bit number in the form of an IP address XXX XXX XXX XXX that uniquely identifies the remote area s Area Border Router The router ID of the neighbor router hello_interval lt sec 1 65535 gt Allows the specification of the interval between the transmission of OSPF Hello packets in seconds Between 1 and 65535 seconds can be specified The Hello Interval Dead Interval Authorization Type and Authorization Key should be the same for all routers on the same network dead_interval lt sec 1 65535 gt Allows the specification of the length of time between
124. Description Accounting Address Learning Enabled CTRL C ESC q Quit SPACE n Next Page p Previous Page r Refresh 27 xStack DES 65 00 Modular Layer 3 Chassis Ethernet Switch CLI Manual PORT SECURITY COMMANDS The port security commands in the Command Line Interface CLI are listed along with the appropriate parameters in the following table Command config port_security ports Parameters lt portlist gt all admin_state enabled disabled max_learning_addr lt max_lock_no 0 64 gt lock_address_mode Permanent DeleteOnTimeout DeleteOnReset show port_security ports lt portlist gt delete lt vlan_name 32 gt port lt port gt mac_address lt macaddr gt port_security_entry_vlan_name Each command is listed in detail in the following sections config port_secu Purpose Syntax Description Parameters Restrictions rity ports Used to configure port security settings lt portlist gt all admin_state enabled disabled max_learning_addr lt max_lock_no 0 64 gt lock_address_mode Permanent DeleteOnTimeout DeleteOnReset This command allows for the configuration of the port security feature Only the ports listed in the lt portlist gt are effected lt portlist gt Specifies a range of ports to be displayed The port list is specified by listing the lowest slot number and the beginning port number on that slot separated by a colon Then
125. ES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual config syslog host all severity Severity level indicator as described below Bold font indicates that the corresponding severity level is currently supported on the Switch Numerical Severity Emergency system is unusable Alert action must be taken immediately Critical critical conditions Error error conditions Warning warning conditions Notice normal but significant condition Informational informational messages Debug debug level messages informational Specifies that informational messages will be sent to the remote host This corresponds to number 6 from the list above warning Specifies that warning messages will be sent to the remote host This corresponds to number 4 from the list above all Specifies that all of the currently supported syslog messages that are generated by the Switch will be sent to the remote host facility Some of the operating system daemons and processes have been assigned Facility values Processes and daemons that have not been explicitly assigned a Facility may use any of the local use facilities or they may use the user level Facility Those Facilities that have been designated are shown in the following Bold font indicates that the facility values the Switch currently supports Numerical Facility Code kernel messages user level messages mail system system daemons security authorization mess
126. LI Manual Command show config config_in_NVRAM a a ne OEE DES 6500 Configuration Firmware Build 3 00 B29 Copyright C 2004 2007 D Link Corporation All rights reserved SEES SSE ESETE TENE Se ase oS SOE oe SBOE nS aR eee ome RE eee SNE toe ease DONE SEESE NOTELE NEEE BASIC config serial_port baud_rate 115200 auto_logout never enable telnet 23 enable web 80 enable clipaging STORM config traffic control 1 1 1 26 broadcast disable multicast disable dif disable threshold 128 config traffic control 2 1 2 24 broadcast disable multicast disable dif disable CTRL C ESC q Quit SPACE n Next Page ENTER Next Entry a All show session Purpose Used to display a list of currently logged in users Syntax show session Description This command displays a list of all the users that are logged in at the time the command is issued Parameters None Restrictions None Example usage To display the way that the users logged in DES 6500 4 show session Command show session ID Live Time From Level Name Total Entries 1 CTRL C ESC q Quit SPACE n Next Page ENTER Next Entry a All 14 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual show switch Purpose Used to display information about the Switch Syntax show switch Description This command displays information about the Switch Parameters None Restrictions None Example usage To display the
127. M settings all Used to configure PIM settings for all IP interfaces hello lt sec 1 18724 gt The time in seconds between issuing hello packets to find neighboring routers jp_interval lt sec 1 18724 gt The join prune interval is the time value seconds between transmitting flooding to all interfaces multicast messages to downstream routers and automatically pruning a branch from the multicast delivery tree The jp_interval is also the interval used by the router to automatically remove prune information from a branch of a multicast delivery tree and begin to flood multicast messages to all branches of that delivery tree These two actions are equivalent The range is between 1 and 18724 seconds The default is 60 seconds state enabled disabled This can enable or disable PIM for the specified IP interface The default is disabled Note that PIM settings must also be enabled globally for the Switch with the enable pim described below for PIM to operate on any configured IP interfaces Restrictions Only administrator level users can issue this command Usage Example To configure PIM settings for IP interface System 295 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual Success DES 6500 4 DES 6500 4 config pim ipif System hello 35 jp_interval 70 state enabled Command config pim ipif System hello 35 jp_interval 70 state enabled enable pim Purpose
128. Manual config admin local_enable Parameters lt password 15 gt After entering this command the user will be prompted to enter the old password then a new password in an alphanumeric string of no more than 15 characters and finally prompted to enter the new password again to confirm See the example below Restrictions Only administrator level users can issue this command Example usage To configure the password for the local_enable authentication method DES 6500 4 config admin local_enable Command config admin local_enable Enter the old password Enter the case sensitive new password Enter the new password again for confirmation Success DES 6500 4 175 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual SSH COMMANDS The steps required to use the SSH protocol for secure communication between a remote PC the SSH Client and the Switch the SSH Server are as follows Create a user account with admin level access using the create account admin lt username gt lt password gt command This is identical to creating any other admin lever User account on the Switch including specifying a password This password is used to login to the Switch once secure communication has been established using the SSH protocol Configure the user account to use a specified authorization method to identify users that are allowed to establish SSH connections with
129. Modular Layer 3 Chassis Ethernet Switch CLI Manual enable sim Purpose Used to enable Single IP Management SIM on the Switch Syntax enable sim Description This command will enable SIM globally on the Switch SIM features and functions will not function properly unless this function is enabled Parameters None Restrictions Only administrator level users can issue this command Example usage To enable SIM on the Switch DES 6500 4 enable sim Command enable sim Success DES 6500 4 disable sim Purpose Used to disable Single IP Management SIM on the Switch Syntax disable sim Description This command will disable SIM globally on the Switch Parameters None Restrictions Only administrator level users can issue this command Example usage To disable SIM on the Switch DES 6500 4 disable sim Command disable sim Success DES 6500 4 show sim Purpose Used to view the current information regarding the SIM group on the Switch Syntax show sim candidates lt candidate_id 1 100 gt members lt member_id 1 32 gt group commander_mac lt macaddr gt neighbor 242 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual show sim Description This command will display the current information regarding the SIM group on the Switch including the following SIM Version Displays the current Single IP Management version on the Switch
130. Ns set on the Switch Supported VIDs on the Switch range from ID number 7 to 4094 Restrictions Only administrator level users can issue this command Example usage To configure instance ID 2 to add VID 10 DES 6500 4 config stp instance_id 2 add_vlan 10 Command config stp instance_id 2 add_vlan 10 Success DES 6500 4 Example usage To remove VID 10 from instance ID 2 81 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual DES 6500 4 config stp instance_id 2 remove_vlan 10 Command config stp instance_id 2 remove_vian 10 Success DES 6500 4 delete stp instance_id Purpose Used to delete a STP instance ID from the Switch Syntax delete stp instance_id lt value 1 15 gt Description This command allows the user to delete a previously configured STP instance ID from the Switch Parameters lt value 1 15 gt Enter a value between 1 and 15 to identify the Spanning Tree instance on the Switch Restrictions Only administrator level users can issue this command Example usage To delete STP instance id 2 from the Switch DES 6500 4 delete stp instance_id 2 Command delete stp instance_id 2 Success DES 6500 4 config stp priority Purpose Used to update the STP instance configuration Syntax config stp priority lt value 0 61440 gt instance_id lt value 0 15 gt Description This command is used to update the STP instance configurati
131. OMMANDS The network management commands in the Command Line Interface CLI are listed along with the appropriate parameters in the following table The xStack DES 6500 support the Simple Network Management Protocol SNMP versions 1 2c and 3 You can specify which version of the SNMP you want to use to monitor and control the Switch The three versions of SNMP vary in the level of security provided between the management station and the network device The following table lists the security features of the three SNMP versions SNMP Version Authentication Method Description vl Community String Community String is used for authentication NoAuthNoPriv v2c Community String Community String is used for authentication NoAuthNoPriv v3 Username Username is used for authentication NoAuthNoPriv v3 MD5 or SHA Authentication is based on the HMAC MD5 or HMAC SHA algorithms AuthNoPriv Authentication is based on the HMAC MD5 or HMAC SHA algorithms AuthPriv v3 MD5 DES or SHA DES DES 56 bit encryption is added based on the CBC DES DES 56 standard Each command is listed in detail in the following sections Command Parameters create snmp user create snmp user lt SNMP_name 32 gt lt groupname 32 gt encrypted by_password auth md5 lt auth_password 8 16 gt sha lt auth_password 8 20 gt priv none des lt priv_password 8 16 gt by_key auth md5 lt auth_key 32 32 gt sha lt auth_key 40 40 gt pr
132. Only administrator level users can issue this command Example usage To upload a configuration file 53 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual DES 6500 4 upload cfg_toTFTP 10 48 74 121 c cfg log txt Command upload cfg_to TFTP 10 48 74 121 c cfg log txt Connecting to Servel ssee Done Upload configuration 0 Done DES 6500 4 Purpose Used to test the connectivity between network devices Syntax ping lt ipaddr gt times lt value 1 255 gt timeout lt sec 1 99 gt Description The ping command sends Internet Control Message Protocol ICMP echo messages to a remote IP address The remote IP address will then echo or return the message This is used to confirm connectivity between the Switch and the remote device Parameters lt jpaddr gt Specifies the IP address of the host times lt value 1 255 gt The number of individual ICMP echo messages to be sent The maximum value is 255 The default is 0 timeout lt sec 1 99 gt Defines the time out period while waiting for a response from the remote device A value of 1 to 99 seconds can be specified The default is 1 second Pinging an IP address without the times parameter will ping the target device an infinite amount of times Restrictions None Example usage To ping the IP address 10 48 74 121 four times DES 6500 4 ping 10 48 74 121 times 4 Command ping 10 48 74 121 Reply
133. P engine on the Switch config snmp enginelD lt snmp_enginelD gt The config snmp enginelD command configures a name for the SNMP engine on the Switch lt snmp_engine D gt An alphanumeric string that will be used to identify the SNMP engine on the Switch Only administrator level users can issue this command To give the SNMP agent on the Switch the name 0035636666 Success DES 6500 4 DES 6500 4 config snmp enginelD 0035636666 Command config snmp enginelD 0035636666 show snmp enginelD Purpose Syntax Description Parameters Restrictions Example usage Used to display the identification of the SNMP engine on the Switch show snmp enginelD The show snmp enginelD command displays the identification of the SNMP engine on the Switch None None 39 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual To display the current name of the SNMP engine on the Switch DES 6500 4 show snmp enginelD Command show snmp enginelD SNMP Engine ID 0035636666 DES 6500 4 create snmp group Purpose Used to create a new SNMP group or a table that maps SNMP users to SNMP views Syntax create snmp group lt groupname 32 gt v1 v2c v3 noauth_nopriv auth_nopriv auth_priv read_view lt view_name 32 gt write_view lt view_name 32 gt notify_view lt view_name 32 gt Description The create snmp group command creates a new SNMP
134. P packets except for the Request Identity packets ServerTimeout Shows the length of time to wait for a response from a RADIUS server MaxReq Shows the maximum number of times to retry sending packets to the supplicant ReAuthPeriod Shows the time interval between successive re authentications ReAuthenticate Enabled Disabled Shows whether or not to re authenticate Parameters ports lt portlist gt Specifies a range of ports The port list is specified by listing the lowest slot number and the beginning port number on that slot separated by a colon Then the highest slot number and the highest port number of the range also separated by a colon are specified The beginning and end of the port list range are separated by a dash For example 1 3 specifies slot number 1 port 3 2 4 specifies slot number 2 port 4 1 3 2 4 specifies all of the ports between slot 1 port 3 and slot 2 port 4 in numerical order all denotes all ports on the Switch Restrictions Only administrator level users can issue this command Example usage To display the 802 1x authentication states stacking disabled DES 6500 4 show 802 1x auth_configuration ports 1 1 Command show 802 1x auth_configuration ports 1 1 802 1X Enabled Authentication Mode Port_based Authentication Protocol Radius EAP Port number 21 1 Capability None AdminCrlDir Both OpenCrlDir Both Port Control Auto QuietPeriod 6
135. RRP group Different critical IP addresses may be assigned to different routers participating in the VRRP group and can therefore define multiple routes to the Internet or other critical network connections critical_ip_state enable disable This parameter is used to enable or disable the critical IP address entered above The default is disable Restrictions Only administrator level users can issue this command Example usage To configure a VRRP entry DES 6500 4 config vrrp vrid 1 ipif Trinity state enable priority 100 advertisement_interval 2 Command config vrrp vrid 1 ipif Trinity state enable priority 100 advertisement_interval 2 Success DES 6500 4 config vrrp ipif Purpose To configure the authentication type for the VRRP routers of an IP interface Syntax config vrrp ipif lt ipif_name 12 gt authtype none simple authdata lt string 8 gt ip authdata lt string 16 gt Description This command is used to set the authentication type for the VRRP routers of an IP interface 265 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual config vrrp ipif Parameters ipif lt ipif_name 12 gt Enter the name of a previously configured IP interface for which to configure the VRRP entry This IP interface must be assigned to a VLAN on the Switch authtype Specifies the type of authentication used The authtype must be consistent with all routers participating with
136. S 6500 4 config ipif Purpose Used to configure an IP interface set on the Switch Syntax config ipif lt ipif_name 12 gt ipaddress lt network_address gt vlan lt vlan_name 32 gt state enabled disabled bootp dhcp Description This command is used to configure the System IP interface on the Switch Parameters lt ipif_ name 12 gt Enter the previously created IP interface name desired to be configured ipaddress lt network_address gt IP address and netmask of the IP interface to be configured The address and mask information can be specified using the traditional format for example 10 1 2 3 255 0 0 0 or in CIDR format 10 1 2 3 8 135 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual config ipif vlan lt vlan_name 32 gt The name of the VLAN corresponding to the previously created IP interface If a primary and secondary IP interface are configured for the same VLAN subnet the user cannot change the VLAN of the IP interface state enabled disabled Allows you to enable or disable the IP interface bootp Allows the selection of the BOOTP protocol for the assignment of an IP address to the Switch s System IP interface dhcp Allows the selection of the DHCP protocol for the assignment of an IP address to the Switch s System IP interface Restrictions Only administrator level users can issue this command Example usage To configure
137. S Output Scheduling MAX Packets config 802 1p user_priority Purpose Syntax Description Used to map the 802 1p user priority tags of an incoming packet to one of the seven hardware priority classes of service available on the Switch config 802 1p user_priority lt priority 0 7 gt lt class_id 0 6 gt The config 802 1p user_priority command is used to configure the way the Switch will map an incoming packet based on its 802 1p user priority tag to one of the seven hardware classes of service queues available on the Switch The Switch s default is to map the incoming 802 1p priority values to the seven hardware priority classes of service according to the following chart 802 1p Switch Hardware Value Priority Queue 107 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual config 802 1p user_priority 4 4 5 5 6 6 7 6 Parameters lt priority O 7 gt Specifies which of the eight 802 1p priority tags 0 through 7 to map to one of the Switch s hardware priority classes of service lt class_id gt 0 through 6 lt class_id 0 6 gt Specifies to which of the Switch s hardware priority classes of service the 802 1p priority tags specified above will be mapped Restrictions Only administrator level users can issue this command Example usage To configure 802 1 user priority on the Switch DES 6500 4 config 802 1p user_priority 1 3 Command config 802 1p user_prior
138. Specifies the additional ports as forbidden lt portlist gt A range of ports to add to the VLAN The port list is specified by listing the lowest slot number and the beginning port number on that slot separated by a colon Then the highest slot number and the highest port number of the range also separated by acolon are specified The beginning and end of the port list range are separated by a dash For example 1 3 specifies slot number 1 port 3 2 4 specifies slot number 2 port 4 1 3 2 4 specifies all of the ports between slot 1 port 3 and slot 2 port 4 in numerical order advertisement enabled disabled Enables or disables GVRP on the specified VLAN Only administrator level users can issue this command To add 4 through 8 of module 2 as tagged ports to the VLAN v1 Success DES 6500 4 DES 6500 4 config vlan v1 add tagged 2 4 2 8 Command config vlan v1 add tagged 2 4 2 8 config vian delete Purpose Syntax Description Parameters Used to delete ports from a previously configured VLAN config vlan lt vlan_name 32 gt delete lt portlist gt This command is used to delete ports from the port list of a previously configured VLAN lt vian_name 32 gt The name of the VLAN from which to delete ports lt portlist gt A range of ports to delete from the VLAN The port list is specified by listing the lowest slot number and the beginning port number on that slot separa
139. Stack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual config command_history Purpose Used to configure the command history Syntax config command_history lt value 1 40 gt Description This command is used to configure the command history Parameters lt value 1 40 gt The number of previously executed commands maintained in the buffer Up to 40 of the latest executed commands may be viewed Restrictions None Example usage To configure the command history DES 6500 4 config command_history 20 Command config command_history 20 Success DES 6500 4 327 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual TECHNICAL SPECIFICATIONS Physical and Environmental AC inputs amp External 100 240 VAC 50 60 Hz internal universal power supply Redundant Power Supply Power Consumption 296W DES 6504 30W maximum DES 6505 20W maximum DES 6507 30W maximum DES 6508 27W maximum DES 6509 20W maximum DES 6510 28W maximum DES 6511 296W maximum DES 6512 20 724W maximum Humidity Operating 5 to 95 RH non condensing m Storage 0 to 95 RH non condensing 440 mm x 294 mm x 356 mm 1U 19 inch rack mount width oo Modules 330mm x 281mm x 27 5mm C FCC Part 15 Class A ICES 003 Class Canada ewe EN55022 Class A EN55024 Safety CSA International 328 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual Performance Transmission Metho
140. Switch CLI Manual Example Usage To delete a trusted host with an IP address 10 48 74 121 DES 6500 4 delete trusted_host 10 48 74 121 Command delete trusted_host 10 48 74 121 Success DES 6500 4 enable snmp traps Purpose Used to enable SNMP trap support Syntax enable snmp traps Description The enable snmp traps command is used to enable SNMP trap support on the Switch Parameters None Restrictions Only administrator level users can issue this command Example usage To enable SNMP trap support on the Switch DES 6500 4 enable snmp traps Command enable snmp traps Success DES 6500 4 enable snmp authenticate_traps Purpose Used to enable SNMP authentication trap support Syntax enable snmp authenticate_traps Description This command is used to enable SNMP authentication trap support on the Switch Parameters None Restrictions Only administrator level users can issue this command Example Usage To turn on SNMP authentication trap support DES 6500 4 enable snmp authenticate_traps Command enable snmp authenticate_traps Success DES 6500 4 47 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual show snmp traps Purpose Used to show SNMP trap support on the Switch Syntax show snmp traps Description This command is used to view the SNMP trap support status currently configured on the Switch Parameters None
141. Switch by monitoring the Switch s chip counter This method is only viable for Broadcast and Multicast storms because the chip only has counters for these two types of packets Once a storm has been detected that is once the packet threshold set below has been exceeded the Switch will shutdown the port to all incoming traffic with the exception of STP BPDU packets for a time period specified using the countdown field If this field times out and the packet storm continues the port will be placed in a Shutdown Forever mode which will produce a warning message to be sent to the Trap Receiver Once in Shutdown Forever mode the only method of recovering this port is to manually recoup it using the config traffic control_recover setting seen in the command list below To utilize the Software method of Storm Control choose the shutdown option of the action field in the config traffic control command below The broadcast storm control commands in the Command Line Interface CLI are listed along with the appropriate parameters in the following table Command Parameters config traffic control lt portlist gt all broadcast enabled disabled multicast enabled disabled dif enabled disabled action drop shutdown threshold lt value 0 2047 gt countdown lt value 0 gt lt value 5 30 gt time_interval lt value 5 10 gt config traffic lt portlist gt all control_ recover config traffic trap none storm_occ
142. Switch information DES 6500 4 show switch Command show switch Device Type DES 6500 Chassis Ethernet Switch Unit ID 1 MAC Address DA 10 21 00 00 01 IP Address 10 41 44 22 Manual VLAN Name default Subnet Mask 255 0 0 0 Default Gateway 0 0 0 0 Boot PROM Version Build 00170B20 Firmware Version Build 2 00 B29 Hardware Version 2A1 Device S N System Name DES 6500_ 3 System Location 7th_filr_east_cabinet System Contact Julius_Erving_212 555 6666 Spanning Tree Disabled GVRP Disabled IGMP Snooping Disabled 802 1X Disabled Jumbo Frame Off Clipaging Enabled Port Mirror Disabled SNTP Disabled DHCP Relay Disabled DNSR Status Disabled VRRP Disabled DVMRP Disabled PIM DM Disabled RIP Disabled OSPF Disabled TELNET Enabled TCP 23 WEB Enabled TCP 80 RMON Enabled HOL Prevention State Enabled Syslog Global State Disabled DES 6500 4 15 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual show device_status Purpose Syntax Description Parameters Restrictions Example usage Used to display the current status of the hardware of the Switch show device_status This command displays the current status of the Switch s physical elements None None To show the current hardware status of the Switch RPS1 Status RPS2 Status Not Exist System FAN1 System FAN2 System FAN3 Sys
143. Syntax config ospf host_route lt ipaddr gt area lt area_id gt metric lt value gt Description This command is used to configure an OSPF host route settings Parameters lt ipaddr gt The IP address of the host lt area_id gt A 32 bit number in the form of an IP address XXX XXX XXX XXX that uniquely identifies the OSPF area in the OSPF domain lt value gt A metric between 1 and 65535 that will be advertised for the route Restrictions Only administrator level users can issue this command Usage Example To configure an OSPF host route DES 6500 4 config ospf host_route 10 48 74 122 area 10 1 1 1 metric 2 Command config ospf host_route 10 48 74 122 area 10 1 1 1 metric 2 Success DES 6500 4 show ospf host_route Purpose Used to display the current OSPF host route table Syntax show ospf host_route lt ipaddr gt Description This command will display the current OSPF host route table Parameters lt jpaddr gt The IP address of the host Restrictions None Usage Example To display the current OSPF host route table DES 6500 4 show ospf host_route Command show ospf host_route Host Address Metric Area_ID 10 48 73 21 2 10 1 1 1 10 48 74 122 1 10 1 1 1 Total Entries 2 DES 6500 4 310 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual create ospf aggregation Purpose Used to configure OSPF area aggregation settings Sy
144. _fdb 1 default 01 00 5E 00 00 00 1 1 1 5 1 26 2 26 Static show fdb Purpose Syntax Description Parameters Restrictions Used to display the current unicast MAC address forwarding database show fdb port lt port gt vlan lt vian_name 32 gt mac_address lt macaddr gt static aging_time This command will display the current contents of the Switch s forwarding database port lt port gt The port number corresponding to the MAC destination address Enter the corresponding port of the entry to delete The port is specified by listing the lowest slot number and the beginning port number on that slot separated by a colon For example 1 3 specifies slot number 1 port 3 2 4 specifies slot number 2 port 4 lt vian_name 32 gt The name of the VLAN on which the MAC address resides lt macaddr gt The MAC address that is present in the forwarding database table static Displays the static MAC address entries aging_time Displays the aging time for the MAC address forwarding database None 94 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual Example usage To display unicast MAC address table DES 6500 4 show fdb Command show fdb Unicast MAC Address Aging Time 300 VID VLAN Name MAC Address Port Type 1 default 00 00 39 34 66 9A 1 12 Dynamic 1 default 00 00 51 43 70 00 1 12 Dynamic 1 default 00 00 5E 00 01 01 1 12 D
145. _severity log information system_severity trap critical DES 6500 4 74 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual MULTIPLE SPANNING TREE PROTOCOL MSTP COMMANDS This switch supports three versions of the Spanning Tree Protocol 802 1d STP 802 1w Rapid STP and 802 1s MSTP Multiple Spanning Tree Protocol or MSTP is a standard defined by the IEEE community that allows multiple VLANs to be mapped to a single spanning tree instance which will provide multiple pathways across the network Therefore these MSTP configurations will balance the traffic load preventing wide scale disruptions when a single spanning tree instance fails This will allow for faster convergences of new topologies for the failed instance Frames designated for these VLANs will be processed quickly and completely throughout interconnected bridges utilizing either of the three spanning tree protocols STP RSTP or MSTP This protocol will also tag BPDU packets so receiving devices can distinguish spanning tree instances spanning tree regions and the VLANs associated with them These instances will be classified by an instance_id MSTP will connect multiple spanning trees with a Common and Internal Spanning Tree CIST The CIST will automatically determine each MSTP region its maximum possible extent and will appear as one virtual bridge that runs a single spanning tree Consequentially frames assigned to different VLANs will follow dif
146. abling the SSL function on the Switch will disable the port for the web manager port 80 To log on to the web based manager the entry of your URL must begin with https ex https 10 90 90 90 disable ssl Purpose To disable the SSL function on the Switch Syntax disable ssl ciphersuite RSA_with_RC4_128 MD5 RSA_with_3DES_EDE_CBC_SHA DHE_DSS_with_3DES_EDE_CBC_SHA RSA_EXPORT_with_RC4_40_MD5 Description This command will disable SSL on the Switch and can be used to disable any one or combination of listed ciphersuites on the Switch Parameters ciphersuite A security string that determines the exact cryptographic parameters specific encryption algorithms and key sizes to be used for an authentication session The user may choose any combination of the following RSA_with_RC4_128 MD5 This ciphersuite combines the RSA key exchange stream cipher RC4 encryption with 128 bit keys and the MD5 Hash Algorithm RSA_with_3DES_EDE_CBC_SHA This ciphersuite combines the RSA key exchange CBC Block Cipher 3DES_EDE encryption and the SHA Hash Algorithm DHE _DSS_with_3DES_EDE_CBC_SHA This ciphersuite combines the DSA Diffie Hellman key exchange CBC Block Cipher 3DES_EDE encryption and SHA Hash Algorithm RSA_EXPORT_with_RC4_40_MD5 This ciphersuite combines the RSA Export key exchange stream cipher RC4 encryption with 40 bit keys Restrictions Only administrator level users can issue this command
147. ace all To configure all RIP receiving mode for all IP interfaces authentication enabled disabled Enables or disables authentication for RIP on the Switch e lt password 16 gt Allows the specification of a case sensitive password tx_mode Determines how received RIP packets will be interpreted as RIP version V1 only V2 Only or V1 Compatible V1 and V2 This entry specifies which version of the RIP protocol will be used to transfer RIP packets The disabled entry prevents the reception of RIP packets e disable Prevents the transmission of RIP packets e v1_only Specifies that only RIP v1 packets will be transmitted v1_compatible Specifies that only RIP v1 compatible packets will be transmitted v2_only Specifies that only RIP v2 packets will be transmitted rx_mode Determines how received RIP packets will be interpreted as RIP version V7 only V2 Only or V1 or V2 This entry specifies which version of the RIP protocol will be used to receive RIP packets The Disabled entry prevents the 287 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual config rip reception of RIP packets e v1_only Specifies that only RIP v1 packets will be transmitted v2_only Specifies that only RIP v2 packets will be transmitted v1_or_v2 Specifies that only RIP v1 or v2 packets will be transmitted state enabled disabled Allows RIP to be enabled a
148. ace_filtering command below to enable and disable CPU interface filtering on the Switch Parameters None Restrictions Only administrator level users can issue this command Example Usage To enable CPU interface filtering DES 6500 4 enable cpu_interface_filtering Command enable cpu_interface_filtering Success DES 6500 4 disable cpu_interface_filtering Purpose Used to disable CPU interface filtering on the Switch Syntax disable cpu_interface_filtering Description This command is used in conjunction with the enable cpu_interface_filtering command above to enable and disable CPU interface filtering on the Switch without affecting configurations Parameters None Restrictions Only administrator level users can issue this command Example Usage To disable RMON DES 6500 4 disable cpu_interface_filtering Command disable cpu_interface_filtering Success DES 6500 4 show cpu_interface_filtering Purpose Used to view the current running state of the CPU filtering mechanism on the Switch Syntax show cpu_interface_filtering Description The show cpu_interface_filtering command is used view the current running state of the CPU interface filtering mechanism on the Switch 233 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual show cpu_interface_filtering Parameters None Restrictions Only administrator level users can issue this command Example
149. ack switch family has been future proof designed to provide a stacking architecture with fault tolerance flexibility port density robust security and maximum throughput with a user friendly management interface for the networking professional The Switch can be managed through the Switch s serial port Telnet or the Web based management agent The Command Line Interface CLI can be used to configure and manage the Switch via the serial port or Telnet interfaces This manual provides a reference for all of the commands contained in the CLI Configuration and management of the switch via the Web based management agent is discussed in the User s Guide Accessing the Switch via the Serial Port The Switch s serial port s default settings are as follows e 115200 baud e no parity e 68 data bits e 1 stop bit A computer running a terminal emulation program capable of emulating a VT 100 terminal and a serial port configured as above is then connected to the Switch s serial port via an RS 232 DB 9 cable With the serial port properly connected to a management computer the following screen should be visible If this screen does not appear try pressing Ctrl r to refresh the console screen DES 6500 Chassis Ethernet Switch Command Line Interface Firmware Build 3 80 B29 Copyright C 2004 2007 D Link Corporation All rights reserved UserName Figure 1 1 Initial CLI screen xStack DES 6500 Modular Layer 3 Chassis Ethernet Swit
150. acket pim port_security ports radius rip route router_ports scheduling scheduling_mechanism serial_port session sim snmp sntp ssh ssl stack_information stp switch syslog system_severity time traffic traffic_segmentation trusted_host utilization vlan vrrp DES 6500 4 Figure 2 6 Next possible completions Show Command In the above example all of the possible next parameters for the show command are displayed At the next command prompt the up arrow was used to re enter the show command followed by the account parameter The CLI then displays the user accounts configured on the Switch xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual COMMAND SYNTAX The following symbols are used to describe how command entries are made and values and arguments are specified in this manual The online help contained in the CLI and available through the console interface uses the same syntax ae Note All commands are case sensitive Be sure to disable Caps Lock or l any other unwanted function that changes text case lt angle brackets gt Encloses a variable or value that must be specified Syntax create ipif lt ipif_name gt lt network_address gt lt vlan_name 32 gt secondary state enabled disabled Description In the above syntax example the user must supply an IP interface name in the lt ipif_name gt space a VLAN name in the lt vlan_name 32 gt space and the network address in the lt network_address g
151. ad cfg_to TFTP 10 48 74 121 c cfg setting txt Command download cfg_to TFTP 10 48 74 121 c cfg setting txt Connecting to servet 5 Done Download configuration Done DES 6500 4 Due to a backward compatability issue when a user upgrades to R3 firmware 3 00 B29 all settings previously configured for any ACL function CPU ACL included on the Switch will be lost We recommend that the user save a configuration file of current settings before upgrading to R3 firmware Purpose Used to upload the current switch settings or the switch history log to a TFTP server or a CompactFlash memory card Syntax upload cfg_toTFTP log_toTFTP lt ipaddr gt lt path_filename 64 gt Description This command is used to upload either the Switch s current settings the Switch s history log or firmware to a TFTP server or a CompactFlash memory card Parameters cfg_toTFTP Specifies that the Switch s current settings will be uploaded to the TFTP server log_toTFTP Specifies that the Switch s current log will be uploaded to the TFTP server lt jpaddr gt The IP address of the TFTP server The TFTP server must be on the same IP subnet as the Switch lt path_filename 64 gt Specifies the location of the Switch configuration file on the TFTP server This file will be replaced by the uploaded file from the Switch Restrictions The TFTP server must be on the same IP subnet as the Switch
152. admin local_enable config all_boxes_id config arp_aging time 325 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual config authen_application CTRL C ESC q Quit SPACE n Next Page ENTER Next Entry a All Example usage To display the parameters for a specific command DES 6500 4 config stp Command config stp Command config stp Usage maxage lt value 6 40 gt maxhops lt value1 20 gt hellotime lt value 1 10 gt forwarddelay lt value 4 30 gt txholdcount lt value 1 10 gt fbpdu enable disable Ibd enable disable Ilbd_recover_timer 0 60 1000000 Description Used to update the STP Global Configuration config stp instance_id config stp mst_config_id config stp mst_ports config stp ports config stp priority config stp version DES 6500 4 show command_history Purpose Used to display the command history Syntax show command_history Description This command will display the command history Parameters None Restrictions None Example usage To display the command history DES 6500 4 show command _history Command show command_history show show vlan config router_ports vlan2 add 1 1 1 10 config router_ports vlan2 add config router_ports vlan2 config router_ports show vlan create vlan vlan2 tag 3 create vlan vlan2 tag 2 show router_ports show router ports login DES 6500 4 326 x
153. affic_segmentation Traffic Segmentation Table Port Forward Portlist 1 1 1 1 1 10 2 1 2 12 1 2 1 1 1 10 2 1 2 12 1 3 1 1 1 10 2 1 2 12 1 4 1 1 1 10 2 1 2 12 1 5 1 1 1 10 2 1 2 12 1 6 1 1 1 10 2 1 2 12 1 7 1 1 1 10 2 1 2 12 1 8 1 1 1 10 2 1 2 12 1 9 1 1 1 10 2 1 2 12 1 10 1 1 1 10 2 1 2 12 1 11 1 1 1 10 2 1 2 12 1 12 1 1 1 10 2 1 2 12 1 13 1 1 1 10 2 1 2 12 1 14 1 1 1 10 2 1 2 12 1 15 1 1 1 10 2 1 2 12 1 16 1 1 1 10 2 1 2 12 1 17 1 1 1 10 2 1 2 12 1 18 1 1 1 10 2 1 2 12 R Quit i Next Page ARG Next Entry Jj All 239 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual D LINK SINGLE IP MANAGEMENT COMMANDS Simply put D Link Single IP Management is a concept that will stack switches together over Ethernet instead of using stacking ports or modules Switches using Single IP Management labeled here as SIM must conform to the following rules e SIM is an optional feature on the Switch and can easily be enabled or disabled SIM grouping has no effect on the normal operation of the Switch in the user s network e There are three classifications for switches using SIM The Commander Switch CS which is the master switch of the group Member Switch MS which is a switch that is recognized by the CS a member of a SIM group and a Candidate Switch CaS which is a switch that has a physical link to the SIM group but has not been recognized by the CS as a member of the SIM group e ASIM group can
154. ages messages generated internally by syslog line printer subsystem network news subsystem UUCP subsystem clock daemon security authorization messages FTP daemon NTP subsystem log audit log alert clock daemon local use 0 local0 local use 1 local local use 2 local2 local use 3 local3 local use 4 local4 local use 5 local5 local use 6 local6 local use 7 local7 OANDARWBN O 70 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual config syslog host all local0 Specifies that local use 0 messages will be sent to the remote host This corresponds to number 16 from the list above local1 Specifies that local use 1 messages will be sent to the remote host This corresponds to number 17 from the list above local2 Specifies that local use 2 messages will be sent to the remote host This corresponds to number 18 from the list above local3 Specifies that local use 3 messages will be sent to the remote host This corresponds to number 19 from the list above local4 Specifies that local use 4 messages will be sent to the remote host This corresponds to number 20 from the list above local5 Specifies that local use 5 messages will be sent to the remote host This corresponds to number 21 from the list above local6 Specifies that local use 6 messages will be sent to the remote host This corresponds to number 22 from the list above local7 Specifi
155. al protocol AND type 1 of the external protocol inter e2 Specifies the internal protocol AND type 2 of the external protocol metric lt value 0 16 gt Allows the entry of an OSPF interface cost This is analogous to a Hop Count in the RIP routing protocol Restrictions Only administrator level users can issue this command Example Usage To configure route redistributions DES 6500 4 config route redistribute dst ospf src rip mettype type_1 metric 2 Command config route redistribute dst ospf src rip mettype type_1 metric 2 Success DES 6500 4 delete route redistribute Purpose Used to delete an existing route redistribute configuration on the Switch Syntax delete route redistribute dst rip ospf src rip static local ospf Description This command will delete the route redistribution settings on this switch Parameters dst rip ospf Allows the selection of the protocol on the destination device The user may choose between RIP and OSPF src rip static local ospf Allows the selection of the protocol on the source device The user may choose between RIP static local or OSPF Restrictions Only administrator level users can issue this command 275 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual Example Usage To delete route redistribution settings DES 6500 4 delete route redistribute dst rip src ospf Command delete
156. ame 32 gt Description This command will display the current IGMP snooping group configuration on the Switch Parameters vlan lt vlan_name 32 gt The name of the VLAN for which to view IGMP snooping group configuration information Restrictions None 149 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual Example usage To show igmp snooping group DES 6500 4 show igmp_snooping group Command show igmp_snooping group VLAN Name default Multicast group 224 0 0 2 MAC address 01 00 5E 00 00 02 Reports 1 Port Member 1 16 2 7 VLAN Name default Multicast group 224 0 0 9 MAC address 01 00 5E 00 00 09 Reports 1 Port Member 1 16 2 7 VLAN Name default Multicast group 234 5 6 7 MAC address 01 00 5E 05 06 07 Reports 1 Port Member 1 16 2 9 VLAN Name default Multicast group 236 54 63 75 MAC address 01 00 5E 36 3F 4B Reports 1 Port Member 1 16 2 7 VLAN Name default Multicast group 239 255 255 250 MAC address 01 00 5E 7F FF FA Reports 2 Port Member 1 16 2 7 VLAN Name default Multicast group 239 255 255 254 MAC address 01 00 5E 7F FF FE Reports 1 Port Member 1 16 2 7 Total Entries 6 DES 6500 4 show igmp_snooping forwarding Purpose Used to display the IGMP snooping forwarding table entries on the Switch Syntax show igmp_snooping forwarding vlan lt vlan_name 32 gt Description This command will dis
157. an issue this command To add the default static address 10 48 74 121 with a metric setting of 1 to the routing table DES 6500 4 create iproute default 10 48 74 121 1 Command create iproute default 10 48 74 121 1 Success DES 6500 4 delete iproute Purpose Syntax Description Parameters Restrictions Example Usage Used to delete an IP route entry from the Switch s IP routing table delete iproute lt network_address gt lt ipaddr gt primary backup This command will delete an existing entry from the Switch s IP routing table lt network_address gt IP address and netmask of the IP interface that is the destination of the route The address and mask information can be specified using the traditional format for example 10 1 2 3 255 0 0 0 or in CIDR format 10 1 2 3 8 lt ipaddr gt The gateway IP address for the next hop router primary backup The user may choose between Primary and Backup If the Primary Static Default Route fails the Backup Route will support the entry Please take note that the Primary and Backup entries cannot have the same Gateway Only administrator level users can issue this command To delete a backup static address 10 48 75 121 mask 255 0 0 0 and gateway ipaddr entry of 10 1 1 254 from the routing table DES 6500 4 delete iproute 10 48 74 121 8 10 1 1 254 Command delete iproute 10 48 74 121 8 10 1 1 254 Success DES 6500 4
158. and Example usage To configure 802 1x reauthentication for ports 1 18 on slot 1 DES 6500 4 config 802 1x reauth port_based ports 1 1 1 18 Command config 802 1x reauth port_based ports 1 1 1 18 Success DES 6500 4 201 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual config radius add Purpose Used to add a new RADIUS server Syntax config radius add lt server_index 1 3 gt lt server_ip gt key lt passwd 32 gt default auth_port lt udp_port_number 1 65535 gt acct_port lt udp_port_number 1 65535 gt Description The config radius add command is used to add RADIUS servers to the Switch Parameters lt server_index 1 3 gt Assigns a number to the current set of RADIUS server settings Up to 3 groups of RADIUS server settings can be entered on the Switch The lowest index number will have a higher authenticative priority lt server_ip gt The IP address of the RADIUS server key Specifies that a password and encryption key will be used between the Switch and the RADIUS server lt passwd 32 gt The shared secret key used by the RADIUS server and the Switch Up to 32 characters can be used default Uses the default UDP port number in both the auth_port and acct_port settings auth_port lt udp_port_number gt The UDP port number for authentication requests The default is 1812 acct_port lt udp_port_number gt The UDP port
159. arameters refer to connections running a 1000BASE T cable for connection between the Switch port and other device capable of a gigabit connection The master setting will allow the port to advertise capabilities related to duplex speed and physical layer type The master setting will also determine the master and slave relationship between the two connected physical layers This relationship is necessary for establishing the timing control between the two physical layers The timing control is set ona master physical layer by a local source The slave setting uses loop timing where the timing comes form a data stream received 25 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual config ports Restrictions Example usage from the master If one connection is set for 1000 master the other side of the connection must be set for 1000 slave Any other configuration will result in a link down status for both ports None denotes the Switch will serve no role for stacking flow_control enabled disabled Enable or disable flow control for the specified ports learning enablea disabled Enables or disables the MAC address learning on the specified range of ports state enabled disabled Enables or disables the specified range of ports description lt desc 32 gt Enter an alphanumeric string of no more than 32 characters to describe a selected port interface clear Enter this command to
160. are the determining factor in deciding when incoming packets exceed the Threshold value e value 5 10 The Interval may be set between 5 and 10 seconds with the default setting of 5 seconds Restrictions Only administrator level users can issue this command Example usage To configure traffic control and enable broadcast storm control system wide DES 6500 4 config traffic control 1 1 1 12 broadcast enable action shutdown threshold 1 countdown 10 time_interval 10 Command config traffic control 1 1 1 12 broadcast enable action shutdown threshold 1 countdown 10 time_interval 10 Success DES 6500 4 config traffic control_recover Purpose Used to manually recover ports from a shutdown forever state Syntax config traffic control_recover lt portlist gt all Description This command is used to manually recover ports that have placed in a shutdown forever state due to packet storms occurring on the port Once a port has been placed in a shutdown forever state this is the only available method to recover these disabled ports Parameters lt portlist gt Used to specify ports to manually recover form a shutdown forever state This is specified by listing the lowest switch number and the beginning port number on that switch separated by a colon Then the highest switch number and the highest port number of the range also separated by a colon are specified The beginning and end of the port list range are
161. area aggregation settings DES 6500 4 config ospf aggregation 10 1 1 1 10 48 76 122 16 Isdb_type summary advertise enable Command config ospf aggregation 10 1 1 1 10 48 76 122 16 Isdb_type summary advertise enable Success DES 6500 4 show ospf aggregation Purpose Used to display the current OSPF area aggregation settings Syntax show ospf aggregation lt area_id gt Description This command will display the current OSPF area aggregation settings Parameters lt area_id gt Enter this parameter to view this table by a specific OSPF area ID Restrictions None 312 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual Usage Example To display OSPF area aggregation settings DES 6500 4 show ospf aggregation Command show ospf aggregation OSPF Area Aggregation Settings Area ID Aggregated LSDB Advertise Network Address Type 10 1 1 1 10 0 0 0 8 Summary Enabled 10 1 1 1 20 2 0 0 16 Summary Enabled Total Entries 2 DES 6500 4 show ospf Isdb Purpose Used to display the OSPF Link State Database LSDB Syntax show ospf Isdb area_id lt area_id gt advertise_router lt ipaddr gt type rtrlink netlink summary assummary asextlink Description This command will display the current OSPF Link State Database LSDB Parameters area_id lt area_id gt A 32 bit number in the form of an IP address XXX XXX XXX XXX that uniquely identifies th
162. ast Total Entries 20 DES 6500 4 show arpentry ipaddress Purpose Used to display a specific IP address located in the ARP table Syntax show arpentry ipaddress lt ipaddr gt Description This command is used to display the current settings of a specific IP address located in the ARP table Parameters lt ipif_name 12 gt The name of the IP interface the end node or station for which the ARP table entry was made resides on Restrictions None Example usage 259 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual To display an entry in the ARP table DES 6500 4 show arpentry ipaddress 10 1 1 169 Command show arpentry ipaddress 10 1 1 169 ARP Aging Time 30 Interface IP Address MAC Address Type System 10 1 1 169 00 50 BA 70 E4 4E Dynamic Total Entries 1 DES 6500 4 clear arptable Purpose Used to remove all dynamic ARP table entries Syntax clear arptable Description This command is used to remove dynamic ARP table entries from the Switch s ARP table Static ARP table entries are not affected Parameters None Restrictions Only administrator level users can issue this command Example Usage To remove dynamic entries in the ARP table DES 6500 4 clear arptable Command clear arptable Success DES 6500 4 260 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual VRRP COMMANDS VRRP or Virtual Routin
163. atic Command enable dnsr static Success DES 6500 4 disable dnsr Purpose Used to disable DNS relay on the Switch Syntax disable dnsr cache static Description This command is used in combination with the enable dnsr command above to enable and disable DNS Relay on the Switch Parameters cache This parameter will allow the user to disable the cache lookup for the DNS rely on the Switch static This parameter will allow the user to disable the static table lookup for the DNS rely on the Switch Restrictions Only administrator level users can issue this command Example Usage To disable status of DNS relay DES 6500 4 disable dnsr Command disable dnsr Success DES 6500 4 Example Usage To disable cache lookup for DNS relay 285 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual DES 6500 4 disable dnsr cache Command disable dnsr cache Success DES 6500 4 Example Usage To disable static table lookup for DNS relay DES 6500 4 disable dnsr static Command disable dnsr static Success DES 6500 4 show dnsr Purpose Used to display the current DNS relay status Syntax show dnsr static Description This command is used to display the current DNS relay status Parameters static Allows the display of only the static entries into the DNS relay table If this parameter is omitted the entire DNS r
164. ault method xtacacs tacacs local Command config authen_enable default method xtacacs tacacs local Success DES 6500 4 delete authen_enable method_list_name Purpose Used to delete a user defined method list of authentication methods for promoting normal user level privileges to Administrator level privileges on the Switch Syntax delete authen_enable method_list_name lt string 15 gt Description This command is used to delete a user defined method list of authentication methods for promoting user level privileges to Administrator level privileges Parameters lt string 15 gt Enter an alphanumeric string of up to 15 characters to define the given enable method list to delete Restrictions Only administrator level users can issue this command Example usage To delete the user defined method list Permit DES 6500 4 delete authen_enable method_list_name Permit Command delete authen_enable method_list_name Permit Success DES 6500 4 show authen_enable Purpose Used to display the method list of authentication methods for promoting normal user level privileges to Administrator level privileges on the Switch Syntax show authen_enable default method_list_name lt string 15 gt all Description This command is used to delete a user defined method list of authentication methods for promoting user level privileges to Administrator level privileges The window will display th
165. ayer 3 Chassis Ethernet Switch CLI Manual config multicast_fdb lt portlist gt Specifies a range of ports to be displayed the beginning port number on that slot separated by a colon Then the highest slot number and the highest port number of the range also separated by a colon are specified The beginning and end of the port list range are separated by a dash For example 1 3 specifies slot number 1 port 3 2 4 specifies slot number 2 port 4 1 3 2 4 specifies all of the ports between slot 1 port 3 and slot 2 port 4 in numerical order Restrictions Only administrator level users can issue this command Example usage To add multicast MAC forwarding DES 6500 4 config multicast_fdb default 01 00 00 00 00 01 add 1 1 1 5 Command config multicast_fdb default 01 00 00 00 00 01 add 1 1 1 5 Success DES 6500 4 delete multicast_fdb Purpose Used to delete a static entry from the multicast MAC address forwarding table database Syntax delete multicast_fdb lt vlan_name 32 gt lt macaddr gt Description This command will delete an entry from the Switch s multicast MAC address forwarding database Parameters lt vlan_name 32 gt The name of the VLAN on which the MAC address resides lt macaddr gt The MAC address that will be added to the forwarding table Restrictions Only administrator level users can issue this command Example usage To create multicast MAC forwar
166. be recorded Syntax config system_severity trap log all critical warning information Description This command is used to configure the system severity levels on the Switch When an event occurs on the Switch a message will be sent to the SNMP agent trap the Switch s log or both Events occurring on the Switch are separated into three main categories e Information Events classified as information are basic events occurring on the Switch that are not deemed as problematic such as enabling or disabling various functions on the Switch e Warning Events classified as warning are problematic events that are not critical to the overall function of the Switch but do require attention such as unsuccessful downloads or uploads and failed logins e Critical Events classified as critical are fatal exceptions occurring on the Switch such as hardware failures or spoofing attacks Parameters Choose one of the following to identify where severity messages are to be sent e trap Entering this parameter will define which events occurring on the Switch will be sent to a SNMP agent for analysis e log Entering this parameter will define which events occurring on the Switch will be sent to the Switch s log for analysis e all Entering this parameter will define which events occurring on the Switch will be sent to a SNMP agent and the Switch s log for analysis Choose one of the following to identify what ty
167. ber 1 port 3 2 4 specifies slot number 2 port 4 1 3 2 4 specifies all of the ports between slot 1 port 3 and slot 2 port 4 in numerical order Using this command without adding a portlist entry will show the bandwidth control for all ports in the Switch stack Restrictions None Example usage To display bandwidth control settings 104 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual 1 1 no_limit 1 2 no_limit 1 3 no_limit 1 4 no_limit 1 5 no_limit 1 6 no_limit 1 7 no_limit 1 83 no_limit 1 9 no_limit 1 10 no_limit DES 6500 4 DES 6500 4 show bandwidth_control 1 1 1 10 Command show bandwidth_control 1 1 1 10 Bandwidth Control Table Port RX Rate Mbit sec TX_RATE Mbit sec config scheduling Purpose Syntax Description Used to configure traffic scheduling for each of the Switch s hardware priority classes config scheduling lt class_id 0 6 gt max_packet lt value 0 15 gt The Switch contains seven hardware classes of service per device The Switch s default settings draw down seven hardware classes of service in order from the highest priority class Class 6 to the lowest priority class Class 0 Starting with the highest priority class Class 6 the highest priority class will transmit all of the packets and empty its buffer before allowing the next lower priority class to transmit its packets The next highest priority class will empty befor
168. ber on that slot separated by a colon Then the highest slot number and the highest port number of the range also separated by a colon are specified The beginning and end of the port list range are separated by a dash For example 1 3 specifies slot number 1 port 3 2 4 specifies slot number 2 port 4 1 3 2 4 specifies all of the ports between slot 1 port 3 and slot 2 port 4 in numerical order all Denotes all ports on the Switch Restrictions Only administrator level users can issue this command Example usage To display the 802 1x auth state for Port based 802 1x DES 6500 4 show 802 1x auth_state Command show 802 1x auth_state Port Auth PAE State Backend State Port Status 1 1 ForceAuth Success Authorized 1 2 ForceAuth Success Authorized 1 3 ForceAuth Success Authorized 1 4 ForceAuth Success Authorized 1 5 ForceAuth Success Authorized 1 6 ForceAuth Success Authorized 1 7 ForceAuth Success Authorized 1 8 ForceAuth Success Authorized 1 9 ForceAuth Success Authorized 1 10 ForceAuth Success Authorized 195 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual 1 11 ForceAuth Success Authorized 1 12 ForceAuth Success Authorized 1 13 ForceAuth Success Authorized 1 14 ForceAuth Success Authorized 1 15 ForceAuth Success Authorized 1 16 ForceAuth Success Authorized 1 17 ForceAuth Success Authorized 1 18 ForceAuth Success Authorized 1 19 ForceAuth Success Authorized 1 20
169. ble syslog Command disable syslog 64 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual show syslog Purpose Used to display the syslog protocol status as enabled or disabled Syntax show syslog Description The show syslog command displays the syslog status as enabled or disabled Parameters None Restrictions None Example usage To display the current status of the syslog function DES 6500 4 show syslog Command show syslog Syslog Global State Enabled DES 6500 4 create syslog host Purpose Used to create a new syslog host Syntax create syslog host lt index 1 4 gt severity informational warning all facility local0 local1 local2 local3 local4 local5 local6 local7 udp_port lt udp_port_number gt ipaddress lt ipaddr gt state enabled disabled Description The create syslog host command is used to create a new syslog host Parameters lt index 1 4 gt Specifies that the command will be applied to an index of hosts There are four available indexes numbered 1 through 4 severity Severity level indicator as shown below Bold font indicates that the corresponding severity level is currently supported on the Switch Numerical Severity Code 0 Emergency system is unusable Alert action must be taken immediately Critical critical conditions Error error conditions Warning warning conditions Notice normal but sign
170. c Key Algorithm RSA Enable DSA Enable DES 6500 4 183 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual SSL COMMANDS Secure Sockets Layer or SSL is a security feature that will provide a secure communication path between a host and client through the use of authentication digital signatures and encryption These security functions are implemented through the use of a ciphersuite which is a security string that determines the exact cryptographic parameters specific encryption algorithms and key sizes to be used for an authentication session and consists of three levels 1 Key Exchange The first part of the cyphersuite string specifies the public key algorithm to be used This switch utilizes the Rivest Shamir Adleman RSA public key algorithm and the Digital Signature Algorithm DSA specified here as the DHE DSS Diffie Hellman DHE public key algorithm This is the first authentication process between client and host as they exchange keys in looking for a match and therefore authentication to be accepted to negotiate encryptions on the following level 2 Encryption The second part of the ciphersuite that includes the encryption used for encrypting the messages sent between client and host The Switch supports two types of cryptology algorithms Stream Ciphers There are two types of stream ciphers on the Switch RC4 with 40 bit keys and RC4 with 128 bit keys These keys are used to encrypt me
171. ce CLI are listed along with the appropriate parameters in the following table Command Parameters ona disable vrrp ping create vrrp vrid lt vrid 1 255 gt ipif lt ipif_name 12 gt ipaddress lt ipaddr gt state enable disable priority lt int 1 254 gt advertisement_interval lt int 1 255 gt preempt true false critical_ip lt ipaddr gt critical_ip state enable disable config vrrp vrid lt vrid 1 255 gt ipif lt ipif_name 12 gt state enable disable priority lt int 1 254 gt ipaddress lt ipaddr gt advertisement_interval lt int 1 255 gt preempt true false critical_ip lt ipaddr gt critical_ip state enable disable config vrrp ipif lt ipif_name 12 gt authtype none simple authdata lt string 8 gt ip authdata lt string 16 gt ipif lt ipif_name 12 gt vrid lt vrid 1 255 gt delete vrrp vrid lt vrid 1 255 gt ipif lt ipif_ name 12 gt Each command is listed in detail in the following sections enable vrrp Purpose To enable the VRRP function on the Switch Syntax enable vrrp ping Description This command will enable the VRRP function on the Switch Parameters ping Adding this parameter to the command will allow the virtual IP address to be pinged from other host end nodes to verify connectivity This will only enable the ping connectivity check function To enable the VRRP protocol on the Switch omit this parameter This command is disable
172. cess Control System Provides password checking and authentication and notification of user actions for security purposes utilizing via one or more centralized TACACS servers utilizing the UDP protocol for packet transmission e Extended TACACS XTACACS An extension of the TACACS protocol with the ability to provide more types of authentication requests and more types of response codes than TACACS This protocol also uses UDP to transmit packets e TACACS Terminal Access Controller Access Control System plus Provides detailed access control for authentication for network devices TACACS is facilitated through Authentication commands via one or more centralized servers The TACACS protocol encrypts all traffic between the Switch and the TACACS daemon using the TCP protocol to ensure reliable delivery The Switch also supports the RADIUS protocol for authentication using the Access Authentication Control commands RADIUS or Remote Authentication Dial In User Server also uses a remote server for authentication and can be responsible for receiving user connection requests authenticating the user and returning all configuration information necessary for the client to deliver service through the user RADIUS may be facilitated on this Switch using the commands listed in this section In order for the TACACS XTACACS TACACS security function to work properly a TACACS XTACACS TACACS server must be configured on a device other than
173. cess profile will apply only to packets that have this UDP source port in their header dst_port lt value 0 65535 gt Specifies that the access profile will apply only to packets that have this UDP destination port 231 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual config cpu access_profile in their header protocol_id lt value 0 255 gt Specifies that the Switch will examine the protocol field in each packet and if this field contains the value entered here apply the following rules e user_define_mask lt hex Ox0 Oxffffffff gt Specifies that the rule applies to the IP protocol ID and the mask options behind the IP header packet_content_mask Specifies that the Switch will mask the packet header beginning with the offset value specified as follows e offset_0 15 Enter a value in hex form to mask the packet from byte 0 to byte 15 e offset_16 31 Enter a value in hex form to mask the packet from byte 16 to byte 31 e offset_32 47 Enter a value in hex form to mask the packet from byte 32 to byte 47 e offset_48 63 Enter a value in hex form to mask the packet from byte 48 to byte 63 e offset_64 79 Enter a value in hex form to mask the packet from byte 64 to byte 79 port lt portlist gt The access profile for the CPU may be defined for each port on the Switch The port list is specified by listing the lowest switch number and the beginning port number on that switch
174. ch xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual USING THE CONSOLE CLI The XStack DES 6500 supports a console management interface that allows the user to connect to the Switch s management agent via a serial port and a terminal or a computer running a terminal emulation program The console can also be used over the network using the TCP IP Telnet protocol The console program can be used to configure the Switch to use an SNMP based network management software over the network This chapter describes how to use the console interface to access the Switch change its settings and monitor its operation Note Switch configuration settings are saved to non volatile RAM using the save command The current configuration will then be retained in the Switch s NV RAM and reloaded when the Switch is rebooted If the Switch is rebooted without using the save command the last configuration saved to NV RAM will be loaded Connecting to the Switch The console interface is used by connecting the Switch to a VT100 compatible terminal or a computer running an ordinary terminal emulator program e g the HyperTerminal program included with the Windows operating system using an RS 232C serial cable Your terminal parameters will need to be set to e WVT 100 compatible e 115200 baud e 8 data bits e No parity e One stop bit e No flow control You can also access the same functions over a Telnet interface Once you have
175. ch CLI Manual There is no initial username or password Just press the Enter key twice to display the CLI input cursor DES 6500 4 This is the command line where all commands are input Setting the Switch s IP Address Each switch must be assigned its own IP Address which is used for communication with an SNMP network manager or other TCP IP application for example BOOTP TFTP The Switch s default IP address is 10 90 90 90 You can change the default switch IP address to meet the specification of your networking address scheme The Switch is also assigned a unique MAC address by the factory This MAC address cannot be changed and can be found on the initial boot console screen shown below Boot Procedure 2 00 B20 HAC Address 00 65 00 02 00 00 Please wait loading Y3 00 B29 Runtime image UART init Firmware Version 3 00 B29 DES 6580 CPU Card BoxType DES 6582 Device Discovery Figure 1 2 Boot Screen The Switch s MAC address can also be found in the Web management program on the Switch Information Basic Settings window on the Configuration menu The IP address for the Switch must be set before it can be managed with the Web based manager The Switch IP address can be automatically set using BOOTP or DHCP protocols in which case the actual address assigned to the Switch must be known The IP address may be set using the Command Line Interface CLI over the console serial port as follows 1 Starting
176. characters in the line to the left Up Arrow Repeat the previously entered command Each time the up arrow is pressed the command previous to that displayed appears This way it is possible to review the command history for the current session Use the down arrow to progress sequentially forward through the command history list Down Arrow The down arrow will display the next command in the command history entered in the current session This displays each command sequentially as it was entered Use the up arrow to review previous commands Shifts the cursor to the next field to the left Multiple Page Display Control Keys Displays the next page be displayed be displayed Displays the next page pC Displays the previous page Stops the display of remaining pages when multiple pages are to be displayed Refreshes the pages currently displayed a Displays the remaining pages without pausing between pages Displays the next line or table entry xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual BASIC SWITCH COMMANDS The basic switch commands in the Command Line Interface CLI are listed along with the appropriate parameters in the following table srowaccout sf OSOSOSCSCSCS S show session PO aws S owsa OOOO owsa 15_minutes Ce sf SSCSCSCS CSCSCSCS seme OOO ame S Ce POSS w CSCS ma S w o C config lt string 16 gt username default command_prompt config default greetin
177. clear the port description of the selected port s Only administrator level users can issue this command To configure the speed of port 3 of unit 1 to be 10 Mbps full duplex learning and state enable Success DES 6500 4 DES 6500 4 config ports 1 1 1 3 speed 10_full learning enabled state enabled Command config ports 1 1 1 3 speed 10_full learning enable stated enabled show ports Purpose Syntax Description Parameters Restrictions Example usage Used to display the current configuration of a range of ports show ports lt portlist gt description This command is used to display the current configuration of a range of ports lt portlist gt Specifies a range of ports to be displayed The port list is specified by listing the lowest slot number and the beginning port number on that slot separated by a colon Then the highest slot number and the highest port number of the range also separated by a colon are specified The beginning and end of the port list range are separated by a dash For example 1 3 specifies slot number 1 port 3 2 4 specifies slot number 2 port 4 1 3 2 4 specifies all of the ports between slot 1 port 3 and slot 2 port 4 in numerical order description Adding this parameter to the command will allow the user to view previously configured descriptions set on various ports on the Switch None To display the configuration of all ports on a
178. colon Then the highest slot number and the highest port number of the range also separated by a colon are specified The beginning and end of the port list range are separated by a dash For example 1 3 specifies slot number 1 port 3 2 4 specifies slot number 2 port 4 1 3 2 4 specifies all of the ports between slot 1 port 3 and slot 2 port 4 in numerical order Restrictions Only administrator level users can issue this command Example usage To clear the counters DES 6500 4 clear counters ports 2 7 2 9 Command clear counters ports 2 7 2 9 Success DES 6500 4 62 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual clear log Purpose Used to clear the Switch s history log Syntax clear log Description This command will clear the Switch s history log Parameters None Restrictions Only administrator level users can issue this command Example usage To clear the log information DES 6500 4 clear log Command clear log Success DES 6500 4 Purpose Used to display the Switch history log Syntax show log index lt value_list gt Description This command will display the contents of the Switch s history log Parameters index lt value _list gt Enter a value that corresponds to an entry made in the log Multiple entries may be made in the form of x x where x is the number of an entry in the log The smallest number and therefore t
179. conds Only administrator level users can issue this command SNTP service must be enabled for this command to function enable sntp 251 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual To configure SNTP settings Success DES 6500 4 DES 6500 4 config sntp primary 10 1 1 1 secondary 10 1 1 2 poll interval 30 Command config sntp primary 10 1 1 1 secondary 10 1 1 2 poll interval 30 show sntp Purpose Syntax Description Parameters Restrictions Example usage Used to display the SNTP information show sntp This command will display SNTP settings information including the source IP address time and poll interval None Only administrator level users can issue this command To display SNTP configuration information DES 6500 4 DES 6500 4 show sntp Command show sntp Current Time Source System Clock SNTP Disabled SNTP Primary Server 10 1 1 1 SNTP Secondary Server 10 1 1 2 SNTP Poll Interval 720 sec enable sntp Purpose Syntax Description Parameters Restrictions Example usage To enable the SNTP function Enables SNTP server support enable sntp This will enable SNTP support SNTP service must be separately configured see config sntp Enabling and configuring SNTP support will override any manually configured system time settings None Only administrator level users can issue this command SNTP setting
180. count from 1 to 20 The default is 20 hellotime lt value 1 10 gt The user may set the time interval between transmission of configuration messages by the root device in STP or by the designated router in RSTP thus stating that the Switch is still functioning A time between 1 and 10 seconds may be chosen with a default setting of 2 seconds In MSTP the spanning tree is configured by port and therefore the hellotime must be set using the configure stp ports command for switches utilizing the Multiple Spanning Tree Protocol forwarddelay lt value 4 30 gt The maximum amount of time in seconds that the root device will wait before changing states The user may choose a time between 4 and 30 seconds The default is 15 seconds txholdcount lt value 1 10 gt The maximum number of BDPU Hello packets transmitted per interval Default value 3 fbpdu enable disable Allows the forwarding of STP BPDU packets from other network devices when STP is disabled on the Switch The default is enable ibd enable disable Enabling this feature temporarily blocks STP on the Switch when a BPDU packet has been looped back to the Switch When the Switch detects its own BPDU packet coming back it signifies a loop on the network STP will automatically be blocked and an alert will be sent to the administrator The LBD STP port will restart change to discarding state when the LBD Recover Time times out The default is enabled
181. created with this command Priority is set relative to other profiles where the lowest profile ID has the highest priority add access_id lt value 1 100 gt Adds an additional rule to the above specified access profile The value is used to index the rule created ethernet Specifies that the Switch will look only into the layer 2 part of each packet 230 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual config cpu access_profile vlan lt vlan_name 32 gt Specifies that the access profile will apply to only to this VLAN source _mac lt macaddr gt Specifies that the access profile will apply to this source MAC address destination_mac lt macadadr gt Specifies that the access profile will apply to this destination MAC address ethernet_type lt hex Ox0 Oxffff gt Specifies that the access profile will apply only to packets with this hexadecimal 802 1Q Ethernet type value in the packet header ip Specifies that the Switch will look into the IP fields in each packet e vlan lt vian_name 32 gt Specifies that the access profile will apply to only this VLAN source_ip lt ipaddr gt Specifies that the access profile will apply to only packets with this source IP address destination_ip lt ipaddr gt Specifies that the access profile will apply to only packets with this destination IP address dscp lt value 0 63 gt Specifies that the access profile will appl
182. d Description This command allows the configuration of a link aggregation group that was created with the create link_aggregation command above 128 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual Parameters Restrictions Example usage group _id lt value 1 32 gt Specifies the group ID The Switch allows up to 32 link aggregation groups to be configured The group number identifies each of the groups master_port lt port gt Master port ID Specifies which port by port number of the link aggregation group will be the master port All of the ports in a link aggregation group will share the port configuration with the master port The port is specified by listing the lowest slot number and the beginning port number on that slot separated by a colon For example 1 3 specifies switch number 1 port 3 2 4 specifies switch number 2 port 4 ports lt portlist gt Specifies a range of ports that will belong to the link aggregation group The port list is specified by listing the lowest slot number and the beginning port number on that slot separated by a colon Then the highest slot number and the highest port number of the range also separated by a colon are specified The beginning and end of the port list range are separated by a dash For example 1 3 specifies slot number 1 port 3 2 4 specifies slot number 2 port 4 1 3 2 4 specifies all of the ports between slot 1 port 3 and slot 2
183. d show packet port 2 7 Port number 2 7 A B Frame Size Frame Counts Frames sec Frame Type Total Total sec 64 3275 10 RX Bytes 408973 1657 65 127 755 10 RX Frames 4395 19 128 255 316 1 256 511 145 0 TX Bytes 7918 178 512 1023 15 0 TX Frames 111 2 1024 1518 0 0 C Unicast RX 152 1 Multicast RX 557 2 Broadcast RX 3686 16 L3 Unicast RX 0 0 L3 Unicast TX 0 0 CTRL C ESC q Quit SPACE n Next Page p Previous Page r Refresh show error ports Purpose Used to display the error statistics for a range of ports Syntax show error ports lt portlist gt Description This command will display all of the packet error statistics collected and logged by the Switch for a given port list Parameters lt portlist gt Specifies a range of ports to be displayed The port list is specified by listing the lowest slot number and the beginning port number on that slot separated by a colon Then the highest slot number and the highest port number of the range also separated by a colon are specified The beginning and end of the port list range are separated by a dash For example 1 3 specifies slot number 1 port 3 2 4 specifies slot number 2 port 4 1 3 2 4 specifies all of the ports between slot 1 port 3 and slot 2 port 4 in numerical order Restrictions None 59 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual Example usage To display the errors of the port 3 of module 1 DES 6500 4 show
184. d Store and forward L3 Routing RAM Buffer 256 MB per Linecard 256MB on CPU Card Filtering Address Table 16 K MAC addresses per device 3K IP addresses per device Packet Filtering Full wire speed for all connections Forwarding Rate 148 810 pps per port for 100Mbps 1 488 100 pps per port for 1000Mbps MAC Address Learning Automatic update Forwarding Table Age Max age 10 1000000 seconds Default 300 329 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual Standard IEEE 802 3u 100BASE TX Fast Ethernet IEEE 802 3ab 1000BASE T Gigabit Ethernet IEEE 802 1D Spanning Tree IEEE 802 1w Rapid Spanning Tree IEEE 802 1s Multiple Spanning Tree IEEE 802 1 P Q VLAN IEEE 802 1p Priority Queues IEEE 802 1x Port and MAC Based Access Control IEEE 802 3ad Link Aggregation Control IEEE 802 3x Full duplex Flow Control IEEE 802 3 Nway auto negotiation Protocols CSMA CD Data Transfer Rates Half duplex Full duplex Ethernet 10 Mbps 20Mbps Fast Ethernet 100Mbps 200Mbps Gigabit Ethernet 1000Mbps 2000Mbps 10G Ethernet 10Gbps 20Gbps Fiber Optic SFP Mini GBIC Support IEEE 802 3z 1000BASE LX DEM 310GT Transceiver IEEE 802 3z 1000BASE SX DEM 311GT Transceiver IEEE 802 3z 1000BASE SX DEM 312GT2 Transceiver IEEE 802 3z 1000BASE LH DEM 314GT Transceiver IEEE 802 3z 1000BASE ZX DEM 315GT Transceiver IEEE 802 3x 1000BASE LX DEM 330T Transceiver IEEE 802 3x 1000BASE LX DEM 330R Transceiver IEEE 80
185. d by default Restrictions Only administrator level users can issue this command 261 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual Example Usage To enable VRRP globally on the Switch DES 6500 4 enable vrrp Command enable vrrp Success DES 6500 4 Example usage To enable the virtual IP address to be pinged DES 6500 4 enable vrrp ping Command enable vrrp ping Success DES 6500 4 disable vrrp Purpose To disable the VRRP function on the Switch Syntax disable vrrp ping Description This command will disable the VRRP function on the Switch Parameters ping Adding this parameter to the command will stop the virtual IP address from being pinged from other host end nodes to verify connectivity This will only disable the ping connectivity check function To disable the VRRP protocol on the Switch omit this parameter Restrictions Only administrator level users can issue this command Example usage To disable the VRRP function globally on the Switch DES 6500 4 disable vrrp Command disable vrrp Success DES 6500 4 Example usage To disable the virtual IP address from being pinged DES 6500 4 disable vrrp ping Command disable vrrp ping Success DES 6500 4 262 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual create vrrp vrid Purpose Syntax Description Para
186. d is used by a source to label sequences of packets such as non default quality of service or real time service packets This field is to be defined by the user in hex form source_ipv6 lt ipv6addr gt Specifies an IP address mask for the source IPv6 address destination_ipv6 lt ipv6addr gt Specifies an IP address mask for the destination IPv6 address port lt portlist gt The access profile for Ethernet may be defined for each port on the Switch The port list is specified by listing the lowest switch number and the beginning port number on that switch separated by a colon Then the highest switch number and the highest port number of the range also separated by a colon are specified The beginning and end of the port list range are separated by a dash For example 1 3 specifies switch number 1 port 3 2 4 specifies switch number 2 port 4 1 3 2 4 specifies all of the ports between switch 1 port 3 and switch 2 port 4 in numerical order permit Specifies that packets that match the access profile are permitted to be forwarded by the Switch e priority lt value 0 7 gt This parameter is specified to re write the 802 1p default priority previously set in the Switch which is 224 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual config access_profile profile_id ipv6 used to determine the CoS queue to which packets are forwarded to Once this field is specified packets accepted by
187. d to configure the name for the Switch Syntax config snmp system_name lt sw_name gt Description The config snmp system_name command configures the name of the Switch Parameters lt sw_name gt A maximum of 255 characters is allowed A NULL string is accepted if no name is desired Restrictions Only administrator level users can issue this command Example usage To configure the Switch name for DES 6500 Chassis Switch DES 6500 4 config snmp system_name DES 6500 Chassis Switch Command config snmp system_name DES 6500 Chassis Switch Success DES 6500 4 enable rmon Purpose Used to enable RMON on the Switch Syntax enable rmon Description This command is used in conjunction with the disable rmon command below to enable and disable remote monitoring RMON on the Switch Parameters None Restrictions Only administrator level users can issue this command Example Usage To enable RMON 50 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual DES 6500 4 enable rmon Command enable rmon Success DES 6500 4 disable rmon Purpose Used to disable RMON on the Switch Syntax disable rmon Description This command is used in conjunction with the enable rmon command above to enable and disable remote monitoring RMON on the Switch Parameters None Restrictions Only administrator level users can issue this command Example Usage To disable
188. d to give remote SNMP managers access to MIB objects in the Switch s SNMP agent Restrictions Only administrator level users can issue this command Example usage To delete the SNMP community string dlink DES 6500 4 delete snmp community dlink Command delete snmp community dlink Success DES 6500 4 show snmp community Purpose Used to display SNMP community strings configured on the Switch Syntax show snmp community lt community_string 32 gt Description The show snmp community command is used to display SNMP community strings that are configured on the Switch Parameters lt community_string 32 gt An alphanumeric string of up to 32 characters that is used to identify members of an SNMP community This string is used like a password to give remote SNMP managers access to MIB objects in the Switch s SNMP agent Restrictions None 38 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual Example usage To display the currently entered SNMP community strings DES 6500 4 DES 6500 4 show snmp community Command show snmp community SNMP Community Table Community Name View Name Access Right dlink ReadView read_write private CommunityView read_write public CommunityView read_only Total Entries 3 config snmp enginelD Purpose Syntax Description Parameters Restrictions Example usage Used to configure a name for the SNM
189. db default 00 00 00 00 01 02 port 2 5 Success DES 6500 4 create multicast_fdb Purpose Used to create a static entry to the multicast MAC address forwarding table database Syntax create multicast_fdb lt vlan_name 32 gt lt macaddr gt Description This command will make an entry into the Switch s multicast MAC address forwarding database Parameters lt vian_name 32 gt The name of the VLAN on which the MAC address resides lt macaddr gt The MAC address that will be added to the forwarding table Restrictions Only administrator level users can issue this command Example usage To create multicast MAC forwarding DES 6500 4 create multicast_fdb default 01 00 00 00 00 01 Command create multicast_fdb default 01 00 00 00 00 01 Success DES 6500 4 config multicast_fdb Purpose Used to configure the Switch s multicast MAC address forwarding database Syntax config multicast_fdb lt vlan_name 32 gt lt macaddr gt add delete lt portlist gt Description This command configures the multicast MAC address forwarding table Parameters lt vlan_name 32 gt The name of the VLAN on which the MAC address resides lt macaddr gt The MAC address that will be configured in the multicast forwarding table add delete Add will add ports to the forwarding table Delete will remove ports from the multicast forwarding table 90 xStack DES 6500 Modular L
190. default setting is auto There are two options auto Selecting this parameter for the interna Cost will set quickest route automatically and optimally for an interface The default value is derived from the media speed of the interface value 1 2000000 Selecting this parameter with a value in the range of 1 2000000 will set the quickest route when a loop occurs A lower internalCost represents a quicker transmission priority lt value 0 240 gt Enter a value between 0 and 240 to set the priority for the port interface A higher priority will designate the interface to forward packets first A lower number denotes a higher priority Restrictions Only administrator level users can issue this command Example usage To designate ports through 5 on module one with instance ID 2 to have an auto internalCost and a priority of 16 DES 6500 4 config stp mst_config_id ports 1 1 1 5 instance_id 2 internalCost auto priority 16 Command config stp mst_config_id ports 1 1 1 5 instance_id 2 internalCost auto priority 16 Success DES 6500 4 84 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual show stp Purpose Used to display the Switch s current STP configuration Syntax show stp Description This command displays the Switch s current STP configuration Parameters None Restrictions None Example usage To display the status of STP on the Switch Status 1 STP e
191. ding DES 6500 4 delete multicast_fdb default 01 00 00 00 00 01 Command delete multicast_fdb default 01 00 00 00 00 01 Success DES 6500 4 91 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual config fdb aging_time Purpose Used to set the aging time of the forwarding database Syntax config fdb aging_time lt sec 10 1000000 gt Description The aging time affects the learning process of the Switch Dynamic forwarding table entries which are made up of the source MAC addresses and their associated port numbers are deleted from the table if they are not accessed within the aging time The aging time can be from 10 to 1000000 seconds with a default value of 300 seconds A very long aging time can result in dynamic forwarding table entries that are out of date or no longer exist This may cause incorrect packet forwarding decisions by the Switch If the aging time is too short however many entries may be aged out too soon This will result in a high percentage of received packets whose source addresses cannot be found in the forwarding table in which case the Switch will broadcast the packet to all ports negating many of the benefits of having a switch Parameters lt sec 10 1000000 gt The aging time for the MAC address forwarding database value The value in seconds may be between 10 and 1000000 seconds The default is 300 seconds Restrictions Only administrator level users can issue this c
192. disable Description This command is used to configure a previously created VRRP interface on the Switch Parameters vrid lt vrid 1 255 gt Enter a value between 1 and 255 that uniquely identifies the VRRP group to configure All routers participating in this group must be assigned the same vrid value This value MUST be different from other VRRP groups set on the Switch ipif lt ipif_name 12 gt Enter the name of a previously configured IP interface for which to configure a VRRP entry This IP interface must be assigned to a VLAN on the Switch state enable disable Used to enable and disable the VRRP router on the Switch priority lt int 1 254 gt Enter a value between 1 and 254 to indicate the router priority The VRRP Priority value may determine if a higher priority VRRP router overrides a lower priority VRRP router A higher priority will increase the probability that this router will become the Master router of the group A lower priority will increase the probability that this router will become the backup router VRRP routers that are assigned the same priority value will elect the highest physical IP address as the Master router The default value is 100 The value of 255 is reserved for the router that owns the IP address associated with the virtual router and is therefore set automatically ipaddress lt ipaddr gt Enter the virtual IP address that will be assigned to the VRRP entry This IP address is also
193. e DES 6500 4 show iproute Command show iproute Routing Table IP Address Netmask Gateway Interface Cost Protocol 0 0 0 0 10 1 1 254 System 1 Default 10 0 0 0 8 10 48 74 122 System 1 Local Total Entries 2 DES 6500 4 270 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual ROUTE REDISTRIBUTION COMMANDS The route redistribution commands in the Command Line Interface CLI are listed along with the appropriate parameters in the following table Command create route redistribute dst ospf src create route redistribute config route redistribute dst ospf src config route redistribute dst rip src delete route redistribute Parameters static rip local mettype 1 2 metric lt value 0 16777214 gt static rip local mettype 1 2 metric lt value 0 16777214 gt local static ospf all internal external type_1 type_2 intert e1 inter e2 metric lt value 0 16 gt dst rip ospf src rip local static ospf local static ospf all internal external type_1 type_2 dst rip src intert e1 inter e2 metric lt value 0 16 gt show route redistribute dst rip ospf src rip static local ospf Each command is listed in detail in the following sections create route redistribute dst ospf src Purpose Syntax Description Parameters Restrictions Used to add route redistribution setti
194. e Switch from a TFTP server lt jpaddr gt The IP address of the TFTP server The TFTP server must be on the same IP subnet as the Switch lt path_filename 64 gt The DOS path and filename of the firmware or switch configuration file on the TFTP server For example C 3226S had unit all_line_card cpu lt unitid 1 8 gt all specifies all installed modules except the CPU module cpu specifies the chassis CPU module and lt unitid gt is the unit ID of a specific installed module that will receive the download cfg_fromTFTP Download a switch configuration file from a TFTP server lt jpaddr gt The IP address of the TFTP server The TFTP server must be on the same IP subnet as the Switch lt path_filename 64 gt The DOS path and filename of the firmware or switch configuration file on the TFTP server or CompactFlash card For example C 3226S had 52 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual download increment Allows the download of a partial switch configuration file This allows a file to be downloaded that will change only the Switch parameters explicitly stated in the configuration file All other switch parameters will remain unchanged Restrictions The TFTP server must be on the same IP subnet as the Switch Only administrator level users can issue this command Example usage To download a configuration file DES 6500 4 downlo
195. e also separated by a colon are specified The beginning and end of the port list range are separated by a dash For example 1 3 specifies slot number 1 port 3 2 4 specifies slot number 2 port 4 1 3 2 4 specifies all of the ports between slot 1 port 3 and slot 2 port 4 in numerical order 205 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual show auth_diagnostics all Specifies that all ports will be viewed Restrictions None Example usage To display the current authentication diagnostics for port 16 DES 6500 4 show auth_diagnostics ports 1 16 Command show auth_diagnostics ports 1 16 Port number 1 16 EntersConnecting EapLogoffsWhileConnecting EntersAuthenticating SuccessWhileAuthenticating TimeoutsWhileAuthenticating FailWhileAuthenticating ReauthsWhileAuthenticating EapStartsWhileAuthenticating EapLogoffWhileAuthenticating ReauthsWhileAuthenticated EapStartsWhileAuthenticated EapLogoffWhileAuthenticated BackendResponses BackendAccessChallenges BackendOtherRequestsToSupplicant BackendNonNakResponsesFromSupplicant BackendAuthSuccesses BackendAuthFails CTRL C Fl Quit 32A ff Next Page Eien Next Entry All ooo000o00000000 000009 show auth_session_statistics Purpose Used to display the current authentication session statistics Syntax show auth_session_statistics ports lt portlist gt all Description The show auth_session statistics command is
196. e 1 8 gt Specifies an index number between 1 and 8 that will identify the access profile being created with this command ethernet Specifies that the Switch will examine the layer 2 part of each packet header with emphasis on one or more of the following e vlan Specifies that the Switch will examine the VLAN part of each packet header source_mac lt macmask gt Specifies a MAC address mask for the source MAC address This mask is entered in the following hexadecimal format OOOOO0000000 FFFFFFFFFFFF destination_mac lt macmask gt Specifies a MAC address mask for the destination MAC address in the following format 000000000000 FFFFFFFFFFFF 802 1p Specifies that the Switch will examine the 802 1p priority value in the frame s header ethernet_type Specifies that the Switch will examine the Ethernet type value in each frame s header Restrictions Only administrator level users can issue this command Example usage To create a Ethernet access profile DES 6500 4 create access_profile ethernet vian 802 1p profile_id 1 Command create access_profile ethernet vian 802 1p profile_id 1 Success DES 6500 4 213 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual config access_profile profile_id for Ethernet Purpose Used to configure the Ethernet access profile on the Switch and to define specific values for the rules that will be used to by the Switch to dete
197. e Group messages and is also the amount of time between Group Specific Query and Group and Source specific query messages The default is 1 second state enabled disabled Enables or disables IGMP for the specified IP interface Restrictions Only administrator level users can issue this command Example Usage To configure the IGMP DES 6500 4 config igmp all version 1 state enabled Command config igmp all version 1 state enabled Success DES 6500 4 show igmp Purpose Used to display the IGMP configuration for the Switch of for a specified IP interface Syntax show igmp ipif lt ipif_name 12 gt Description This command will display the IGMP configuration for the Switch if no IP interface name is specified If an IP interface name is specified the command will display the IGMP configuration for that IP interface Parameters lt ipif_ name 12 gt The name of the IP interface for which the IGMP configuration will be displayed Restrictions None Example Usage 140 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual To display IGMP configurations DES 6500 4 show igmp Command show igmp IGMP Interface Configurations Interface IP Address Netmask Ver Query Maximum Robust Last State sion Response ness Member Time Value Query Interval System 10 90 90 90 8 1 125 10 2 1 Enabled p1 20 1 1 1 8 1 125 10 2 1 Enabled Total Entries 2 DES 6500 4
198. e OSPF area in the OSPF domain advertise_router lt ipaddr gt The router ID of the advertising router type rtrlink netlink summary assummary asextlink The type of link Restrictions None LSDB table for the area_id or the Cost this is interpreted as no area ID iy NOTE When this command displays a sii a star symbol in the OSPF l for external LSAs and as no cost given for the advertised link Usage Example To display the link state database of OSPF 313 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual DES 6500 4 show ospf Isdb Command show ospf Isdb Area LSDB Advertising Link State Cost Sequence ID Type Router ID ID Number 0 0 0 0 RTRLink 50 48 75 73 50 48 75 73 0x80000002 0 0 0 0 Summary 50 48 75 73 10 0 0 0 8 1 0x80000001 1 0 0 0 RTRLink 50 48 75 73 50 48 75 73 0x80000001 1 0 0 0 Summary 50 48 75 73 40 0 0 0 8 1 0x80000001 1 0 0 0 Summary 50 48 75 73 50 0 0 0 8 1 0x80000001 i ASExtLink 50 48 75 73 1 2 0 0 16 20 0x80000001 Total Entries 5 DES 6500 4 show ospf neighbor Used to display the current OSPF neighbor router table Purpose show ospf neighbor lt ipaddr gt This command will display the current OSPF neighbor router table Syntax Description Parameters lt ipaddr gt The IP address of the neighbor router Restrictions None Usage Example To display the current OSPF neighbor router table DES 6500
199. e Switch s Q6 class Priority scheduling is implemented using two types of methods strict priority and weight fair priority If no changes are made to the QoS priority scheduling settings the method used is strict priority NOTICE The Switch contains eight classes of service for each port on the Switch One of these classes is reserved for internal use on the Switch and therefore is not 5 configurable All references in the following section regarding classes of service will refer to only the seven classes of service that may be used and configured by the Switch s Administrator For strict priority based scheduling packets residing in the higher hardware classes of service are transmitted first Only when these classes are empty are packets of lower hardware class allowed to be transmitted Higher priority tagged packets always receive precedence regardless of the amount of lower priority tagged packets in the buffer and regardless of the time elapsed since any lower priority tagged packets have been transmitted By default the Switch is configured to empty the buffer using strict priority NOTICE The default QoS scheduling arrangement is a strict priority schedule To om customize scheduling to set up weight fair queue clearing the MAX Packets values need to be changed using the config scheduling command See config scheduling below To use implement weight fair priority the Switch s seven hardware classes of service can be confi
200. e a network sniffer or other device can monitor the network traffic In addition you can specify that only traffic received by or sent by one or both is mirrored to the Target port port lt port gt This specifies the Target port the port where mirrored packets will be sent The port is specified by listing the lowest slot number and the beginning port number on that slot separated by a colon For example 1 3 specifies slot number 1 port 3 2 4 specifies slot number 2 port 4 add source ports The port or ports being mirrored This cannot include the Target port lt portlist gt Specifies a range of ports to be mirrored The port list is specified by listing the lowest slot number and the beginning port number on that slot separated by a colon Then the highest slot number and the highest port number of the range also separated by a colon are specified The beginning and end of the port list range are separated by a dash For example 1 3 specifies slot number 1 port 3 2 4 specifies slot number 2 port 4 1 3 2 4 specifies all of the ports between slot 1 port 3 and slot 2 port 4 in numerical order rx Allows the mirroring of only packets received by flowing into the port or ports in the port list tx Allows the mirroring of only packets sent to flowing out of the port or ports in the port list both Mirrors all the packets received or sent by the port or ports in the port list The Targ
201. e following parameters Method List Name The name of a previously configured method list name Priority Defines which order the method list protocols will be queried for authentication when a user attempts to log on to the Switch Priority ranges from 1 highest to 4 lowest Method Name Defines which security protocols are implemented per method list name Comment Defines the type of Method User defined Group 162 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual show authen_ Parameters Restrictions Example usage enable refers to server groups defined by the user Built in Group refers to the TACACS XTACACS TACACS and RADIUS security protocols which are permanently set in the Switch Keyword refers to authentication using a technique INSTEAD of TACACS XTACACS TACACS and RADIUS which are local authentication through the local_enable password on the Switch and none no authentication necessary to access any function on the Switch default Entering this parameter will display the default method list for users attempting to gain access to Administrator level privileges on the Switch method_list_name lt string 15 gt Enter an alphanumeric string of up to 15 characters to define the given method list to view all Entering this parameter will display all the authentication login methods currently configured on the Switch None To display all method l
202. e is no user input for 5 minutes 10_minutes The console will log out the current user if there is no user input for 10 minutes 15_minutes The console will log out the current user if there is no user input for 15 minutes Only administrator level users can issue this command Success DES 6500 4 config serial_port baud_rate 115200 Command config serial_port baud_rate 115200 DES 6500 4 enable clipaging Purpose Syntax Description Parameters Restrictions Example usage Used to pause the scrolling of the console screen when the show command displays more than one page enable clipaging This command is used when issuing the show command which causes the console screen to rapidly scroll through several pages This command will cause the console to pause at the end of each page The default setting is enable None Only administrator level users can issue this command To enable pausing of the screen display when the command output reaches the end of the page 17 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual DES 6500 4 enable clipaging Command enable clipaging Success DES 6500 4 disable clipaging Purpose Used to disable the pausing of the console screen scrolling at the end of each page when the show command displays more than one screen of information Syntax disable clipaging Description This command is used to disable the
203. e offset_0 15 Enter a value in hex form to mask the packet from byte 0 to byte 15 e offset_16 31 Enter a value in hex form to mask the packet from byte 16 to byte 31 e offset_32 47 Enter a value in hex form to mask the packet from byte 32 to byte 47 e offset_48 63 Enter a value in hex form to mask the packet from byte 48 to byte 63 e offset_64 79 Enter a value in hex form to mask the packet from byte 64 to byte 79 Restrictions Only administrator level users can issue this command Example usage To create a cpu access profile DES 6500 4 create cpu access_profile ip vlan source_ip_mask 20 0 0 0 destination_ip_mask 10 0 0 0 dscp icmp type code permit profile_id 1 Command create cpu access_profile ip vlan source_ip_mask 20 0 0 0 destination_ip_mask 10 0 0 0 dscp icmp type code permit profile_id 1 Success DES 6500 4 delete cpu access_profile Purpose Used to delete a previously created access profile or cpu access profile Syntax delete cpu access_profile profile_id lt value 1 5 gt Description The delete cpu access_profile command is used to delete a previously created cpu access profile Parameters profile_id lt value 1 5 gt Enter an integer between 1 and 5 that is used to identify the cpu access profile to be deleted with this command This value is assigned to the access profile when it is created with the create cpu access_profile command Restrictions Only administrator level
204. e proceeding to the next class and so on Lower priority classes are allowed to transmit only if the higher priority classes in the buffer are completely emptied Packets in the higher priority classes are always emptied before any in the lower priority classes The default settings for QoS scheduling employ this strict priority scheme to empty priority classes The config scheduling command can be used to specify the weighted round robin WRR rotation by which these seven hardware priority classes of service are reduced To use a weighted round robin WRR scheme the max_packets parameters must not have a value of zero 0 See Combination Queue below The max_packet parameter allows specification of the maximum number of packets a given priority class can transmit per weighted round robin WRR scheduling cycle This provides for a controllable CoS behavior while allowing for other classes to empty as well A value between 0 and 15 packets can be specified per priority queue Entering a 0 into the lt value 0 15 gt field of the max_packet parameter allows for the creation of a Combination Queue for the forwarding of packets This Combination Queue allows for a 105 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual config scheduling combination of strict and weight fair weighted round robin WRR scheduling Priority classes that have a 0 in the max_packet field will forward packets with strict prior
205. e sensitive new password Enter the new password again for confirmation Success DES 6500 4 config account Purpose Used to configure user accounts Syntax config account lt username gt Description The config account command configures a user account that has been created using the create account command Parameters lt username gt Enter the username of the account to be configured Restrictions Only Administrator level users can issue this command Usernames can be between 1 and 15 characters Passwords can be between 0 and 15 characters Example usage To configure the user password of dlink account 11 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual Success DES 6500 4 DES 6500 4 config account dlink Command config account dlink Enter a old password Enter a case sensitive new password Enter the new password again for confirmation show account Purpose Syntax Description Parameters Restrictions Example usage Used to display user accounts show account Displays all user accounts created on the Switch Up to 8 user accounts can exist on the Switch at one time None None To display the accounts that have been created Username DES 6500 4 DES 6500 4 show account Command show account Current Accounts Access Level delete account Purpose Syntax Description
206. e switch Syntax config dhcp_relay option_82 check enable disable Description This command is used to configure the checking mechanism of DHCP BOOTP relay agent information option 82 of the Switch Parameters enable When the field is toggled to enable the relay agent will check the validity of the packet s option 82 field If the Switch receives a packet that contains the option 82 field from a DHCP client the Switch drops the packet because it is invalid In packets received from DHCP servers the relay agent will drop invalid messages disable When the field is toggled to disable the relay agent will not check the validity of the packet s option 82 field Restrictions Only administrator level users can issue this command 279 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual Example usage To configure DHCP relay option 82 check DES 6500 4 config dhcp_relay option_82 check enable Command config dhcp_relay option_82 check enable Success DES 6500 4 config dhcp_relay option_82 policy Purpose Used to configure the forwarding policy of relay agent information option 82 of the switch Syntax config dhcp_relay option_82 policy replace drop keep Description This command is used to configure the forwarding policy of DHCP relay agent information option 82 of the switch Parameters replace The option 82 field will be replaced if the option 82 field already exists
207. e the user to be authenticated using the TACACS protocol from a remote TACACS server radius Adding this parameter will require the user to be authenticated using the RADIUS protocol from a remote RADIUS server previously implemented on the Switch server_group lt string 15 gt Adding this parameter will require the user to be authenticated using a user defined server group previously configured on the Switch local_enable Adding this parameter will require the user to be authenticated using the local user account database on the Switch The local enable password of the device can be configured using the config admin local_password command none Adding this parameter will require no authentication to access the administration level privileges on the Switch Restrictions Only administrator level users can issue this command Example usage To configure the user defined method list Trinity with authentication methods TACACS XTACACS and local in that order DES 6500 4 config authen_enable method_list_name Trinity method tacacs xtacacs local Command config authen_enable method_list_name Trinity method tacacs xtacacs local Success DES 6500 4 Example usage To configure the default method list with authentication methods XTACACS TACACS and local in that order 161 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual DES 6500 4 config authen_enable def
208. e the user to be authenticated using the local user account database on the Switch none Adding this parameter will require no authentication to access the Switch E NOTE Entering none or local as an authentication protocol will override any other authentication that follows it on a method list or on the default method a list Restrictions Only administrator level users can issue this command Example usage To configure the user defined method list Trinity with authentication methods TACACS XTACACS and local in that order DES 6500 4 config authen_login method_list_name Trinity method tacacs xtacacs local Command config authen_login method_list_name Trinity method tacacs xtacacs local Success DES 6500 4 Example usage To configure the default method list with authentication methods XTACACS TACACS and local in that order 157 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual DES 6500 4 config authen_login default method xtacacs tacacs local Command config authen_login default method xtacacs tacacs local Success DES 6500 4 delete authen_login method_list_name Purpose Used to delete a previously configured user defined method list of authentication methods for users logging on to the Switch Syntax delete authen_login method_list_name lt string 15 gt Description This command is used to delete a list for authentication methods for
209. e week during the month in which DST begins where 1 is the first week 2 is the second week and so on last is the last week of the month e_week Configure the week of the month in which DST ends e lt end_week 1 4 last gt The number of the week during the month in which DST ends where 1 is the first week 2 is the second week and so on last is the last week of the month s_day Configure the day of the week in which DST begins e lt start_day sun sat gt The day of the week in which DST begins expressed using a three character abbreviation sun mon tue wed thu fri sat e_day Configure the day of the week in which DST ends e lt end_day sun sat gt The day of the week in which DST ends expressed using a three character abbreviation sun mon tue wed thu fri sat s_mth Configure the month in which DST begins e lt start_mth 1 12 gt The month to begin DST expressed as a number e_mth Configure the month in which DST ends e lt end_mth 1 12 gt The month to end DST expressed as a number s_time Configure the time of day to begin DST e lt start_time hh mm gt Time is expressed using a 24 hour clock in hours and minutes e_time Configure the time of day to end DST e lt end_time hh mm gt Time is expressed using a 24 hour clock in hours and minutes s_date Configure the specific date day of the month to begin DST e lt start_date 1 31 gt The start date is e
210. eate vian v1 tag 2 Command create vlan v1 tag 2 Success DES 6500 4 delete vian Purpose Used to delete a previously configured VLAN on the Switch Syntax delete vlan lt vian_name 32 gt Description This command will delete a previously configured VLAN on the Switch Parameters lt vian_name 32 gt The VLAN name of the VLAN to delete Restrictions Only administrator level users can issue this command Example usage To remove the vlan v1 DES 6500 4 delete vian v1 Command delete vian v1 Success DES 6500 4 config vlan add Purpose Used to add additional ports to a previously configured VLAN Syntax config vlan lt vlan_name 32 gt add tagged untagged forbidden lt portlist gt advertisement enabled disabled 121 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual config vlan add Description Parameters Restrictions Example usage This command allows the user to add ports to the port list of a previously configured VLAN Additional ports may be specified as tagging untagging or forbidden The default is to assign the ports as untagging lt vlan_name 32 gt The name of the VLAN to which to add or delete ports add Specifies which ports to add The user may also specify if the ports are tagged Specifies the additional ports as tagged untagged Specifies the additional ports as untagged forbidden
211. ebete ent ofveaues EEEE 114 VLAN Commian as resres a a Er EEA knr Naka rA uae eta ba lad oe ech aa Sa Neen r aie sae Made ee de E 118 Link Ageregation Commands cis ia ar aA onde cdues EE A ox edeieg dees cca Vento needa AA N OOA 127 IP Commands Including Multiple IP interfaces per VLAN cecceceecencenccnecneeaeeeeeen eee eeaecaeeaeeeeseesen ees 134 IGMP Commands Including IGMP V3 cise os eses e n E A EA E AAEE Seeced ens geecb eh Sag tees 139 IGMP Snooping Commands naio nosi Ye cates hala bya cha eae late agied uaheweebes aga Syd ond ba eb nua Weta yes a 143 Access Authentication Control Commands oaran ra EASA AEA ASA LAE ETLAT E ATAA 152 SSA COMMAN S erp eves den vane ees wae rarae TAANE ves veg dan Van Wenge sven Vas SENETA ever Ves ves Veg y conve APANIA VAATEITA EEEE EAA TRASE 176 Sol Commands iin seo in E as et aN aoe E eR RAN T Rae aa 184 SOD TX COMMANAS o oo esc eNEAN EN vce vided ENTARA ge sid duit Caled ele wc viden debathineb sated eed cuit aa a aer nA 190 Access Control List ACL Commands Including CPU peresen r N A aidad aa 209 Safeguard Engine Command Soisin ir ireann e Tanan tiA ane en NEREYE EN Wa read SAREE ves Pea E EA 235 Traffic Seementation Commands eieiaeo ee A e EDEA EEE AA ADESEA RA 238 D Link Single IP Management Commands orrori aa rE rarr AAE n AA EE rE irar aeii 240 Time and SNTP Comimian dS aaraa A A A oe AA ae Ta ees ea 251 ARP Command erea eiers a raas a T ii devs A AEON TTN AEEA EEEN OAA ver ae 257
212. ecifies the IP address of the remote host where syslog messages will be sent state enabled disabled Allows the sending of syslog messages to the remote host specified above to be enabled and disabled Restrictions Only administrator level users can issue this command Example usage To configure a syslog host DES 6500 4 config syslog host 1 severity all Command config syslog host 1 severity all Success DES 6500 4 config syslog host 1 facility local0 Command config syslog host 1 facility local0 Success DES 6500 4 config syslog host 1 udp_port 6000 Command config syslog host 1 udp_port 6000 Success DES 6500 4 config syslog host 1 ipaddress 10 44 67 8 Command config syslog host 1 ipaddress 10 44 67 8 Success DES 6500 4 config syslog host 1 state enabled Command config syslog host 1 state enabled Success DES 6500 4 config syslog host all Purpose Used to configure the syslog protocol to send system log data to a remote host Syntax config syslog host all severity informational warning all facility local0 local1 local2 local3 local4 local5 local6 local7 udp_port lt udp_port_number gt state enabled disabled Description The config syslog host all command is used to configure the syslog protocol to send system log information to a remote host Parameters all Specifies that the command will be applied to all hosts 69 xStack D
213. ed in the packet header Restrictions Only administrator level users can issue this command Example usage To configure a rule for the Ethernet access profile DES 6500 4 create access_profile ip protocol_id profile_id 2 Command create access_profile ip protocol_id profile_id 2 Success DES 6500 4 config access_profile profile_id IP Purpose Used to configure the IP access profile on the Switch and to define specific values for the rules that will be used to by the Switch to determine if a given packet should be forwarded or filtered Masks entered using the create access_profile command will be combined using a logical AND operational method with the values the Switch finds in the specified frame header fields config access_profile profile_id lt value 1 8 gt add access_id lt value 1 65535 gt ip vlan lt vlan_name 32 gt source_ip lt ipaddr gt destination_ip lt ipaddr gt dscp lt value 0 63 gt icmp type lt value 0 255 gt code lt value 0 255 gt igmp type lt value 0 255 gt tcp src_port lt value 0 65535 gt dst_port lt value 0 65535 gt urg ack psh rst syn fin udp src_port lt value 0 65535 gt dst_port lt value 0 65535 gt protocol_id lt value 0 255 gt user_define lt hex 0x0 0xffffffff gt port lt port gt permit priority lt value 0 7 gt replace_priority replace_dscp lt value 0 63 gt deny delete lt value 1 65535 gt Descr
214. elay table will be displayed Restrictions None Example Usage To display DNS relay status DES 6500 4 show dnsr Command show dnsr DNSR Status Disabled Primary Name Server 0 0 0 0 Secondary Name Server 0 0 0 0 DNSR Cache Status Disabled DNSR Static Cache Table Status Disabled DNS Relay Static Table Domain Name IP Address www 123 com tw 10 12 12 123 bbs ntu edu tw 140 112 1 23 Total Entries 2 DES 6500 4 286 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual RIP COMMANDS The RIP commands in the Command Line Interface CLI are listed along with the appropriate parameters in the following Command Parameters config rip ipif lt ipif_name 12 gt all authentication enabled lt password 16 gt disabled tx_mode disabled v1_only v1_compatible v2_only rx_mode v1_ only v2_only v1_or_v2 disabled state enabled disabled table mate POSS Each command is listed in detail in the following sections config rip Purpose Used to configure RIP on the Switch Syntax config rip ipif lt ipif_name 12 gt all authentication enabled lt password 16 gt disabled tx_mode disabled v1_onlly v1_compatible v2_only rx_mode v1_ only v2_onlly v1_or_v2 disabled state enabled disabled Description This command is used to configure RIP on the Switch Parameters lt ipif_ name 12 gt The name of the IP interf
215. ember ID is specified DES 6500 4 show sim members Command show sim members ID MAC Address Platform Hold Firmware Device Name Capability Time Version 1 00 01 04 03 04 00 DES 6500 L3 Switch 40 3 00 B29 The Man 2 00 55 35 00 55 00 DGS 3324SRL3 Switch 140 4 00 B13 default master Total Entries 2 DES 6500 4 244 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual To show other groups information in summary if group is specified DES 6500 4 show sim group Command show sim group SIM Group Name default ID MAC Address Platform Hold Firmware Device Name Capability Time Version 1 00 01 02 03 04 00 DGS 3324SR L3 Switch 40 4 00 B13 Trinity SIM Group Name default ID MAC Address Platform Hold Firmware Device Name Capability Time Version 2 00 55 55 00 55 00 DXS 3350 L3 Switch 140 4 00 B13 Enrico SIM Group Name SIM2 ID MAC Address Platform Hold Firmware Device Name Capability Time Version 4 00 01 02 03 04 00 DES 6500 L3 Switch 40 3 00 B29 Neo 2 00 55 55 00 55 00 DES 6500 L3 Switch 140 3 00 B29 default master means commander switch DES 6500 4 Example usage To view SIM neighbors DES 6500 4 show sim neighbor Command show sim neighbor Neighbor Info Table 23 00 35 26 00 11 99 Commander 23 00 35 26 00 11 91 Member 24 00 35 26 00 11 90 Candidate Total Entries 3 DES 6500 4 245 xStack DES 6500 Modular Layer 3 Chassis Ethernet
216. er host utilizes the TACACS protocol xtacacs Enter this parameter if the server host utilizes the XTACACS protocol tacacs Enter this parameter if the server host utilizes the TACACS protocol radius Enter this parameter if the server host utilizes the RADIUS protocol Restrictions Only administrator level users can issue this command Example usage To delete a user defined TACACS authentication server host DES 6500 4 delete authen server_host 10 1 1 121 protocol tacacs Command delete authen server_host 10 1 1 121 protocol tacacs Success DES 6500 4 show authen server_host Purpose Used to view a user defined authentication server host Syntax show authen server_host Description This command is used to view user defined authentication server hosts previously created on the Switch The following parameters are displayed IP address The IP address of the authentication server host Protocol The protocol used by the server host Possible results will include tacacs xtacacs tacacs and radius Port The virtual port number on the server host The default value is 49 Timeout The time in seconds the Switch will wait for the server host to reply to an authentication request Retransmit The value in the retransmit field denotes how many times the device will resend an authentication request when the TACACS server does not respond This field is inoperable for the tacacs p
217. er_group group_1 add server_host 10 1 1 121 protocol tacacs Success DES 6500 4 170 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual delete authen server_group Purpose Used to delete a user defined authentication server group Syntax delete authen server_group lt string 15 gt Description This command will delete an authentication server group Parameters lt string 15 gt Enter an alphanumeric string of up to 15 characters to define the previously created server group to delete Restrictions Only administrator level users can issue this command Example usage To delete the server group group_1 DES 6500 4 delete server_group group_1 Command delete server_group group_1 Success DES 6500 4 show authen server_group Purpose Used to view authentication server groups on the Switch Syntax show authen server_group lt string 15 gt Description This command will display authentication server groups currently configured on the Switch This command will display the following fields Group Name The name of the server group currently configured on the Switch including built in groups and user defined groups IP Address The IP address of the server host Protocol The authentication protocol used by the server host Parameters lt string 15 gt Enter an alphanumeric string of up to 15 characters to define the previously created server group to view E
218. errors ports 1 3 Command show errors ports 1 3 RX Frames TX Frames CRC Error 19 Excessive Deferral 0 Undersize 0 CRC Error 0 Oversize 0 Late Collision 0 Fragment 0 Excessive Collision 0 Jabber 11 Single Collision 0 Drop Pkts 20837 Collision 0 CTRL C ESC q Quit SPACE n Next Page p Previous Page r Refresh show utilization Purpose Used to display real time port and cpu utilization statistics Syntax show utilization ports cpu Description This command will display the real time port and cpu utilization statistics for the Switch Parameters cpu Entering this parameter will display the current cpu utilization of the Switch as a percentage ports Entering this parameter will display the current utilization of all ports on the Switch Restrictions None Example usage To display the current CPU utilization DES 6500 4 show utilization cpu Command show utilization cpu CPU utilization Five seconds 15 One minute 25 Five minutes 14 DES 6500 4 To display the port utilization statistics 60 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual DES 6500 4 show utilization ports Command show utilization ports Port TX sec RX sec Util Port TX sec RX sec Util 1 1 0 0 0 2 10 0 0 0 1 2 0 0 0 2 11 0 0 0 1 3 0 0 0 2 12 0 0 0 1 4 0 0 0 3 1 0 0 0 1 5 0 0 0 3 2 0 0 0 1 6 0 0 0 3 3 0 0 0 1 7 0 0 0 3 4 0 0 0 1 8 0 0 0 3 5 0 0 0 1 9 0 0 0 3 6 0 0 0
219. es that local use 7 messages will be sent to the remote host This corresponds to number 23 from the list above udp_port lt udp_port_number gt Specifies the UDP port number that the syslog protocol will use to send messages to the remote host state enabled disabled Allows the sending of syslog messages to the remote host specified above to be enabled and disabled Restrictions Only administrator level users can issue this command Example usage To configure all syslog hosts DES 6500 4 config syslog host all severity all Command config syslog host all severity all Success DES 6500 4 config syslog host all facility local0 Command config syslog host all facility local0 Success DES 6500 4 config syslog host all udp_port 6000 Command config syslog host all udp_port 6000 Success DES 6500 4 config syslog host all ipaddress 10 44 67 8 Command config syslog host all ipaddress 10 44 67 8 Success DES 6500 4 config syslog host all state enabled Command config syslog host all state enabled Success DES 6500 4 71 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual delete syslog host Purpose Syntax Description Parameters Restrictions Example usage To delete a previously configur Used to remove a syslog host that has been previously configured from the Switch delete syslog host lt index 1 4 gt all The delete syslog host command i
220. ess ip_destination Indicates that the Switch should examine the IP destination address ip_source_dest Indicates that the Switch should examine the IP source address and the destination address Restrictions Only administrator level users can issue this command Example usage To configure link aggregation algorithm for mac source dest DES 6500 4 config link_aggregation algorithm mac_source_dest Command config link_aggregation algorithm mac_source_dest Success DES 6500 4 130 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual show link_aggregation Purpose Syntax Description Parameters Restrictions Example usage Used to display the current link aggregation configuration on the Switch show link_aggregation group_id lt value 1 32 gt algorithm This command will display the current link aggregation configuration of the Switch lt value 1 32 gt Specifies the group ID The Switch allows up to 32 link aggregation groups to be configured The group number identifies each of the groups algorithm Specify to view the algorithm employed of this link aggregation group None To display the current Link Aggregation configuration Group ID Master Port Member Port Active Port Status DES 6500 4 DES 6500 4 show link_aggregation Command show link_aggregation Link Aggregation Algorithm MAC source dest Flooding Port 1 5
221. ess 10 42 73 1 will be combined with the source_ip_mask 255 255 255 0 to give the IP address 10 42 73 0 for any source IP address between 10 42 73 0 to 10 42 73 255 Due to a chipset limitation the Switch supports a maximum of 8 access profiles The rules used to define the access profiles are limited to a total of 9600 rules for the Switch depending on line cards installed There is an additional limitation on how the rules are distributed among line cards inserted into the chassis For 24 port line cards DES 6504 DES 6508 DES 6510 ports 1 8 can support 240 rules maximum ports 9 16 support 240 rules maximum and ports 17 24 support 240 rules maximum which leads to a total of 720 rules maximum per 24 port line card Since the Switch can hold up to 8 line cards the maximum number of ACL rules will be 5760 240 3 8 5760 For 12 port line cards DES 6505 DES 6507 DES 6509 DES 6512 all ports can support 100 rules each which means that the maximum number of ACL rules using the maximum number of inserted 12 port line cards will be 9600 12 100 8 9600 It is important to keep this in mind when setting up VLANs as well Access rules applied to a VLAN require that a rule be created for each port in the VLAN For example let s say VLAN10 contains ports 2 11 and 12 If you create an access profile specifically for VLAN10 you must create a separate rule for each port Now take into account the rule limit The rule limit applies to b
222. et port cannot be listed as a source port Only administrator level users can issue this command xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual Example usage To add the mirroring ports DES 6500 4 config mirror port 1 10 add source ports 1 1 1 5 both Command config mirror port 1 10 add source ports 1 1 1 5 both Success DES 6500 4 config mirror port delete Purpose Used to delete a port mirroring configuration Syntax config mirror port lt port gt delete source port lt portlist gt rx tx both Description This command is used to delete a previously entered port mirroring configuration Parameters port lt port gt This specifies the Target port the port where mirrored packets will be sent The port is specified by listing the lowest slot number and the beginning port number on that slot separated by a colon For example 1 3 specifies slot number 1 port 3 2 4 specifies slot number 2 port 4 delete source port Adding this parameter will delete source ports according to ports entered using the lt portlist gt lt portlist gt This specifies a range of ports that will be mirrored That is the range of ports in which all traffic will be copied and sent to the Target port The port list is specified by listing the lowest slot number and the beginning port number on that slot separated by a colon Then the highest slot number and the highest port number of the
223. eter may be chosen if the administrator wishes to use a host computer for authentication This parameter is intended for Linux users requiring SSH authentication techniques and the host computer is running the Linux operating system with a SSH program previously installed enable disable This allows you to enable or disable the SSH authentication mode on the Switch Restrictions Only administrator level users can issue this command Example usage To enable the SSH authentication mode by password DES 6500 4 config ssh authmode password enable Command config ssh authmode password enable Success DES 6500 4 show ssh authmode Purpose Used to display the SSH authentication mode setting Syntax show ssh authmode Description This command will allow you to display the current SSH authentication set on the Switch Parameters None Restrictions None Example usage To view the current authentication mode set on the Switch DES 6500 4 show ssh authmode Command show ssh authmode The SSH User Authentication Support Password Enabled Publickey Enabled Hostbased Enabled DES 6500 4 178 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual config ssh server Purpose Syntax Description Parameters Restrictions Usage Example Used to configure the SSH server config ssh server maxsession lt int 1 8 gt contimeout lt sec 120 600 g
224. etimeout timeout 7200 Success DES 6500 4 show ssl cachetimeout Purpose Used to show the SSL cache timeout Syntax show ssl cachetimeout Description Entering this command will allow the user to view the SSL cache timeout currently implemented on the Switch Parameters None Restrictions None Example usage To view the SSL cache timeout on the Switch DES 6500 4 show ssl cachetimeout Command show ssl cachetimeout Cache timeout is 600 second s DES 6500 4 187 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual show ssl Purpose Used to view the SSL status and the certificate file status on the Switch Syntax show ssl certificate Description This command is used to view the SSL status on the Switch Adding the certificate parameter will allow the user to view the certificate file information currently set on the Switch Parameters certificate Adding this parameter will allow the user to view certificate file information currently implemented on the Switch Restrictions None Example usage To view the SSL status on the Switch DES 6500 4 show ssl Command show ssl SSL status Disabled RSA_WITH_RC4_128 MD5 0x0004 Enabled RSA_WITH_3DES_ EDE CBC_SHA 0x000A Enabled DHE_DSS_WITH_3DES_EDE_CBC_SHA 0x0013 Enabled RSA_EXPORT_WITH_RC4_40_ MD5 0x0003 Enabled DES 6500 4 Example usage To view certificate file information on the Swi
225. etween an IP address specified in the next step and the ip_source_mask match The default for an access profile on the Switch is to permit traffic flow If you want to restrict traffic you must use the deny parameter Now that an access profile has been created you must add the criteria the Switch will use to decide if a given frame should be forwarded or filtered Here we want to filter any packets that have an IP source address between 10 42 73 0 and 10 42 73 255 config access_profile profile_id 1 add access_id 1 ip source_ip 10 42 73 1 port 1 1 deny Here we use the profile_id 1 which was specified when the access profile was created The add parameter instructs the Switch to add the criteria that follows to the list of rules that are associated with access profile 1 For each rule entered into the access profile you can assign an access_id that both identifies the rule and establishes a priority within the list of rules A lower access_id gives the rule a higher priority In case of a conflict in the rules entered for an access profile the rule with the highest priority lowest access_id will take precedence 210 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual The ip parameter instructs the Switch that this new rule will be applied to the IP addresses contained within each frame s header source_ip tells the Switch that this rule will apply to the source IP addresses in each frame s header Finally the IP addr
226. evel users can issue this command Example usage To add a member DES 6500 4 config sim_group add 2 Command config sim_group add 2 Please wait for ACK SIM Config Success Success DES 6500 4 To delete a member 246 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual DES 6500 4 config sim_group delete 1 Command config sim_group delete 1 Please wait for ACK Success DES 6500 4 config sim Purpose Used to configure role parameters for the SIM protocol on the Switch Syntax config sim commander group_name lt groupname 64 gt candidate dp_interval lt 30 90 gt hold_time lt sec 100 255 gt Description This command is used to configure parameters of switches of the SIM Parameters commander Use this parameter to configure the commander switch for the following parameters group_name lt groupname 64 gt Used to update the name of the group Enter an alphanumeric string of up to 64 characters to rename the SIM group dp_interval lt 30 90 gt The user may set the discovery protocol interval in seconds that the Switch will send out discovery packets Returning information to the commander switch will include information about other switches connected to it Ex MS CaS The user may set the discovery protocol interval from 30 to 90 seconds hold time lt sec 100 255 gt Using this parameter the user may set the time in
227. f gt lt hex 0x0 Oxffffffff gt lt hex 0x0 Oxffffffff gt offset_16 31 lt hex Ox0 Oxffffffff gt lt hex 0x0 Oxffffffff gt lt hex Ox0 Oxffffffff gt lt nex 0x0 Oxffffffff gt offset_32 47 lt hex 0x0 Oxffffffff gt lt hex Ox0 Oxffffffff gt lt hex 0x0 Oxffffffff gt lt hex 0x0 Oxffffffff gt offset_48 63 lt hex Ox0 Oxffffffff gt lt hex 0x0 Oxffffffff gt lt hex Ox0 Oxffffffff gt lt hex 0x0 Oxffffffff gt offset_64 79 lt hex 0x0 Oxffffffff gt lt hex 0x0 Oxffffffff gt lt hex 0x0 Oxffffffff gt lt hex 0x0 Oxffffffff gt config access_profile lt value 1 8 gt add access_id lt value 1 65535 gt packet_content profile_id offset_0 15 lt hex0x0 Oxffffffff gt lt hex 0x0 Oxffffffff gt lt hex 0x0 Oxffffffff gt lt nex Ox0 Oxffffffff gt offset_16 31 lt hex 0x0 Oxffffffff gt lt hex O0x0 Oxffffffff gt lt nex 0x0 Oxffffffff gt lt nex 0x0 Oxffffffff gt offset_32 47 lt hex 0x0 Oxffffffff gt lt hex 0x0 Oxffffffff lt hex 0x0 Oxffffffff gt lt nex 0x0 Oxffffffff gt offset_48 63 lt hex 0x0 Oxffffffff gt lt hex O0x0 Oxffffffff gt lt nex 0x0 Oxffffffff gt lt nex 0x0 Oxffffffff gt offset_64 79 lt hex 0x0 Oxffffffff gt lt hex 0x0 Oxffffffff gt lt hex 0x0 Oxffffffff gt lt hex0x0 Oxffffffff gt port lt port gt permit priority lt value 0 7 gt replace_priority replace_dscp lt value 0 63 gt deny delete lt value 1 65535 gt create access_profile profile_id lt value 1 8 gt ipv6
228. f ipif lt ipif_name 12 gt 303 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual Command Parameters create ospf virtual_link lt area_id gt lt neighbor_id gt hello_interval lt sec 1 65535 gt dead_interval lt sec 1 65535 gt authentication none simple lt password 8 gt md5 lt key_id 1 255 gt config ospf virtual_link lt area_id gt lt neighbor_id gt hello_interval lt sec 1 65535 gt dead_interval lt sec 1 65535 gt authentication none simple lt password 8 gt md5 lt key_id 1 255 gt delete ospf virtual_link lt area_id gt lt neighbor_id gt show ospf virtual_link lt area_id gt lt neighbor_id gt Each command is listed in detail in the following sections config ospf router_id Purpose Used to configure the OSPF router ID Syntax config ospf router_id lt ipaddr gt Description This command is used to configure the OSPF router ID Parameters lt ipaddr gt The IP address of the OSPF router Restrictions Only administrator level users can issue this command Usage Example To configure the OSPF router ID DES 6500 4 config ospf router_id 10 48 74 122 Command config ospf router_id 10 48 74 122 Success DES 6500 4 enable ospf Purpose Used to enable OSPF on the Switch Syntax enable ospf Description This command in combination with the disable ospf command below is used to enable and disable OSPF on the Switch Parame
229. ferent data routes within administratively established regions on the network continuing to allow simple and full processing of frames regardless of administrative errors in defining VLANs and their respective spanning trees Each switch utilizing the MSTP on a network will have a single MSTP configuration that will have the following three attributes a A configuration name defined by an alphanumeric string of up to 32 characters defined in the config stp mst_config_id command as name lt string gt b A configuration revision number named here as a revision_level and c A 4096 element table defined here as a vid_range which will associate each of the possible 4096 VLANs supported by the Switch for a given instance To utilize the MSTP function on the Switch three steps need to be taken a The Switch must be set to the MSTP setting config stp version b The correct spanning tree priority for the MSTP instance must be entered config stp priority c VLANs that will be shared must be added to the MSTP Instance ID config stp instance_id The Multiple Spanning Tree Protocol commands in the Command Line Interface CLI are listed along with the appropriate parameters in the following table wms S y www config stp maxage lt value 6 40 gt maxhops lt value 1 20 gt hellotime lt value 1 10 gt forwarddelay lt value 4 30 gt txholdcount lt value 1 10 gt fbpdu enable disable Ibd enable disable lbd_reco
230. ff gt offset_64 79 lt hex 0x0 Oxffffffff gt lt hex Ox0 Oxffffffff gt lt hex 0x0 Oxffffffff gt lt hex 0x0 Oxffffffff gt port lt portlist gt all permit deny delete access_id lt value 1 100 gt enable cpu_interface_filtering disable cpu_interface_filtering show cpu_interface_filtering show profile_id lt value 1 5 gt cpu_access_profile Access profiles allow you to establish criteria to determine whether or not the Switch will forward packets based on the information contained in each packet s header These criteria can be specified on a VLAN by VLAN basis Creating an access profile is divided into two basic parts First an access profile must be created using the create access_profile command For example if you want to deny all traffic to the subnet 10 42 73 0 to 10 42 73 255 you must first create an access profile that instructs the Switch to examine all of the relevant fields of each frame create access_profile profile_id 1 ip source_ip_ mask 255 255 255 0 Here we have created an access profile that will examine the IP field of each frame received by the Switch Each source IP address the Switch finds will be combined with the source_ip_mask with a logical AND operation The profile_id parameter is used to give the access profile an identifying number in this case 1 The deny parameter instructs the Switch to filter any frames that meet the criteria in this case when a logical AND operation b
231. fff gt flag_mask all urg ack psh rst syn fin udp src_port_mask lt hex 0x0 0xffff gt dst_port_mask lt hex 0x0 Oxffff gt protocol_id user_mask lt hex 0x0 Oxffffffff gt packet_content_mask offset 0 15 lt hex 0x0 Oxffffffff gt lt hex 0x0 Oxffffffff gt lt hex 0x0 Oxffffffff gt lt hex 0x0 Oxffffffff gt offset 16 31 lt hex 0x0 Oxffffffff gt lt hex 0x0 Oxffffffff gt lt hex 0x0 Oxffffffff gt lt hex 0x0 Oxffffffff gt offset 32 47 lt hex 0x0 Oxffffffff gt lt hex 0x0 Oxffffffff gt lt hex 0x0 Oxffffffff gt lt hex 0x0 Oxffffffff gt offset 48 63 lt hex 0x0 Oxffffffff gt lt hex 0x0 Oxffffffff gt lt hex 0x0 Oxffffffff gt lt hex 0x0 Oxffffffff gt offset 64 79 lt hex 0x0 Oxffffffff gt lt hex 0x0 Oxffffffff gt lt hex 0x0 0xffffffff gt lt hex 0x0 0xffffffff gt Description The create cpu access_profile command is used to create an access profile used only for CPU Interface Filtering Masks can be entered that will be combined with the values the Switch finds in the specified frame header fields Specific values for the rules are entered using the config cpu access_profile command below Parameters profile_id lt value 1 5 gt Specifies an index number that will identify the access profile being created with this command ethernet Specifies that the Switch will examine the layer 2 part of each packet header e vlan Specifies that the Switch will examine the
232. fffff gt lt nex0x0 Oxffffffff gt ipv6 class lt value 0 255 gt flowlabel lt hex0x0 Oxfffff gt source_ipv6 lt ipv6addr gt destination_ipv6 lt ipv6addr gt port lt portlist gt all permit priority lt value 0 7 gt replace_priority replace_dscp lt value 0 63 gt deny delete lt value 1 65535 gt show access_ profile profile _id lt value 1 8 gt create cpu profile_id lt value 1 5 gt ethernet vlan source_mac lt macmask gt destination _mac access_profile lt macmask gt ethernet_type ip vlan source_ip_mask lt netmask gt destination _ip_mask lt netmask gt dscp icmp type code igmp type tcp src_port_mask lt hex 0x0 Oxffff gt dst_port_mask lt hex 0x0 Oxffff gt flag_mask all urg ack psh rst syn fin udp src_port_mask lt hex Ox0 Oxffff gt dst_port_mask lt hex Ox0 Oxffff gt protocol_id user_mask lt hex O0x0 Oxffffffff gt packet_content_mask offset 0 15 lt hex Ox0 Oxffffffff gt lt hex 0x0 Oxffffffff gt lt hex 0x0 Oxffffffff gt lt nex 0x0 Oxffffffff gt offset 16 31 lt hex Ox0 Oxffffffff gt lt nex 0x0 Oxffffffff gt lt hex Ox0 Oxffffffff gt lt nex 0x0 Oxffffffff gt offset 32 47 lt nex 0x0 Oxffffffff gt lt hex 0x0 Oxffffffff gt lt hex Ox0 Oxffffffff gt lt hex 0x0 Oxffffffff gt offset 48 63 lt hex 0x0 Oxffffffff gt lt hex Ox0 Oxffffffff gt lt hex Ox0 Oxffffffff gt lt hex 0x0 Oxffffffff gt offset 6
233. figure the web interface login method all Choose this parameter to configure all applications console telnet web ssh login method login Use this parameter to configure an application for normal login on the user level using a previously configured method list enable Use this parameter to configure an application for upgrading a normal user level to administrator privileges using a previously configured method list default Use this parameter to configure an application for user authentication using the default method list method_list_name lt string 15 gt Use this parameter to configure an application for user authentication using a previously configured method list Enter a alphanumeric string of up to 15 characters to define a previously configured method list Restrictions Only administrator level users can issue this command Example usage To configure the default method list for the web interface DES 6500 4 config authen application http login default Command config authen application http login default Success DES 6500 4 show authen application Purpose Used to display authentication methods for the various applications on the Switch Syntax show authen application Description This command will display all of the authentication method lists login enable administrator privileges for switch configuration applications console telnet SSH web currently configu
234. figured MD5 key ID 1 to 255 is required Restrictions Only administrator level users can issue this command Usage Example To configure the OSPF virtual interface settings DES 6500 4 config ospf virtual_link 10 1 1 2 20 1 1 1 hello_interval 10 Command config ospf virtual_link 10 1 1 2 20 1 1 1 hello_interval 10 Success DES 6500 4 320 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual delete ospf virtual_link Purpose Used to delete an OSPF virtual interface Syntax delete ospf virtual_link lt area_id gt lt neighbor_id gt Description This command will delete an OSPF virtual interface from the Switch Parameters lt area_id gt A 32 bit number in the form of an IP address XXX XXX XXX XXX that uniquely identifies the OSPF area in the OSPF domain lt neighbor_id gt The OSPF router ID for the remote area This is a 32 bit number in the form of an IP address Xxx xXX XXX XXX that uniquely identifies the remote area s Area Border Router The router ID of the neighbor router Restrictions Only administrator level users can issue this command Usage Example To delete an OSPF virtual interface from the Switch DES 6500 4 delete ospf virtual_link 10 1 12 20 1 1 1 Command delete ospf virtual_link 10 1 12 20 1 1 1 Success DES 6500 4 show ospf virtual_link Purpose Used to display the current OSPF virtual interface configuration Syntax show ospf
235. for a specific IP interface Restrictions None Example Usage To show DVMRP configurations DES 6500 4 show dvmrp Command show dvmrp DVMRP Global State Disabled Interface IP Address Neighbor Timeout Probe Metric State System 10 90 90 90 8 35 10 1 Disabled Trinity 12 1 1 1 8 35 10 1 Enabled Total Entries 1 DES 6500 4 294 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual PIM COMMANDS The PIM commands in the Command Line Interface CLI are listed along with the appropriate parameters in the following table Command Parameters config pim ipif lt ipif_name 12 gt all hello lt sec 1 18724 gt jp_interval lt sec 1 18724 gt state enabled disabled show pim neighbor ipif lt ipif_name 12 gt ipaddress lt network_address gt show pim ipif lt ipif_name 12 gt Each command is listed in detail in the following sections Purpose Used to configure PIM settings for the Switch or for specified IP interfaces Syntax config pim ipif lt ipif_name 12 gt all hello lt sec 1 18724 gt jp_interval lt sec 1 18724 gt state enabled disabled Description The config pim command is used to configure PIM settings and enable or disable PIM settings for specified IP interfaces PIM must also be globally enabled to function see enable pim Parameters ipif lt ipif_name 12 gt Name assigned to the specific IP interface being configured for PI
236. from 10 48 74 121 time lt 10ms Reply from 10 48 74 121 time lt 10ms Reply from 10 48 74 121 time lt 10ms Reply from 10 48 74 121 time lt 10ms Ping statistics for 10 48 74 121 Packets Sent 4 Received 4 Lost 0 DES 6500 4 traceroute Purpose Used to trace the routed path between the Switch and a destination endstation Syntax traceroute lt ipaddr gt ttl lt value 1 60 gt port lt value 30000 64900 gt timeout lt sec 1 65535 gt probe lt value lt 1 9 gt Description The traceroute command allows you to trace a route between the Switch and a give host on the network 54 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual traceroute Parameters Restrictions Example usage lt jpaddr gt Specifies the IP address of the host ttl lt value 1 60 gt The time to live value of the trace route request This is the maximum number of routers the traceroute command will cross while seeking the network path between two devices port lt value 30000 64900 gt The port number Must be above 1024 The value range is from 30000 to 64900 timeout lt sec 1 65535 gt Defines the time out period while waiting for a response from the remote device The user may choose an entry between 1 and 65535 seconds probe lt value 1 9 gt The probe value is the number of times the Switch will send probe packets to the next hop on the intended traceroute path The default is 1 None
237. function The Switch contains seven hardware priority classes of service Incoming packets must be mapped to one of these seven hardware priority classes of service This command is used to specify the rotation by which these seven hardware priority classes of service are emptied The Switch s default is to empty the seven priority classes of service in order from the highest priority class of service queue 6 to the lowest priority class of service queue 0 Each queue will transmit all of the packets in its buffer before allowing the next lower priority class of service to transmit its packets Lower classes of service will be pre empted from emptying its queue if a packet is received on a higher class of service The packet that was received on the higher class of service will transmit its packet before allowing the lower class to resume clearing its queue xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual config scheduling_mechanism Parameters Restrictions Example usage strict Entering the strict parameter indicates that the highest class of service is the first to be processed That is the highest class of service should finish emptying before the others begin weight_fair Entering the weight fair parameter indicates that the priority classes of service will empty packets in a weighted round robin WRR order That is to say that they will be emptied in an even distribution Only admin
238. g Redundancy Protocol is a function on the Switch that dynamically assigns responsibility for a virtual router to one of the VRRP routers on a LAN The VRRP router that controls the IP address associated with a virtual router is called the Master and will forward packets sent to this IP address This will allow any Virtual Router IP address on the LAN to be used as the default first hop router by end hosts Utilizing VRRP the administrator can achieve a higher available default path cost without needing to configure every end host for dynamic routing or routing discovery protocols Statically configured default routes on the LAN are prone to a single point of failure VRRP is designed to eliminate these failures by setting an election protocol that will assign a responsibility for a virtual router to one of the VRRP routers on the LAN When a virtual router fails the election protocol will select a virtual router with the highest priority to be the Master router on the LAN This retains the link and the connection is kept alive regardless of the point of failure To configure VRRP for virtual routers on the Switch an IP interface must be present on the system and it must be a part of a VLAN VRRP IP interfaces may be assigned to every VLAN and therefore IP interface on the Switch VRRP routers within the same VRRP group must be consistent in configuration settings for this protocol to function optimally The VRRP commands in the Command Line Interfa
239. g_message show greeting_message Each command is listed in detail in the following sections 10 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual create account Purpose Used to create user accounts Syntax create admin user lt username 15 gt Description The create account command is used to create user accounts that consist of a username of 1 to 15 characters and a password of 0 to 15 characters Up to 8 user accounts can be created Parameters admin lt username gt Entering this parameter will give the specified user administrative level privileges over configuring functions of the Switch This user may perform any function listed in this manual A username of up to 15 characters must be created with this command to identify the admin user user lt username gt Entering this parameter will give the specified user user level privileges over configuring functions of the Switch User level privileges limit the execution of many commands listed in this manual A username of up to 15 characters must be created with this command to identify the user Restrictions Only Administrator level users can issue this command Usernames can be between 1 and 15 characters Passwords can be between 0 and 15 characters Example usage To create an administrator level user account with the username dlink DES 6500 4 create account admin dlink Command create account admin dlink Enter a cas
240. group or a table that maps SNMP users to SNMP views Parameters lt groupname 32 gt An alphanumeric name of up to 32 characters that will identify the SNMP group the new SNMP user will be associated with v1 Specifies that SNMP version 1 will be used The Simple Network Management Protocol SNMP version 1 is a network management protocol that provides a means to monitor and control network devices v2c Specifies that SNMP version 2c will be used The SNMP v2c supports both centralized and distributed network management strategies It includes improvements in the Structure of Management Information SMI and adds some security features v3 Specifies that the SNMP version 3 will be used SNMP v3 provides secure access to devices through a combination of authentication and encrypting packets over the network SNMP v3 adds Message integrity Ensures that packets have not been tampered with during transit Authentication Determines if an SNMP message is from a valid source Encryption Scrambles the contents of messages to prevent it being viewed by an unauthorized source noauth_nopriv Specifies that there will be no authorization and no encryption of packets sent between the Switch and a remote SNMP manager auth_nopriv Specifies that authorization will be required but there will be no encryption of packets sent between the Switch and a remote SNMP manager auth_priv Specifies
241. gured to reduce the buffer in a weighted round robin WRR fashion beginning with the highest hardware class of service and proceeding to the lowest hardware class of service before returning to the highest hardware class of service The weighted priority based scheduling alleviates the main disadvantage of strict priority based scheduling in that lower priority classes of service get starved of bandwidth by providing a minimum bandwidth to all queues for transmission This is accomplished by configuring the maximum number of packets allowed to be transmitted from a given priority class of service before being allowed to transmit its accumulated packets This establishes a Class of Service CoS for each of the Switch s seven hardware classes The possible range for maximum packets is 0 to 15 packets The commands in the Command Line Interface CLI are listed along with the appropriate parameters in the following table 102 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual Command Parameters config bandwidth_control lt portlist gt all rx_rate no_limit lt value 1 9999 gt tx_rate no_limit lt value 1 9999 gt show bandwidth_control config 802 1p user_priority show 802 1p user_priority Wee config 802 1p default_priority lt portlist gt all lt priority 0 7 gt show 802 1p default_priority config scheduling_mechanism show hol_ prevention Each command is listed in detail in
242. h mm gt e_week lt end_week 1 4 last gt e day lt end_day sun sat gt e_mth lt end_mth 1 12 gt e_time lt end_time hh mm gt offset 30 60 90 120 annual s_date lt start_date 1 31 gt s_mth lt start_mth 1 12 gt s_time lt start_time hh mm gt e_date lt end_date 1 31 gt e _mth lt end_mth 1 12 gt e_time lt end_time hh mm gt offset 30 60 90 120 Description DST can be enabled and configured using this command When enabled this will adjust the system clock to comply with any DST 254 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual config dst Parameters requirement DST adjustment effects system time for both manually configured time and time set using SNTP service disable Disable the DST seasonal time adjustment for the Switch repeating Using repeating mode will enable DST seasonal time adjustment Repeating mode requires that the DST beginning and ending date be specified using a formula For example specify to begin DST on Saturday during the second week of April and end DST on Sunday during the last week of October annual Using annual mode will enable DST seasonal time adjustment Annual mode requires that the DST beginning and ending date be specified concisely For example specify to begin DST on April 3 and end DST on October 14 s_week Configure the week of the month in which DST begins e lt start_week 1 4 last gt The number of th
243. he PIM neighbor router table ipaddress lt network_address gt The IP address and netmask of the destination routing device for which to view the neighbor router table The IP address and netmask information can be specified using the traditional format or the CIDR format For example 10 1 2 3 255 255 0 0 or 10 2 3 4 16 If no parameters are specified all PIM neighbor router tables are displayed Restrictions None Example usage To display PIM settings as configured on the Switch DES 6500 4 show pim neighbor Command show pim neighbor PIM Neighbor Address Table Interface Name Neighbor Address Expire Time System 10 48 74 122 5 Total Entries 1 DES 6500 4 show pim Purpose Used to display current PIM configuration Syntax show pim ipif lt ipif_name 12 gt Description This command will list current PIM configuration settings for a specified IP interface or all IP interfaces Parameters ipif lt ipif_ name 12 gt The name of an IP interface for which PIM settings are listed If no parameters are specified all PIM settings are displayed for all interfaces Restrictions None Usage Example 297 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual To display PIM settings as configured on the Switch DES 6500 4 show pim Command show pim PIM Global State Disabled PIM DM Interface Table Hello Join Prune Interface IP Address Interval Interval State
244. he earlier entry will be first Restrictions None Example usage To display the Switch history log DES 6500 4 show log index 1 4 Command show log index 1 4 Index Date Time Log Text 4 2000 03 02 01 54 53 Port 1 13 link up 100Mbps FULL duplex 3 2000 03 02 01 54 53 Spanning Tree Protocol is enabled 2 2000 03 02 01 54 53 Unit 1 System started up 1 2000 02 28 06 06 09 Spanning Tree Protocol is disabled DES 6500 4 63 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual enable syslog Purpose Syntax Description Parameters Restrictions Example usage Used to enable the system log to be sent to a remote host enable syslog The enable syslog command enables the system log to be sent to a remote host None Only administrator level users can issue this command To the syslog function on the Switch Success DES 6500 4 DES 6500 4 enable syslog Command enable syslog disable syslog Purpose Syntax Description Parameters Restrictions Example usage Used to disable the system log function on the Switch disable syslog The disable syslog command disables the system log function on the Switch After disabling Syslog entries will no longer be sent to a remote host None Only administrator level users can issue this command To disable the syslog function on the Switch Success DES 6500 4 DES 6500 4 disa
245. he name of the VLAN on which the MAC address resides port lt port gt Enter the corresponding port of the entry to delete The port is specified by listing the lowest slot number and the beginning port number on that slot separated by a colon For example 1 3 specifies slot number 1 port 3 2 4 specifies slot number 2 port 4 all Clears all dynamic entries to the Switch s forwarding database Restrictions Only administrator level users can issue this command Example usage To clear all FDB dynamic entries DES 6500 4 clear fdb all Command clear fdb all Success DES 6500 4 93 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual show multicast_fdb Purpose Syntax Description Parameters Restrictions Example usage Used to display the contents of the Switch s multicast forwarding database show mulitcast_fdb vlan lt vlan_name 32 gt mac_address lt macaddr gt This command is used to display the current contents of the Switch s multicast MAC address forwarding database vlan lt vian_name 32 gt The name of the VLAN on which the MAC address resides mac_address lt macaddr gt The MAC address that is present in the forwarding database table None To display multicast MAC address table VLAN Name MAC Address Egress Ports Mode Total Entries DES 6500 4 DES 6500 4 show multicast_fdb Command show multicast
246. iate parameters in the following table C C mwa S create ospf area lt area_id 0 0 0 0 255 255 255 255 gt type normal stub stub_summary enabled disabled metric lt value 0 65535 gt disabled metric lt value 0 65535 gt create ospf aggregation lt area_id gt lt network_address gt Isdb_type summary advertise enabled disabled delete ospf aggregation lt area_id gt lt network_address gt Isdb_type summary config ospf aggregation lt area_id gt lt network_address gt Isdb_type summary advertise enabled disabled show ospf aggregation show ospf aggregation aggregation lt area d gt ssi lt area d gt ssi show ospf Isdb area lt area_id gt advertise_router lt ipaddr gt type rtrlink netlink summary assummary asextlink show ospf lt area_id gt lt neighbor_id gt virtual_ neighbor config ospf ipif lt ipif_name 12 gt area lt area_id gt priority lt value 0 255 gt hello_interval lt sec 1 65535 gt dead_interval lt sec 1 65535 gt authentication none simple lt password 8 gt md5 lt key_id 1 255 gt metric lt value 1 65535 gt state enabled disabled config ospf all area lt area_id gt priority lt value gt hello_interval lt 1 65535 sec gt dead_interval lt 1 65535 sec gt authentication none simple lt password 8 gt md5 lt key_id 1 255 gt metric lt value 1 65535 gt state enabled disabled show osp
247. iated with it After assessing the protocol the Switch will forward the packets to all ports within the protocol assigned VLAN This feature will benefit the administrator by better balancing load sharing and enhancing traffic classification The Switch supports fifteen 15 pre defined protocols for configuring protocol based VLANs The user may also choose a protocol that is not one of the fifteen defined protocols by properly configuring the userDefined protocol VLAN The supported protocols for the protocol VLAN function on this Switch include IP IPX DEC LAT SNAP NetBIOS AppleTalk XNS SNA IPv6 RARP and VINES The VLAN commands in the Command Line Interface CLI are listed along with the appropriate parameters in the following table Command Parameters create vlan lt vlan_name 32 gt tag lt vlanid 2 4094 gt type 1q_vlan advertisement protocol ip protocol ipx802dot3 protocol ipx802dot2 protocol ipxSnap protocol ipxEthernet2 protocol appleTalk protocol decLat protocol sna802dot2 protocol snaEthernet2 protocol netBios protocol xns protocol vines protocol ipV6 protocol userDefined lt hex0x0 Oxffff gt encap ethernet llc snap all protocol rarp delete vian lt vlan_name 32 gt config vlan lt vlan_name 32 gt add tagged untagged forbidden lt portlist gt advertisement enabled disabled lt vlan_name 32 gt delete lt portlist gt config gvrp lt portlist gt a
248. ic 20 Example Usage Route Source Metric Metric Type RIP 0 to 16777214 mettype 1 mettype 2 Static 0 to 16777214 mettype 1 mettype 2 Local 0 to 16777214 mettype 1 mettype 2 To add route redistribution settings DES 6500 4 create route redistribute dst ospf src rip Command create route redistribute dst ospf src rip Success DES 6500 4 create route redistribute dst rip src Purpose Syntax Used to add route redistribution settings for the exchange of OSPF routes to RIP routes on the Switch create route redistribute dst rip src all internal external type_1 type_2 intert e1 inter e2 metric lt value 0 16 gt Description This command will redistribute routing information between the OSPF and RIP routing protocols to all routers on the network that are running OSPF or RIP Routing information entered into the Static Routing Table on the local xStack DES 6500 switch is also redistributed Parameters src all internal external type_1 type_2 inter e7 inter e2 Allows the selection of the protocol of the source device The user may choose between e all Specifies both internal an external e internal Specifies the internal protocol of the source device e external Specifies the external protocol of the source device type_1 Calculates the metric for RIP to OSPF by adding the destination s interface cost to the metric entered in the Me
249. idate Command config sim candidate Success DES 6500 4 To transfer the Switch to be a commander DES 6500 4 config sim commander Command config sim commander Success DES 6500 4 To update the name of a group DES 6500 4 config sim commander group_name Trinity Command config sim commander group_name Trinity Success DES 6500 4 248 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual download sim_ms Purpose Syntax Description Parameters Restrictions Used to download firmware or configuration file to an indicated device download sim_ms firmware configuration lt ipaddr gt lt path_filename gt members lt mslist 1 32 gt all This command will download a firmware file or configuration file to a specified device from a TFTP server firmware Specify this parameter to download firmware to members of a SIM group configuration_from_tftp Specify this parameter to download a switch configuration to members of a SIM group ipaddr Enter the IP address of the TFTP server lt path_filename gt Enter the path and the filename of the firmware or switch on the TFTP server members Enter this parameter to specify the members to which to download firmware or switch configuration files The user may specify a member or members by adding one of the following e lt meslist 1 32 gt Enter a value or values to specify
250. ied previously by the user replace_priority Enter this parameter to re write the 802 1p default priority of a packet to the value entered in the Priority field which meets the criteria specified previously in this command before forwarding it on to the specified CoS queue Otherwise a packet will have its incoming 802 1p user priority re written to its original value before being forwarded by the Switch replace_dscp lt value 0 63 gt Allows specification of a value to be written to the DSCP field of an incoming packet that meets the criteria specified in the first part of the command This value will over write the value in the DSCP field of the packet deny Specifies that packets that do not match the access profile are not permitted to be forwarded by the Switch and will be filtered delete access_id lt value 1 65535 gt Use this command to delete a specific rule from the packet content mask profile Up to 65535 rules may be specified for the Packet Content access profile Restrictions Only administrator level users can issue this command Example usage To create an access profile by packet content mask DES 6500 4 config access_profile profile_id 3 add access_id 1 packet_content offset_0 15 0x11111111 0x11111111 0x11111111 0x11111111 offset_16 31 0x11111111 0x11111111 0x11111111 0x11111111 port 1 1 deny Command config access_profile profile_id 3 add access_id 1 packet_content offset_0 15 0x1111111
251. ies slot number 1 port 3 2 4 specifies slot number 2 port 4 1 3 2 4 specifies all of the ports between slot 1 port 3 and slot 2 port 4 in numerical order externalCost This defines a metric that indicates the relative cost of forwarding packets to the specified port list Port cost can be set automatically or as a metric value The default value is auto auto Setting this parameter for the external cost will automatically set the speed for forwarding packets to the specified port s in the list for optimal efficiency Default port cost 100Mbps port 200000 Gigabit port 20000 lt value 1 200000000 gt Define a value between 1 and 200000000 to determine the external cost The lower the number the greater the probability the port will be chosen to forward packets hellotime lt value 1 10 gt The time interval between transmission of configuration messages by the designated port to other devices on the bridged LAN thus stating that the Switch is still functioning The user may choose a time between 1 and 10 seconds The default is 2 seconds migrate yes no Setting this parameter as yes will set the ports to send out BDPU packets to other bridges requesting information on their STP setting If the Switch is configured for RSTP the port will be capable to migrate from 802 1d STP to 802 1w RSTP If the Switch is configured for MSTP the port is capable of migrating from 802 1d STP to 802 1s MSTP
252. if the configuration of the trunked group is changed If static link aggregation is used be sure that both ends of the connection are properly configured and that all ports have the same speed duplex settings Restrictions Only administrator level users can issue this command Example usage To create a link aggregation group 127 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual DES 6500 4 create link_aggregation group_id 1 Command create link_aggregation group_id 1 Success DES 6500 4 delete link_aggregation group_id Purpose Used to delete a previously configured link aggregation group Syntax delete link_aggregation group_id lt value 1 32 gt Description This command is used to delete a previously configured link aggregation group Parameters lt value 1 32 gt Specifies the group ID The Switch allows up to 32 link aggregation groups to be configured The group number identifies each of the groups Restrictions Only administrator level users can issue this command Example usage To delete link aggregation group DES 6500 4 delete link_aggregation group_id 6 Command delete link_aggregation group_id 6 Success DES 6500 4 config link_aggregation Purpose Used to configure a previously created link aggregation group Syntax config link_aggregation group_id lt value 1 32 gt master_port lt port gt ports lt portlist gt state enabled disable
253. ificant condition Informational informational messages Debug debug level messages informational Specifies that informational messages will be sent to the remote host This corresponds to number 6 from the list above warning Specifies that warning messages will be sent to the remote host This corresponds to number 4 from the list above all Specifies that all of the currently supported syslog messages that are generated by the Switch will be sent to the remote host 65 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual create syslog host facility Some of the operating system daemons and processes have been assigned Facility values Processes and daemons that have not been explicitly assigned a Facility may use any of the local use facilities or they may use the user level Facility Those Facilities that have been designated are shown in the following Bold font indicates the facility values that the Switch currently supports Numerical Facility Code kernel messages user level messages mail system system daemons security authorization messages messages generated internally by syslog line printer subsystem network news subsystem UUCP subsystem clock daemon security authorization messages FTP daemon NTP subsystem log audit log alert clock daemon local use 0 local0 local use 1 local1 local use 2 local2 local use 3 local3 local use 4 local4 local use 5
254. ig dhcp_relay add ipif System 10 58 44 6 Success DES 6500 4 config dhcp_relay delete ipif Purpose Used to delete one or all IP destination addresses from the Switch s DHCP BOOTP relay table Syntax config dhcp_relay delete ipif lt ipif_name 12 gt lt ipaddr gt Description This command is used to delete an IP destination addresses in the Switch s DHCP BOOTP relay table Parameters lt ipif_ name 12 gt The name of the IP interface that is to be deleted from the Switch s DHCP BOOTP relay table lt ipaddr gt The DHCP server s IP address Restrictions Only administrator level users can issue this command Example usage To delete an IP destination from the DHCP relay table DES 6500 4 config dhcp_relay delete ipif System 10 58 44 6 Command config dhcp_relay delete ipif System 10 58 44 6 Success DES 6500 4 278 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual config dhcp_relay option_82 state Purpose Used to configure the state of DHCP relay agent information option 82 of the switch Syntax config dhcp_relay option_82 state enable disable Description This command is used to configure the state of DHCP relay agent information option 82 of the switch Parameters enable When enabled the relay agent will insert and remove DHCP relay information option 82 field in messages between DHCP servers and clients When the relay agent receives the DHCP reque
255. in both the receiving and transmitting directions or just the receiving direction port_control Configures the administrative control over the authentication process for the range of ports The user has the following authentication options force_auth Forces the Authenticator for the port to become authorized Network access is allowed auto Allows the port s status to reflect the outcome of the authentication process force_unauth Forces the Authenticator for the port to become unauthorized Network access will be blocked quiet_period lt sec 0 65535 gt Configures the time interval between authentication failure and the start of a new authentication attempt tx_period lt sec 1 65535 gt Configures the time to wait for a response from a supplicant user to send EAP Request Identity packets supp_timeout lt sec 1 65535 gt Configures the time to wait for a response from a supplicant user for all EAP packets except for the Request Identity packets server_timeout lt sec 1 65535 gt Configure the length of time to wait for a response from a RADIUS server max_req lt value 1 10 gt Configures the number of times to retry xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual config 802 1x auth_parameter sending packets to a supplicant user reauth_period lt sec 1 65535 gt Configures the time interval between successive re authentications enable_reauth e
256. in the VRRP group The user may choose between e none Entering this parameter indicates that VRRP protocol exchanges will not be authenticated simple authdata lt string 8 gt This parameter along with an alphanumeric string of no more than eight characters to set a simple password for comparing VRRP message packets received by a router If the two passwords are not exactly the same the packet will be dropped ip authdata lt string 16 gt This parameter will require the user to set an alphanumeric authentication string of no more than 16 characters to generate a MD5 message digest for authentication in comparing VRRP messages received by the router If the two values are inconsistent the packet will be dropped Restrictions Only administrator level users can issue this command Example usage To set the authentication type fora VRRP entry DES 6500 4 config vrrp ipif Trinity authtype simple authdata tomato Command config vrrp ipif Trinity authtype simple authdata tomato Success DES 6500 4 show vrrp Purpose To view the VRRP settings set on the Switch Syntax show vrrp ipif lt ipif_name 12 gt vrid lt vrid 1 255 gt Description This command is used to view current VRRP settings of the VRRP Operations table Parameters ipif lt ipif_name 12 gt Enter the name of a previously configured IP interface for which to view the VRRP settings This IP interface must be assigned to a VLAN on the Sw
257. in the packet received from the DHCP client drop The packet will be dropped if the option 82 field already exists in the packet received from the DHCP client keep The option 82 field will be retained if the option 82 field already exists in the packet received from the DHCP client Restrictions Only administrator level users can issue this command Example usage To configure DHCP relay option 82 policy DES 6500 4 config dhcp_relay option_82 policy replace Command config dhcp_relay option_82 policy replace Success DES 6500 4 show dhcp_relay Purpose Used to display the current DHCP BOOTP relay configuration Syntax show dhcp _relay ipif lt ipif_name 12 gt Description This command will display the current DHCP relay configuration for the Switch or if an IP interface name is specified the DHCP relay configuration for that IP interface Parameters ipif lt ipif_name 12 gt The name of the IP interface for which to display the current DHCP relay configuration Restrictions None Example usage 280 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual To show the DHCP relay configuration DES 6500 4 show dhcp_relay Command show dhcp_relay DHCP BOOTP Relay Status Enabled DHCP BOOTP Hops Count Limit 2 DHCP BOOTP Relay Time Threshold 23 DHCP Relay Agent Information Option 82 State Enabled DHCP Relay Agent Information Option 82 Check Enabled DHCP Relay
258. independent of each other Primary interfaces cannot be deleted if the VLAN contains a secondary interface Once the user creates multiple interfaces for a specified VLAN primary and secondary that set IP interface cannot be changed to another VLAN Multiple IP interfaces per VLAN is a valuable tool for network administrators requiring a multitude of IP addresses but configuring the Switch for Multiple IP interfaces per VLAN may cause troubleshooting and bandwidth problems and should not be used as a long term solution Problems may include The Switch may use extra resources to process packets for multiple IP interfaces The amount of broadcast data such as RIP update packets and PIM hello packets will be increased The IP interface commands in the Command Line Interface CLI are listed along with the appropriate parameters in the following table Command Parameters create ipif lt ipif_name 12 gt lt network_address gt lt vlan_name 32 gt secondary state enabled disabled config ipif lt ipif_name 12 gt ipaddress lt network_address gt vlan lt vlan_name 32 gt state enabled disabled bootp dhcp Each command is listed in detail in the following sections create ipif Purpose Used to create an IP interface on the Switch Syntax create ipif lt ipif_name 12 gt lt network_address gt lt vlan_name 32 gt secondary state enabled disabled Description This command will create an IP in
259. indicate optional parameters or a choice of parameters and brackets indicate required parameters xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual If a command is entered that is unrecognized by the CLI the top level commands will be displayed under the Available commands prompt DES 6500 4 the Available commands clear config create delete disable download enable finish login logout ping reboot reconfig reset save show traceroute upload DES 6500 4 Figure 2 5 The Available Commands Prompt The top level commands consist of commands such as show or config Most of these commands require one or more parameters to narrow the top level command This is equivalent to show what or config what Where the what is the next parameter For example if you enter the show command with no additional parameters the CLI will then display all of the possible next parameters DES 6500 4 show Command show Next possible completions 802 1p 802 1x access_profile account acct_client arpentry auth_client auth_diagnostics auth_session_statistics auth_statistics authen authen_enable authen_login authen_policy autoconfig bandwidth_control command_history config cpu_access_profile cpu_interface_filtering cpu_protection device_status dhcp_relay dnsr dymrp error fdb greeting_message gyrp hol_prevention igmp igmp_snooping ipfdb ipif ipmc iproute jumbo_frame lacp_port link_aggregation log md9 mirror multicast_fdb ospf p
260. ined by the Systems Network Architecture SNA Ethernet II Protocol protocol netBios Using this parameter will instruct the Switch to forward packets to this VLAN if the tag in the packet header is concurrent with this protocol This packet header information is defined by the NetBIOS Protocol protocol xns Using this parameter will instruct the Switch to forward packets to this VLAN if the tag in the packet header is concurrent with this protocol This packet header information is defined by the Xerox Network Systems XNS Protocol protocol vines Using this parameter will instruct the Switch to forward packets to this VLAN if the tag in the packet header is concurrent with this protocol This packet header information is defined by the Banyan Virtual Integrated Network Service VINES Protocol protocol ipV6 Using this parameter will instruct the Switch to forward packets to this VLAN if the tag in the packet header is concurrent with this protocol This packet header information is defined by the Internet Protocol Version 6 IPv6 Protocol protocol userDefined Using this parameter will instruct the Switch to forward packets to this VLAN if the tag in the packet header is concurrent with this protocol defined by the user This packet header information is defined by entering the following information n lt hex 0x0 0xffff gt Specifies that the VLAN will only accept packets with this hexadecimal 802 1Q Ethernet
261. iption Parameters Used to configure IGMP snooping on the Switch config igmp_snooping lt vlan_name 32 gt all host_timeout lt sec 1 16711450 gt router_timeout lt sec 1 16711450 gt leave_timer lt sec 1 16711450 gt state enabled disabled This command allows configuration of IGMP snooping on the Switch lt vlan_name 32 gt The name of the VLAN for which IGMP snooping is to be configured all Selecting this parameter will configure IGMP snooping for all VLANs on the Switch host_timeout lt sec 1 16711450 gt Specifies the maximum amount of time a host can be a member of a multicast group without the Switch receiving a host membership report The default is 260 seconds router_timeout lt sec 1 16711450 gt Specifies the maximum amount of time a router can be a member of a multicast group without the Switch receiving a host membership report The 143 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual config igmp_snooping default is 260 seconds leave_timer lt sec 1 16711450 gt Leave timer The default is 2 seconds state enabled disabled Allows the user to enable or disable IGMP snooping for the specified VLAN Restrictions Only administrator level users can issue this command Example usage To configure IGMP snooping DES 6500 4 config igmp_snooping default host_timeout 250 state enabled Command config igmp_snooping default ho
262. iption This command is used to configure DVMRP on the Switch Parameters ipif lt ipif_ name 12 gt The name of the IP interface for which DVMRP is to be configured all Specifies that DVMRP is to be configured for all IP interfaces on the Switch metric lt value 1 31 gt Allows the assignment of a DVMRP route cost to the above IP interface A DVMRP route cost is a relative number that represents the real cost of using this route in the construction of a multicast delivery tree It is similar to but not defined as the hop count in RIP The default is 1 probe lt second 1 65535 gt DVMRP defined an extension to IGMP that allows routers to query other routers to determine if a DVMRP neighbor is present on a given subnetwork or not This is referred to as a probe This entry will set an intermittent probe in seconds on the device that will transmit dvmrp messages depending on the time specified This probe is also used to keep alive the connection between DVMRP enabled devices The default value is 10 seconds neighbor_timeout lt second 1 65535 gt The time period for which DVMRP will hold Neighbor Router reports before issuing poison route messages The default value is 35 seconds 290 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual config dvmrp Restrictions Example Usage state enabled disabled Allows DVMRP to be enabled or disabled Only administrator le
263. iption This command is used to define the rules used by the Switch to either filter or forward packets based on the IP part of each packet header Parameters profile_id lt value 1 8 gt Enter an integer between 1 and 8 that is used to identify the access profile that will be configured with this command This value is assigned to the access profile when it is created with the create access_profile command The lower the profile ID the higher the priority the rule will be given add access_id lt value 1 65535 gt Adds an additional rule to the above specified access profile The value specifies the relative priority of the additional rule Up to 65535 different rules may be configured for the IP access profile ip Specifies that the Switch will look into the IP fields in each 217 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual config access_profile profile_id IP packet to see if it will be either forwarded or filtered based on one or more of the following vlan lt vlan_name 32 gt Specifies that the access profile will apply to only to this VLAN source_ip lt ipaddr gt Specifies that the access profile will apply to only packets with this source IP address destination_ip lt ipaddr gt Specifies that the access profile will apply to only packets with this destination IP address dscp lt value 0 63 gt Specifies that the access profile will apply only to packets that have thi
264. is specified all of the factory default settings are restored on the Switch including the IP address user accounts and the Switch history log The Switch will not save or reboot system If the keyword system is specified all of the factory default settings are restored on the Switch The Switch will save and reboot after the settings are changed to default Rebooting will clear all entries in the Forwarding Data Base If no parameter is specified the Switch s current IP address user accounts and the Switch history log are not changed All other parameters are restored to the factory default settings The Switch will not save or reboot Restrictions Only administrator level users can issue this command Example usage To restore all of the Switch s parameters to their default values DES 6500 4 reset config Command reset config Success DES 6500 4 21 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual Purpose Used to log in a user to the Switch s console Syntax login Description This command is used to initiate the login procedure The user will be prompted for his Username and Password Parameters None Restrictions None Example usage To initiate the login procedure DES 6500 4 login Command login UserName Purpose Used to log out a user from the Switch s console Syntax logout Description This command terminates the cur
265. istrator level users can issue this command To configure the traffic scheduling mechanism for each COS queue Success DES 6500 4 DES 6500 4 config scheduling_mechanism strict Command config scheduling_mechanism strict show scheduling_mechanism Purpose Syntax Description Parameters Restrictions Example Usage Used to display the current traffic scheduling mechanisms in use on the Switch show scheduling_mechanism This command will display the current traffic scheduling mechanisms in use on the Switch None None To show the scheduling mechanism Class 5 strict Class 6 strict DES 6500 4 DES 6500 4 show scheduling mechanism Command show scheduling_mechanism QOS scheduling_mechanism CLASS ID Mechanism 111 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual enable hol_prevention Purpose Used to enable HOL prevention Syntax enable hol_prevention Description The enable hol_prevention command enables Head of Line prevention Parameters None Restrictions You must have administrator privileges Example Usage To enable HOL prevention DES 6500 4 enable hol_prevention Command enable hol_prevention Success DES 6500 4 disable hol_prevention Purpose Used to disable HOL prevention Syntax disable hol_prevention Description The disable hol_prevention command disables Head of Line prevention Parame
266. ists for promoting user level privileges to administrator level privileges Permit default Total Entries DES 6500 4 DES 6500 4 show authen_enable all Command show authen_enable all Method List Name Priority Method Name Comment 1 tacacs Built in Group 2 tacacs Built in Group 3 Darren User defined Group 4 local Keyword 1 tacacs Built in Group 2 local Keyword 2 config authen application Purpose Syntax Description Parameters Used to configure various applications on the Switch for authentication using a previously configured method list config authen application console telnet ssh http all login enable default method_list_name lt string 15 gt This command is used to configure switch configuration applications console telnet ssh web for login at the user level and at the administration level authen_enable utilizing a previously configured method list application Choose the application to configure The user may choose one of the following four applications to configure console Choose this parameter to configure the command line interface login method 163 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual config authen application telnet Choose this parameter to configure the telnet login method ssh Choose this parameter to configure the SSH Secure Shell login method http Choose this parameter to con
267. itch vrid lt vrid 1 255 gt Enter the VRRP ID of a VRRP entry for which to view these settings Restrictions Only administrator level users can issue this command Example Usage To view the global VRRP settings currently implemented on the Switch VRRP Enabled 266 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual DES 6500 4 show vrrp Command show vrrp Global VRRP Enabled Non owner response PING Disabled Interface Name System Authentication type No Authentication VRID 2 Virtual IP Address 10 53 13 3 Virtual MAC Address 00 00 5E 00 01 02 Virtual Router State Master State Enabled Priority 255 Master IP Address 10 53 13 3 Critical IP Address 0 0 0 0 Checking Critical IP Disabled Advertisement Interval 1 secs Preempt Mode True Virtual Router Up Time 2754089 centi secs Total Entries 1 DES 6500 4 delete vrrp Purpose Used to delete a vrrp entry from the switch Syntax delete vrrp vrid lt vrid 1 255 gt ipif lt ipif_name 12 gt Description This command is used to remove a VRRP router running on a local device Parameters vrid lt vrid 1 255 gt Enter the VRRP ID of the virtual router to be deleted Not entering this parameter will delete all VRRP entries on the Switch ipif lt ipif_name 12 gt Enter the name of the IP interface which holds the VRRP router to delete Restrictions Only administrator level users can issue this co
268. ity 1 3 Success DES 6500 4 show 802 1p user_priority Purpose Used to display the current 802 1p user priority tags to hardware priority class of service mapping in use by the Switch Syntax show 802 1p user_priority Description The show 802 1p user_priority command will display the current 802 1p user priority tags to hardware priority classes of service mapping in use by the Switch Parameters None Restrictions None Example usage To show 802 1p user priority DES 6500 4 show 802 1p user_priority Command show 802 1p user_priority COS Class of Traffic Priority 0 gt lt Class 2 gt Priority 1 gt lt Class 0 gt Priority 2 gt lt Class 1 gt Priority 3 gt lt Class 3 gt Priority 4 gt lt Class 4 gt Priority 5 gt lt Class 5 gt Priority 6 gt lt Class 6 gt Priority 7 gt lt Class 6 gt DES 6500 4 108 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual config 802 1p default_priority Purpose Used to specify default priority settings on the Switch Untagged packets that are received by the Switch will be assigned a priority tag in its priority field using this command Syntax config 802 1p default_priority lt portlist gt all lt priority 0 7 gt Description The config 802 1p default_priority command allows you to specify the 802 1p priority value an untagged incoming packet will be assigned before being forwarded to its des
269. ity scheduling The remaining classes that do not have a 0 in their max_packet field will follow a weighted round robin WRR method of forwarding packets as long as the priority classes with a 0 in their max_packet field are empty When a packet arrives in a priority class with a 0 in its max_packet field this class will automatically begin forwarding packets until it is empty Once a priority class with a 0 in its max_packet field is empty the remaining priority classes will reset the weighted round robin WRR cycle of forwarding packets starting with the highest available priority class Priority classes with an equal level of priority and equal entries in their max_packet field will empty their fields based on hardware priority scheduling Parameters lt class_id 0 6 gt Specifies to which of the seven hardware priority classes the config scheduling command will be applied The seven priority classes are identified by number from 0 to 6 with queue 6 being the highest priority max_packet lt value 0 15 gt Specifies the maximum number of packets the above specified priority class will be allowed to transmit per weighted round robin WRR cycle A value between 0 and 15 packets can be specified A zero 0 denotes strict priority scheduling for that priority class Restrictions Only administrator level users can issue this command NOTICE The default QoS scheduling arrangement is a strict priority 5 schedule To
270. iv none des lt priv_key 32 32 gt eon sompuser create snmp community lt community_string 32 gt view lt view_name 32 gt read_onlly read_write lt community_string 32 gt stowsompengne auth privl read view lt view name 32 gt write view 31 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual Command Parameters lt view_name 32 gt notify_view lt view_name 32 gt delete snmp group lt groupname 32 gt lt auth_string 32 gt fenebiesnmpiraps a authenticate_traps sowsnmpwers SOS disable snmp traps disable snmp authenticate_traps config snmp system lt sw_contact gt contact config snmp system lt sw_location gt location config snmp system lt sw_name gt name Each command is listed in detail in the following sections create snmp user Purpose Used to create a new SNMP user and adds the user to an SNMP group that is also created by this command Syntax create snmp user lt SNMP_name 32 gt lt groupname 32 gt encrypted by_password auth md5 lt auth_password 8 16 gt sha lt auth_password 8 20 gt priv none des lt priv_password 8 16 gt by_key auth md5 lt auth_key 32 32 gt sha lt auth_key 40 40 gt priv none des lt priv_key 32 32 gt Description The create snmp user command creates a new SNMP user and adds the user to an SNMP group that is also created by this command SNMP ensures Message integrity Ensures that pac
271. k NOTE To view the IGMP Group Detail Information in total the user MUST l enter both the appropriate group name and ipif name 142 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual IGMP SNOOPING COMMANDS The IGMP Snooping commands in the Command Line Interface CLI are listed along with the appropriate parameters in the following table Command config igmp_snooping config igmp_snooping querier Parameters lt vlan_name 32 gt all host_timeout lt sec 1 16711450 gt router_timeout lt sec 1 16711450 gt leave_timer lt sec 1 16711450 gt state enable disable lt vlan_name 32 gt all query_interval lt sec 1 65535 gt max_response_time lt sec 1 25 gt robustness_variable lt value 1 255 gt last_member_query_interval lt sec 1 25 gt state enabled disabled enable igmp_snooping forward_mcrouter_only disable igmp_snooping forward_mcrouter_only config router_ports lt vlan_name 32 gt add delete lt portlist gt config lt vlan_name 32 gt add delete lt portlist gt router_ports_forbidden show router_ports lt vlan_name 32 gt static dynamic forbidden show igmp_snooping vlan lt vlan_name 32 gt show igmp_ snooping vlan lt vlan_name 32 gt group show igmp_snooping vlan lt vlan_name 32 gt forwarding Each command is listed in detail in the following sections config igmp_snooping Purpose Syntax Descr
272. kets have not been tampered with during transit Authentication Determines if an SNMP message is from a valid source 32 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual create snmp user Encryption Scrambles the contents of messages to prevent it from being viewed by an unauthorized source Parameters lt username 32 gt An alphanumeric name of up to 32 characters that will identify the new SNMP user lt groupname 32 gt An alphanumeric name of up to 32 characters that will identify the SNMP group with which the new SNMP user will be associated encrypted Allows the user to choose a type of authorization for authentication using SNMP The user may choose e by password Requires the SNMP user to enter a password for authentication and privacy The password is defined by specifying the auth_password below This method is recommended by_key Requires the SNMP user to enter a encryption key for authentication and privacy The key is defined by specifying the key in hex form below This method is not recommended auth The user may also choose the type of authentication algorithms used to authenticate the snmp user The choices are e md5 Specifies that the HMUAC MD5 96 authentication level will be used md5 may be utilized by entering one of the following lt auth password 8 16 gt An alphanumeric sting of between 8 and 16 characters that will be used to authorize
273. l ACCESS CONTROL LIST ACL COMMANDS INCLUDING CPU The xStack DES 6500 implement Access Control Lists that enable the Switch to deny network access to specific devices or device groups based on IP settings MAC address packet content and IPv6 settings Command Parameters create access_profile profile_id lt value 1 8 gt ethernet vlan source_mac lt macmask gt destination_mac lt macmask 802 1p ethernet_type ip vlan source_ip_ mask lt netmask gt destination_ip_ mask lt netmask gt dscp icmp type code igmp type tcp src_port_mask lt hex 0x0 Oxffff gt dst_port_mask lt hex 0x0 Oxffff gt flag_mask all urg ack psh rst syn fin udp src_port_mask lt hex Ox0 Oxffff gt dst_port_mask lt hex Ox0 xffff gt protocol_id user mask lt hex 0x0 Oxffffffff gt packet_content_mask offset_0 15 lt hex 0x0 Oxffffffff gt lt hex Ox0 Oxffffffff gt lt hex 0x0 Oxffffffff gt lt hex 0x0 Oxffffffff gt offset_16 31 lt hex 0x0 Oxffffffff gt lt hex 0x0 Oxffffffff gt lt hex Ox0 Oxffffffff gt lt nex 0x0 Oxffffffff gt offset_32 47 lt hex Ox0 Oxffffffff gt lt nex 0x0 Oxffffffff gt lt hex Ox0 Oxffffffff gt lt hex 0x0 Oxffffffff gt offset_48 63 lt hex 0x0 Oxffffffff gt lt hex Ox0 Oxffffffff gt lt nex 0x0 Oxffffffff gt lt nex 0x0 Oxffffffff gt offset_64 79 lt hex 0x0 Oxffffffff gt lt hex Ox0 Oxffffffff gt lt hex 0x0 Oxffffffff gt lt hex 0x0 Oxffffffff gt
274. led 1 DeleteOnReset 1 10 Disabled 1 DeleteOnReset DES 6500 4 29 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual delete port_security_entry_vlan_name Purpose Used to delete an entry from the Switch s port security settings Syntax delete port_security_entry_vlan_name lt vlan_name 32 gt port lt port gt mac_address lt macaddr gt Description This command is used to remove an entry from the port security entries learned by the Switch and entered into the forwarding database Parameters lt vian_name 32 gt Enter the corresponding VLAN of the entry to delete port lt port gt Enter the corresponding port of the entry to delete The port is specified by listing the lowest slot number and the beginning port number on that slot separated by a colon For example 1 3 specifies switch number 1 port 3 2 4 specifies switch number 2 port 4 mac_address lt macadar gt Enter the corresponding MAC address of the entry to delete Restrictions Only administrator level users can issue this command Example usage To delete an entry from the port security list DES 6500 4 delete port_security_entry_vlan_name default port 1 1 mac_address 00 0C 6E 73 2B C9 Command delete port_security_entry_vlan_name default port 1 1 mac_address 00 0C 6E 73 2B C9 Success DES 6500 4 30 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual NETWORK MANAGEMENT SNMP C
275. ll state enabled disabled ingress_checking enabled disabled acceptable_frame tagged_only admit_all pvid lt vlanid 1 4094 gt pone Each command is listed in detail in the following sections create vlan Purpose Used to create a VLAN on the Switch Syntax create vlan lt vilan_name 32 gt tag lt vlanid 2 4094 gt type 1q_vlan advertisement protocol ip protocol ipx802dot3 protocol ipx802dot2 protocol ipxSnap protocol ipxEthernet2 protocol appleTalk protocol decLat protocol sna802dot2 protocol snaEthernetz2 protocol netBios protocol xns protocol vines protocol ipV6 protocol userDefined lt hex0x0 Oxffff gt encap ethernet Iic snap all protocol rarp Description This command allows the creation of a VLAN on the Switch The user may choose between an 802 1Q VLAN or a protocol based VLAN Parameters lt vian_name 32 gt The name of the VLAN to be created xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual create vian tag lt vlanid 2 4094 gt The VLAN ID of the VLAN to be created Allowed values 2 4094 type This parameter uses the type field of the packet header to determine the packet protocol and destination VLAN There are two main choices of types for VLANs created on the Switch 1q_vian Allows the creation of a normal 802 1Q VLAN on the Switch advertisement Specifies that the VLAN is able to join GVRP
276. ll be attached to BDPU packets as an identifier for the MSTP region to which it belongs Switches having the same revision_level and name will be considered as part of the same MSTP region Parameters revision_level lt int 0 65535 gt Enter a number between 0 and 65535 to identify the MSTP region This value along with the name will identify the MSTP region configured on the Switch The default setting is 0 name lt string gt Enter an alphanumeric string of up to 32 characters to uniquely identify the MSTP region on the Switch This name along with the revision_level value will identify the MSTP region configured on the Switch If no name is entered the default name will be the MAC address of the device Restrictions Only administrator level users can issue this command Example usage To configure the MSTP region of the Switch with revision_level 10 and the name Trinity DES 6500 4 config stp mst_config_id revision_level 10 name Trinity Command config stp mst_config_id revision_level 10 name Trinity Success DES 6500 4 config stp mst_ports Purpose Used to update the port configuration for a MSTP instance Syntax config stp mst_ports lt portlist gt instance_id lt value 0 15 gt internalCost auto lt value 1 20000000 gt priority lt value 0 240 gt Description This command will update the port configuration for a STP instance_id If a loop occurs the MSTP function will use the p
277. ll be sent state enabled disabled Allows the sending of syslog messages to the remote host specified above to be enabled and disabled Restrictions Only administrator level users can issue this command Example usage To create syslog host DES 6500 4 create syslog host 1 severity all facility local0 ipaddress 10 53 13 94 state enabled Command create syslog host 1 severity all facility local0 ipaddress 10 53 13 94 state enabled Success DES 6500 4 config syslog host Purpose Used to configure the syslog protocol to send system log data toa remote host Syntax config syslog host lt index 1 4 gt severity informational warning all facility local local1 local2 local3 local4 local5 local6 local7 udp_port lt udp_port_number gt ipaddress lt ipaddr gt state enabled disabled Description The config syslog host command is used to configure the syslog protocol to send system log information to a remote host Parameters lt index 1 4 gt Specifies that the command will be applied to an index of hosts There are four available indexes numbered 1 through 4 severity Severity level indicator These are described in the following Bold font indicates that the corresponding severity level is currently supported on the Switch Numerical Severity Code 0 Emergency system is unusable Alert action must be taken immediately Critical critical conditions Err
278. llo_interval lt sec 1 65535 gt dead_interval lt sec 1 65535 gt authentication none simple lt password 8 gt md5 lt key_id 1 255 gt metric lt value 1 65535 gt state enabled disabled Description This command is used to configure the OSPF interface settings Parameters lt ipif_ name 12 gt The name of the IP interface area lt area_id gt A 32 bit number in the form of an IP address XXX XXX XXX XXX that uniquely identifies the OSPF area in the OSPF domain priority lt value gt The priority used in the election of the Designated Router DR A number between 0 and 255 hello_interval lt sec 1 65535 gt Allows the specification of the interval between the transmission of OSPF Hello packets in seconds Between 1 and 65535 seconds can be specified The Hello Interval Dead Interval Authorization Type and Authorization Key should be the same for all routers on the same network dead_interval lt sec 1 65535 gt Allows the specification of the length of time between the receipt of Hello packets from a neighbor router before the selected area declares that router down An interval between 1 and 65535 seconds can be specified The Dead Interval must be evenly divisible by the Hello Interval 315 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual config ospf ipif metric lt value 1 65535 gt The interface metric 1 to 65535 Entering a 0 will allow automatic calc
279. lt hex 0x0 Oxffffffff gt lt hex 0x0 Oxffffffff gt lt hex 0x0 Oxffffffff Description This command is used to identify packets by examining the Ethernet packet header by byte and then decide whether to filter or forward it based on the user s configuration The user will specify which bytes to examine by entering them into the command in hex form and then selecting whether to filter or forward them using the config access_ profile command Parameters profile_id lt value 1 8 gt Specifies an index number between 1 and 8 that will identify the access profile being created with this command packet_content_mask Specifies that the Switch will mask the packet header beginning with the offset value specified as follows e offset_0 15 Enter a value in hex form to mask the packet from the beginning of the packet to the 15th byte offset_ 16 31 Enter a value in hex form to mask the packet from byte 16 to byte 31 offset_32 47 Enter a value in hex form to mask the packet from byte 32 to byte 47 offset_48 63 Enter a value in hex form to mask the packet from byte 48 to byte 63 offset_64 79 Enter a value in hex form to mask the packet from byte 64 to byte 79 Restrictions Only administrator level users can issue this command Example usage To create an access profile by packet content mask DES 6500 4 create access_profile packet_content_mask offset_0 15 OxFFFFFFFF OxFFFFFFFF OxFFFFFFFF OxFFFFFFFF off
280. m 10 1 1 1 13 Dynamic System 10 1 1 99 13 Dynamic System 10 1 1 101 13 Dynamic System 10 1 1 102 13 Dynamic System 10 1 1 103 13 Dynamic System 10 1 1 152 13 Dynamic System 10 1 1 157 13 Dynamic System 10 1 1 161 13 Dynamic System 10 1 1 162 13 Dynamic System 10 1 1 163 1 13 Dynamic CTRL C ESC q Quit SPACE n Next Page ENTER Next Entry a All 96 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual BROADCAST STORM CONTROL COMMANDS On a computer network packets such as Multicast packets and Broadcast packets continually flood the network as normal procedure At times this traffic may increase do to a malicious endstation on the network or a malfunctioning device such as a faulty network card Thus switch throughput problems will arise and consequently affect the overall performance of the switch network To help rectify this packet storm the Switch implements two methods to monitor and control the situation l Hardware The packet storm is monitored using the Switch s hardware to determine if too many packets are flooding the network based on the threshold level provided by the user Once a packet storm has been detected the Switch will drop packets coming into the Switch until the storm has subsided This method can be utilized by selecting the drop option of the Action field in the config traffic control command below 2 Software The device s software will scan and monitor packets coming into the
281. meout for 60 seconds DES 6500 4 config authen parameter response_timeout 60 Command config authen parameter response_timeout 60 Success DES 6500 4 Example usage To configure the response timeout to never time out DES 6500 4 config authen parameter response_timeout 0 Command config authen parameter response_timeout 0 Success DES 6500 4 172 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual config authen parameter attempt Purpose Used to configure the maximum number of times the Switch will accept authentication attempts Syntax config authen parameter attempt lt int 1 255 gt Description This command will configure the maximum number of times the Switch will accept authentication attempts Users failing to be authenticated after the set amount of attempts will be denied access to the Switch and will be locked out of further authentication attempts Command line interface users will have to wait 60 seconds before another authentication attempt Telnet users will be disconnected from the Switch Parameters parameter attempt lt int 1 255 gt Set the maximum number of attempts the user may try to become authenticated by the Switch before being locked out The default setting is 3 attempts Restrictions Only administrator level users can issue this command Example usage To set the maximum number of authentication attempts at 5 DES 6500 4 config
282. meters To create a VRRP router on the Switch vrid lt vrid 1 255 gt ipif lt ipif_name 12 gt ipaddress lt ipaddr gt state enable disable priority lt int 1 254 gt advertisement_interval lt int 1 255 gt preempt true false critical_ip lt ipaddr gt critical_ip_state enable disable This command is used to create a VRRP interface on the Switch vrid lt vrid 1 255 gt Enter a value between 1 and 255 to uniquely identify this VRRP group on the Switch All routers participating in this group must be assigned the same vrid value This value MUST be different from other VRRP groups set on the Switch ipif lt ipif_name 12 gt Enter the name of a previously configured IP interface that you wish to create a VRRP entry for This IP interface must be assigned to a VLAN on the Switch ipaddress lt ipaddr gt Enter the IP address that will be assigned to the VRRP router This IP address is also the default gateway that will be statically assigned to end hosts and must be set for all routers that participate in this group state enable disable Used to enable and disable the VRRP router on the Switch priority lt int 1 254 gt Enter a value between 1 and 254 to indicate the router priority The VRRP Priority value may determine if a higher priority VRRP router overrides a lower priority VRRP router A higher priority will increase the probability that this router will become the Master router of the grou
283. mmand Example usage To delete a VRRP entry DES 6500 4 delete vrrp vrid 2 ipif Trinity Command delete vrrp vrid 2 ipif Trinity Success DES 6500 4 267 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual ROUTING TABLE COMMANDS The routing table commands in the Command Line Interface CLI are listed along with the appropriate parameters in the following table Command Parameters create iproute lt network_address gt lt ipaddr gt lt metric 1 65535 gt primary backup create iproute default lt ipaddr gt lt metric 1 65535 gt delete iproute lt network_address gt lt ipaddr gt primary backup show iproute lt network_address gt static rip ospf Each command is listed in detail in the following sections create iproute Purpose Used to create IP route entries to the Switch s IP routing table Syntax create iproute lt network_address gt lt ipaddr gt lt metric 1 65535 gt primary backup Description This command is used to create a primary and backup IP route entry to the Switch s IP routing table Parameters lt network_address gt IP address and netmask of the IP interface that is the destination of the route The address and mask information can be specified using the traditional format for example 10 1 2 3 255 0 0 0 or in CIDR format 10 1 2 3 8 lt jpaddr gt The gateway IP address for the next hop router
284. mmands in the Command Line Interface CLI are listed along with the appropriate parameters in the following table Command Parameters config dnsr primary secondary nameserver lt ipaddr gt add delete static lt domain_name 32 gt lt ipaddr gt disable dnsr cache static show dnsr static Each command is listed in detail in the following sections cace sat config dnsr Purpose Used to configure the DNS relay function Syntax config dnsr primary secondary nameserver lt ipaddr gt add delete static lt domain_name 32 gt lt ipaddr gt Description This command is used to configure the DNS relay function on the Switch Parameters primary Indicates that the IP address below is the address of the primary DNS server secondary Indicates that the IP address below is the address of the secondary DNS server nameserver lt ipaddr gt The IP address of the DNS nameserver add delete Indicates whether to add or delete the DNS relay function lt domain_name 32 gt The domain name of the entry lt jpaddr gt The IP address of the entry Restrictions Only administrator level users can issue this command Example Usage To set IP address 10 43 21 12 of primary DES 6500 4 config dnsr primary 10 43 21 12 Command config dnsr primary 10 43 21 12 Success DES 6500 4 Example Usage To add an entry domain name dns1 IP address 10 43 21 12 to
285. nable disable Determines whether or not the Switch will re authenticate Enabled causes re authentication of users at the time interval specified in the Re authentication Period field above Restrictions Only administrator level users can issue this command Example usage To configure 802 1x authentication parameters for ports 1 20 of switch 1 DES 6500 4 config 802 1x auth_parameter ports 1 1 1 20 direction both Command config 802 1x auth_parameter ports 1 1 1 20 direction both Success DES 6500 4 config 802 1x auth_protocol Purpose Used to configure the 802 1x authentication protocol on the Switch Syntax config 802 1x auth_protocol local radius_eap Description The config 802 1x auth_protocol command enables you to configure the authentication protocol Parameters local radius_eap Specify the type of authentication protocol desired Restrictions Only administrator level users can issue this command Example usage To configure the authentication protocol on the Switch DES 6500 4 config 802 1x auth_protocol local Command config 802 1x auth_protocol local Success DES 6500 4 199 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual config 802 1x init Purpose Used to initialize the 802 1x function on a range of ports Syntax config 802 1x init port_based ports lt portlist gt all mac_based ports lt portlis
286. nabled with STP compatible version DES 6500 4 show stp Command show stp STP Status Enabled STP Version STP Compatible Max Age 20 Hello Time 2 Forward Delay 115 Max Age 20 TX Hold Count 73 Forwarding BPDU Enabled Loopback Detection Enabled LBD Recover Time 60 DES 6500 4 Status 2 STP enabled for RSTP DES 6500 4 show stp Command show stp STP Status Enabled STP Version RSTP Max Age 20 Hello Time 2 Forward Delay 15 Max Age 20 TX Hold Count 3 Forwarding BPDU Enabled Loopback Detection Enabled LBD Recover Time 60 DES 6500 4 Status 3 STP enabled for MSTP DES 6500 4 show stp Command show stp STP Status Enabled STP Version MSTP Max Age 20 Forward Delay 115 85 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual Max Age 20 TX Hold Count 73 Forwarding BPDU Enabled Loopback Detection Enabled LBD Recover Time 60 DES 6500 4 show stp ports Purpose Used to display the Switch s current instance_id configuration Syntax show stp ports lt portlist gt Description This command displays the STP Instance Settings and STP Instance Operational Status currently implemented on the Switch Parameters lt portlist gt Specifies a range of ports to be displayed The port list is specified by listing the lowest slot number and the beginning port number on that slot separated by a colon
287. nd disabled on the Switch Restrictions Only administrator level users can issue this command Example Usage To change the RIP receive mode for the IP interface System DES 6500 4 config rip ipif System rx_mode v1_only Command config rip ipif System rx_mode v1_only Success DES 6500 4 enable rip Purpose Used to enable RIP Syntax enable rip Description This command is used to enable RIP on the Switch Parameters None Restrictions Only administrator level users can issue this command Example Usage To enable RIP DES 6500 4 enable rip Command enable rip Success DES 6500 4 disable rip Purpose Used to disable RIP Syntax disable rip Description This command is used to disable RIP on the Switch Parameters None Restrictions Only administrator level users can issue this command Example Usage 288 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual To disable rip DES 6500 4 disable rip Command disable rip Success DES 6500 4 show rip Purpose Used to display the RIP configuration and statistics for the Switch Syntax show rip ipif lt ipif_name 12 gt Description This command will display the RIP configuration and statistics for a given IP interface or for all IP interfaces Parameters ipif lt ipif_name 12 gt The name of the IP interface for which to display the RIP configuration and settings If this pa
288. nges to operate as if the p2p value were false The default setting for this parameter is auto state enable disable Allows STP to be enabled or disabled for the ports specified in the port list The default is enable Ibd enable disable Used to enable or disable the loopback detection function on the switch for the ports configured above in the config stp command Only administrator level users can issue this command To configure STP with path cost 19 hellotime set to 5 seconds migration enable and state enable for ports 1 5 of module 1 Success DES 6500 4 config stp ports 1 1 1 5 externalCost 19 hellotime 5 migrate yes state enable Command config stp ports 1 1 1 5 externalCost 19 hellotime 5 migrate yes state enable DES 6500 4 create stp instance_id Purpose Syntax Description Parameters Restrictions Used to create a STP instance ID for MSTP create stp instance_id lt value 1 15 gt This command allows the user to create a STP instance ID for the Multiple Spanning Tree Protocol There are 16 STP instances on the Switch one internal CIST unchangeable and the user may create up to 15 instance IDs for the Switch lt value 1 15 gt Enter a value between 1 and 15 to identify the Spanning Tree instance on the Switch Only administrator level users can issue this command 80 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual Example usage To c
289. ngs for the exchange of RIP routes to OSPF routes on the Switch create route redistribute dst ospf src static rip local mettype 1 2 metric lt value 0 16777214 gt This command will redistribute routing information between the OSPF and RIP routing protocols to all routers on the network that are running OSPF or RIP Routing information entered into the Static Routing Table on the local DES 6500 switch is also redistributed src static rip local Allows for the selection of the protocol for the source device mettype 1 2 Allows for the selection of one of two methods of calculating the metric value e Type 1 calculates for RIP to OSPF by adding the destination s interface cost to the metric entered in the Metric field Type 2 uses the metric entered in the Metric field without change This field applies only when the destination field is OSPF metric lt value 0 16777214 gt Allows the entry of an OSPF interface cost This is analogous to a Hop Count in the RIP routing protocol Only administrator level users can issue this command Routing information source RIP the Static Route table and the Local interface routing information Routing information will be redistributed to OSPF 271 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual Allowed Metric Type combinations are mettype 1 or mettype 2 The metric value 0 above will be redistributed in OSPF as the metr
290. nly administrator level users can issue this command Example usage To disable STP on the Switch 76 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual DES 6500 4 disable stp Command disable stp Success DES 6500 4 config stp version Purpose Used to globally set the version of STP on the Switch Syntax config stp version mstp rstp stp Description This command allows the user to choose the version of the spanning tree to be implemented on the Switch Parameters mstp Selecting this parameter will set the Multiple Spanning Tree Protocol MSTP globally on the Switch rstp Selecting this parameter will set the Rapid Spanning Tree Protocol RSTP globally on the Switch stp Selecting this parameter will set the Spanning Tree Protocol STP globally on the Switch Restrictions Only administrator level users can issue this command Example usage To set the Switch globally for the Multiple Spanning Tree Protocol MSTP DES 6500 4 config stp version mstp Command config stp version mstp Success DES 6500 4 config stp Purpose Used to setup STP RSTP and MSTP on the Switch Syntax config stp maxage lt value 6 40 gt maxhops lt value 1 20 gt hellotime lt value 1 10 gt forwarddelay lt value 4 30 gt txholdcount lt value 1 10 gt fopdu enable disable Ibd enable disable Ilbd_recover_timer 0 lt sec 60 1000000 gt
291. no encryption of packets sent between the Switch and a remote SNMP manager auth_priv Specifies that authorization will be required and that packets sent between the Switch and a remote SNMP manger will be encrypted lt auth_sting 32 gt An alphanumeric string used to authorize a remote SNMP manager to access the Switch s SNMP agent Restrictions Only administrator level users can issue this command Example usage To create an SNMP host to receive SNMP messages DES 6500 4 create snmp host 10 48 74 100 v3 auth_priv public Command create snmp host 10 48 74 100 v3 auth_priv public Success DES 6500 4 delete snmp host Purpose Used to remove a recipient of SNMP traps generated by the Switch s SNMP agent Syntax delete snmp host lt ipaddr gt lt auth_string 32 gt Description The delete snmp host command deletes a recipient of SNMP traps generated by the Switch s SNMP agent Parameters lt jpaddr gt The IP address of a remote SNMP manager that will receive SNMP traps generated by the Switch s SNMP agent lt auth_sting 32 gt The alphanumeric string created to authorize a remote SNMP manager to access the Switch s SNMP agent Restrictions Only administrator level users can issue this command 44 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual Example usage To delete an SNMP host entry DES 6500 4 delete snmp host 10 48 74 100 public C
292. ntax create ospf aggregation lt area_id gt lt network_address gt Isdb_type summary advertise enabled disabled Description This command is used to create an OSPF area aggregation Parameters lt area_id gt A 32 bit number in the form of an IP address XXX XXX XXX XXX that uniquely identifies the OSPF area in the OSPF domain lt network_address gt The 32 bit number in the form of an IP address that uniquely identifies the network that corresponds to the OSPF Area Isdb_type summary The type of address aggregation advertise enabled disabled Allows for the advertisement trigger to be enabled or disabled Restrictions Only administrator level users can issue this command Usage Example To create an OSPF area aggregation DES 6500 4 create ospf aggregation 10 1 1 1 10 48 76 122 16 Isdb_type summary advertise enable Command create ospf aggregation 10 1 1 1 10 48 76 122 16 Isdb_type summary advertise enable Success DES 6500 4 delete ospf aggregation Purpose Used to delete an OSPF area aggregation configuration Syntax delete ospf aggregation lt area_id gt lt network_address gt Isdb_type summary Description This command is used to delete an OSPF area aggregation configuration Parameters lt area_id gt A 32 bit number in the form of an IP address XXX XXX XXX XXX that uniquely identifies the OSPF area in the OSPF domain lt network_address gt The 32 bit
293. nter e1 inter e2 metric lt value 0 16 gt Route redistribution allows routers on the network that are running different routing protocols to exchange routing information This is accomplished by comparing the routes stored in the various router s routing tables and assigning appropriate metrics This information is then exchanged among the various routers according to the individual routers current routing protocol The Switch can redistribute routing information between the OSPF and RIP routing protocols to all routers on the network that are running OSPF or RIP Routing information entered into the Static Routing Table on the local switch is also redistributed 274 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual config route redistribute dst rip src Parameters src all internal external type_1 type_2 inter e1 inter e2 Allows the selection of the protocol of the source device The user may choose between e all Specifies both internal an external e internal Specifies the internal protocol of the source device e external Specifies the external protocol of the source device type_1 Calculates the metric for RIP to OSPF by adding the destination s interface cost to the metric entered in the Metric field type_2 Uses the metric entered in the Metric field without change This field applies only when the destination field is OSPF inter e1 Specifies the intern
294. ntering this command without the lt string gt parameter will display all authentication server groups on the Switch Restrictions None Example usage To view the authen server groups located on the Switch 171 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual DES 6500 4 show authen server_group Command show authen server_group Group Name IP Address Protocol radius nent nn nen nn nnn nnn nn nen enna nen nnnnnenn Darren 10 53 13 2 TACACS tacacs 10 53 13 94 TACACS tacacst eae xtacacSs rare nnn enn n nnn nn nn nn nn en nnn n nen nnenn Total Entries 4 DES 6500 4 config authen parameter response_timeout Purpose Used to configure the amount of time the Switch will wait for a user to enter authentication before timing out Syntax config authen parameter response_timeout lt int 0 255 gt Description This command will set the time the Switch will wait for a response of authentication from the user Parameters response_timeout lt int 0 255 gt Set the time in seconds the Switch will wait for a response of authentication from the user attempting to log in from the command line interface or telnet interface An entry of 0 will denote that the Switch will never time out while waiting for a response of authentication The default setting is 30 seconds Restrictions Only administrator level users can issue this command Example usage To configure the response ti
295. number for accounting requests The default is 1813 Restrictions Only administrator level users can issue this command Example usage To configure the RADIUS server communication settings DES 6500 4 config radius add 1 10 48 74 121 key dlink default Command config radius add 1 10 48 74 121 key dlink default Success DES 6500 4 config radius delete Purpose Used to delete a previously entered RADIUS server configuration Syntax config radius delete lt server_index 1 3 gt Description The config radius delete command is used to delete a previously entered RADIUS server configuration Parameters lt server_index 1 3 gt A number identifying the current set of RADIUS server settings delete Up to 3 groups of RADIUS server settings can be entered on the Switch Restrictions Only administrator level users can issue this command Example usage To delete previously configured RADIUS server communication settings 202 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual DES 6500 4 config radius delete 1 Command config radius delete 1 Success DES 6500 4 config radius Purpose Used to configure the Switch s RADIUS settings Syntax config radius lt server_index 1 3 gt ipaddress lt server_ip gt key lt passwd 32 gt auth_port lt udp_port_number 1 65535 gt acct_port lt udp_port_number 1 65535 gt Description The config radius command is used t
296. number in the form of an IP address that uniquely identifies the network that corresponds to the OSPF Area Isdb_type summary Specifies the type of address aggregation Restrictions Only administrator level users can issue this command Usage Example To configure the OSPF area aggregation settings 311 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual DES 6500 4 delete ospf aggregation 10 1 1 1 10 48 76 122 16 Isdb_type summary Command delete ospf aggregation 10 1 1 1 10 48 76 122 16 Isdb_type summary Success DES 6500 4 config ospf aggregation Purpose Used to configure the OSPF area aggregation settings Syntax config ospf aggregation lt area_id gt lt network_address gt Isdb_type summary advertise enabled disabled Description This command is used to configure the OSPF area aggregation settings Parameters lt area_id gt A 32 bit number in the form of an IP address XXX XXX XXX XXX that uniquely identifies the OSPF area in the OSPF domain lt network_address gt The 32 bit number in the form of an IP address that uniquely identifies the network that corresponds to the OSPF Area Isdb_type summary Specifies the type of address aggregation advertise enabled disabled Allows for the advertisement trigger to be enabled or disabled Restrictions Only administrator level users can issue this command Usage Example To configure the OSPF
297. o configure a rule for the IP access profile DES 6500 4 config access_profile profile_id 2 add access_id 2 ip protocol_id 2 port 1 2 deny Command config access_profile profile_id 2 add access_id 2 ip protocol_id 2 port 1 2 deny Success DES 6500 4 219 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual create access _profile packet content mask Purpose Used to create an access profile on the Switch by examining the Ethernet part of the packet header Packet content masks entered will specify certain bytes of the packet header to be identified by the Switch When the Switch recognizes a packet with the identical byte as the one configured it will either forward or filter the packet based on the users command Specific values for the rules are entered using the config access_profile command below create access_profile packet_content_mask profile_id lt value 1 8 gt offset_0 15 lt hex 0x0 Oxffffffff gt lt hex 0x0 Oxffffffff gt lt hex 0x0 Oxffffffff gt lt hex 0x0 Oxffffffff gt offset_16 31 lt hex 0x0 Oxffffffff gt lt hex 0x0 Oxffffffff gt lt hex 0x0 Oxffffffff gt lt hex 0x0 Oxffffffff gt offset_32 47 lt hex 0x0 Oxffffffff gt lt hex 0x0 Oxffffffff gt lt hex 0x0 Oxffffffff gt lt hex 0x0 Oxffffffff gt offset_48 63 lt hex 0x0 Oxffffffff gt lt hex 0x0 Oxffffffff gt lt hex 0x0 Oxffffffff gt lt hex 0x0 Oxffffffff gt offset_64 79 lt hex 0x0 Oxffffffff gt
298. o configure the Switch s RADIUS settings Parameters lt server_index 1 3 gt Assigns a number to the current set of RADIUS server settings Up to 3 groups of RADIUS server settings can be entered on the Switch ipaddress lt server_ip gt The IP address of the RADIUS server key Specifies that a password and encryption key will be used between the Switch and the RADIUS server lt passwd 32 gt The shared secret key used by the RADIUS server and the Switch Up to 32 characters can be used auth_port lt udp_port_number gt The UDP port number for authentication requests The default is 1812 acct_port lt udp_port_number gt The UDP port number for accounting requests The default is 1813 Restrictions Only administrator level users can issue this command Example usage To configure the RADIUS settings DES 6500 4 config radius 1 ipaddress 10 48 74 121 key dlink Command config radius 1 ipaddress 10 48 74 121 key dlink Success DES 6500 4 show radius Purpose Used to display the current RADIUS configurations on the Switch Syntax show radius Description The show radius command is used to display the current RADIUS configurations on the Switch Parameters None Restrictions None 203 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual Example usage To display RADIUS settings on the Switch DES 6500 4 show radius Command show radius
299. o this IP address fails the virtual router will be disabled automatically A new master will be elected from the backup routers participating in the VRRP group Different critical IP addresses may be assigned to different routers participating in the VRRP group and can therefore define multiple routes to the Internet or other critical 263 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual create vrrp vrid network connections critical_ip_state enable disable This parameter is used to enable or disable the critical IP address entered above The default is disable Restrictions Only administrator level users can issue this command Example usage To create a VRRP entry DES 6500 4 create vrrp vrid 1 ipif Darren ipaddress 11 1 1 1 state enable priority 200 advertisement_interval 1 preempt true critical_ip 10 53 13 224 critical_ip_state enable Command create vrrp vrid 1 ipif Darren ipaddress 11 1 1 1 state enable priority 200 advertisement_interval 1 preempt true critical_ip 10 53 13 224 critical_ip_state enable Success DES 6500 4 config vrrp vrid Purpose To configure a VRRP router set on the Switch Syntax config vrrp vrid lt vrid 1 255 gt ipif lt ipif_name 12 gt state enable disable priority lt int 1 254 gt ipaddress lt ipaddr gt advertisement_interval lt int 1 255 gt preempt true false critical_ip lt ipaddr gt critical_ip_state enable
300. of an IP address xxx xxx xxx xxx that uniquely identifies the OSPF area in the OSPF domain type normal stub Allows the specification of the OSPF mode of operation stub or normal stub_summary enabled disabled Allows the OSPF area import of LSA advertisements to be enabled or disabled metric lt value 0 65535 gt The OSPF area stub default cost Restrictions Only administrator level users can issue this command Usage Example To configure an OSPF area s settings DES 6500 4 config ospf area 10 48 74 122 type stub stub_summary enable metric 1 Command config ospf area 10 48 74 122 type stub stub_summary enable metric 1 Success DES 6500 4 show ospf area Purpose Used to display an OSPF area s configuration Syntax show ospf area lt area_id gt Description This command will display the current OSPF area configuration Parameters lt area_id gt A 32 bit number in the form of an IP address XXX XXX XXX XXX that uniquely identifies the OSPF area in the OSPF domain Restrictions None Usage Example To display an OSPF area s settings DES 6500 4 show ospf area Command show ospf area Area ID Type Stub Import Summary LSA Stub Default Cost 0 0 0 0 Normal None None 10 48 74 122 Stub Enabled Enabled Total Entries 2 DES 6500 4 308 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual create ospf host_route Purpose Used to c
301. ommand Example usage To set the fdb aging time DES 6500 4 config fdb aging_time 300 Command config fdb aging_time 300 Success DES 6500 4 delete fdb Purpose Used to delete an entry to the Switch s forwarding database Syntax delete fdb lt vlan_name 32 gt lt macaddr gt Description This command is used to delete a previous entry to the Switch s MAC address forwarding database Parameters lt vlan_name 32 gt The name of the VLAN on which the MAC address resides lt macaddr gt The MAC address that will be deleted from the forwarding table Restrictions Only administrator level users can issue this command Example usage To delete a permanent FDB entry 92 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual DES 6500 4 delete fdb default 00 00 00 00 01 02 Command delete fdb default 00 00 00 00 01 02 Success DES 6500 4 Example usage To delete a multicast fdb entry DES 6500 4 delete fdb default 01 00 00 00 01 02 Command delete fdb default 01 00 00 00 01 02 Success DES 6500 4 clear fdb Purpose Used to clear the Switch s forwarding database of all dynamically learned MAC addresses Syntax clear fdb vlan lt vlan_name 32 gt port lt port gt all Description This command is used to clear dynamically learned entries to the Switch s forwarding database Parameters vlan lt vlan_name 32 gt T
302. ommand delete snmp host 10 48 74 100 public Success DES 6500 4 show snmp host Purpose Used to display the recipient of SNMP traps generated by the Switch s SNMP agent Syntax show snmp host lt ipaddr gt Description The show snmp host command is used to display the IP addresses and configuration information of remote SNMP managers that are designated as recipients of SNMP traps that are generated by the Switch s SNMP agent Parameters lt jpaddr gt The IP address of a remote SNMP manager that will receive SNMP traps generated by the Switch s SNMP agent Restrictions None Example usage To display the currently configured SNMP hosts on the Switch DES 6500 4 show snmp host Command show snmp host SNMP Host Table Host IP Address SNMP Version Community Name SNMPv3 User Name 10 48 76 23 V2c private 10 48 74 100 V3 authpriv public Total Entries 2 DES 6500 4 create trusted_host Purpose Used to create the trusted host Syntax create trusted_host lt ipaddr gt Description The create trusted_host command creates the trusted host The Switch allows specification up to four IP addresses that are allowed to manage the Switch via in band SNMP or TELNET based management software These IP addresses must be members of the Management VLAN If no IP addresses are specified then there is nothing to prevent any IP address from accessing the Switch provided the user knows the Use
303. on settings on the Switch The MSTP will utilize the priority in selecting the root bridge root port and designated port Assigning higher priorities to STP regions will instruct the Switch to give precedence to the selected instance_id for forwarding packets The lower the priority value set the higher the priority Parameters priority lt value 0 61440 gt Select a value between 0 and 61440 to specify the priority for a specified instance ID for forwarding packets The lower the value the higher the priority This entry must be divisible by 4096 instance_id lt value 0 15 gt Enter the value corresponding to the previously configured instance ID of which to set the priority value An instance id of 0 denotes the default instance_id CIST internally set on the Switch Restrictions Only administrator level users can issue this command 82 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual Example usage To set the priority value for instance_id 2 as 4096 DES 6500 4 config stp priority 4096 instance_id 2 Command config stp priority 4096 instance_id 2 Success DES 6500 4 config stp mst_config_id Purpose Used to update the MSTP configuration identification Syntax config stp mst_config_id revision_level lt int 0 65535 gt name lt string gt Description This command will uniquely identify the MSTP configuration currently configured on the Switch Information entered here wi
304. on the Switch Restrictions None Example usage To display the STP instance configuration for instance 0 the internal CIST on the Switch DES 6500 4 show stp instance_id 0 Command show stp instance_id 0 STP Instance Settings Instance Type CIST Instance Status Enabled Instance Priority 32768 bridge priority 32768 sys ID ext 0 STP Instance Operational Status Designated Root Bridge 32766 00 90 27 39 78 E2 External Root Cost 200012 Regional Root Bridge 32768 00 53 13 1A 33 24 Internal Root Cost 0 Designated Bridge 32768 00 50 BA 71 20 D6 Root Port 21 1 Max Age 20 Forward Delay 15 Last Topology Change 856 Topology Changes Count 2987 CTRL C ESC q Quit SPACE n Next Page p Previous Page r Refresh show stp mst_config_id Purpose Used to display the MSTP configuration identification Syntax show stp mst_config_id Description This command displays the Switch s current MSTP configuration identification Parameters None Restrictions None Example usage To show the MSTP configuration identification currently set on the Switch 87 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual DES 6500 4 show stp mst_config_id Command show stp mst_config_id Current MST Configuration Identification Configuration Name 00 53 13 1A 33 24 Revision Level 0 MSTI ID Vid list CIST 2 4094 1 1 DES 6500 4 88 xStack DES 6500 Mod
305. onfig authen_login default method_list_name lt string 15 gt method tacacs xtacacs tacacs radius server_group lt string 15 gt local none delete authen_login lt string 15 gt method_list_name show authen_login default method_list_name lt string 15 gt all create authen_enable lt string 15 gt method_list_name config authen_enable default method_list_name lt string 15 gt method tacacs xtacacs tacacs radius server_group lt string 15 gt local_enable none delete authen_enable lt string 15 gt method_list_name show authen_enable default method_list_name lt string 15 gt all config authen application console telnet ssh http all login enable default method_list_name lt string 15 gt create authen server_group lt string 15 gt config authen server_group tacacs xtacacs tacacs radius lt string 15 gt add delete server_host lt ipaddr gt protocol tacacs xtacacs tacacs radius delete authen server_group lt string 15 gt show authen server_group lt string 15 gt create authen server_host lt ipaddr gt protocol tacacs xtacacs tacacs radius port lt int 1 65535 gt key lt key_string 254 gt none timeout lt int 1 255 gt retransmit lt int 1 255 gt config authen server_host lt ipaddr gt protocol tacacs xtacacs tacacs radius port lt int 1 65535 gt key lt key_string 254 gt none timeout
306. onfigure OSPF host route settings Syntax create ospf host_route lt ipaddr gt area lt area_id gt metric lt value 1 65535 gt Description This command is used to configure the OSPF host route settings Parameters lt ipaddr gt The host s IP address lt area_id gt A 32 bit number in the form of an IP address XXX XXX XXX XXX that uniquely identifies the OSPF area in the OSPF domain metric lt value 1 65535 gt A metric between 1 and 65535 which will be advertised Restrictions Only administrator level users can issue this command Usage Example To configure the OSPF host route settings DES 6500 4 create ospf host_route 10 48 74 122 area 10 1 1 1 metric 2 Command create ospf host_route 10 48 74 122 area 10 1 1 1 metric 2 Success DES 6500 4 delete ospf host_route Purpose Used to delete an OSPF host route Syntax delete ospf host_route lt ipaddr gt Description This command is used to delete an OSPF host route Parameters lt jpaddr gt The IP address of the OSPF host Restrictions Only administrator level users can issue this command Usage Example To delete an OSPF host route DES 6500 4 delete ospf host_route 10 48 74 122 Command delete ospf host_route 10 48 74 122 Success DES 6500 4 309 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual config ospf host_route Purpose Used to configure OSPF host route settings
307. or error conditions Warning warning conditions Notice normal but significant condition Informational informational messages Debug debug level messages informational Specifies that informational messages will be sent to the remote host This corresponds to number 6 from the list above 67 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual config syslog host warning Specifies that warning messages will be sent to the remote host This corresponds to number 4 from the list above all Specifies that all of the currently supported syslog messages that are generated by the Switch will be sent to the remote host facility Some of the operating system daemons and processes have been assigned Facility values Processes and daemons that have not been explicitly assigned a Facility may use any of the local use facilities or they may use the user level Facility Those Facilities that have been designated are shown in the following Bold font indicates the facility values the Switch currently supports Numerical Facility Code kernel messages user level messages mail system system daemons security authorization messages messages generated internally by syslog line printer subsystem network news subsystem UUCP subsystem clock daemon security authorization messages FTP daemon NTP subsystem log audit log alert clock daemon local use 0 local0 local use 1 local local use 2
308. or she must be authenticated by a method on the Switch to gain administrator privileges on the Switch which is defined by the Administrator A maximum of eight 8 method lists can be implemented on the Switch The sequence of methods implemented in this command will affect the authentication result For example if a user enters a sequence of methods like tacacs xtacacs local_enable the Switch will send an authentication request to the first tacacs host in the server group If no verification is found the Switch will send an authentication request to the second tacacs host in the server group and so on until the list is exhausted At that point the Switch will restart the same sequence with the following protocol listed xtacacs If no authentication takes place using the xtacacs list the local_enable password set in the Switch is used to authenticate the user Successful authentication using any of these methods will give the user a Admin privilege Parameters default The default method list for administration rights authentication as defined by the user The user may choose one or a combination of up to four 4 of the following authentication methods tacacs Adding this parameter will require the user to be authenticated using the TACACS protocol from the remote TACACS server hosts of the TACACS server group list xtacacs Adding this parameter will require the user to be authenticated using the XTACACS p
309. ort priority to select an interface to put into the forwarding state Seta 83 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual config stp mst_ports higher priority value for interfaces to be selected for forwarding first In instances where the priority value is identical the MSTP function will implement the lowest port number into the forwarding state and other interfaces will be blocked Remember that lower priority values mean higher priorities for forwarding packets Parameters lt portlist gt Specifies a port or range of ports to be configured The port list is specified by listing the lowest slot number and the beginning port number on that slot separated by a colon Then the highest slot number and the highest port number of the range also separated by a colon are specified The beginning and end of the port list range are separated by a dash For example 1 3 specifies slot number 1 port 3 2 4 specifies slot number 2 port 4 1 3 2 4 specifies all of the ports between slot 1 port 3 and slot 2 port 4 in numerical order instance_id lt value 0 15 gt Enter a numerical value between 0 and 15 to identify the instance_id previously configured on the Switch An entry of 0 will denote the CIST Common and Internal Spanning Tree internalCost This parameter is set to represent the relative cost of forwarding packets to specified ports when an interface is selected within a STP instance The
310. ort list range are separated by a dash For example 1 3 specifies slot number 1 port 3 2 4 specifies slot number 2 port 4 1 3 2 4 specifies all of the ports between slot 1 port 3 and slot 2 port 4 in numerical order Restrictions Only administrator level users can issue this command Example usage To set up forbidden router ports 147 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual DES 6500 4 config router_ports_forbidden default add 2 1 2 10 Command config router_ports_forbidden default add 2 1 2 10 Success DES 6500 4 show router_ports Purpose Used to display the currently configured router ports on the Switch Syntax show router_ports vlan lt vlan_name 32 gt static dynamic forbidden Description This command will display the router ports currently configured on the Switch Parameters vlan lt vian_name 32 gt The name of the VLAN on which the router port resides static Displays router ports that have been statically configured dynamic Displays router ports that have been dynamically configured forbidden Displays router ports that have been labeled as forbidden Restrictions None Example usage To display the router ports DES 6500 4 show router_ports Command show router_ports VLAN Name default Static router port 2 1 2 10 Dynamic router port Forbidden Router Port VLAN Name vlan2 Static router port
311. orts between switch 1 port 3 and switch 2 port 4 in numerical order permit Specifies that packets that match the access profile are 214 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual config access_profile profile_id for Ethernet permitted to be forwarded by the Switch e priority lt value 0 7 gt This parameter is specified to re write the 802 1p default priority previously set in the Switch which is used to determine the CoS queue to which packets are forwarded to Once this field is specified packets accepted by the Switch that match this priority are forwarded to the CoS queue specified previously by the user replace_priority Enter this parameter to re write the 802 1p default priority of a packet to the value entered in the Priority field which meets the criteria specified previously in this command before forwarding it on to the specified CoS queue Otherwise a packet will have its incoming 802 1p user priority re written to its original value before being forwarded by the Switch replace_dscp lt value 0 63 gt Allows specification of a value to be written to the DSCP field of an incoming packet that meets the criteria specified in the first part of the command This value will over write the value in the DSCP field of the packet deny Specifies that packets that do not match the access profile are not permitted to be forwarded by the Switch and will be filtered
312. ot yet a member of the SIM group The Candidate Switch may join the SIM group by manually configuring it to be a MS of a SIM group A switch configured as a CaS is not a member of a SIM group and will take on the following characteristics 7 It is not a CS or MS of another Single IP group It is connected to the CS through the CS management VLAN The following rules also apply to the above roles 1 Each device begins in a Candidate state 240 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual 2 CS s must change their role to CaS and then to MS to become a MS of a SIM group Thus the CS cannot directly be converted to a MS 3 The user can manually configure a CS to become a CaS 4 A MS can become a CaS by a Being configured as a CaS through the CS b Ifreport packets from the CS to the MS time out 5 The user can manually configure a CaS to become a CS 6 The CaS can be configured through the CS to become a MS After configuring one switch to operate as the CS of a SIM group additional switches may join the group by manually configuring the Switch to be a MS The CS will then serve as the in band entry point for access to the MS The CS s IP address will become the path to all MS s of the group and the CS s Administrator s password and or authentication will control access to all MS s of the SIM group With SIM enabled the applications in the CS will redirect the packet instead of executing
313. oth port groups 1 8 and 9 16 since VLAN1O spans these groups One less rule is available for port group 1 8 Two less rules are available for port group 9 16 In addition a total of three rules apply to the 9600 rule Switch limit In the example used above config access_profile profile id 1 add access _id 1 ip source_ip 10 42 73 1 port 7 deny a single access rule was created This rule will subtract one rule available for the port group 8 as well as one rule from the total available rules It must be noted that there are specific circumstances under which the ACL cannot filter a packet even when there is a condition match that should deny forwarding This is a limitation that may arise if e the destination MAC is the same as the Switch system MAC e a packet is directed to the system IP interface such as multicast IP packets or if the hardware IP routing table is full and Switch software routes the packet according to routing protocol In order to address this functional limitation of the chip set an additional function CPU Interface Filtering has been added CPU Filtering may be universally enabled or disabled Setting up CPU Interface Filtering follows the same syntax as ACL configuration and requires some of the same input parameters To configure CPU Interface Filtering see the descriptions below for create cpu access profile and config cpu access profile To enable CPU Interface Filtering see config cpu_interface_filtering
314. ow accept the local enable password as the authentication for normal users attempting to access administrator level privileges Parameters None Restrictions Only administrator level users can issue this command 154 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual Example usage To disable the system access authentication policy DES 6500 4 disable authen_policy Command disable authen_policy Success DES 6500 4 show authen_policy Purpose Used to display the system access authentication policy status on the Switch Syntax show authen_policy Description This command will show the current status of the access authentication policy on the Switch Parameters None Restrictions None Example usage To display the system access authentication policy DES 6500 4 show authen_policy Command show authen_policy Authentication Policy Enabled DES 6500 4 create authen_login method_list_name Purpose Used to create a user defined method list of authentication methods for users logging on to the Switch Syntax create authen_login method_list_name lt string 15 gt Description This command is used to create a list for authentication techniques for user login The Switch can support up to eight method lists but one is reserved as a default and cannot be deleted Multiple method lists must be created and configured separately Parameters lt string 15 gt
315. p Purpose Used to enable GVRP on the Switch Syntax enable gvrp Description This command along with disable gvrp below is used to enable and disable GVRP globally on the Switch without changing the GVRP configuration on the Switch Parameters None Restrictions Only administrator level users can issue this command Example usage To enable the generic VLAN Registration Protocol GVRP DES 6500 4 enable gvrp Command enable gvrp Success DES 6500 4 disable gvrp Purpose Used to disable GVRP on the Switch Syntax disable gvrp Description This command along with enable gvrp below is used to enable and disable GVRP on the Switch without changing the GVRP configuration on the Switch Parameters None Restrictions Only administrator level users can issue this command Example usage To disable the Generic VLAN Registration Protocol GVRP DES 6500 4 disable gvrp Command disable gvrp Success DES 6500 4 124 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual show vlan Purpose Used to display the current VLAN configuration on the Switch Syntax show vlan lt vlan_name 32 gt Description This command displays summary information about each VLAN including the VLAN ID VLAN name the Tagging Untagging status and the Member Non member Forbidden status of each port that is a member of the VLAN Parameters lt vian_name 32 gt The VLAN name
316. p Total Entries 3 DES 6500 4 299 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual show ipmc Purpose Used to display the IP multicast interface table Syntax show ipmc ipif lt ipif_name 12 gt protocol inactive dvmrp pim Description This command will display the current IP multicast interface table Parameters lt ipif_ name 12 gt The name of the IP interface for which to display the IP multicast interface table for protocol Allows the user to specify whether or not to use one of the available protocols to display the IP multicast interface table For example if DVMRP is specified the table will display only those entries that are related to the DVMRP protocol e inactive Specifying this parameter will display entries that are currently inactive dvmrp Specifying this parameter will display only those entries that are related to the DVMRP protocol pim Specifying this parameter will display only those entries that are related to the PIM protocol Restrictions None Usage Example To display the current IP multicast interface table by DVMRP entry DES 6500 4 show ipmc protocol dvmrp Command show ipmc protocol dvmrp Interface Name IP Address Multicast Routing System 10 90 90 90 DVMRP Total Entries 1 DES 6500 4 300 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual MD5 CONFIGURATION COMMANDS The MD5
317. p A lower priority will increase the probability that this router will become the backup router VRRP routers that are assigned the same priority value will elect the highest physical IP address as the Master router The default value is 100 The value of 255 is reserved for the router that owns the IP address associated with the virtual router and is therefore set automatically advertisement_interval lt int 1 255 gt Enter a time interval value in seconds for sending VRRP message packets This value must be consistent with all routers participating within the same VRRP group The default is 1 second preempt true false This entry will determine the behavior of backup routers within the VRRP group by controlling whether a higher priority backup router will preempt a lower priority Master router A true entry along with having the backup router s priority set higher than the masters priority will set the backup router as the Master router A false entry will disable the backup router from becoming the Master router This setting must be consistent with all routers participating within the same VRRP group The default setting is true critical_ip lt ipaddr gt Enter the IP address of the physical device that will provide the most direct route to the Internet or other critical network connections from this virtual router This must be a real IP address of a real device on the network If the connection from the virtual router t
318. pe of severity warnings are to be sent to the destination entered above e critical Entering this parameter along with the proper destination stated above will instruct the Switch to send only critical events to the Switch s log or SNMP agent e warning Entering this parameter along with the proper destination stated above will instruct the Switch to send critical and warning events to the Switch s log or SNMP agent e information Entering this parameter along with the proper destination stated above will instruct the switch to send informational warning and critical events to the Switch s log or SNMP agent Restrictions Only administrator level users can issue this command Example usage To configure the system severity 73 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual DES 6500 4 config system_severity trap critical Command config system_severity trap critical Success DES 6500 4 show system_severity Purpose To display the current severity settings set on the Switch Syntax show system_severity Description This command is used to view the severity settings that have been implemented on the Switch using the config system_severity command Parameters None Restrictions None Example usage To view the system severity settings currently implemented on the Switch DES 6500 4 show system_severity Command show system_severity system
319. peed of routing traffic over the network The Safeguard Engine commands in the Command Line Interface CLI are listed along with the appropriate parameters in the following table Command Parameters config safeguard_engine state enable disable utilization rising lt value 20 100 gt falling lt value 20 100 gt trap_log enable disable mode strict fuzzy Each command is listed in detail in the following sections 235 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual config safeguard_engine Purpose Used to configure the Safeguard Engine settings for the Switch Syntax config safeguard_engine state enable disable utilization rising lt value 20 100 gt falling lt value 20 100 gt trap_log enable disable mode strict fuzzy Description This command is used to configure the settings for the Safeguard Engine function of this Switch based on CPU utilization Parameters state enable disable Select the running state of the Safeguard Engine function as enable or disable utilization Select this option to trigger the Safeguard Engine function to enable based on the following determinates e rising lt value 20 100 gt The user can set a percentage value of the rising CPU utilization which will trigger the Safeguard Engine function Once the CPU utilization rises to this percentage the Safeguard Engine mechanism will initiate falling lt value 20
320. pentry command above by specifying either the IP address of the entry or all Specifying all clears the Switch s ARP 257 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual delete arpentry table Parameters lt jpaddr gt The IP address of the end node or station all Deletes all ARP entries Restrictions Only administrator level users can issue this command Example Usage To delete an entry of IP address 10 48 74 121 from the ARP table DES 6500 4 delete arpentry 10 48 74 121 Command delete arpentry 10 48 74 121 Success DES 6500 4 config arp_aging time Purpose Used to configure the age out timer for ARP table entries on the Switch Syntax config arp_aging time lt value 0 65535 gt Description This command sets the maximum amount of time in minutes that an ARP entry can remain in the Switch s ARP table without being accessed before it is dropped from the table Parameters time lt value 0 65535 gt The ARP age out time in minutes The value may be set in the range of 0 65535 minutes with a default setting of 20 minutes Restrictions Only administrator level users can issue this command Example Usage To configure ARP aging time DES 6500 4 config arp_aging time 30 Command config arp_aging time 30 Success DES 6500 4 show arpentry Purpose Used to display the ARP table Syntax show arpentry ipif lt ipif_name 12 gt
321. pkey der Command download certificate_fromTFTP 10 53 13 94 certfilename c cert der keyfilename c pkey der Success DES 6500 4 189 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual 802 1X COMMANDS The xStack DES 6500 implement the server side of the IEEE 802 1x Port based and MAC based Network Access Control This mechanism is intended to allow only authorized users or other network devices access to network resources by establishing criteria for each port on the Switch that a user or network device must meet before allowing that port to forward or receive frames C ip disable 802 o srowane user sow sneer show 802 1x ports lt portlist gt all auth_configuration config 802 1x auth_mode port_based mac_based config 802 1x capability ports lt portlist gt all authenticator none config 802 1x lt portlist gt all default direction both in port_control auth_parameter ports force_unauth auto force_auth quiet_period lt sec 0 65535 gt tx_period lt sec 1 65535 gt supp_timeout lt sec 1 65535 gt server_timeout lt sec 1 65535 gt max_req lt value 1 10 gt reauth_period lt sec 1 65535 gt enable_reauth enable disable config 802 1x local radius eap auth_protocol config 802 1x init port_based ports lt portlist gt all mac_based ports lt portlist gt all mac_address lt macaddr gt config 802 1x reauth
322. play the current IGMP snooping forwarding table entries currently configured on the Switch Parameters lt vlan_name 32 gt The name of the VLAN for which to view IGMP snooping forwarding table information Restrictions None 150 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual Example usage To view the IGMP snooping forwarding table for VLAN Trinity DES 6500 4 show igmp_ snooping forwarding vlan Trinity Command show igmp_snooping forwarding vlan Trinity VLAN Name Trinity Multicast group 224 0 0 2 MAC address 01 00 5E 00 00 02 Port Member 1 17 Total Entries 1 DES 6500 4 151 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual ACCESS AUTHENTICATION CONTROL COMMANDS The Access Authentication Control commands allows secure access to the Switch using the TACACS XTACACS TACACS and RADIUS protocols When a user logs in to the Switch or tries to access the administrator level privilege he or she is prompted for a password If TACACS XTACACS TACACS RADIUS authentication is enabled on the Switch it will contact a TACACS XTACACS TACACS RADIUS server to verify the user If the user is verified he or she is granted access to the Switch There are currently three versions of the TACACS security protocol each a separate entity The Switch s software supports the following versions of TACACS e TACACS Terminal Access Controller Ac
323. port 4 in numerical order state enabled disabled Allows the user to enable or disable the specified link aggregation group Only administrator level users can issue this command Link aggregation groups may not overlap To define a load sharing group of ports group id 1 master port 5 of module 1 with group members ports 5 7 plus port 9 DES 6500 4 config link_aggregation group_id 1 master_port 1 5 ports 1 5 1 7 1 9 Command config link_aggregation group_id 1 master_port 1 5 ports 1 5 1 7 1 9 Success DES 6500 4 129 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual config link_aggregation algorithm Purpose Used to configure the link aggregation algorithm Syntax config link_aggregation algorithm mac_source mac_destination mac_source_dest ip_source ip_destination ip_source_dest Description This command configures to part of the packet examined by the Switch when selecting the egress port for transmitting load sharing data This feature is only available using the address based load sharing algorithm Parameters mac_source Indicates that the Switch should examine the MAC source address mac_destination Indicates that the Switch should examine the MAC destination address mac_source_dest Indicates that the Switch should examine the MAC source and destination addresses ip_source Indicates that the Switch should examine the IP source addr
324. port_based ports lt portlist gt all lt portlist gt all mac_address lt macaddr gt config radius add lt server_index 1 3 gt lt server_ip gt key lt passwd 32 gt default auth_port lt udp_port_number 1 65535 gt acct_port lt udp_port_number 1 65535 gt config radius lt server_index 1 3 gt ipaddress lt server_ip gt key lt passwd 32 gt auth_port lt udp_port_number 1 65535 gt acct_port lt udp_port_number 1 65535 gt Bowes OOS waas OSS Ee xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual Command Parameters show auth_statistics ports lt portlist gt all Each command is listed in detail in the following sections enable 802 1x Purpose Used to enable the 802 1x server on the Switch Syntax enable 802 1x Description The enable 802 1x command enables the 802 1x Network Access control server application on the Switch To select between port based or MAC based use the config 802 1x auth_mode command Parameters None Restrictions Only administrator level users can issue this command Example usage To enable 802 1x switch wide DES 6500 4 enable 802 1x Command enable 802 1x Success DES 6500 4 disable 802 1x Purpose Used to disable the 802 1x server on the Switch Syntax disable 802 1x Description The disable 802 1x command is used to disable the 802 1x Network Access control server application on the Switch To
325. pose Used to display the current autoconfig status of the Switch Syntax show autoconfig Description This will list the current status of the autoconfiguration function Parameters None Restrictions None Example usage To show the autoconfig configuration set on the Switch DES 6500 4 show autoconfig Command show autoconfig Autoconfig disabled Success DES 6500 4 57 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual NETWORK MONITORING COMMANDS The network monitoring commands in the Command Line Interface CLI are listed along with the appropriate parameters in the following table Command oau show packet ports lt portlist gt mwao C ewes C wss OS create syslog host config syslog host config syslog host all lt index 1 4 gt all severity informational warning all facility localO local1 local2 local3 local4 local5 local6 local7 udp_port lt udp_port_number gt ipaddress lt ipaddr gt state enabled disabled lt index 1 4 gt severity informational warning all facility localO local local2 local3 local4 local5 local6 local7 udp_port lt udp_port_number gt ipaddress lt ipaddr gt state enabled disabled severity informational warning all facility local0 local local2 local3 local4 local5 local6 local7 udp_port lt udp_port_number gt
326. rameter is not specified the show rip command will display the global RIP configuration for the Switch Restrictions None Example Usage To display RIP configuration DES 6500 4 show rip Command show rip RIP Global State Disabled RIP Interface Settings Interface IP Address TX Mode RX Mode Authen State tication System 10 41 44 33 8 Disabled Disabled Disabled Disabled Total Entries 1 DES 6500 4 289 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual DVMRP COMMANDS The DVMRP commands in the Command Line Interface CLI are listed along with the appropriate parameters in the following table Command Parameters config dvmrp ipif lt ipif_ name 12 gt all metric lt value 1 31 gt probe lt sec 1 65535 gt neighbor_timeout lt sec 1 65535 gt state enabled disabled disable dvmrp show dvmrp neighbor ipif lt ipif_name 12 gt ipaddress lt network_address gt show dvmrp nexthop ipaddress lt network_address gt ipif lt ipif_name 12 gt show dvmrp ipaddress lt network_address gt routing_table show dvmrp ipif lt ipif_name 12 gt Each command is listed in detail in the following sections config dvmrp Purpose Used to configure DVMRP on the Switch Syntax config dvmrp ipif lt ipif_name 12 gt all metric lt value 1 31 gt probe lt sec 1 65535 gt neighbor_timeout lt sec 1 65535 gt state enabled disabled Descr
327. range also separated by a colon are specified The beginning and end of the port list range are separated by a dash For example 1 3 specifies slot number 1 port 3 2 4 specifies slot number 2 port 4 1 3 2 4 specifies all of the ports between slot 1 port 3 and slot 2 port 4 in numerical order tx Allows the mirroring of only packets sent to flowing out of the port or ports in the port list both Mirrors all the packets received or sent by the port or ports in the port list Restrictions Only administrator level users can issue this command Example usage To delete the mirroring ports DES 6500 4 config mirror port 1 10 delete source port 1 1 1 5 both Command config mirror 1 10 delete source port 1 1 1 5 both Success DES 6500 4 115 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual enable mirror Purpose Syntax Description Parameters Restrictions Example usage Used to enable a previously entered port mirroring configuration enable mirror This command combined with the disable mirror command below allows you to enter a port mirroring configuration into the Switch and then turn the port mirroring on and off without having to modify the port mirroring configuration None None To enable mirroring configurations Success DES 6500 4 DES 6500 4 enable mirror Command enable mirror disable mirror Purpose Synta
328. rated by a dash For example 1 3 specifies switch number 1 port 3 2 4 specifies switch number 2 port 4 1 3 2 4 specifies all of the ports between switch 1 port 3 and switch 2 port 4 in numerical order all Specifies all ports are to be configured for traffic control on the Switch broadcast enabled disabled Enables or disables broadcast storm control multicast enabled disabled Enables or disables multicast storm control dif enabled disabled Enables or disables dlf traffic control action Used to configure the action taken when a storm control has been detected on the Switch The user has two options e drop Utilizes the hardware Traffic Control mechanism which means the Switch s hardware will determine the Packet Storm based on the Threshold value stated and drop packets until the issue is resolved shutdown Utilizes the Switch s software Traffic Control mechanism to determine the Packet Storm occurring Once detected the port will deny all incoming traffic to the port except STP BPDU packets which are essential in keeping the Spanning Tree operational on the Switch If the countdown timer has expired and yet the Packet Storm continues the port will be placed in Shutdown Forever mode and is no longer operational until the user manually resets the port using the config traffic control_recover command Choosing this option obligates the user to configure the time_interval field as
329. rder permit Specifies that packets that match the access profile are permitted to be forwarded by the Switch e priority lt value 0 7 gt This parameter is specified to re write the 802 1p default priority previously set in the Switch which is used to determine the CoS queue to which packets are forwarded to Once this field is specified packets accepted by the Switch that match this priority are forwarded to the CoS queue specified previously by the user replace_priority Enter this parameter to re write the 802 1p default priority of a packet to the value entered in the Priority field which meets the criteria specified previously in this command before forwarding it on to the specified CoS queue Otherwise a packet will have its incoming 802 1p user priority re written to its original value before being forwarded by the Switch replace_dscp lt value 0 63 gt Allows specification of a value to be written to the DSCP field of an incoming packet that meets the criteria specified in the first part of the command This value will over write the value in the DSCP field of the packet deny Specifies that packets that do not match the access profile are not permitted to be forwarded by the Switch and will be filtered delete access_id lt value 1 65535 gt Use this command to delete a specific rule from the IP profile Restrictions Only administrator level users can issue this command Example usage T
330. reate a spanning tree instance 2 DES 6500 4 create stp instance_id 2 Command create stp instance_id 2 Success DES 6500 4 config stp instance_id Purpose Used to add or delete an STP instance ID Syntax config stp instance_id lt value 1 15 gt add_vlan remove_vlan lt vidlist gt Description This command is used to map VIDs VLAN IDs to previously configured STP instances on the Switch by creating an instance_id A STP instance may have multiple members with the same MSTP configuration There is no limit to the number of STP regions ina network but each region only supports a maximum of 16 spanning tree instances one unchangeable default entry VIDs can belong to only one spanning tree instance at a time Note that switches in the same spanning tree region having the same STP instance_id must be mapped identically and have the same configuration revision_level number and the same name Parameters lt value 1 15 gt Enter a number between 1 and 15 to define the instance_id The Switch supports 16 STP regions with one unchangeable default instance ID set as 0 add_vian Along with the vid_range lt vidlist gt parameter this command will add VIDs to the previously configured STP instance_id remove_vian Along with the vid_range lt vidlist gt parameter this command will remove VIDs to the previously configured STP instance_id lt vidlist gt Specify the VID range from configured VLA
331. red on the Switch Parameters None Restrictions None Example usage To display the login and enable method list for all applications on the Switch 164 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual DES 6500 4 show authen application Command show authen application Application Login Method List Enable Method List Console default default Telnet Trinity default SSH default default HTTP default default DES 6500 4 create authen server_host Purpose Used to create an authentication server host Syntax create authen server_host lt ipaddr gt protocol tacacs xtacacs tacacs radius port lt int 1 65535 gt key lt key_string 254 gt none timeout lt int 1 255 gt retransmit lt 1 255 gt Description This command will create an authentication server host for the TACACS XTACACS TACACS and RADIUS security protocols on the Switch When a user attempts to access the Switch with authentication protocol enabled the Switch will send authentication packets to a remote TACACS XTACACS TACACS or RADIUS server host on a remote host The TACACS XTACACS TACACS or RADIUS server host will then verify or deny the request and return the appropriate message to the Switch More than one authentication protocol can be run on the same physical server host but remember that TACACS XTACACS TACACS and RADIUS are separate entities and are not compatible with each other The maximum s
332. rent user s session on the Switch s console Parameters None Restrictions None Example usage To terminate the current user s console session DES 6500 4 logout config command_prompt Purpose Used to configure the command prompt for the Command Line Interface Syntax config command_prompt lt string 16 gt username default Description This command is used to configure the command prompt for the CLI interface of the Switch The current command prompt consists of product name user level product name ex DES 6500 4 The user may replace all parts of the command prompt except the by entering a string of 16 alphanumerical characters with no spaces or the user may enter the current login username configured on the Switch Parameters lt string 16 gt Enter an alphanumeric string of no more than 16 characters to define the command prompt for the CLI interface username Entering this parameter will replace the current CLI command prompt with the login username configured on the 22 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual config command_prompt Switch default Entering this parameter will return the command prompt to its original factory default setting Restrictions The reset command will not alter the configured command prompt yet the reset system command will return the command prompt to its original factory default setting Onl
333. rent with this protocol This packet header information is defined by Novell and the Sub Network Access Protocol SNAP protocol ipxEthernet2 Using this parameter will instruct the Switch to forward packets to this VLAN if the tag in the packet header is concurrent with this protocol This packet header information is defined by Novell Ethernet II Protocol protocol appleTalk Using this parameter will instruct the Switch to forward packets to this VLAN if the tag in the packet header is concurrent with this protocol This packet header information is defined by the AppleTalk protocol protocol decLAT Using this parameter will instruct the Switch to forward packets to this VLAN if the tag in the packet header is concurrent with this protocol This packet header information is defined by the Digital Equipment Corporation DEC Local Area Transport LAT protocol protocol sna802dot2 Using this parameter will instruct the Switch to forward packets to this VLAN if the tag in the packet header is concurrent with this protocol This packet header 119 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual create vian information is defined by the Systems Network Architecture SNA 802 2 Protocol protocol snaEthernet2 Using this parameter will instruct the Switch to forward packets to this VLAN if the tag in the packet header is concurrent with this protocol This packet header information is def
334. ress_mode DeleteOnReset Success DES 6500 4 show port_security Purpose Used to display the current port security configuration Syntax show port_security ports lt portlist gt Description This command is used to display port security information of the Switch ports The information displayed includes port security admin state maximum number of learning address and lock mode Parameters ports lt portlist gt Specifies a range of ports to be displayed The port list is specified by listing the lowest slot number and the beginning port number on that switch separated by a colon Then the highest slot number and the highest port number of the range also separated by a colon are specified The beginning and end of the port list range are separated by a dash For example 1 3 specifies slot number 1 port 3 2 4 specifies slot number 2 port 4 1 3 2 4 specifies all of the ports between slot 1 port 3 and slot 2 port 4 in numerical order Restrictions None Example usage To display the port security configuration DES 6500 4 show port_security ports 1 1 1 10 Command show port_security ports 1 1 1 10 Port Admin State Max Learning Addr Lock Address Mode 1 1 Disabled 1 DeleteOnReset 1 2 Disabled 1 DeleteOnReset 1 3 Disabled 1 DeleteOnReset 1 4 Disabled 1 DeleteOnReset 1 5 Disabled 1 DeleteOnReset 1 6 Disabled 1 DeleteOnReset 1 7 Enabled 10 DeleteOnReset 1 8 Disabled 1 DeleteOnReset 1 9 Disab
335. rface Settings table shown above the Secondary field will have two displays FALSE denotes that the IP interface is a primary IP B interface while TRUE denotes a secondary IP interface 138 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual IGMP COMMANDS INCLUDING IGMP v3 IGMP or Internet Group Management Protocol is a protocol implemented by systems utilizing IPv4 to collect the membership information needed by the multicast routing protocol through various query messages sent out from the router or switch Computers and network devices that want to receive multicast transmissions need to inform nearby routers that they will become members of a multicast group The Internet Group Management Protocol IGMP is used to communicate this information IGMP is also used to periodically check the multicast group for members that are no longer active In the case where there is more than one multicast router on a subnetwork one router is elected as the querier This router then keeps track of the membership of the multicast groups that have active members The information received from IGMP is then used to determine if multicast packets should be forwarded to a given subnetwork or not The router can check using IGMP to see if there is at least one member of a multicast group on a given subnetwork If there are no members on a subnetwork packets will not be forwarded to that subnetwork The current release of the xStack DES
336. rmine if a given packet should be forwarded or filtered Masks entered using the create access_profile command will be combined using a logical AND operational method with the values the Switch finds in the specified frame header fields config access_profile profile_id lt value 1 8 gt add access_id lt value 1 65535 gt ethernet vlan lt vlan_name 32 gt source_mac lt macaddr gt destination_mac lt macaddr gt 802 1p lt value 0 7 gt ethernet_type lt hex 0x0 0xffff gt port lt port gt permit priority lt value 0 7 gt replace_priority replace_dscp lt value 0 63 gt deny delete lt value 1 65535 gt Description This command is used to define the rules used by the Switch to either filter or forward packets based on the Ethernet part of each packet header Parameters profile_id lt value 1 8 gt Enter an integer between 1 and 8 that is used to identify the access profile that will be configured with this command This value is assigned to the access profile when it is created with the create access_profile command The lower the profile ID the higher the priority the rule will be given add access_id lt value 1 65535 gt Adds an additional rule to the above specified access profile The value specifies the relative priority of the additional rule Up to 65535 different rules may be configured for the Ethernet access profile ethernet Specifies that the Switch will look only into the layer 2 part of each
337. rname and Password 45 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual create trusted_host Parameters lt ipaddr gt The IP address of the trusted host Restrictions Only administrator level users can issue this command Example usage To create the trusted host DES 6500 4 create trusted_host 10 48 74 121 Command create trusted_host 10 48 74 121 Success DES 6500 4 show trusted_host Purpose Used to display a list of trusted hosts entered on the Switch using the create trusted_host command above Syntax show trusted_host Description This command is used to display a list of trusted hosts entered on the Switch using the create trusted_host command above Parameters None Restrictions None Example Usage To display the list of trust hosts DES 6500 4 show trusted_host Command show trusted_host Management Stations IP Address 10 53 13 94 Total Entries 1 DES 6500 4 delete trusted_host Purpose Used to delete a trusted host entry made using the create trusted_host command above Syntax delete trusted _host lt ipaddr gt Description This command is used to delete a trusted host entry made using the create trusted_host command above Parameters lt ijpaddr gt The IP address of the trusted host Restrictions Only administrator level users can issue this command 46 xStack DES 6500 Modular Layer 3 Chassis Ethernet
338. roblem the Safeguard Engine function was added to the Switch s software The Safeguard Engine can help the overall operability of the Switch by minimizing the workload of the Switch while the attack is ongoing thus making it capable to forward essential packets over its network in a limited bandwidth When the Switch either a receives too many packets to process or b exerts too much memory it will enter an Exhausted mode When in this mode the Switch will perform the following tasks to minimize the CPU usage 1 It will limit bandwidth of receiving ARP packets The user may implement this in two ways by using the config safeguard_engine command a When strict is chosen the Switch will stop receiving ARP packets not destined for the Switch This will eliminate all unnecessary ARP packets while allowing the essential ARP packets to pass through to the Switch s CPU b When fuzzy is chosen the Switch will minimize the ARP packet bandwidth received by the switch by adjusting the bandwidth for all ARP packets whether destined for the Switch or not The Switch uses an internal algorithm to filter ARP packets through with a higher percentage set aside for ARP packets destined for the Switch 2 It will limit the bandwidth of IP packets received by the Switch The user may implement this in two ways by using the config safeguard_engine command a When strict is chosen the Switch will stop receiving all unnecessary broadcast IP packets
339. rotocol Key Authentication key to be shared with a configured TACACS server only Parameters None Restrictions Only administrator level users can issue this command Example usage To view authentication server hosts currently set on the Switch 168 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual DES 6500 4 show authen server_host Command show authen server_host IP Address Protocol Port Timeout Retransmit Key 10 53 13 94 TACACS 49 5 20 me Total Entries 1 DES 6500 4 create authen server_group Purpose Used to create a user defined authentication server group Syntax create authen server_group lt string 15 gt Description This command will create an authentication server group A server group is a technique used to group TACACS XTACACS TACACS and RADIUS server hosts into user defined categories for authentication using method lists The user may add up to eight 8 authentication server hosts to this group using the config authen server_group command Parameters lt string 15 gt Enter an alphanumeric string of up to 15 characters to define the newly created server group Restrictions Only administrator level users can issue this command Example usage To create the server group group_1 DES 6500 4 create authen server_group group_1 Command create authen server_group group_1 Success DES 6500 4 config authen server_group P
340. rotocol from the remote XTACACS server hosts of the XTACACS server group list tacacs Adding this parameter will require the user to be authenticated using the TACACS protocol from the remote TACACS server hosts of the TACACS server group list radius Adding this parameter will require the user to be authenticated using the RADIUS protocol from a remote RADIUS server previously implemented on the Switch server_group lt string 15 gt Adding this parameter will 160 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual config authen_enable require the user to be authenticated using a user defined server group previously configured on the Switch local_enable Adding this parameter will require the user to be authenticated using the local user account database on the Switch none Adding this parameter will require no authentication to access the Switch method_list_name Enter a previously implemented method list name defined by the user create authen_enable The user may add one or a combination of up to four 4 of the following authentication methods to this method list tacacs Adding this parameter will require the user to be authenticated using the TACACS protocol from a remote TACACS server xtacacs Adding this parameter will require the user to be authenticated using the XTACACS protocol from a remote XTACACS server tacacs Adding this parameter will requir
341. route redistribute dst rip src ospf Success DES 6500 4 show route redistribute Purpose Used to display the route redistribution on the Switch Syntax show route redistribute dst rip ospf src rip static local ospf Description Displays the current route redistribution settings on the Switch Parameters src rip static local ospf Allows the selection of the routing protocol on the source device The user may choose between RIP static local or OSPF dst rip ospf Allows the selection of the routing protocol on the destination device The user may choose between RIP and OSPF Restrictions None Example Usage To display route redistributions DES 6500 4 show route redistribute Command show route redistribute Source Destination Type Metric Protocol Protocol STATIC RIP All 1 LOCAL OSPF Type 2 20 Total Entries 2 DES 6500 4 276 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual DHCP RELAY COMMANDS The DHCP relay commands in the Command Line Interface CLI are listed along with the appropriate parameters in the following table enable chep relay CCS disable dhop_relay Oo O Each command is listed in detail in the following sections config dhcp_relay Purpose Syntax Description Parameters Restrictions Example usage Used to configure the DHCP BOOTP relay feature of the Switch config dhcp_rela
342. rt number of the range also separated by a colon are specified The beginning and end of the port list range are separated by a dash For example 1 3 specifies slot number 1 port 3 2 4 specifies slot number 2 port 4 1 3 2 4 specifies all of the ports between slot 1 port 3 and slot 2 port 4 in numerical order all Specifies all of the ports on the Switch mac_address lt macaddr gt Specifies the MAC address of the client to be added Restrictions Only administrator level users can issue this command Example usage To initialize the authentication state machine of some or all DES 6500 4 config 802 1x init port_based ports all Command config 802 1x init port_based ports all Success DES 6500 4 200 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual config 802 1x reauth ports Purpose Used to configure the 802 1x re authentication feature of the Switch Syntax config 802 1x reauth port_based ports lt portlist gt all mac_based ports lt portlist gt all mac_address lt macaddr gt Description The config 802 1x reauth command is used to re authenticate a previously authenticated device based on port number or MAC address Parameters port_based This instructs the Switch to re authorize 802 1x function based only on the port number Ports approved for re authorization can then be specified ports lt portlist gt Specifies a range of po
343. rts The port list is specified by listing the lowest slot number and the beginning port number on that slot separated by a colon Then the highest slot number and the highest port number of the range also separated by a colon are specified The beginning and end of the port list range are separated by a dash For example 1 3 specifies slot number 1 port 3 2 4 specifies slot number 2 port 4 1 3 2 4 specifies all of the ports between slot 1 port 3 and slot 2 port 4 in numerical order all Specifies all of the ports on the Switch mac based This instructs the Switch to re authorize 802 1x function based on a specific MAC address Ports approved for re authorization can then be specified ports lt portlist gt Specifies a range of ports The port list is specified by listing the lowest slot number and the beginning port number on that slot separated by a colon Then the highest slot number and the highest port number of the range also separated by a colon are specified The beginning and end of the port list range are separated by a dash For example 1 3 specifies slot number 1 port 3 2 4 specifies slot number 2 port 4 1 3 2 4 specifies all of the ports between slot 1 port 3 and slot 2 port 4 in numerical order all Specifies all ports on the Switch mac_address lt macaddr gt Specifies the MAC address of the client to add Restrictions Only administrator level users can issue this comm
344. rts SSLv3 and TLSv1 Other versions of SSL may not be compatible with this Switch and may cause problems upon authentication and transfer of messages from client to host Command Parameters enable ssl ciphersuite RSA_with_RC4_128 MDS RSA_with_3DES_EDE_CBC_SHA DHE_DSS_with_3DES_EDE_CBC_SHA RSA_EXPORT_with_RC4_40_MD5 disable ssl ciphersuite RSA_with_RC4_128 MDS RSA_with_3DES_EDE_CBC_SHA DHE_DSS_with_3DES_EDE_CBC_SHA RSA_EXPORT_with_RC4_40_MD5 config ssl cachetimeout timeout lt value 60 86400 gt conoat download certificate lt ipaddr gt certfilename lt path_filename 64 gt keyfilename lt path_filename 64 gt 184 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual Each command is listed in detail in the following sections enable ssl Purpose To enable the SSL function on the Switch Syntax enable ssl ciphersuite RSA_with_RC4_128 MD5 RSA_with_3DES_EDE_CBC_SHA DHE_DSS_with_3DES_EDE_CBC_SHA RSA_EXPORT_with_RC4_40_MD5 Description This command will enable SSL on the Switch by implementing any one or combination of listed ciphersuites on the Switch Entering this command without a parameter will enable the SSL status on the Switch Enabling SSL will disable the web manager on the Switch Parameters ciphersuite A security string that determines the exact cryptographic parameters specific encryption algorithms and key sizes to be used for an authentication
345. rward all multicast traffic to any IP router Parameters forward_mcrouter_only Specifies that the Switch will forward all multicast traffic to any IP router Restrictions Only administrator level users can issue this command Example usage To disable IGMP snooping on the Switch DES 6500 4 disable igmp_snooping Command disable igmp_snooping Success DES 6500 4 config router_ports Purpose Used to configure ports as router ports Syntax config router_ports lt vlan_name 32 gt add delete lt portlist gt Description This command allows the designation of a range of ports as being connected to multicast enabled routers This will ensure that all packets with such a router as its destination will reach the multicast enabled router regardless of protocol etc Parameters lt vian_name 32 gt The name of the VLAN on which the router port resides add delete Specifies whether to add or delete the following ports as router ports lt portlist gt Specifies a range of ports that will be configured as router ports The port list is specified by listing the lowest slot xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual config router_ports number and the beginning port number on that slot separated by a colon Then the highest slot number and the highest port number of the range also separated by a colon are specified The beginning and end of the port li
346. s must be configured for SNTP to function config sntp 252 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual DES 6500 4 enable sntp Command enable sntp Success DES 6500 4 disable sntp Purpose Disables SNTP server support Syntax disable sntp Description This will disable SNTP support SNTP service must be separately configured see config sntp Parameters None Restrictions Only administrator level users can issue this command Example To stop SNTP support DES 6500 4 disable sntp Command disable sntp Success DES 6500 4 config time Purpose Used to manually configure system time and date settings Syntax config time date lt date ddmthyyyy gt lt time hh mm ss gt Description This will configure the system time and date settings These will be overridden if SNTP is configured and enabled Parameters date Express the date using two numerical characters for the day of the month three alphabetical characters for the name of the month and four numerical characters for the year For example 03aug2003 time Express the system time using the format hh mmiss that is two numerical characters each for the hour using a 24 hour clock the minute and second For example 19 42 30 Restrictions Only administrator level users can issue this command Manually configured system time and date settings are overridden if SNTP support is enabled
347. s parameter will enable or disable the MD5 Message Digest encryption algorithm SHA1 This parameter will enable or disable the Secure Hash Algorithm encryption DSA This parameter will enable or disable the Digital Signature Algorithm encryption RSA This parameter will enable or disable the RSA encryption algorithm ALL This parameter will enable all encryptions listed above enable disable This allows the user to enable or disable algorithms entered in this command on the Switch Restrictions Only administrator level users can issue this command Usage Example To configure SSH algorithm DES 6500 4 config ssh algorithm Blowfish enable Command config ssh algorithm Blowfish enable Success DES 6500 4 show ssh algorithm Purpose Used to display the SSH algorithm setting Syntax show ssh algorithm Description This command will display the current SSH algorithm setting status Parameters None Restrictions None 182 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual Usage Example To display SSH algorithms currently set on the Switch DES 6500 4 show ssh algorithm Command show ssh algorithm Encryption Algorithm 3DES Enable AES128 Enable AES192 Enable AES256 Enable ARC4 Enable Blowfish Enable Cast128 Enable Twofish128 Enable Twofish192 Enable Twofish256 Enable Data Integrity Algorithm MD5 Enable SHA1 Enable Publi
348. s used to remove a syslog host that has been previously configured from the Switch lt index 1 4 gt Specifies that the command will be applied to an index of hosts There are four available indexes numbered 1 through 4 all Specifies that all syslog hosts will be deleted Only administrator level users can issue this command ed syslog host DES 6500 4 d Command de Success DES 6500 4 elete syslog host 4 lete syslog host 4 show syslog host Purpose Syntax Description Parameters Restrictions Example usage To show syslog host informatio Used to display the syslog hosts currently configured on the Switch show syslog host lt index 1 4 gt The show syslog host command is used to display the syslog hosts that are currently configured on the Switch lt index 1 4 gt Specifies that the command will be applied to an index of hosts There are four available indexes numbered 1 through 4 None n Total Entries 3 DES 6500 4 DES 6500 4 show syslog host Command show syslog host Syslog Global State Disabled Host Id Host IP Address Severity Facility UDP port Status 1 10 1 1 2 All LocalO 514 Disabled 2 10 40 2 3 All LocalO0 514 Disabled 3 10 21 13 1 All Local0 514 Disabled 72 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual config system_severity Purpose To configure when and where severity messages are to
349. s value in their Type of Service DiffServ code point DSCP field in their IP packet header icmp Specifies that the Switch will examine the Internet Control Message Protocol ICMP field within each packet e type lt value 0 255 gt Specifies that the access profile will apply to this ICMP type defined by a value between 0 and 255 e code lt value 0 255 gt Specifies that the access profile will apply to this ICMP code defined by a value between 0 and 255 igmp Specifies that the Switch will examine the Internet Group Management Protocol IGMP field within each packet e type lt value 0 255 gt Specifies that the access profile will apply to packets that have this IGMP type defined by a value between 0 and 255 tcp Specifies that the Switch will examine the Transmission Control Protocol TCP field within each packet e src_port lt value 0 65535 gt Specifies that the access profile will apply only to packets that have this TCP source port in their TCP header e dst_port lt value 0 65535 gt Specifies that the access profile will apply only to packets that have this TCP destination port in their TCP header flag_mask Enter the type of TCP flag to be masked The choices are e urg TCP control flag urgent e ack TCP control flag acknowledgement e psh TCP control flag push e rst TCP control flag reset e syn TCP control flag synchronize e fin TCP control flag finish
350. seconds the Switch will hold information sent to it from other switches utilizing the discovery interval protocol The user may set the hold time from 100 to 255 seconds candidate Used to change the role of a commander switch to a candidate switch dp_interval lt 30 90 gt The user may set the discovery protocol interval in seconds that the Switch will send out discovery packets Returning information to the commander switch will include information about other switches connected to it Ex MS CaS The user may set the dp_interval from 30 to 90 seconds hold time lt sec 100 255 gt Using this parameter the user may set the time in seconds the Switch will hold information sent to it from other switches utilizing the discovery interval protocol The user may set the hold time from 100 to 255 seconds Restrictions Only administrator level users can issue this command Example usage To change the time interval of the discovery protocol 247 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual DES 6500 4 config sim commander dp_ interval 30 Command config sim commander dp_ interval 30 Success DES 6500 4 To change the hold time of the discovery protocol DES 6500 4 config sim commander hold_time 120 Command config sim commander hold_time 120 Success DES 6500 4 To transfer the commander switch to be a candidate DES 6500 4 config sim cand
351. select between port based or MAC based use the config 802 1x auth_mode command Parameters None Restrictions Only administrator level users can issue this command Example usage To disable 802 1x on the Switch DES 6500 4 disable 802 1x Command disable 802 1x Success DES 6500 4 191 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual create 802 1x user Purpose Used to create a new 802 1x user Syntax create 802 1x user lt username 15 gt Description The create 802 1x user command is used to create new 802 1x users Parameters lt username 15 gt A username of up to 15 alphanumeric characters in length Restrictions Only administrator level users can issue this command Example Usage To create an 802 1x user DES 6500 4 create 802 1x user dtremblett Command create 802 1x user dtremblett Enter a case sensitive new password Enter the new password again for confirmation Success DES 6500 4 show 802 1x user Purpose Used to display the 802 1x user accounts on the Switch Syntax show 802 1x user Description The show 802 1x user command is used to display the 802 1x Port based or MAC based Network Access control local users currently configured on the Switch Parameters None Restrictions None Example usage To view 802 1X users currently configured on the Switch DES 6500 4 show 802 1x user Command show 80
352. set an IP address for your Switch you can use a Telnet program in VT 100 compatible terminal mode to access and control the Switch All of the screens are identical whether accessed from the console port or from a Telnet interface After the Switch reboots and you have logged in the console looks like this xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual DES 6500 Chassis Ethernet Switch Command Line Interface Firmware Build 3 80 B29 Copyright C 2004 2007 D Link Corporation All rights reserved UserName Figure 2 1 Initial Console Screen Commands are entered at the command prompts DES 6500 4 There are a number of helpful features included in the CLI Entering the command will display a list of all of the top level commands arptable counters default_priority user_priority auth_mode auth_parameter ports auth_protocol capability ports 3 init 802 1x reauth access_profile profile_id account admin local_enable arp_aging time authen application authen parameter attempt authen parameter response_timeout B Quit SNI T Next Page EMAR Next Entry B A11 Figure 2 2 The Command When entering a command without its required parameters the CLI will prompt you with a Next possible completions message xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual DES 6500 4 config account Command config account Next possible completions lt username gt DES 65
353. set_16 31 0xFFFF OxFFFF0000 0xF 0xF000000 profile_id 3 Command create access_profile packet_content_mask offset_0 15 OxFFFFFFFF OxFFFFFFFF OxFFFFFFFF OxFFFFFFFF offset_16 31 0xFFFF OxFFFF0000 0xF 0xF000000 profile_id 3 Success DES 6500 4 220 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual config access_profile profile_id packet content mask Purpose Description Parameters To configure the rule for a previously created access profile command based on the packet content mask Packet content masks entered will specify certain bytes of the packet header to be identified by the Switch When the Switch recognizes a packet with the identical byte as the one configured it will either forward or filter the packet based on the users command entered here config access_profile profile_id lt value 1 8 gt add access_id lt value 1 65535 gt packet_content offset_0 15 lt hex0x0 Oxffffffff gt lt hex 0x0 Oxffffffff gt lt hex 0x0 Oxffffffff gt lt hex 0x0 0xffffffff gt offset_16 31 lt hex 0x0 Oxffffffff gt lt hex 0x0 Oxffffffff gt lt hex 0x0 Oxffffffff gt lt hex 0x0 Oxffffffff gt offset_32 47 lt hex 0x0 Oxffffffff gt lt hex 0x0 Oxffffffff gt lt hex 0x0 Oxffffffff gt lt hex 0x0 0Oxffffffff gt offset_48 63 lt hex 0x0 Oxffffffff gt lt hex 0x0 Oxffffffff gt lt hex 0x0 Oxffffffff gt lt hex 0x0 Oxffffffff gt offset_64 79 lt hex 0x0 Oxffffffff gt lt hex 0x0 Oxffffffff
354. sing the xtacacs list the local account database set in the Switch is used to authenticate the user When the local method is used the privilege level will be dependant on the local account privilege configured on the Switch Successful login using any of these methods will give the user a user privilege only If the user wishes to upgrade his or her status to the administrator level the user must implement the enable admin command followed by a previously configured password See the enable admin part of this section for more detailed information concerning the enable admin command Parameters default The default method list for access authentication as defined by the user The user may choose one or a combination of up to four 4 of the following authentication methods tacacs Adding this parameter will require the user to be authenticated using the TACACS protocol from the remote TACACS server hosts of the TACACS server group list xtacacs Adding this parameter will require the user to be authenticated using the XTACACS protocol from the remote XTACACS server hosts of the XTACACS server group list tacacs Adding this parameter will require the user to be authenticated using the TACACS protocol from the remote TACACS server hosts of the TACACS server group list radius Adding this parameter will require the user to be authenticated using the RADIUS protocol from the RADIUS server listed in the server
355. ssages and need to be consistent between client and host for optimal use CBC Block Ciphers CBC refers to Cipher Block Chaining which means that a portion of the previously encrypted block of encrypted text is used in the encryption of the current block The Switch supports the 3DES_EDE encryption code defined by the Data Encryption Standard DES to create the encrypted text 3 Hash Algorithm This part of the ciphersuite allows the user to choose a message digest function which will determine a Message Authentication Code This Message Authentication Code will be encrypted with a sent message to provide integrity and prevent against replay attacks The Switch supports two hash algorithms MD5 Message Digest 5 and SHA Secure Hash Algorithm These three parameters are uniquely assembled in four choices on the Switch to create a three layered encryption code for secure communication between the server and the host The user may implement any one or combination of the ciphersuites available yet different ciphersuites will affect the security level and the performance of the secured connection The information included in the ciphersuites is not included with the Switch and requires downloading from a third source in a file form called a certificate This function of the Switch cannot be executed without the presence and implementation of the certificate file and can be downloaded to the Switch by utilizing a TFTP server The xStack DES 6500 suppo
356. st it adds the option 82 information and the IP address of the relay agent if the relay agent is configured to the packet Once the option 82 information has been added to the packet it is sent on to the DHCP server When the DHCP server receives the packet and is capable of option 82 it can implement policies like restricting the number of IP addresses that can be assigned to a single remote ID or circuit ID Then the DHCP server echoes the option 82 field in the DHCP reply packet The DHCP server unicasts the reply to the back to the relay agent if the request was relayed to the server by the relay agent The Switch verifies that it originally inserted the option 82 data Finally the relay agent removes the option 82 field and forwards the packet to the switch port that is connected to the DHCP client that sent the DHCP request disable If disabled the relay agent will not insert and remove DHCP relay information option 82 field in messages between DHCP servers and clients In addition the check and policy settings will have no effect Restrictions Only administrator level users can issue this command Example usage To configure DHCP relay option 82 state DES 6500 4 config dhcp_relay option_82 state enable Command config dhcp_relay option_82 state enable Success DES 6500 4 config dhcp_relay option_82 check Purpose Used to configure the checking mechanism of DHCP relay agent information option 82 of th
357. st range are separated by a dash For example 1 3 specifies slot number 1 port 3 2 4 specifies slot number 2 port 4 1 3 2 4 specifies all of the ports between slot 1 port 3 and slot 2 port 4 in numerical order Restrictions Only administrator level users can issue this command Example usage To set up static router ports DES 6500 4 config router_ports default add 2 1 2 10 Command config router_ports default add 2 1 2 10 Success DES 6500 4 config router_ports_forbidden Purpose Used to configure ports as forbidden multicast router ports Syntax config router_ports_forbidden lt vlan_name 32 gt add delete lt portlist gt Description This command allows you to designate a port or range of ports as being forbidden to multicast enabled routers This will ensure that multicast packets will not be forwarded to this port regardless of protocol etc Parameters lt vlan_name 32 gt The name of the VLAN on which the router port resides add delete Specifies whether to add or delete forbidden ports to the specified VLAN lt portlist gt Specifies a range of ports that will be configured as forbidden router ports The port list is specified by listing the lowest slot number and the beginning port number on that slot separated by a colon Then the highest slot number and the highest port number of the range also separated by a colon are specified The beginning and end of the p
358. st_timeout 250 state enabled Success DES 6500 4 config igmp_snooping querier Purpose This command configures IGMP snooping querier Syntax config igmp_snooping querier lt vlan_name 32 gt all query_interval lt sec 1 65535 gt max_response_time lt sec 1 25 gt robustness_variable lt value 1 255 gt last_member_query_interval lt sec 1 25 gt state enabled disabled Description Used to configure the time in seconds between general query transmissions the maximum time in seconds to wait for reports from members and the permitted packet loss that guarantees IGMP snooping Parameters lt vian_name 32 gt The name of the VLAN for which IGMP snooping querier is to be configured all Selecting this parameter will configure the IGMP snooping querier for all VLANs on the Switch query_interval lt sec 1 65535 gt Specifies the amount of time in seconds between general query transmissions The default setting is 125 seconds max_response_time lt sec 1 25 gt Specifies the maximum time in seconds to wait for reports from members The default setting is 10 seconds robustness_variable lt value 1 255 gt Provides fine tuning to allow for expected packet loss on a subnet The value of the robustness variable is used in calculating the following IGMP message intervals e Group membership interval Amount of time that must pass before a multicast router decides there are no more members
359. standalone switch 26 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual Example usage DES 6500 4 show ports Command show ports Port Port Settings Connection State Speed Duplex FlowCtrl Speed Duplex FlowCtrl 1 1 Enabled Auto Enabled Link Down 1 2 Enabled Auto Enabled Link Down 1 3 Enabled Auto Enabled Link Down 1 4 Enabled Auto Enabled Link Down 1 5 Enabled Auto Enabled Link Down 1 6 Enabled Auto Enabled Link Down 1 7 Enabled Auto Enabled Link Down 1 8 Enabled Auto Enabled Link Down 1 9 Enabled Auto Enabled Link Down 1 10 Enabled Auto Enabled 100M Full 802 3x 1 11 Enabled Auto Enabled Link Down 1 12 Enabled Auto Enabled Link Down 2 1 Enabled Auto Disabled Link Down 2 2 Enabled Auto Disabled Link Down 2 3 Enabled Auto Disabled Link Down 2 4 Enabled Auto Disabled Link Down 2 5 Enabled Auto Disabled Link Down 2 6 Enabled Auto Disabled Link Down 2 7 Enabled Auto Disabled Link Down 2 8 Enabled Auto Disabled Link Down CTRL C ESC q Quit SPACE n Next Page p Previous Page r Refresh Address Learning Enabled Enabled Enabled Enabled Enabled Enabled Enabled Enabled Enabled Enabled Enabled Enabled Enabled Enabled Enabled Enabled Enabled Enabled Enabled Enabled To display port descriptions DES 6500 4 show ports 1 1 description Command show ports 1 1 description Port Port Settings Connection State Speed Duplex FlowCtrl Speed Duplex FlowCtrl 1 1 Enabled Auto Enabled Link Down
360. static Description This command is used to display the current contents of the Switch s ARP table 258 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual show arpentry Parameters ipif lt ipif_name 12 gt Enter the IP interface name for which to display ARP settings static Displays the static entries to the ARP table Restrictions None Example Usage To display the ARP table DES 6500 4 show arpentry Command show arpentry ARP Aging Time 30 Interface IP Address MAC Address Type System 10 0 0 0 FF FF FF FF FF FF Local Broadcast System 10 1 1 169 00 50 BA 70 E4 4E Dynamic System 10 1 1 254 00 01 30 FA 5F 00 Dynamic System 10 9 68 1 00 A0 C9 A4 22 5B Dynamic System 10 9 68 4 00 80 C8 2E C7 45 Dynamic System 10 10 27 51 00 80 C8 48 DF AB Dynamic System 10 11 22 145 00 80 C8 93 05 6B Dynamic System 10 11 94 10 00 10 83 F9 37 6E Dynamic System 10 14 82 24 00 50 BA 90 37 10 Dynamic System 10 15 1 60 00 80 C8 17 42 55 Dynamic System 10 17 42 153 00 80 C8 4D 4E 0A Dynamic System 10 19 72 100 00 50 BA 38 7D 5E Dynamic System 10 21 32 203 00 80 C8 40 C1 06 Dynamic System 10 40 44 60 00 50 BA 6B 2A 1E Dynamic System 10 42 73 221 00 01 02 03 04 00 Dynamic System 10 44 67 1 00 50 BA DA 02 51 Dynamic System 10 47 65 25 00 50 BA DA 03 2B Dynamic System 10 50 8 7 00 E0 18 45 C7 28 Dynamic System 10 90 90 90 00 01 02 03 04 00 Local System 10 255 255 255 FF FF FF FF FF FF Local Broadc
361. strictions Only administrator level users can issue this command Example usage To disable the Telnet protocol on the Switch DES 6500 4 disable telnet Command disable telnet Success DES 6500 4 enable web Purpose Used to enable the HTTP based management software on the Switch Syntax enable web lt tcp_port_number 1 65535 gt Description This command is used to enable the Web based management software on the Switch The user can specify the TCP port number the Switch will use to listen for Telnet requests Parameters lt tcp_port_number 1 65535 gt The TCP port number TCP ports are numbered between 1 and 65535 The well known port for the Web based management software is 80 Restrictions Only administrator level users can issue this command Example usage To enable HTTP and configure port number DES 6500 4 enable web 80 Command enable web 80 Note SSL will be disabled if web is enabled Success DES 6500 4 19 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual disable web Purpose Used to disable the HTTP based management software on the Switch Syntax disable web Description This command disables the Web based management software on the Switch Parameters None Restrictions Only administrator level users can issue this command Example usage To disable HTTP DES 6500 4 disable web Command disable web Success
362. t authfail lt int 2 20 gt rekey 10min 30min 60min never port lt tcp_port_number 1 65535 gt This command allows you to configure the SSH server maxsession lt int 1 8 gt Allows the user to set the number of users that may simultaneously access the Switch The default is 8 contimeout lt sec 120 600 gt Allows the user to set the connection timeout The user may set a time between 120 and 600 seconds The default is 120 seconds authfail lt int 2 20 gt Allows the administrator to set the maximum number of attempts that a user may try to logon utilizing SSH authentication After the maximum number of attempts is exceeded the Switch will be disconnected and the user must reconnect to the Switch to attempt another login rekey 10min 30min 60min never Sets the time period that the Switch will change the security shell encryptions port lt tcp_port_number 1 65535 gt The TCP port number of the server TCP ports are numbered between 1 and 65535 The well known port for the SSH management software is 22 Only administrator level users can issue this command To configure the SSH server Success DES 6500 4 DES 6500 4 config ssh server maxsession 2 contimeout 300 authfail 2 Command config ssh server maxsession 2 contimeout 300 authfail 2 show ssh server Purpose Syntax Description Parameters Restrictions Usage Example To display the SSH server Used to
363. t space Do not type the angle brackets Example Command create ipif Engineering 10 24 22 5 255 0 0 0 Design square brackets Purpose Encloses a required value or set of required arguments One value or argument can be specified Syntax create account admin user lt username 15 gt Description In the above syntax example you must specify either an admin or a user level account to be created Do not type the square brackets Example Command create account admin vertical bar Purpose Separates two or more mutually exclusive items in a list one of which must be entered Syntax create account admin user lt username 15 gt Description In the above syntax example you must specify either admin or user Do not type the vertical bar Example Command show snmp community xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual braces Encloses an optional value or set of optional arguments eset config I system Description In the above syntax example you have the option to specify config or system It is not necessary to specify either optional value however the effect of the system reset is dependent on which if any value is specified Therefore with this example there are three possible outcomes of performing a system reset See the following chapter Basic Commands for more details about the reset command Line Editing Key Usage remaining characters in the line to the left remaining
364. t gt all mac_address lt macaddr gt Description The config 802 1x init command is used to immediately initialize the 802 1x functions on a specified range of ports or for specified MAC addresses operating from a specified range of ports Parameters port_based This instructs the Switch to initialize 802 1x functions based only on the port number Ports approved for initialization can then be specified ports lt portlist gt Specifies a range of ports The port list is specified by listing the lowest slot number and the beginning port number on that slot separated by a colon Then the highest slot number and the highest port number of the range also separated by a colon are specified The beginning and end of the port list range are separated by a dash For example 1 3 specifies slot number 1 port 3 2 4 specifies slot number 2 port 4 1 3 2 4 specifies all of the ports between slot 1 port 3 and slot 2 port 4 in numerical order all Specifies all of the ports on the Switch mac_based This instructs the Switch to initialize 802 1x functions based on the MAC address of a device on a specific port or range of ports MAC address approved for initialization can then be specified ports lt portlist gt Specifies a range of ports The port list is specified by listing the lowest slot number and the beginning port number on that slot separated by a colon Then the highest slot number and the highest po
365. tate enabled Command config igmp_snooping querier default query_interval 125 state enabled enable igmp_snooping Purpose Syntax Description Parameters Restrictions Example usage Used to enable IGMP snooping on the Switch enable igmp_snooping forward_mcrouter_only This command allows you to enable IGMP snooping on the Switch If forward_mcrouter_only is specified the Switch will only forward all multicast traffic to the multicast router only Otherwise the Switch forwards all multicast traffic to any IP router forward_mcrouter_only Specifies that the Switch should only forward all multicast traffic to a multicast enabled router Otherwise the Switch will forward all multicast traffic to any IP router Only administrator level users can issue this command 145 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual To enable IGMP snooping on the Switch DES 6500 4 enable igmp_snooping Command enable igmp_snooping Success DES 6500 4 disable igmp_snooping Purpose Used to enable IGMP snooping on the Switch Syntax disable igmp_snooping forward_mcrouter_only Description This command disables IGMP snooping on the Switch IGMP snooping can be disabled only if IP multicast routing is not being used Disabling IGMP snooping allows all IGMP and IP multicast traffic to flood within a given IP interface If forward_mcrouter_only is specified the Switch will fo
366. tch DES 6500 4 show ssl certificate Command show ssl certificate Loaded with RSA Certificate DES 6500 4 download certificate Purpose Used to download a certificate file for the SSL function on the Switch Syntax download certificate lt ipaddr gt certfilename lt path_filename 64 gt keyfilename lt path_filename 64 gt Description This command is used to download a certificate file for the SSL function on the Switch from a TFTP server The certificate file is a data record used for authenticating devices on the network It contains information on the owner keys for authentication and digital signatures Both the server and the client must have consistent certificate files for optimal use of the SSL function The Switch only supports certificate files with der file extensions 188 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual download certificate Parameters lt ipaddr gt Enter the IP address of the TFTP server certfilename lt path_filename 64 gt Enter the path and the filename of the certificate file to download keyfilename lt path_filename 64 gt Enter the path and the filename of the key exchange file to download Restrictions Only administrator level users can issue this command Example usage To download a certificate file and key file to the Switch DES 6500 4 download certificate_fromTFTP 10 53 13 94 certfilename c cert der keyfilename c
367. te LACP ports as active Both devices must support LACP passive LACP ports that are designated as passive cannot initially send LACP control frames unless the port receives LACP frames In order to allow the linked port group to negotiate adjustments and make changes dynamically at one end of the connection must have active LACP ports see above Restrictions Only administrator level users can issue this command Example usage To configure LACP port mode settings DES 6500 4 config lacp_port 1 1 1 12 mode active Command config lacp_port 1 1 1 12 mode active Success DES 6500 4 132 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual show lacp_port Purpose Syntax Description Parameters Restrictions Example usage Used to display current LACP port mode settings show lacp_port lt portlist gt This command will display the LACP mode settings as they are currently configured lt portlist gt Specifies a range of ports that will be displayed The port list is specified by listing the lowest slot number and the beginning port number on that slot separated by a colon Then the highest slot number and the highest port number of the range also separated by acolon are specified The beginning and end of the port list range are separated by a dash For example 1 3 specifies slot number 1 port 3 2 4 specifies slot number 2 port 4 1 3 2 4 specifies all of
368. ted by a colon Then the highest slot number and the highest port number of the range also separated by a colon are specified The beginning and end of the port list range are separated by a dash For example 1 3 specifies slot number 1 port 3 2 4 specifies slot number 2 port 4 1 3 2 4 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual config vlan delete specifies all of the ports between slot 1 port 3 and slot 2 port 4 Restrictions Example usage in numerical order Only administrator level users can issue this command To delete ports 5 7 of module 2 of the VLAN v1 Success DES 6500 4 DES 6500 4 config vian v1 delete 2 5 2 7 Command config vlan v1 delete 2 5 2 7 config gvrp Purpose Syntax Description Parameters Restrictions Example usage Used to configure GVRP on the Switch config gvrp lt portlist gt all state enabled disabled ingress_checking enabled disabled acceptable_frame tagged_only admit_all pvid lt vlanid 1 4094 gt This command is used to configure the Group VLAN Registration Protocol on the Switch Configurable items include ingress checking the sending and receiving of GVRP information and the Port VLAN ID PVID lt portlist gt A range of ports to configure GVRP for The port list is specified by listing the lowest slot number and the beginning port number on that slot separated by a colon Then
369. tem FAN4 DES 6500 4 DES 6500 4 show device_status Command show device_status Output voltage Normal FAN1 Normal FAN2 Normal Normal Normal Normal Normal show serial_port Purpose Syntax Description Parameters Restrictions Example usage Used to display the current serial port settings show serial_port This command displays the current serial port settings None None To display the serial port settings Baud Rate Data Bits Parity Bits Stop Bits Auto Logout DES 6500 4 DES 6500 4 show serial_port Command show serial_port 115200 8 None 4 10 mins 16 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual config serial_port Purpose Syntax Description Parameters Restrictions Example usage To configure baud rate Used to configure the serial port config serial_port auto_logout never 2_minutes 5 minutes 10_minutes 15_minutes This command is used to configure the serial port s baud rate and auto logout settings auto_logout The user may select a time period from the following list which the Switch will automatically log out of the serial port e never No time limit on the length of time the console can be open with no user input 2_minutes The console will log out the current user if there is no user input for 2 minutes 5_minutes The console will log out the current user if ther
370. ter will return all ports in the specified range to their default 802 1x settings config 802 1x auth_parameter ports lt portlist gt all default direction both in port_control force_unauth auto force_auth quiet_period lt sec 0 65535 gt tx_period lt sec 1 65535 gt supp_timeout lt sec 1 65535 gt server_timeout lt sec 1 65535 gt max_req lt value 1 10 gt reauth_period lt sec 1 65535 gt enable_reauth enable disable The config 802 1x auth_parameter command is used to configure the 802 1x Authentication parameters on a range of ports The default parameter will return all ports in the specified range to their default 802 1x settings lt portlist gt Specifies a range of ports The port list is specified by listing the lowest slot number and the beginning port number on that slot separated by a colon Then the highest slot number and the highest port number of the range also separated by a colon are specified The beginning and end of the port list range are separated by a dash For example 1 3 specifies slot number 1 port 3 2 4 specifies slot number 2 port 4 1 3 2 4 specifies all of the ports between slot 1 port 3 and slot 2 port 4 in numerical order all Specifies all of the ports on the Switch default Returns all of the ports in the specified range to their 802 1x default settings direction both in Determines whether a controlled port blocks communication
371. terface Parameters lt ipif_name 12 gt The name for the IP interface to be created The user may enter an alphanumeric string of up to 12 characters to define the IP interface lt network_address gt IP address and netmask of the IP interface xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual create ipif to be created The address and mask information can be specified using the traditional format for example 10 1 2 3 255 0 0 0 or in CIDR format 10 1 2 3 8 lt vian_name 32 gt The name of the VLAN that will be associated with the above IP interface secondary Enter this parameter if this configured IP interface is to be a secondary IP interface of the VLAN previously specified secondary interfaces can only be configured if a primary interface is first configured state enabled disabled Allows the user to enable or disable the IP interface Restrictions Only administrator level users can issue this command Example usage To create the primary IP interface p1 on VLAN Trinity DES 6500 4 create ipif p1 ipaddress 10 1 1 1 Trinity state enabled Command create ipif p1 ipaddress 10 1 1 1 Trinity state enabled Success DES 6500 4 To create the secondary IP interface s1 on VLAN Trinity DES 6500 4 create ipif p1 ipaddress 12 1 1 1 Trinity secondary state enabled Command create ipif p1 ipaddress 12 1 1 1 Trinity secondary state enabled Success DE
372. terface Neighbor Address Generation ID Expire Time System 10 2 1 123 2 250 Total Entries 1 DES 6500 4 show dvmrp nexthop Purpose Used to display the current DVMRP routing next hop table Syntax show dvmrp nexthop ipaddress lt network_address gt ipif lt ipif_name 12 gt Description This command will display the DVMRP routing next hop table Parameters lt ipif_ name 12 gt The name of the IP interface for which to display the current DVMRP routing next hop table ipaddress lt network_address gt The IP address and netmask of the destination The address and mask information can be specified using the traditional format for example 10 1 2 3 255 0 0 0 or in CIDR format 10 1 2 3 8 Restrictions None Example Usage To display DVMRP routing next hop table 293 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual DES 6500 4 show dvmrp nexthop Command show dvmrp nexthop Source IP Address Netmask Interface Name Type 10 0 0 0 8 ip2 Leaf 10 0 0 0 8 ip3 Leaf 20 0 0 0 8 System Leaf 20 0 0 0 8 ip3 Leaf 30 0 0 0 8 System Leaf 30 0 0 0 8 ip2 Leaf Total Entries 6 DES 6500 4 show dvmrp Purpose Used to display the current DVMRP settings on the Switch Syntax show dvmrp lt ipif_name 12 gt Description The command will display the current DVMRP routing table Parameters lt ipif_ name 12 gt Adding this parameter will display DVMRP settings
373. tering this parameter will display neighboring devices of the Switch A SIM neighbor is defined as a switch that is physically connected to the Switch but is not part of the SIM group This screen will produce the following results e Port Displays the physical port number of the commander switch where the uplink to the neighbor switch is located MAC Address Displays the MAC Address of the neighbor switch Role Displays the role CS CaS MS of the neighbor switch Restrictions Only administrator level users can issue this command Example usage To show the SIM information in detail 243 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual DES 6500 4 show sim Command show sim SIM Version VER 1 Firmware Version Build 3 00 B29 Device Name MAC Address 00 35 26 11 11 00 Capabilities L3 Platform DES 6500 L3 Switch SIM State Enabled Role State Commander Discovery Interval 30 sec Hold Time 100 sec DES 6500 4 To show the candidate information in summary if the candidate ID is specified DES 6500 4 show sim candidates Command show sim candidates ID MAC Address Platform Hold Firmware Device Name Capability Time Version 1 00 01 02 03 04 00 DGS 3324SR L3 Switch 40 4 00 B13 The Man 2 00 55 55 00 55 00 DGS 3324SR L3 Switch 140 4 00 B13 default master Total Entries 2 DES 6500 4 To show the member information in summary if the m
374. ters None Restrictions Only administrator level users can issue this command Usage Example To enable OSPF on the Switch 304 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual DES 6500 4 enable ospf Command enable ospf Success DES 6500 4 disable ospf Purpose Used to disable OSPF on the Switch Syntax disable ospf Description This command in combination with the enable ospf command above is used to enable and disable OSPF on the Switch Parameters None Restrictions Only administrator level users can issue this command Usage Example To disable OSPF on the Switch DES 6500 4 disable ospf Command disable ospf Success DES 6500 4 show ospf Purpose Used to display the current OSPF state on the Switch Syntax show ospf Description This command will display the current state of OSPF on the Switch divided into the following categories General OSPF settings OSPF Interface settings OSPF Area settings OSPF Virtual Interface settings OSPF Area Aggregation settings OSPF Host Route settings Parameters None Restrictions None Usage Example 305 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual To show OSPF state DES 6500 4 show ospf Command show ospf OSPF Router ID 10 1 1 2 State Enabled OSPF Interface Settings Interface IP Address Area ID State Link Metric Status System 10 90 9
375. ters None Restrictions You must have administrator privileges Example Usage To disable HOL prevention DES 6500 4 disable hol_prevention Command disable hol_prevention Success DES 6500 4 112 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual show hol_prevention Purpose Used to show HOL prevention Syntax show hol_prevention Description The show hol_prevention command displays the Head of Line prevention state Parameters None Restrictions None Example Usage To view the HOL prevention status DES 6500 4 show hol_prevention Command show hol_prevention Device HOL Prevention State Enabled DES 6500 4 113 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual PORT MIRRORING COMMANDS The port mirroring commands in the Command Line Interface CLI are listed along with the appropriate parameters in the following table Command Parameters lt port gt add delete source ports lt portlist gt rx tx both Each command is listed in detail in the following sections config mirror port add Purpose Syntax Description Parameters Restrictions Used to configure a mirror port source port pair on the Switch config mirror port lt port gt add source ports lt portlist gt rx tx both This command allows a range of ports to have all of their traffic also sent to a designated port wher
376. ters below no_limit or lt value 1 9999 gt will be applied to the rate at which the above specified ports will be allowed to transmit packets no_limit Specifies that there will be no limit on the rate of packets transmitted by the above specified ports xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual config bandwidth_control lt value 1 9999 gt Specifies the packet limit in Mbps that the above ports will be allowed to transmit Restrictions Only administrator level users can issue this command Example usage To configure bandwidth control DES 6500 4 config bandwidth_control 1 1 1 10 tx_rate 10 Command config bandwidth_control 1 1 1 10 tx_rate 10 Success DES 6500 4 show bandwidth_control Purpose Used to display the bandwidth control configuration on the Switch Syntax show bandwidth_control lt portlist gt Description The show bandwidth_control command displays the current bandwidth control configuration on the Switch on a port by port basis Parameters lt portlist gt Specifies a range of ports to be displayed The port list is specified by listing the lowest slot number and the beginning port number on that slot separated by a colon Then the highest slot number and the highest port number of the range also separated by a colon are specified The beginning and end of the port list range are separated by a dash For example 1 3 specifies slot num
377. terval lt value 1 25 gt state enable disable show igmp ipif lt ipif_ name 12 gt show igmp group group lt group gt ipif lt ipif_name 12 gt Each command is listed in detail in the following sections config igmp Purpose Used to configure IGMP on the Switch Syntax config igmp ipif lt ipif_name 12 gt all version lt value 1 3 gt query_interval lt sec 1 31744 gt max_response_time lt sec 1 25 gt robustness _ variable lt value 1 255 gt 139 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual config igmp last_member_query_interval lt value 1 25 gt state enabled disabled Description This command allows IGMP to be configured on the Switch Parameters lt ipif_name 12 gt The name of the IP interface for which to configure IGMP all Specifies all the IP interfaces on the Switch version lt value 1 3 gt Select the IGMP version number query_interval lt sec 1 31744 gt The time in seconds between general query transmissions in seconds max_response_time lt sec 1 25 gt Enter the maximum time in seconds that the Switch will wait for reports from members robustness_variable lt value 1 255 gt This value states the permitted packet loss that guarantees IGMP last_member_query_interval lt value 1 25 gt The Max Response Time inserted into Group Specific Queries and Group and Source specific queries sent in response to Leav
378. that authorization will be required and that packets sent between the Switch and a remote SNMP manger will 40 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual create snmp group be encrypted read_view Specifies that the SNMP group being created can request SNMP messages write _view Specifies that the SNMP group being created has write privileges lt view_name 32 gt An alphanumeric string of up to 32 characters that is used to identify the group of MIB objects that a remote SNMP manager is allowed to access on the Switch notify_view Specifies that the SNMP group being created can receive SNMP trap messages generated by the Switch s SNMP agent Restrictions Only administrator level users can issue this command Example usage To create an SNMP group named sg1 DES 6500 4 create snmp group sg1 v3 noauth_nopriv read_view v1 write_view v1 notify_view v1 Command create snmp group sg1 v3 noauth_nopriv read_view v1 write_view v1 notify_view v1 Success DES 6500 4 delete snmp group Purpose Used to remove an SNMP group from the Switch Syntax delete snmp group lt groupname 32 gt Description The delete snmp group command is used to remove an SNMP group from the Switch Parameters lt groupname 32 gt An alphanumeric name of up to 32 characters that will identify the SNMP group to be deleted Restrictions Only administrator level users can iss
379. the OSPF area to import summary LSA advertisements metric lt value 0 65535 gt The OSPF area cost between 0 and 65535 0 denotes that the value will be automatically assigned The default setting is 0 Restrictions Only administrator level users can issue this command Usage Example To create an OSPF area DES 6500 4 create ospf area 10 48 74 122 type normal Command create ospf area 10 48 74 122 type normal Success DES 6500 4 delete ospf area Purpose Used to delete an OSPF area Syntax delete ospf area lt area_id gt Description This command is used to delete an OSPF area Parameters lt area_id gt A 32 bit number in the form of an IP address XXX XXX XXX XXX that uniquely identifies the OSPF area in the OSPF domain Restrictions Only administrator level users can issue this command Usage Example To delete an OSPF area DES 6500 4 delete ospf area 10 48 74 122 Command delete ospf area 10 48 74 122 Success DES 6500 4 307 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual config ospf area Purpose Used to configure an OSPF area s settings Syntax config ospf area lt area_id gt type normal stub stub_summary enabled disabled metric lt value 0 65535 gt Description This command is used to configure an OSPF area s settings Parameters lt area_id gt The OSPF area ID The user may enter a 32 bit number in the form
380. the IP interface System DES 6500 4 config ipif System ipaddress 10 48 74 122 8 Command config ipif System ipaddress 10 48 74 122 8 Success DES 6500 4 enable ipif Purpose Used to enable an IP interface on the Switch Syntax enable ipif lt ipif_name 12 gt all Description This command will enable the IP interface function on the Switch Parameters lt ipif_ name 12 gt The name of a previously configured IP interface to enable Enter an alphanumeric entry of up to twelve characters to define the IP interface all Entering this parameter will enable all the IP interfaces currently configured on the Switch Restrictions None Example usage To enable the ipif function on the Switch DES 6500 4 enable ipif s2 Command enable ipif s2 Success DES 6500 4 136 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual disable ipif Purpose Used to disable the configuration of an IP interface on the Switch Syntax disable ipif lt ipif_name 12 gt all Description This command will disable an IP interface on the Switch without altering its configuration values Parameters lt ipif_name 12 gt The name previously created to define the IP interface all Entering this parameter will disable all the IP interfaces currently configured on the Switch Restrictions None Example usage To disable the IP interface named s2 DES 6500
381. the Switch Parameters profile_id lt value 1 8 gt Enter an integer between 1 and 8 that is used to identify the access profile that will be deleted with this command This value is assigned to the access profile when it is created with the create access_profile command Restrictions Only administrator level users can issue this command Example usage To delete the access profile with a profile ID of 1 225 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual DES 6500 4 delete access_profile profile_id 1 Command delete access_profile profile_id 1 Success DES 6500 4 show access_profile Purpose Used to display the currently configured access profiles on the Switch Syntax show access_profile profile_id lt value 1 8 gt Description The show access_profile command is used to display the currently configured access profiles Parameters profile_id lt value 1 8 gt Enter an integer between 1 and 8 that is used to identify the access profile that will be viewed with this command This value is assigned to the access profile when it is created with the create access_profile command Entering this command without the profile_id parameter will command the Switch to display all access profile entries Restrictions Only administrator level users can issue this command Example usage To display all of the currently configured access profiles on the Switch DES 6
382. the default 264 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual config vrrp vrid gateway that will be statically assigned to end hosts and must be set for all routers that participate in this group advertisement_interval lt int 1 255 gt Enter a time interval value in seconds for sending VRRP message packets This value must be consistent with all routers participating within the same VRRP group The default is 1 second preempt true false This entry will determine the behavior of backup routers within the VRRP group by controlling whether a higher priority backup router will preempt a lower priority Master router A true entry along with having the backup router s priority set higher than the masters priority will set the backup router as the Master router A false entry will disable the backup router from becoming the Master router This setting must be consistent with all routers participating within the same VRRP group The default setting is true critical_ip lt ipaddr gt Enter the IP address of the physical device that will provide the most direct route to the Internet or other critical network connections from this virtual router This must be a real IP address of a real device on the network If the connection from the virtual router to this IP address fails the virtual router will be disabled automatically A new master will be elected from the backup routers participating in the V
383. the following sections config bandwidth_control Purpose Used to configure bandwidth control on a by port basis Syntax config bandwidth_control lt portlist gt all rx_rate no_limit lt value 1 9999 gt tx_rate no_limit lt value 1 9999 gt Description The config bandwidth_control command is used to configure bandwidth on a by port basis Parameters lt portlist gt Specifies a range of ports to be displayed The port list is specified by listing the lowest slot number and the beginning port number on that slot separated by a colon Then the highest slot number and the highest port number of the range also separated by a colon are specified The beginning and end of the port list range are separated by a dash For example 1 3 specifies slot number 1 port 3 2 4 specifies slot number 2 port 4 1 3 2 4 specifies all of the ports between slot 1 port 3 and slot 2 port 4 in numerical order all Choose this parameter to select all configurable ports rx_rate Specifies that one of the parameters below no_limit or lt value 1 9999 gt will be applied to the rate at which the above specified ports will be allowed to receive packets no_limit Specifies that there will be no limit on the rate of packets received by the above specified ports lt value 1 9999 gt Specifies the packet limit in Mbps that the above ports will be allowed to receive tx_rate Specifies that one of the parame
384. the packets The applications will decode the packet from the administrator modify some data and then send it to the MS After execution the CS may receive a response packet from the MS which it will encode and send it back to the administrator When a CaS becomes a MS it automatically becomes a member of the first SNMP community include read write and read only to which the CS belongs However if a MS has its own IP address it can belong to SNMP communities to which other switches in the group including the CS do not belong The D Link Single IP Management commands in the Command Line Interface CLI are listed along with the appropriate parameters in the following table Command Parameters enable sim CS disable sim a show sim candidates lt candidate_id 1 100 gt members lt member_id 1 32 gt group commander_mac lt macaddr gt neighbor reconfig member_id lt value 1 32 gt exit config sim commander group_name lt groupname 64 gt candidate dp_interval lt sec 30 90 gt hold_time lt sec 100 255 gt download sim_ms firmware configuration lt ipaddr gt lt path_filename gt members lt mslist 1 32 gt all upload sim_ms lt ipaddr gt lt path_filename gt lt member_id 1 32 gt configuration Each command is listed in detail in the following sections config sim_group add lt candidate_id 1 100 gt lt password gt delete lt member_id 1 32 gt 241 xStack DES 6500
385. thernet_type lt hex Ox0 Oxffff gt port lt port gt permit priority lt value 0 7 gt replace_priority replace_dscp lt value 0 63 gt deny delete lt value 1 65535 gt create access_profile profile_id lt value 1 8 gt ip vlan source_ip_ mask lt netmask gt destination_ip_mask lt netmask gt dscp icmp type code igmp type tcp src_port_mask lt hex Ox0 Oxffff gt dst_port_mask lt hex 0x0 Oxffff gt flag_mask all urg ack psh rst syn fin udp src_port_mask lt hex 0x0 Oxffff gt dst_port_mask lt hex 0x0 xffff gt protocol_id user _mask lt hex Ox0 Oxffffffff gt config access_profile lt value 1 8 gt add access_id lt value 1 65535 gt ip vlan lt vlan_name profile_id 32 gt source_ip lt ipaddr gt destination_ip lt ipaddr gt dscp lt value 0 63 gt icmp type lt value 0 255 gt code lt value 0 255 gt igmp type lt value 0 255 gt tcp src_port lt value 0 65535 gt dst_port lt value 0 65535 gt urg ack psh rst syn fin udp src_port lt value 0 65535 gt dst_port lt value 0 65535 gt protocol_id lt value 0 255 gt user_define lt hex 0x0 Oxffffffff gt port lt port gt permit priority lt value 0 7 gt replace_priority replace_dscp lt value 0 63 gt deny delete lt value 1 65535 gt create access _profile profile_id lt value 1 8 gt packet_content_mask offset_0 15 lt hex Ox0 Oxffffffff gt lt hex 0x0 Oxfffffff
386. tination Parameters lt portlist gt Specifies a range of ports to be configured The port list is specified by listing the lowest slot number and the beginning port number on that slot separated by a colon Then the highest slot number and the highest port number of the range also separated by a colon are specified The beginning and end of the port list range are separated by a dash For example 1 3 specifies slot number 1 port 3 2 4 specifies slot number 2 port 4 1 3 2 4 specifies all of the ports between slot 1 port 3 and slot 2 port 4 in numerical order all Specifies that the config 802 1p default_priority command will be applied to all ports on the Switch lt priority 0 7 gt Specifies the 802 1p priority tag that an untagged incoming packet will be given before being forwarded to its destination Restrictions Only administrator level users can issue this command Example usage To configure 802 1p default priority on the Switch DES 6500 4 config 802 1p default_priority all 5 Command config 802 1p default_priority all 5 Success DES 6500 4 show 802 1 default_priority Purpose Used to display the currently configured 802 1p priority tags that will be assigned to incoming untagged packets before being forwarded to its destination Syntax show 802 1p default_priority lt portlist gt Description The show 802 1p default_priority command displays the currently configured 802
387. tlist gt all forward_list null all lt portlist gt Description The config traffic_segmentation command is used to configure traffic segmentation on the Switch Parameters lt portlist gt Specifies a range of ports that will be configured for traffic segmentation The port list is specified by listing the lowest slot number and the beginning port number on that slot separated by a colon Then the highest slot number and the highest port number of the range also separated by a colon are specified The beginning and end of the port list range are separated by a dash For example 1 3 specifies slot number 1 port 3 2 4 specifies slot number 2 port 4 1 3 2 4 specifies all of the ports between slot 1 port 3 and slot 2 port 4 in numerical order all Specifies all ports on the Switch forward_list Specifies a port or range of ports that will receive forwarded frames from the ports specified in the portlist above e null No ports are specified e all Specifies all ports on the Switch e lt portlist gt Specifies a range of ports for the forwarding list This list must be on the same switch previously specified for traffic segmentation i e following the lt portlist gt specified above for config traffic_segmentation Restrictions Only administrator level users can issue this command Example usage To configure ports through 10 to be able to forward frames to port 11 through 15
388. to the Switch More than one authentication protocol can be run on the same physical server host but remember that TACACS XTACACS TACACS are separate entities and are not compatible with each other The maximum supported number of server hosts is 16 server_host lt ipaddr gt The IP address of the remote server host to be altered protocol The protocol used by the server host The user may choose one of the following a tacacs Enter this parameter if the server host utilizes the 166 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual config authen server_host Restrictions Example usage TACACS protocol xtacacs Enter this parameter if the server host utilizes the XTACACS protocol tacacs Enter this parameter if the server host utilizes the TACACS protocol radius Enter this parameter if the server host utilizes the RADIUS protocol port lt int 1 65535 gt Enter a number between 1 and 65535 to define the virtual port number of the authentication protocol on a server host The default port number is 49 for TACACS XTACACS TACACS servers but the user may set a unique port number for higher security The default port number for RADIUS servers is 1812 key lt key_string 254 gt Authentication key to be shared with a configured TACACS server only Specify an alphanumeric string up to 254 characters or choose none timeout lt int 1 255 gt Enter the time in seconds the S
389. trator level users can issue this command Usage Example To configure an MDS Key password 301 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual DES 6500 4 config md5 key 1 taboo Command config md5 key 1 taboo Success DES 6500 4 delete md5 key Purpose Used to delete an entry in the MD5 key table Syntax delete md5 key lt key_id 1 255 gt Description This command is used to delete a specific entry in the MD5 key table Parameters lt key_id 1 255 gt The MD5 key ID to delete Restrictions Only administrator level users can issue this command Usage Example The delete an entry in the MDS key table DES 6500 4 delete md5 key 1 Command delete md5 key 1 Success DES 6500 4 show md5 Purpose Used to display an MD5 key table Syntax show md5 key lt key_id 1 255 gt Description This command will display the current MD5 key table Parameters lt key_id 1 255 gt The MD5 key ID to be displayed Restrictions None Usage Example To display the current MDS key DES 6500 4 show md5 Command show md5 MD5 Key Table Configurations Key ID Key 1 dlink 2 develop 3 fireball 4 intelligent Total Entries 4 DES 6500 4 302 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual OSPF CONFIGURATION COMMANDS The OSPF configuration commands in the Command Line Interface CLI are listed along with the appropr
390. trator level users can issue this command Example usage To create an SNMP user on the Switch DES 6500 4 create snmp user dlink default encrypted by_password auth md5 auth_password priv none Command create snmp user dlink default encrypted by_password auth md5 auth_password priv none Success DES 6500 4 delete snmp user Purpose Used to remove an SNMP user from an SNMP group and also to delete the associated SNMP group Syntax delete snmp user lt SNMP_name 32 gt Description The delete snmp user command removes an SNMP user from its SNMP group and then deletes the associated SNMP group Parameters lt SNMP_name 32 gt An alphanumeric string of up to 32 characters that identifies the SNMP user that will be deleted Restrictions Only administrator level users can issue this command Example usage To delete a previously entered SNMP user on the Switch DES 6500 4 delete snmp user dlink Command delete snmp user dlink Success DES 6500 4 34 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual show snmp user Purpose Used to display information about each SNMP username in the SNMP group username table Syntax show snmp user Description The show snmp user command displays information about each SNMP username in the SNMP group username table Parameters None Restrictions Only administrator level users can issue this command Example usage
391. tribute dst rip src ospf all metric 2 Success DES 6500 4 config route redistribute dst ospf src Purpose Used configure route redistribution settings for the exchange of RIP routes to OSPF routes on the Switch Syntax config route redistribute dst ospf src static rip local mettype 1 2 metric lt value 0 16777214 gt Description Route redistribution allows routers on the network that are running different routing protocols to exchange routing information This is accomplished by comparing the routes stored in the various router s routing tables and assigning appropriate metrics This information is then exchanged among the various routers according to the individual routers current routing protocol The switch can redistribute routing information between the OSPF and RIP routing protocols to all routers on the network that are running OSPF or RIP Routing information entered into the Static Routing Table on the local switch is also redistributed Parameters src static rip local Allows the selection of the protocol of the source device mettype allows the selection of one of the methods for calculating the metric value 273 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual config route redistribute dst ospf src Restrictions Type 1 calculates the metric for RIP to OSPF by adding the destination s interface cost to the metric entered in the Metric field T
392. tric field type_2 Uses the metric entered in the Metric field without change This field applies only when the destination field is OSPF inter e1 Specifies the internal protocol AND type 1 of the external protocol inter e2 Specifies the internal protocol AND type 2 of the external protocol metric lt value 0 16 gt Allows the entry of an OSPF interface cost This is analogous to a HOP Count in the RIP routing protocol Restrictions Only administrator level users can issue this command 272 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual Routing information source OSPF and the Static Route table Routing information will be redistributed to RIP The following table lists the allowed values for the routing metrics and the types or forms of the routing information that will be redistributed Route Source Metric OSPF 0 to 16 all type_1 type_2 inter e1 inter e2 external internal Static 0 to 16 not applicable Entering the Type combination internal type_1 type_2 is functionally equivalent to all Entering the combination type_1 type_2 is functionally equivalent to external Entering the combination internal external is functionally equivalent to all Entering the metric 0 specifies transparency Example Usage To add route redistribution settings DES 6500 4 create route redistribute dst rip src ospf all metric 2 Command create route redis
393. ty Model SNMPv3 Security Level authPriv Group Name Group7 ReadView Name ReadView WriteView Name WriteView Notify View Name NotifyView Security Model SNMPv3 Security Level authPriv Group Name initial 42 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual ReadView Name WriteView Name Notify View Name Security Model Security Level Group Name ReadView Name WriteView Name Notify View Name Security Model Security Level Group Name ReadView Name WriteView Name Notify View Name Security Model Security Level Group Name ReadView Name WriteView Name Notify View Name Security Model Security Level Group Name ReadView Name WriteView Name Notify View Name Security Model Security Level Total Entries 10 DES 6500 4 restricted restricted SNMPv3 NoAuthNoPriv ReadGroup CommunityView CommunityView SNMPv1 NoAuthNoPriv ReadGroup CommunityView CommunityView SNMPv2 NoAuthNoPriv WriteGroup CommunityView CommunityView CommunityView SNMPv1 NoAuthNoPriv WriteGroup CommunityView CommunityView CommunityView SNMPv2 NoAuthNoPriv create snmp host Purpose Used to create a recipient of SNMP traps generated by the Switch s SNMP agent create snmp host lt ipaddr gt v1 v2c v3 noauth_nopriv auth_nopriv auth_priv lt auth_string 32 gt Syntax Description The create snmp host
394. type value in the packet header encap ethernet Ilc snap all Specifies that the Switch will examine the octet of the packet header referring to one of the protocols listed Ethernet LLC or SNAP looking for a match of the hexadecimal value previously entered all will instruct the Switch to examine the total packet header After a match is found the Switch will forward the packet to this VLAN protocol rarp Using this parameter will instruct the Switch to forward packets to this VLAN if the tag in the packet header is concurrent with this protocol This packet header information is defined by the Reverse Address Resolution RARP Protocol Restrictions Each VLAN name can be up to 32 characters If the VLAN is not given a tag it will be a port based VLAN Only administrator level users can issue this command 120 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual the same encapsulation protocol cannot coexist and will result in a Fail Message For example if a user creates an Ethernet2 protocol VLAN the user can not create a userDefined protocol VLAN with an Ethernet encapsulation P NOTE A specific protocol VLAN and a user defined protocol VLAN with Example usage To create a protocol VLAN DES 6500 4 create vlan v5 tag 2 type protocol ipxSnap Command create vlan v5 tag 2 type protocol ipxSnap Success DES 6500 4 To create a VLAN v1 tag 2 DES 6500 4 cr
395. ue this command Example usage To delete the SNMP group named sg1 DES 6500 4 delete snmp group sg1 Command delete snmp group sg1 Success DES 6500 4 41 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual show snmp groups Purpose Used to display the group names of SNMP groups currently configured on the Switch The security model level and status of each group are also displayed Syntax show snmp groups Description The show snmp groups command displays the group names of SNMP groups currently configured on the Switch The security model level and status of each group are also displayed Parameters None Restrictions None Example usage To display the currently configured SNMP groups on the Switch DES 6500 4 show snmp groups Command show snmp groups Vacm Access Table Settings Group Name Group3 ReadView Name ReadView WriteView Name WriteView Notify View Name NotifyView Security Model SNMPv3 Security Level NoAuthNoPriv Group Name Group4 ReadView Name ReadView WriteView Name WriteView Notify View Name NotifyView Security Model SNMPv3 Security Level authNoPriv Group Name Group5 ReadView Name ReadView WriteView Name WriteView Notify View Name NotifyView Security Model SNMPv3 Security Level authNoPriv Group Name Group6 ReadView Name ReadView WriteView Name WriteView Notify View Name NotifyView Securi
396. ular Layer 3 Chassis Ethernet Switch CLI Manual FORWARDING DATABASE COMMANDS The forwarding database commands in the Command Line Interface CLI are listed along with the appropriate parameters in the following table show fdb port lt port gt vlan lt vlan_name 32 gt mac_address lt macaddr gt static aging_time show ipfdb lt ipaddr gt Each command is listed in detail in the following sections create fdb Purpose Used to create a static entry to the unicast MAC address forwarding table database Syntax create fdb lt vlan_name 32 gt lt macaddr gt port lt port gt Description This command will make an entry into the Switch s unicast MAC address forwarding database Parameters lt vlan_name 32 gt The name of the VLAN on which the MAC address resides lt macaddr gt The MAC address that will be added to the forwarding table port lt port gt Enter the corresponding port of the entry to delete The port is specified by listing the lowest slot number and the beginning port number on that slot separated by a colon For example 1 3 specifies slot number 1 port 3 2 4 specifies switch number 2 port 4 Restrictions Only administrator level users can issue this command Example usage To create a unicast MAC FDB entry 89 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual DES 6500 4 create fdb default 00 00 00 00 01 02 port 2 5 Command create f
397. ulation of the metric authentication Enter the type of authentication preferred The user may choose between e none Choosing this parameter will require no authentication simple lt password 8 gt Choosing this parameter will set a simple authentication which includes a case sensitive password of no more than 8 characters md5 lt key_id 1 255 gt Choosing this parameter will set authentication based on md5 encryption A previously configured MD5 key ID 1 to 255 is required metric lt value 1 65535 gt This field allows the entry of a number between 1 and 65 535 that is representative of the OSPF cost of reaching the selected OSPF interface The default metric is 1 state enabled disabled Used to enable or disable this function Restrictions Only administrator level users can issue this command Usage Example To configure OSPF interface settings DES 6500 4 config ospf ipif System priority 2 hello_interval 15 metric 2 state enable Command config ospf ipif System priority 2 hello_interval 15 metric 2 state enable Success DES 6500 4 config ospf all Purpose Used to configure all of the OSPF interfaces on the Switch at one time Syntax config ospf all area lt area_id gt priority lt value gt hello_interval lt sec 1 65535 gt dead_interval lt sec 1 65535 gt authentication none simple lt password 8 gt md5 lt key_id 1 255 gt metric lt value 1 6
398. upported number of server hosts is 16 Parameters server_host lt ijpaddr gt The IP address of the remote server host to add protocol The protocol used by the server host The user may choose one of the following facacs Enter this parameter if the server host utilizes the TACACS protocol xtacacs Enter this parameter if the server host utilizes the XTACACS protocol tacacs Enter this parameter if the server host utilizes the TACACS protocol radius Enter this parameter if the server host utilizes the RADIUS protocol port lt int 1 65535 gt Enter a number between 1 and 65535 to define the virtual port number of the authentication protocol on a server host The default port number is 49 for TACACS XTACACS TACACS servers but the user may set a unique port number for higher security The default port number of the authentication protocol on the RADIUS server is 1812 key Authentication key to be shared with a configured TACACS server only 165 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual create authen server_host Restrictions Example usage lt key_string 254 gt Specify an alphanumeric string up to 254 characters to be a key for the TACACS server none Specify this parameter to not use any key timeout lt int 1 255 gt Enter the time in seconds the Switch will wait for the server host to reply to an authentication request The default value is
399. urpose Used to configure a user defined authentication server group Syntax config authen server_group tacacs xtacacs tacacs radius lt string 15 gt add delete server_host lt ipaddr gt protocol tacacs xtacacs tacacs radius Description This command will configure an authentication server group A server group is a technique used to group TACACS XTACACS TACACS and RADIUS server hosts into user defined categories for authentication using method lists The user may define the type of server group by protocol or by previously defined server group Up to eight 8 authentication server hosts may be added to any particular group Parameters server_group The user may define the group by protocol groups 169 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual config authen server_group built into the Switch TACACS XTACACS TACACS RADIUS or by a user defined group previously created using the create authen server_group command tacacs Use this parameter to utilize the built in TACACS server protocol on the Switch Only server hosts utilizing the TACACS protocol may be added to this group xtacacs Use this parameter to utilize the built in XTACACS server protocol on the Switch Only server hosts utilizing the XTACACS protocol may be added to this group tacacs Use this parameter to utilize the built in TACACS server protocol on the Switch Only server hosts utilizing the TA
400. urred storm_cleared both show traffic control lt portlist gt Each command is listed in detail in the following sections config traffic control Purpose Used to configure broadcast multicast dlf packet storm control The software mechanism is provided to monitor the traffic rate in addition to the hardware storm control mechanism previously provided config traffic control lt portlist gt all broadcast enabled disabled multicast enabled disabled dif enabled disabled action drop shutdown threshold lt value 0 2047 gt countdown lt value 0 gt lt value 5 30 gt time_interval lt value 5 10 gt Description This command is used to configure broadcast multicast dlf storm control By adding the new software traffic control mechanism the user can now use both a hardware and software mechanism the 97 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual config traffic control Parameters latter of which will now provide shutdown recovery and trap notification functions for the Switch lt portlist gt Used to specify a range of ports to be configured for traffic control This is specified by listing the lowest switch number and the beginning port number on that switch separated by a colon Then the highest switch number and the highest port number of the range also separated by a colon are specified The beginning and end of the port list range are sepa
401. usage To show the CPU filtering state on the Switch DES 6500 4 show cpu_interface_filtering Command show cpu_interface_filtering Cpu_interface_filtering State Disabled DES 6500 4 show cpu_access_profile Purpose Used to view the CPU access profile entry currently set in the Switch Syntax show cpu_access_profile profile_id lt value 1 5 gt Description The show cpu_access_profile command is used view the current CPU interface filtering entries set on the Switch Parameters profile_id lt value 1 3 gt The user may select a profile to view the parameters currently set for this CPU access profile entry based on a previously configured CPU access profile entry Entering no parameter will display all information currently set for the CPU access profile function of the Switch Restrictions Only administrator level users can issue this command Example usage To show the CPU filtering state on the Switch DES 6500 4 show cpu_access_profile Command show cpu_access_profile Access Profile Table Access Profile ID 1 Type Ethernet Ports 1 1 VLAN Total Entries 0 DES 6500 4 234 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual SAFEGUARD ENGINE COMMANDS Periodically malicious hosts on the network will attack the Switch by utilizing packet flooding ARP Storm or other methods These attacks may increase the CPU utilization beyond its capability To alleviate this p
402. used to display the current authentication session statistics of the Switch on a per port basis Parameters ports lt portlist gt Specifies a range of ports The port list is specified by listing the lowest slot number and the beginning port number on that slot separated by a colon Then the highest slot number and the highest port number of the range also separated by a colon are specified The beginning and end of the port list range are separated by a dash For example 1 3 specifies slot number 1 port 3 2 4 specifies slot number 2 port 4 1 3 2 4 specifies all of the ports between slot 1 port 3 and slot 2 port 4 in numerical order all Specifies that all ports will be viewed Restrictions None Example usage 206 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual To display the current authentication session statistics for port 16 DES 6500 4 show auth_session_statistics ports 1 16 Command show auth_session_statistics ports 1 16 Port number 1 16 SessionOctetsRx 0 SessionOctets Tx 0 SessionFramesRx 0 SessionFramesTx 0 Sessionld SessionAuthenticMethod Remote Authentication Server SessionTime 0 SessionTerminateCause SupplicantLogoff SessionUserName Trinity CTRL C El Quit SZ ff Next Page Eien Next Entry All show auth_statistics Purpose Used to display the current authentication statistics Syntax show auth_statistics ports lt portlist gt all
403. user login Parameters lt string 15 gt Enter an alphanumeric string of up to 15 characters to define the given method list to delete Restrictions Only administrator level users can issue this command Example usage To delete the method list name Trinity DES 6500 4 delete authen_login method_list_name Trinity Command delete authen_login method_list_name Trinity Success DES 6500 4 show authen_login Purpose Used to display a previously configured user defined method list of authentication methods for users logging on to the Switch Syntax show authen_login default method_list_name lt string 15 gt all Description This command is used to show a list of authentication methods for user login The window will display the following parameters Method List Name The name of a previously configured method list name Priority Defines which order the method list protocols will be queried for authentication when a user attempts to log on to the Switch Priority ranges from 1 highest to 4 lowest Method Name Defines which security protocols are implemented per method list name Comment Defines the type of Method User defined Group refers to server group defined by the user Built in Group refers to the TACACS XTACACS TACACS and RADIUS 158 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual show authen_login security protocols which are
404. ve only user level privileges To gain access to administrator level privileges the user will enter this command and will have to enter an authentication password Possible authentication methods for this function include TACACS XTACACS TACACS RADIUS user defined server groups local enable local account on the Switch or no authentication none Because XTACACS and TACACS do not support the enable function the user must create a special account on the server host which has the username enable and a password configured by the administrator that will support the enable function This function becomes inoperable when the authentication policy is disabled Parameters None Restrictions Only administrator level users can issue this command Example usage To enable administrator privileges on the Switch DES 6500 4 enable admin Password DES 6500 4 config admin local_enable Purpose Used to configure the local enable password for administrator level privileges Syntax config admin local_enable lt password 15 gt Description This command will configure the locally enabled password for the enable admin command When a user chooses the ocal_enable method to promote user level privileges to administrator privileges the user will be prompted to enter the password configured here that is set locally on the Switch 174 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI
405. vel users can issue this command To configure DVMRP configurations of IP interface System Success DES 6500 4 config dvmrp ipif System neighbor_timeout 30 metric 1 probe 5 Command config dvmrp ipif System neighbor_timeout 30 metric 1 probe 5 DES 6500 4 enable dvmrp Purpose Used to enable DVMRP Syntax enable dvmrp Description This command in combination with the disable dvmrp command below to enable and disable DVMRP on the Switch Parameters None Restrictions Only administrator level users can issue this command Example Usage To enable DVMRP DES 6500 4 enable dvmrp Command enable dvmrp Success DES 6500 4 disable Purpose Syntax Description Parameters Restrictions dvmrp Used to disable DVMRP disable dvmrp This command in combination with the enable dvmrp command above to enable and disable DVMRP on the Switch None Only administrator level users can issue this command 291 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual Example Usage To disable DVMRP DES 6500 4 disable dvmrp Command disable dvmrp Success DES 6500 4 show dvmrp routing_table Purpose Used to display the current DVMRP routing table Syntax show dvmrp routing table ipaddress lt network_address gt Description The command is used to display the current DVMRP routing table Parameters ipaddress lt network_address gt
406. ver_timer 0 lt sec 60 1000000 gt config stp ports lt portlist gt externalCost auto lt value 1 200000000 gt hellotime lt value 1 10 gt migrate yes no edge true false p2p true false auto state enable disable lbd enable disable create stp instance_id lt value 1 15 gt config stp instance _id lt value 1 15 gt add_vlan remove_vlan lt vidlist gt delete stp instance_id lt value 1 15 gt 75 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual Command Parameters config stp priority lt value 0 61440 gt instance_id lt value 0 15 gt config stp revision_level lt int 0 65535 gt name lt string gt mst_config_id 200000000 priority lt value 0 240 gt Each command is listed in detail in the following sections enable stp Purpose Used to globally enable STP on the Switch Syntax enable stp Description This command allows the Spanning Tree Protocol to be globally enabled on the Switch Parameters None Restrictions Only administrator level users can issue this command Example usage To enable STP globally on the Switch DES 6500 4 enable stp Command enable stp Success DES 6500 4 disable stp Purpose Used to globally disable STP on the Switch Syntax disable stp Description This command allows the Spanning Tree Protocol to be globally disabled on the Switch Parameters None Restrictions O
407. well which will provide packet count samplings from the Switch s chip to determine if a Packet Storm is occurring threshold lt value 0 2047 gt The upper threshold at which the specified traffic control is switched on The lt va ue gt is the number of broadcast multicast dlf packets in kilopackets per second Kpps received by the Switch that will trigger the storm traffic control measures countdown The countdown timer is set to determine the amount of time in minutes that the Switch will wait before shutting down the port that is experiencing a traffic storm This parameter is only useful for ports configured as shutdown in the action field of this command and therefore will not operate for Hardware based Traffic Control implementations e value 0 O is the default setting for this field and 0 will denote that the port will never shutdown value 5 30 Select a time from 5 to 30 minutes that the Switch will wait before shutting down Once this time expires 98 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual config traffic control and the port is still experiencing packet storms the port will be placed in shutdown forever mode and can only be manually recovered using the config traffic control_recover command time_interval The Interval will set the time between Multicast and Broadcast packet counts sent from the Switch s chip to the Traffic Control function These packet counts
408. witch will wait for the server host to reply to an authentication request The default value is 5 seconds retransmit lt int 1 255 gt Enter the value in the retransmit field to change how many times the device will resend an authentication request when the TACACS XTACACS or RADIUS server does not respond This field is inoperable for the TACACS protocol Only administrator level users can issue this command To configure a TACACS authentication server host with port number 4321 a timeout value of 12 seconds and a retransmit count of 4 DES 6500 4 config authen server_host 10 1 1 121 protocol tacacs port 4321 timeout 12 retransmit 4 Command config authen server_host 10 1 1 121 protocol tacacs port 4321 timeout 12 retransmit 4 Success DES 6500 4 delete authen server_host Purpose Syntax Description Parameters Used to delete a user defined authentication server host delete authen server_host lt ipaddr gt protocol tacacs xtacacs tacacs radius This command is used to delete a user defined authentication server host previously created on the Switch server_host lt ijpaddr gt The IP address of the remote server host to delete protocol The protocol used by the server host to delete The user may choose one of the following 167 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual delete authen server_host tacacs Enter this parameter if the serv
409. word This parameter should be chosen to use an administrator defined password for authentication Upon entry of this command the Switch will prompt the user for a password and then to retype the password for confirmation Publickey This parameter should be chosen to use the publickey on a SSH server for authentication None This parameter should be chosen to employ no security authentication Restrictions Only administrator level users can issue this command Example usage To configure the SSH user 180 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual DES 6500 4 config ssh user Trinity authmode Password Command config ssh user Trinity authmode Password Success DES 6500 4 show ssh user authmode Purpose Used to display the SSH user setting Syntax show ssh user authmode Description This command allows you to display the current SSH user setting Parameters None Restrictions None Example usage To display the SSH user DES 6500 4 show ssh user authmode Command show ssh user authmode Current Accounts UserName AuthMode HostIP HostName Trinity Publickey DES 6500 4 oo Note To configure the SSH user the administrator must create a user account please see the section of this manual entitled Basic Switch ij account on the Switch For information concerning configuring a user i Commands and then the command create user account
410. x Description Parameters Restrictions Example usage Used to disable a previously entered port mirroring configuration disable mirror This command combined with the enable mirror command above allows you to enter a port mirroring configuration into the Switch and then turn the port mirroring on and off without having to modify the port mirroring configuration None Only administrator level users can issue this command To disable mirroring configurations Success DES 6500 4 DES 6500 4 disable mirror Command disable mirror 116 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual show mirror Purpose Used to show the current port mirroring configuration on the Switch Syntax show mirror Description This command displays the current port mirroring configuration on the Switch Parameters None Restrictions None Example usage To display mirroring configuration DES 6500 4 show mirror Command show mirror Current Settings Mirror Status Enabled Target Port 1 9 Mirrored Port RX TX 1 1 1 5 DES 6500 4 117 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual VLAN COMMANDS The xStack DES 6500 incorporates protocol based VLANs This standard defined by the IEEE 802 1v standard maps packets to protocol defined VLANs by examining the type octet within the packet header to discover the type of protocol assoc
411. xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual enable ssh Purpose Used to enable SSH Syntax enable ssh Description This command is used to enable SSH on the Switch Parameters None Restrictions Only administrator level users can issue this command Usage Example To enable SSH DES 6500 4 enable ssh Command enable ssh Success DES 6500 4 disable ssh Purpose Used to disable SSH Syntax disable ssh Description This command is used to disable SSH on the Switch Parameters None Restrictions Only administrator level users can issue this command Usage Example To disable SSH DES 6500 4 disable ssh Command disable ssh Success DES 6500 4 config ssh authmode Purpose Used to configure the SSH authentication mode setting Syntax config ssh authmode password publickey hostbased enable disable Description This command will allow you to configure the SSH authentication mode for users attempting to access the Switch 177 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual config ssh authmode Parameters password This parameter may be chosen if the administrator wishes to use a locally configured password for authentication on the Switch publickey This parameter may be chosen if the administrator wishes to use a publickey configuration set on a SSH server for authentication hostbased This param
412. xpressed numerically 255 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual config dst e_date Configure the specific date day of the month to begin DST e lt end_date 1 31 gt The end date is expressed numerically offset 30 60 90 120 Indicates number of minutes to add or to subtract during the summertime The possible offset times are 30 60 90 120 The default value is 60 Restrictions Only administrator level users can issue this command Example usage To configure daylight savings time on the Switch DES 6500 4 config dst repeating s_week 2 s_day tue s_mth 4 s_time 15 00 e_week 2 e_day wed e_mth 10 e_time 15 30 offset 30 Command config dst repeating s_week 2 s_day tue s_mth 4 s_time 15 00 e_week 2 e_day wed e_mth 10 e_time 15 30 offset 30 Success DES 6500 4 show time Purpose Used to display the current time settings and status Syntax show time Description This will display system time and date configuration as well as display current system time Parameters None Restrictions Only administrator level users can issue this command Example usage To show the time currently set on the Switch s System clock DES 6500 4 show time Command show time Current Time Source System Clock Boot Time 2 Jul 2003 10 59 59 Current Time 10 Jul 2003 01 43 41 Time Zone GMT 02 30 Daylight Saving Time Repeating Offset in Minutes 6
413. y hops lt value 1 16 gt time lt sec 0 65535 gt This command is used to configure the DHCP BOOTP relay feature hops lt value 1 16 gt Specifies the maximum number of relay agent hops that the DHCP BOOTP packets can cross The range is from 1 to 16 hops with a default setting of 4 time lt sec 0 65535 gt The minimum time in seconds in which the Switch must relay the DHCP BOOTP packet If this timer expires the Switch will drop the DHCP BOOTP packet The default setting is 0 Only administrator level users can issue this command To config DHCP relay DES 6500 4 config dhcp_relay hops 2 time 23 Command config dhcp_relay hops 2 time 23 Success DES 6500 4 277 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual config dhcp_relay add ipif Purpose Used to add an IP destination address to the Switch s DHCP BOOTP relay table Syntax config dhcp_relay add ipif lt ipif_name 12 gt lt ipaddr gt Description This command adds an IP address as a destination to which to forward relay DHCP BOOTP relay packets Parameters lt ipif_name 12 gt The name of the IP interface to be added to the Switch s DHCP BOOTP relay table lt ipaddr gt The DHCP server s IP address Restrictions Only administrator level users can issue this command Example usage To add an IP destination to the DHCP relay table DES 6500 4 config dhcp_relay add ipif System 10 58 44 6 Command conf
414. y administrator level users can issue this command Example usage To configure the command prompt DES 6500 4 config command prompt Trinity Command config command prompt Trinity Success Trinity config greeting_message Purpose Used to configure the greeting message or banner for the opening screen of the Command Line Interface Syntax config greeting_message default Description This command is used to configure the greeting message or login banner for the opening screen of the CLI Parameters default Adding this parameter will return the greeting command to its original factory default configuration Restrictions The reset command will not alter the configured greeting message yet the reset system command will return the greeting message to its original factory default setting The maximum character capacity for the greeting banned is 6 lines and 80 characters per line Entering Ctrl W will save the current configured banner to the DRAM only To enter it into the FLASH memory the user must enter the save command Only administrator level users can issue this command Example usage To configure the greeting message 23 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual DES 6500 4 config greeting_message Command config greeting message Greeting Messages Editor DES 6500 Chassis Ethernet Switch Command Line Interface Firmware Build 3 00 B29 Copyright C
415. y only to packets that have this value in their Type of Service DiffServ code point DSCP field in their IP packet header icmp Specifies that the Switch will examine the Internet Control Message Protocol ICMP field within each packet e type lt value 0 255 gt Specifies that the access profile will apply to this ICMP type value e code lt value 0 255 gt Specifies that the access profile will apply to this ICMP code igmp Specifies that the Switch will examine the Internet Group Management Protocol IGMP field within each packet e type lt value 0 255 gt Specifies that the access profile will apply to packets that have this IGMP type value tcp Specifies that the Switch will examine the Transmission Control Protocol TCP field within each packet e src_port lt value 0 65535 gt Specifies that the access profile will apply only to packets that have this TCP source port in their TCP header dst_port lt value 0 65535 gt Specifies that the access profile will apply only to packets that have this TCP destination port in their TCP header protocol_id lt value 0 255 gt Specifies that the switch will examine the Protocol field in each packet and if this field contains the value entered here apply the following rules udp Specifies that the Switch will examine the Transmission Control Protocol TCP field within each packet e src_port lt value 0 65535 gt Specifies that the ac
416. ynamic 1 default 00 00 74 60 72 2D 1 12 Dynamic 1 default 00 00 81 05 00 80 1 12 Dynamic 1 default 00 00 81 05 02 00 1 12 Dynamic 1 default 00 00 81 48 70 01 1 12 Dynamic 1 default 00 00 E2 4F 57 03 1 12 Dynamic 1 default 00 00 E2 61 53 18 1 12 Dynamic 1 default 00 00 E2 6B BC F6 1 12 Dynamic 1 default 00 00 E2 7F 6B 53 1 12 Dynamic 1 default 00 00 E2 82 7D 90 1 12 Dynamic 1 default 00 00 F8 7C 1C 29 1 12 Dynamic 1 default 00 01 02 03 04 00 CPU Self 1 default 00 01 02 03 04 05 1 12 Dynamic 1 default 00 01 30 10 2C C7 1 12 Dynamic 1 default 00 01 30 FA 5F 00 1 12 Dynamic 1 default 00 02 3F 63 DD 68 1 12 Dynamic CTRL C ESC q Quit SPACE n Next Page ENTER Next Entry a All show ipfdb Purpose Used to display the current IP address forwarding database table Syntax show ipfdb lt ipaddr gt Description This command will display the current contents of the Switch s IP forwarding database Parameters lt ipaddr gt The user may enter an IP address to view the table by Restrictions None Example usage To view the IP forwarding database table 95 xStack DES 6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual DES 6500 4 show ipfdb Command show ipfdb Interface IP Address Port Learned 13 Dynamic 13 Dynamic 13 Dynamic 13 Dynamic 13 Dynamic 13 Dynamic 13 Dynamic 13 Dynamic d 2 2 2 2 2 2 S M A _ ow System 10 0 58 4 13 Dynamic System 10 0 85 168 Dynamic Syste
417. ype 2 uses the metric entered in the Metric field without change This field applies only when the destination field is OSPF metric lt value 0 16777214 gt Allows the entry of an OSPF interface cost This is analogous to a Hop Count in the RIP routing protocol Only administrator level users can issue this command Routing information source RIP the Static Route table and the Local interface routing information Routing information will be redistributed to OSPF The following table lists the allowed values for the routing metrics and the types or forms of the routing information that will be redistributed Route Source Metric Metric Type RIP O to 16777214 mettype 1 mettype 2 Static O to 16777214 mettype 1 mettype 2 Local O to 16777214 mettype 1 mettype 2 Allowed Metric Type combinations are mettype 1 or mettype 2 The metric value 0 above will be redistributed in OSPF as the metric 20 Example Usage To configure route redistributions DES 6500 4 config route redistribute dst ospf src all metric 2 Command config route redistribute dst ospf src all metric 2 Success DES 6500 4 config route redistribute dst rip src Purpose Syntax Description Used configure route redistribution settings for the exchange of RIP routes to OSPF routes on the Switch config route redistribute dst rip src local static ospf all internal external type_1 type_2 i

D-Link TM DES-6500 User's Manual

Contents

Download Pdf Manuals

Related Search

Related Contents