Page 1: Layer 2 Switch
DES-3550 Layer 2 Switch Command Line Interface Reference Manual Release 2 Second Edition (June 2004) 651ES3550025 Printed In Taiwan RECYCLABLE...
Page 2: Wichtige Sicherheitshinweise
CAUSE BEYOND THE RANGE OF THE INTENDED USE, OR BY ACCIDENT, FIRE, LIGHTNING OR OTHER HAZARD. LIMITATION OF LIABILITY IN NO EVENT WILL D-LINK BE LIABLE FOR ANY DAMAGES, INCLUDING LOSS OF DATA, LOSS OF PROFITS, COST OF COVER OR OTHER INCIDENTAL, CONSEQUENTIAL OR INDIRECT DAMAGES ARISING OUT THE INSTALLATION, MAINTENANCE, USE, PERFORMANCE, FAILURE OR INTERRUPTION OF A D- LINK PRODUCT, HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY.
Page 3: Limited Warranty
Registration Card. If a Registration Card for the product in question has not been returned to a D-Link office, then a proof of purchase (such as a copy of the dated purchase invoice) must be provided when requesting warranty service.
Page 4 Hardware. Repaired or replacement Hardware will be warranted for the remainder of the original Warranty Period from the date of original retail purchase. If a material defect is incapable of correction, or if D-Link determines in its sole discretion that it is not practical to repair or replace the defective Hardware, the price paid by the original purchaser for the defective Hardware will be refunded by D-Link upon return to D-Link of the defective Hardware.
Page 5: Copyright Statement
D-Link may reject or return any product that is not packaged and shipped in strict compliance with the foregoing requirements, or for which an RMA number is not visible from the outside of the package. The product owner agrees to pay D-Link’s reasonable handling and return shipping charges for any product that is not packaged and shipped in accordance with the foregoing requirements, or that is determined by D-Link not to be defective or non-conforming.
Page 6 This is a Class A product. In a domestic environment, this product may cause radio interference in which case the user may be required to take adequate measures.
Page 7: Table Of Contents
Table of Contents Introduction ... 1 Using the Console CLI... 4 Command Syntax ... 8 Basic Switch Commands ... 11 Switch Port Commands ... 23 Port Security Commands... 26 Network Management (SNMP) Commands ... 29 Switch Utility Commands ... 53 Network Monitoring Commands ...
Page 8 D-Link Single IP Management Commands...222 Command History List...234 Technical Specifications ...238...
Page 9: Introduction
Ctrl+r to refresh the console screen. There is no initial username or password. Just press the Enter key twice to display the CLI input cursor − DES-3550:4#. This is the command line where all commands are input.
Page 10 Configuration menu. The IP address for the Switch must be set before it can be managed with the Web-based manager. The Switch IP address can be automatically set using BOOTP or DHCP protocols, in which case the actual address assigned to the Switch must be known.
Page 11 Figure 1-3. Assigning an IP Address In the above example, the Switch was assigned an IP address of 10.53.13.144 with a subnet mask of 255.0.0.0. The system message Success indicates that the command was executed successfully. The Switch can now be configured and managed via Telnet, SNMP MIB browser and the CLI or via the Web-based management agent using the above IP address to connect to the Switch.
Page 12: Using The Console Cli
The DES-3550 supports a console management interface that allows the user to connect to the Switch’s management agent via a serial port and a terminal or a computer running a terminal emulation program. The console can also be used over the network using the TCP/IP Telnet protocol.
Page 13 DES-3550 Layer 2 Fast Ethernet Switch Figure 2-1. Initial Console Screen Commands are entered at the command prompt, DES-3550:4#. There are a number of helpful features included in the CLI. Entering the ? command will display a list of all of the top-level commands.
Page 14 DES-3550 Layer 2 Fast Ethernet Switch Figure 2-3. Example Command Parameter Help In this case, the command config account was entered with the parameter <username>. The CLI will then prompt you to enter the <username> with the message, Next possible completions:. Every command in the CLI has this feature, and complex commands have several layers of parameter prompting.
Page 15 DES-3550 Layer 2 Fast Ethernet Switch If a command is entered that is unrecognized by the CLI, the top-level commands will be displayed under the Available commands: prompt. Figure 2-5. The Next Available Commands Prompt The top-level commands consist of commands such as show or config. Most of these commands require one or more parameters to narrow the top-level command.
Page 16: Command Syntax
Description Example Command {braces} Purpose DES-3550 Layer 2 Fast Ethernet Switch Encloses a variable or value that must be specified. create ipif <ipif_name> vlan <vlan_name 32> ipaddress <network_address> In the above syntax example, you must supply an IP interface name in the <ipif_name>...
Page 17 DES-3550 Layer 2 Fast Ethernet Switch {braces} reset {[config | system]} Syntax In the above syntax example, you have the option to specify config Description or system. It is not necessary to specify either optional value, however the effect of the system reset is dependent on which, if any, value is specified.
Page 18 DES-3550 Layer 2 Fast Ethernet Switch Refreshes the pages currently displayed. Displays the remaining pages without pausing between pages. Enter Displays the next line or table entry.
Page 19: Basic Switch Commands
The basic switch commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command create account config account show account delete account show session show switch show serial_port config serial_port enable clipaging...
Page 20 Enter a case-sensitive new password:**** Enter the new password again for confirmation:**** Success. DES-3550 Layer 2 Fast Ethernet Switch Only Administrator-level users can issue this command. Usernames can be between 1 and 15 characters. Passwords can be between 0 and 15 characters.
Page 21 Example usage: To delete the user account “System”: DES-3550:4#delete account System Command: delete account System DES-3550 Layer 2 Fast Ethernet Switch Used to display user accounts show account Displays all user accounts created on the Switch. Up to 8 user accounts can exist at one time.
Page 22 Restrictions Example usage: To display the Switch’s information: DES-3550:4#show switch Command: show switch DES-3550 Layer 2 Fast Ethernet Switch Success. DES-3550:4# Used to display a list of currently logged-in users. show session This command displays a list of all the users that are logged-in at the time the command is issued.
Page 23 Purpose Syntax Description Parameters Restrictions Example usage: To display the serial port setting: DES-3550 Layer 2 Fast Ethernet Switch : DES-3550 Fast Ethernet Switch : 1000Base-T + 1000Base-T : 00-01-02-03-04-00 : 10.41.44.22 (Manual) : default : 255.0.0.0 : 0.0.0.0 : Build 2.00-B07...
Page 24 15_minutes − The console will log out the current user if there is no user input for 15 minutes. Restrictions Only administrator-level users can issue this command. Example usage: To configure baud rate: DES-3550 Layer 2 Fast Ethernet Switch : 9600 : None : 10 mins...
Page 25 Description Parameters Restrictions Example usage: DES-3550 Layer 2 Fast Ethernet Switch Used to pause the scrolling of the console screen when the show command displays more than one page. enable clipaging This command is used when issuing the show command which causes the console screen to rapidly scroll through several pages.
Page 26 <tcp_port_number 1-65535> This command is used to enable the Telnet protocol on the Switch. The user can specify the TCP or UDP port number the Switch will use to listen for Telnet requests. <tcp_port_number 1-65535> − The TCP port number. TCP ports are numbered between 1 and 65535.
Page 27 Syntax Description Parameters Restrictions Example usage: DES-3550 Layer 2 Fast Ethernet Switch Used to enable the HTTP-based management software on the Switch. enable web <tcp_port_number 1-65535> This command is used to enable the Web-based management software on the Switch. The user can specify the TCP port number the Switch will use to listen for Telnet requests.
Page 28 Description Parameters Restrictions Example usage: To restart the Switch: DES-3550 Layer 2 Fast Ethernet Switch Used to save changes in the Switch’s configuration to non-volatile RAM. save This command is used to enter the current switch configuration into non-volatile RAM. The saved switch configuration will be loaded into the Switch’s memory each time the Switch is restarted.
Page 29 Purpose Syntax Description DES-3550 Layer 2 Fast Ethernet Switch Used to reset the Switch to the factory default settings. reset {[config | system]} This command is used to restore the Switch’s configuration to the default settings assigned from the factory.
Page 30 Parameters Restrictions Example usage: To terminate the current user’s console session: DES-3550:4#logout DES-3550 Layer 2 Fast Ethernet Switch None. None. Used to log out a user from the Switch’s console. logout This command terminates the current user’s session on the Switch’s console.
Page 31: Switch Port Commands
The switch port commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command config ports show ports Each command is listed, in detail, in the following sections. config ports Purpose Used to configure the Switch’s Ethernet port settings.
Page 32 To configure the speed of port 3 to be 10 Mbps, full duplex, with learning and state enabled: DES-3550:4#config ports 1-3 speed 10_full learning enable state enable Command: config ports 1-3 speed 10_full learning enable state enable Success. DES-3550:4# show ports...
Page 33 Enabled Auto/Disabled Enabled Auto/Disabled CTRL+C ESC q Quit SPACE n Next Page p Previous Page r Refresh Example usage: To display the configuration of all ports on a standalone switch, with description: DES-3550:4#show ports description Command: show ports description Port Port...
Page 34: Port Security Commands
The Switch’s port security commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command config port_security ports delete port_security entry clear port_security_entry show port_security Each command is listed, in detail, in the following sections.
Page 35 Example usage: To configure the port security: DES-3550:4#config port_security ports 1-5 admin_state enable max_learning_addr 5 lock_address_mode DeleteOnReset Command: config port_security ports 1-5 admin_state enable max_learning_addr 5 lock_address_mode DeleteOnReset Success. DES-3550:4# delete port_security_entry Purpose Syntax Description Parameters Restrictions Example usage: To delete a port security entry:...
Page 36 Disabled Disabled CTRL+C ESC q Quit SPACE n Next Page p Previous Page r Refresh DES-3550 Layer 2 Fast Ethernet Switch clear port_security_entry ports <portlist> This command is used to clear MAC address entries which were learned by the Switch by a specified port. This command only relates to the port security function.
Page 37: Network Management (Snmp) Commands
The DES-3550 supports the Simple Network Management Protocol (SNMP) versions 1, 2c, and 3. You can specify which version of the SNMP you want to use to monitor and control the Switch. The three versions of SNMP vary in the level of security provided between the management station and the network device.
Page 38 Each command is listed, in detail, in the following sections. create snmp user Purpose Syntax DES-3550 Layer 2 Fast Ethernet Switch Parameters <snmp_engineID> <groupname 32> {v1 | v2c |v3 [noauth_nopriv | auth_nopriv | auth_priv ]} {read_view <view_name 32> | write_view <view_name 32>...
Page 39 DES-3550 Layer 2 Fast Ethernet Switch create snmp user Description The create snmp user command creates a new SNMP user and adds the user to an SNMP group that is also created by this command. SNMP ensures: Message integrity − Ensures that packets have not been tampered with during transit.
Page 40 Restrictions Example usage: To create an SNMP user on the Switch: DES-3550:4#create snmp user dlink default encrypted by_password auth md5 canadian priv none Command: create snmp user dlink default encrypted by_password auth md5 canadian priv none Success.
Page 41 Purpose Syntax Description Parameters DES-3550 Layer 2 Fast Ethernet Switch Used to display information about each SNMP username in the SNMP group username table. show snmp user The show snmp user command displays information about each SNMP username in the SNMP group username table.
Page 42 <view_name 32> − An alphanumeric string of up to 32 characters that identifies the SNMP view to be deleted. all − Specifies that all of the SNMP views on the Switch will be deleted. <oid> − The object ID that identifies an object tree (MIB tree) that will be deleted from the Switch.
Page 43 Total Entries: 11 DES-3550:4# create snmp community Purpose DES-3550 Layer 2 Fast Ethernet Switch Used to display an SNMP view previously created on the Switch. show snmp view {<view_name 32>} The show snmp view command displays an SNMP view previously created on the Switch.
Page 44 Syntax Description Parameters Restrictions Example usage: To create the SNMP community string “dlink:” DES-3550:4#create snmp community dlink view ReadView read_write Command: create snmp community dlink view ReadView read_write Success. DES-3550:4# delete snmp community Purpose DES-3550 Layer 2 Fast Ethernet Switch...
Page 45 Restrictions Example usage: To display the currently entered SNMP community strings: DES-3550 Layer 2 Fast Ethernet Switch delete snmp community <community_string 32> The delete snmp community command is used to remove a previously defined SNMP community string from the Switch.
Page 46 Command: config snmp engineID 0035636666 Success. DES-3550:4# show snmp engineID Purpose Syntax Description DES-3550 Layer 2 Fast Ethernet Switch View Name ReadView CommunityView CommunityView Used to configure a name for the SNMP engine on the Switch. config snmp engineID <snmp_engineID>...
Page 47 Parameters Restrictions Example usage: To display the current name of the SNMP engine on the Switch: DES-3550:4#show snmp engineID Command: show snmp engineID SNMP Engine ID : 0035636666 DES-3550:4# create snmp group Purpose Syntax Description Parameters DES-3550 Layer 2 Fast Ethernet Switch the SNMP engine on the Switch.
Page 48 Restrictions Example usage: To create an SNMP group named “sg1:” DES-3550:4#create snmp group sg1 v3 noauth_nopriv read_view v1 write_view v1 notify_view v1 Command: create snmp group sg1 v3 noauth_nopriv read_view v1 write_view v1 notify_view v1 Success. DES-3550:4#...
Page 49 Success. DES-3550:4# show snmp groups Purpose Used to display the group-names of SNMP groups currently configured on the Switch. The security model, level, and status of each group are also displayed. Syntax show snmp groups Description The show snmp groups command displays the group-names of SNMP groups currently configured on the Switch.
Page 50 DES-3550 Layer 2 Fast Ethernet Switch Notify View Name : NotifyView Security Model : SNMPv3 Security Level : authNoPriv Group Name : Group5 ReadView Name : ReadView WriteView Name : WriteView Notify View Name : NotifyView Security Model : SNMPv3...
Page 51 DES-3550 Layer 2 Fast Ethernet Switch Security Level : NoAuthNoPriv Total Entries: 10 DES-3550:4# create snmp host Purpose Used to create a recipient of SNMP traps generated by the Switch’s SNMP agent. Syntax create snmp host <ipaddr> [v1 | v2c | v3 [noauth_nopriv | auth_nopriv | auth_priv] <auth_string 32>]...
Page 52 Restrictions Example usage: To create an SNMP host to receive SNMP messages: DES-3550:4#create snmp host 10.48.74.100 v3 auth_priv public Command: create snmp host 10.48.74.100 v3 auth_priv public Success. DES-3550:4# delete snmp host Purpose Syntax Description Parameters Restrictions...
Page 53 <ipaddr> The create trusted_host command creates the trusted host. The Switch allows you to specify up to four IP addresses that are allowed to manage the Switch via in-band SNMP or TELNET based management software. These IP addresses must be members of the Management VLAN.
Page 54 Description Parameters DES-3550 Layer 2 Fast Ethernet Switch Used to display a list of trusted hosts entered on the Switch using the create trusted_host command above. show trusted_host <ipaddr> This command is used to display a list of trusted hosts entered on the Switch using the create trusted_host command above.
Page 55 Purpose Syntax Description Parameters DES-3550 Layer 2 Fast Ethernet Switch Only administrator-level users can issue this command. Used to enable SNMP trap support. enable snmp traps The enable snmp traps command is used to enable SNMP trap support on the Switch.
Page 56 Purpose Syntax Description Parameters DES-3550 Layer 2 Fast Ethernet Switch Only administrator-level users can issue this command. Used to show SNMP trap support on the Switch . show snmp traps This command is used to view the SNMP trap support status currently configured on the Switch.
Page 57 DES-3550:4# config snmp system_contact Purpose Syntax Description DES-3550 Layer 2 Fast Ethernet Switch Only administrator-level users can issue this command. Used to disable SNMP authentication trap support. disable snmp authenticate_traps This command is used to disable SNMP authentication support on the Switch.
Page 58 Parameters Restrictions Example usage: To configure the Switch contact to “ DES-3550:4#config snmp system_contact MIS Department II Command: config snmp system_contact MIS Department II Success. DES-3550:4# config snmp system_location Purpose Syntax Description Parameters Restrictions Example usage: To configure the Switch location for “...
Page 59 Syntax Description Parameters Restrictions Example usage: To configure the Switch name for “ DES-3550:4#config snmp system_name DES-3550 Switch Command: config snmp system_name DES-3550 Switch Success. DES-3550:4# enable rmon Purpose Syntax Description Parameters Restrictions Example Usage: To enable RMON:...
Page 60 DES-3550:4#disable rmon Command: disable rmon Success. DES-3550:4# DES-3550 Layer 2 Fast Ethernet Switch Used to disable RMON on the Switch. disable rmon This command is used, in conjunction with the enable rmon command above, to enable and disable remote monitoring (RMON) on the Switch.
Page 61: Switch Utility Commands
This allows a file to be downloaded that will change only the switch parameters explicitly stated in the configuration file. All other switch parameters will remain unchanged. The TFTP server must be on the same IP subnet as the Switch. Only administrator-level users can issue this command. TILITY...
Page 62 Purpose Syntax Description Parameters Restrictions Example usage: To configure firmware section 1 as a boot up section: DES-3550:4# config firmware section_id 1 boot_up Command: config firmware section_id 1 boot_up Success. DES-3550:4# show firmware information Purpose Syntax DES-3550 Layer 2 Fast Ethernet Switch...
Page 63 − Specifies that the Switch’s current settings will be uploaded to the TFTP server. log − Specifies that the switch history log will be uploaded to the TFTP server. <ipaddr> − The IP address of the TFTP server. The TFTP server must be on the same IP subnet as the Switch.
Page 64 To ping the IP address 10.48.74.121 four times: DES-3550 Layer 2 Fast Ethernet Switch The TFTP server must be on the same IP subnet as the Switch. Only administrator-level users can issue this command. Used to test the connectivity between network devices.
Page 65 DES-3550 Layer 2 Fast Ethernet Switch DES-3550:4#ping 10.48.74.121 times 4 Command: ping 10.48.74.121 Reply from 10.48.74.121, time<10ms Reply from 10.48.74.121, time<10ms Reply from 10.48.74.121, time<10ms Reply from 10.48.74.121, time<10ms Ping statistics for 10.48.74.121 Packets: Sent =4, Received =4, Lost =0...
Page 66: Network Monitoring Commands
Purpose Syntax Description Parameters Restrictions Example usage: To display the packets analysis for port 7 of module 2: DES-3550:4#show packet port 2 DES-3550 Layer 2 Fast Ethernet Switch ETWORK Parameters <portlist> <portlist> [cpu | ports {<portlist>}] ports <portlist> index <value>...
Page 67 Port number : 1 CRC Error Undersize Oversize Fragment Jabber Drop Pkts DES-3550 Layer 2 Fast Ethernet Switch Frame Counts Frame/sec ---------- 3275 3686 Used to display the error statistics for a range of ports. show error ports <portlist> This command will display all of the packet error statistics collected and logged by the Switch for a given port list.
Page 68 Command: show utilization ports Port TX/sec RX/sec Util ------ ---------- ---------- ---- DES-3550 Layer 2 Fast Ethernet Switch Used to display real-time port and cpu utilization statistics. show utilization [cpu | ports {<portlist>}] This command will display the real-time port and cpu utilization statistics for the Switch.
Page 69 DES-3550:4#clear counters ports 2-9 Command: clear counters ports 2-9 Success. DES-3550:4# DES-3550 Layer 2 Fast Ethernet Switch One minute - 25% Used to clear the Switch’s statistics counters. clear counters {ports <portlist>} This command will clear the counters used by the Switch to compile statistics.
Page 70 ------------------- 00000 days 00:01:09 00000 days 00:00:14 00000 days 00:00:06 00000 days 00:00:01 DES-3550 Layer 2 Fast Ethernet Switch Used to clear the Switch’s history log. clear log This command will clear the Switch’s history log. None. Only administrator-level users can issue this command.
Page 71 Parameters Restrictions Example usage: To disable the syslog function on the Switch: DES-3550 Layer 2 Fast Ethernet Switch Configuration saved to flash (Username: Anonymous) Used to enable the system log to be sent to a remote host. enable syslog The enable syslog command enables the system log to be sent to a remote host.
Page 72 DES-3550:4# create syslog host Purpose Syntax Description Parameters DES-3550 Layer 2 Fast Ethernet Switch Used to display the syslog protocol status as enabled or disabled. show syslog The show syslog command displays the syslog status as enabled or disabled. None.
Page 73 DES-3550 Layer 2 Fast Ethernet Switch create syslog host Bold font indicates that the corresponding severity level is currently supported on the Switch. Numerical Code Emergency: system is unusable Alert: action must be taken immediately Critical: critical conditions Error: error conditions...
Page 74 DES-3550 Layer 2 Fast Ethernet Switch create syslog host clock daemon security|authorization messages FTP daemon NTP subsystem log audit log alert clock daemon local use 0 (local0) local use 1 (local1) local use 2 (local2) local use 3 (local3) local use 4 (local4)
Page 75 Restrictions Example usage: To create syslog host: DES-3550:4#create syslog host 1 severity all facility local0 Command: create syslog host 1 severity all facility local0 Success. DES-3550:4# config syslog host Purpose Syntax Description Parameters DES-3550 Layer 2 Fast Ethernet Switch state [enable | disable] −...
Page 76 This corresponds to number 4 from the list above. all − Specifies that all of the currently supported syslog messages that are generated by the Switch will be sent to the remote host. facility − Some of the operating system daemons and processes have been assigned Facility values.
Page 77 DES-3550 Layer 2 Fast Ethernet Switch config syslog host log audit log alert clock daemon local use 0 (local0) local use 1 (local1) local use 2 (local2) local use 3 (local3) local use 4 (local4) local use 5 (local5) local use 6 (local6) local use 7 (local7) local0 −...
Page 78 Example usage: To configure a syslog host: DES-3550:4#config syslog host 1 severity all facility local0 Command: config syslog host all severity all facility local0 Success. DES-3550:4# Example usage: To configure a syslog host for all hosts: DES-3550:4#config syslog host all severity all facility local0 Command: config syslog host all severity all facility local0 Success.
Page 79 10.40.2.3 10.21.13.1 Total Entries : 3 DES-3550:4# DES-3550 Layer 2 Fast Ethernet Switch Used to display the syslog hosts currently configured on the Switch. show syslog host {<index 1-4>} The show syslog host command is used to display the syslog hosts that are currently configured on the Switch.
Page 80: Multiple Spanning Tree Protocol (Mstp) Commands
VLANs and their respective spanning trees. Each switch utilizing the MSTP on a network will have a single MSTP configuration that will have the following three attributes: a) A configuration name defined by an alphanumeric string of up to 32 characters (defined in the config stp mst_config_id command as name <string>).
Page 81 Purpose Syntax Description Parameters Restrictions Example usage: DES-3550 Layer 2 Fast Ethernet Switch Parameters {revision_level <int 0-65535> | name <string>} <portlist> instance_id <value 0-4> {internalCost [auto | value 1- 200000000] | priority <value 0-240>} {<portlist>} {<value 0-4>} Used to globally enable STP on the Switch.
Page 82 Purpose Syntax Description DES-3550 Layer 2 Fast Ethernet Switch Used to globally set the version of STP on the Switch. config stp version [mstp | rstp | stp] This command allows the user to choose the version of the spanning tree to be implemented on the Switch.
Page 83 Parameters Restrictions Example usage: To configure STP with maxage 18 and maxhops of 15: DES-3550:4#config stp maxage 18 maxhops 15 Command: config stp maxage 18 maxhops 15 Success. DES-3550 Layer 2 Fast Ethernet Switch maxage <value 6-40> − This value may be set to ensure that old...
Page 84 DES-3550 Layer 2 Fast Ethernet Switch DES-3550:4# config stp ports Purpose Used to setup STP on the port level. Syntax config stp ports <portlist> {externalCost [auto | <value 1- 200000000>] | hellotime <value 1-10> | migrate [yes | no] edge...
Page 85 To configure STP with path cost 19, hellotime set to 5 seconds, migration enable, and state enable for ports 1-5 of module 1. DES-3550:4#config stp ports 1-5 externalCost 19 hellotime 5 migrate yes state enable Command: config stp ports 1-5 externalCost 19 hellotime 5 migrate yes state enable Success.
Page 86 Description Parameters Restrictions Example usage: To configure instance id 2 to add VID 10: DES-3550:4#config stp instance_id 2 add_vlan 10 Command : config stp instance_id 2 add_vlan 10 Success. DES-3550:4# Example usage: To remove VID 10 from instance id 2: DES-3550 Layer 2 Fast Ethernet Switch Used to add or delete an STP instance ID.
Page 87 DES-3550:4#config stp instance_id 2 remove_vlan 10 Command : config stp instance_id 2 remove_vlan 10 Success. DES-3550:4# delete stp instance_id Purpose Syntax Description Parameters Restrictions Example usage: To delete STP instance ID 2 from the Switch. DES-3550:4#delete stp instance_id 2 Command: delete stp instance_id 2 Success.
Page 88 Description Parameters Restrictions Example usage: To configure the MSTP region of the Switch with revision_level 10 and the name “Trinity”: DES-3550:4#config stp mst_config_id revision_level 10 name Trinity Command : config stp mst_config_id revision_level 10 name Trinity Success. DES-3550 Layer 2 Fast Ethernet Switch previously configured instance ID of which the user wishes to set the priority value.
Page 89 Example usage: To designate ports 1 through 5, with instance id 2, to have an auto internalCost and a priority of 16: DES-3550:4#config stp mst_config_id ports 1-5 instance_id 2 internalCost auto priority 16 Command : config stp mst_config_id ports 1-5 instance_id 2...
Page 90 Hello Time Forward Delay Max Age TX Hold Count Forwarding BPDU DES-3550:4# DES-3550 Layer 2 Fast Ethernet Switch Used to display the Switch’s current STP configuration. show stp This command displays the Switch’s current STP configuration. None None. : Enabled...
Page 91 External PathCost : Auto/200000 , Edge Port : No /No , P2P : Auto /Yes Msti Designated Bridge ----- ------------------ 8000/0050BA7120D6 8001/0053131A3324 CTRL+C ESC q Quit SPACE n Next Page p Previous Page r Refresh DES-3550 Layer 2 Fast Ethernet Switch : Enabled : MSTP : 20 : 15 : 20 : Enabled Used to display the Switch’s current instance_id configuration.
Page 92 Purpose Syntax Description Parameters Restrictions Example usage: To display the STP instance configuration for instance 0 (the internal CIST) on the Switch: DES-3550:4#show stp instance 0 Command: show stp instance 0 STP Instance Settings --------------------------- Instance Type Instance Status...
Page 93 Configuration Name : [00:53:13:1A:33:24 ] MSTI ID Vid list ------- ----------- CIST 2-4094 DES-3550:4# DES-3550 Layer 2 Fast Ethernet Switch Used to display the MSTP configuration identification. show stp mst_config_id This command displays the Switch’s current MSTP configuration identification. None None Revision Level :0...
Page 94: Forwarding Database Commands
Purpose Syntax Description Parameters Restrictions Example usage: To create a unicast MAC FDB entry: DES-3550 Layer 2 Fast Ethernet Switch ORWARDING Parameters <vlan_name 32> <macaddr> port <port> <vlan_name 32> <macaddr> <vlan_name 32> <macaddr> [add | delete] <portlist> <sec 10-1000000> <vlan_name 32> <macaddr>...
Page 95 DES-3550:4#create fdb default 00-00-00-00-01-02 port 5 Command: create fdb default 00-00-00-00-01-02 port 5 Success. DES-3550:4# create multicast_fdb Purpose Syntax Description Parameters Restrictions Example usage: To create multicast MAC forwarding: DES-3550:4#create multicast_fdb default 01-00-00-00-00-01 Command: create multicast_fdb default 01-00-00-00-00-01 Success. DES-3550:4#...
Page 96 Restrictions Example usage: To add multicast MAC forwarding: DES-3550:4#config multicast_fdb default 01-00-00-00-00-01 add 1-5 Command: config multicast_fdb default 01-00-00-00-00-01 add 1-1-5 Success. DES-3550:4# config fdb aging_time Purpose Syntax Description Parameters Restrictions Example usage: To set the fdb aging time: DES-3550 Layer 2 Fast Ethernet Switch forwarding table.
Page 97 Command: delete fdb default 01-00-00-00-01-02 Success. DES-3550:4# DES-3550 Layer 2 Fast Ethernet Switch Used to delete an entry to the Switch’s forwarding database. delete fdb <vlan_name 32> <macaddr> This command is used to delete a previous entry to the Switch’s MAC address forwarding database.
Page 98 Parameters Restrictions Example usage: To display multicast MAC address table: DES-3550 Layer 2 Fast Ethernet Switch Used to clear the Switch’s forwarding database of all dynamically learned MAC addresses. clear fdb [vlan <vlan_name 32> | port <port> | all] This command is used to clear dynamically learned entries to the Switch’s forwarding database.
Page 99 To display unicast MAC address table: DES-3550:4#show fdb Command: show fdb Unicast MAC Address Aging Time = 300 VID VLAN Name DES-3550 Layer 2 Fast Ethernet Switch : default : 01-00-5E-00-00-00 : 1-5 : Static Used to display the current unicast MAC address forwarding database.
Page 100 Example usage: To configure the multicast filtering mode to forward all groups on ports 1 through 4. DES-3550:4#config multicast port_filtering_mode 1-4 forward_all_groups Command: config multicast port_filtering_mode 1-4 forward_all_groups Success. DES-3550 Layer 2 Fast Ethernet Switch ----------------- 00-00-39-34-66-9A 00-00-51-43-70-00 00-00-5E-00-01-01 00-00-74-60-72-2D 00-00-81-05-00-80...
Page 101 DES-3550 Layer 2 Fast Ethernet Switch Used to show the multicast packet filtering mode on a port per port basis. show multicast port_filtering_mode {<portlist>} This command will display the current multicast packet filtering mode for specified ports on the Switch.
Page 102 DES-3550 Layer 2 Fast Ethernet Switch CTRL+C ESC q Quit SPACE n Next Page p Previous Page r Refresh...
Page 103: Broadcast Storm Control Commands
Syntax Description Parameters Restrictions Example usage: To configure traffic control and enable broadcast storm control system wide: DES-3550:4#config traffic control all broadcast enable Command: config traffic control all broadcast enable Success. DES-3550 Layer 2 Fast Ethernet Switch ROADCAST TORM Parameters [<storm_grouplist>...
Page 104 2 [ 9-18 ] 3 [ 17-24] Total Entries: 5 DES-3550:4# DES-3550 Layer 2 Fast Ethernet Switch Used to display current traffic control settings. show traffic control {group_list <storm_grouplist>} This command displays the current storm traffic control configuration on the Switch.
Page 105: Qos Commands
The DES-3550 switch supports 802.1p priority queuing. The Switch has 4 priority queues. These priority queues are numbered from 3 (Class 3) — the highest priority queue — to 0 (Class 0) — the lowest priority queue. The eight priority tags specified in IEEE 802.1p (p0 to p7) are mapped to the Switch’s priority queues as follows:...
Page 106 Syntax Description Parameters Restrictions DES-3550 Layer 2 Fast Ethernet Switch bandwidth on a port by-port basis. <portlist> − Specifies a port or range of ports to be configured. rx_rate − Specifies that one of the parameters below (no_limit or <value 1-1000>) will be applied to the rate at which the above specified ports will be allowed to receive packets no_limit −...
Page 107 DES-3550:4# config scheduling Purpose Syntax Description DES-3550 Layer 2 Fast Ethernet Switch ---------------------- Used to configure the traffic scheduling mechanism for each COS queue. config scheduling <class_id 0-3> [max_packet <value 0-255> | max_latency <value 0-255>] The Switch contains 4 hardware priority queues. Incoming packets must be mapped to one of these four queues.
Page 108 Parameters Restrictions Example usage: To configure the traffic scheduling mechanism for each queue: DES-3550:4# config scheduling 0 max_packet 100 max_latency 150 Command: config scheduling 0 max_packet 100 max_latency 150 Success. DES-3550:4# DES-3550 Layer 2 Fast Ethernet Switch number of packets a given hardware priority queue can transmit before allowing the next lowest hardware priority queue to begin transmitting its packets.
Page 109 DES-3550:4# config 802.1p user_priority Purpose Syntax Description DES-3550 Layer 2 Fast Ethernet Switch Used to display the currently configured traffic scheduling on the Switch. show scheduling The show scheduling command will display the current traffic scheduling mechanisms in use on the Switch.
Page 110 802.1p user_priority Restrictions Example usage: To configure 802.1 user priority on the Switch: DES-3550:4# config 802.1p user_priority 1 3 Command: config 802.1p user_priority 1 3 Success. DES-3550:4# show 802.1p user_priority Purpose Syntax Description DES-3550 Layer 2 Fast Ethernet Switch This mapping scheme is based upon recommendations contained in IEEE 802.1D.
Page 111 <portlist> − Specifies a port or range of ports to be configured. all − Specifies that the command applies to all ports on the Switch. <priority 0-7> − The priority value you want to assign to untagged packets received by the Switch or a range of ports on the Switch.
Page 112 Priority ------- ----------- CTRL+C ESC q DES-3550 Layer 2 Fast Ethernet Switch Used to display the currently configured 802.1p priority value that will be assigned to an incoming, untagged packet before being forwarded to its destination. show 802.1p default_priority {<portlist>} The show 802.1p default_priority command displays the currently...
Page 113: Port Mirroring Commands
Parameters <port> [add | delete] source ports <portlist> [rx | tx | both] Used to configure a mirror port − source port pair on the Switch. Traffic from any source port to a target port can be mirrored for real-time analysis. A logic analyzer or an RMON proble can then be attached to study the traffic crossing the source port in a completely obtrusive manner.
Page 114 Restrictions Example usage: To add the mirroring ports: DES-3550:4# config mirror port 1 add source ports 2-7 both Command: config mirror port 1 add source ports 2-7 both Success. DES-3550:4# Example usage: To delete the mirroring ports:...
Page 115 Parameters Restrictions Example usage: To display mirroring configuration: DES-3550 Layer 2 Fast Ethernet Switch Used to disable a previously entered port mirroring configuration. disable mirror This command, combined with the enable mirror command above, allows you to enter a port mirroring configuration into the Switch, and then turn the port mirroring on and off without having to modify the port mirroring configuration.
Page 116 DES-3550 Layer 2 Fast Ethernet Switch DES-3550:4#show mirror Command: show mirror Current Settings Mirror Status : Enabled Target Port Mirrored Port : RX : TX : 5-7 DES-3550:4#...
Page 117: Vlan Commands
Example usage: To create a VLAN v1, tag 2: DES-3550:4#create vlan v1 tag 2 Command: create vlan v1 tag 2 DES-3550 Layer 2 Fast Ethernet Switch Parameters <vlan_name 32> {tag <vlanid 1-4094> | advertisement} <vlan_name 32> <vlan_name 32> {[add [tagged | untagged | forbidden] | delete] <portlist>...
Page 118 Purpose Syntax Description Parameters DES-3550 Layer 2 Fast Ethernet Switch Used to delete a previously configured VLAN on the Switch. delete vlan <vlan_name 32> This command will delete a previously configured VLAN on the Switch. <vlan_name 32> − The VLAN name of the VLAN you want to delete.
Page 119 Restrictions Example usage: To add 4 through 8 as tagged ports to the VLAN v1: DES-3550:4#config vlan v1 add tagged 4-8 Command: config vlan v1 add tagged 4-8 Success. DES-3550:4# To delete ports from a VLAN: DES-3550:4#config vlan v1 delete 6-8 Command: config vlan v1 delete 6-8 Success.
Page 120 Restrictions Example usage: To set the ingress checking status, the sending and receiving GVRP information : DES-3550:4#config gvrp 1-4 state enable ingress_checking enable acceptable_frame tagged_only pvid 2 Command: config gvrp 1-4 state enable ingress_checking enable acceptable_frame tagged_only pvid 2 Success.
Page 121 Command: show vlan VLAN TYPE Member ports Static ports DES-3550 Layer 2 Fast Ethernet Switch Used to disable GVRP on the Switch. disable gvrp This command, along with enable gvrp, is used to enable and disable GVRP on the Switch, without changing the GVRP configuration on the Switch.
Page 122 : 2-4 : 2-4 : 2-4 Used to display the GVRP status for a port list on the Switch. show gvrp {<portlist>} This command displays the GVRP status for a port list on the Switch <portlist> − Specifies a port or range of ports for which the GVRP status is to be displayed.
Page 123 DES-3550 Layer 2 Fast Ethernet Switch Disabled Enabled Disabled Enabled Disabled Enabled Disabled Enabled Disabled Enabled Disabled Enabled CTRL+C ESC q Quit SPACE n All Frames All Frames All Frames All Frames All Frames All Frames Next Page Enter Next Entry...
Page 124: Asymmetric Vlan Commands
Purpose Syntax Description Parameters Restrictions Example usage: DES-3550 Layer 2 Fast Ethernet Switch SYMMETRIC Parameters Used to enable the asymmetric VLAN function on the Switch. enable asymmetric_vlan This command enables the asymmetric VLAN function on the Switch None.
Page 125 To display the asymmetric VLAN state cuurently set on the Switch: DES-3550:4#show asymmetric_vlan Command: show asymmetric_vlan Asymmetric Vlan: Enabled DES-3550:4# DES-3550 Layer 2 Fast Ethernet Switch Used to view the asymmetric VLAN state on the Switch. show asymmetric_vlan This command displays the asymmetric VLAN state on the Switch None.
Page 126: Link Aggregation Commands
This command will create a link aggregation group with a unique identifier. <value 1-6> − Specifies the group ID. The Switch allows up to 6 link aggregation groups to be configured. The group number identifies each of the groups.
Page 127 <value 1-6> This command is used to delete a previously configured link aggregation group. <value 1-6> − Specifies the group ID. The Switch allows up to 6 link aggregation groups to be configured. The group number identifies each of the groups.
Page 128 Example usage: To define a load-sharing group of ports, group-id 1,master port 5 with group members ports 5-7 plus port 9: DES-3550:4#config link_aggregation group_id 1 master_port 1 ports 5-7, 9 Command: config link_aggregation group_id 1 master_port 1 ports 5-7, 9 Success.
Page 129 {group_id <value 1-6> | algorithm} This command will display the current link aggregation configuration of the Switch. <value 1-6> − Specifies the group ID. The Switch allows up to 6 link aggregation groups to be configured. The group number identifies each of the groups.
Page 130 Purpose Syntax Description DES-3550 Layer 2 Fast Ethernet Switch Used to configure settings for LACP compliant ports. config lacp_ports <portlist> mode [active | passive] This command is used to configure ports that have been previously designated as LACP ports (see create link_aggregation).
Page 131 Active Active Active DES-3550:4# DES-3550 Layer 2 Fast Ethernet Switch <portlist> - Specifies a port or range of ports to be configured. If no parameter is specified, the system will display the current LACP status for all ports. Only administrator-level users can issue this command.
Page 132: Basic Ip Commands
Description Parameters Restrictions Example usage: To configure the IP interface System: DES-3550 Layer 2 Fast Ethernet Switch Parameters <ipif_name 12> [{ipaddress <network_address> | vlan <vlan_name 32> |state [enable | disable]} bootp | dhcp] <ipif_name 12> Used to configure the System IP interface.
Page 133 Member Ports Total Entries : 1 DES-3550:4# DES-3550 Layer 2 Fast Ethernet Switch Used to display the configuration of an IP interface on the Switch. show ipif <ipif_name 12> This command will display the configuration of an IP interface on the Switch.
Page 134: Igmp Snooping Commands
Each command is listed, in detail, in the following sections. config igmp_snooping Purpose Syntax Description Parameters DES-3550 Layer 2 Fast Ethernet Switch IGMP S Parameters [<vlan_name 32> | all] {host_timeout <sec 1-16711450> | router_timeout < sec 1-16711450> | leave_timer <sec 0- 16711450> | state [enable | disable]} [<vlan_name 32>...
Page 135 Restrictions Example usage: To configure IGMP snooping: DES-3550:4#config igmp_snooping default host_timeout 250 state enable Command: config igmp_snooping default host_timeout 250 state enable Success. DES-3550:4# config igmp_snooping querier Purpose Syntax Description Parameters DES-3550 Layer 2 Fast Ethernet Switch seconds.
Page 136 [enable | disable] − Allows the Switch to be specified as an IGMP Querier or Non-querier. Only administrator-level users can issue this command.
Page 137 DES-3550:4#enable igmp_snooping Command: enable igmp_snooping Success. DES-3550 Layer 2 Fast Ethernet Switch This command allows you to designate a range of ports as being connected to multicast-enabled routers. This will ensure that all packets with such a router as its destination will reach the multicast- enabled router −...
Page 138 Purpose Syntax Description DES-3550 Layer 2 Fast Ethernet Switch Used to enable IGMP snooping on the Switch. disable igmp_snooping {forward_mcrouter_only} This command disables IGMP snooping on the Switch. IGMP snooping can be disabled only if IP multicast routing is not being used.
Page 139 Total Entries: 2 DES-3550:4# show igmp_snooping group Purpose Syntax Description Parameters DES-3550 Layer 2 Fast Ethernet Switch <vlan_name 32> − The name of the VLAN to view the IGMP snooping configuration for. None. : Disabled : Disabled : default : 125...
Page 140 MAC address Reports Port Member VLAN Name Multicast group: 239.255.255.254 MAC address Reports Port Member Total Entries DES-3550:4# DES-3550 Layer 2 Fast Ethernet Switch None. : default : 01-00-5E-00-00-02 : 2,5 : default : 01-00-5E-00-00-09 : 6,8 : default : 01-00-5E-05-06-07...
Page 141 Parameters Restrictions Example usage: DES-3550 Layer 2 Fast Ethernet Switch Used to display the currently configured router ports on the Switch. show router_ports {vlan <vlan_name 32>} {static | dynamic} This command will display the router ports currently configured on the Switch.
Page 142 Port Member VLAN Name Multicast group MAC address Reports Port Member DES-3550 Layer 2 Fast Ethernet Switch : Trinity : 01-00-5E-00-00-02 : 17 Used to display the current IGMP snooping configuration on the Switch. show igmp_snooping group {vlan <vlan_name 32>} This command will display the current IGMP setup currently configured on the Switch.
Page 143 DES-3550 Layer 2 Fast Ethernet Switch VLAN Name : default Multicast group : 234.5.6.7 MAC address : 01-00-5E-05-06-07 Reports Port Member : 10,12 VLAN Name : default Multicast group : 236.54.63.75 MAC address : 01-00-5E-36-3F-4B Reports Port Member : 14,16...
Page 144: Commands
The DES-3550 implements the server-side of the IEEE 802.1x Port-based Network Access Control. This mechanism is intended to allow only authorized users, or other network devices, access to network resources by establishing criteria for each port on the Switch that a user or network device must meet before allowing that port to forward or receive frames.
Page 145 DES-3550:4# show 802.1x auth_configuration Purpose Syntax Description DES-3550 Layer 2 Fast Ethernet Switch None. Only administrator-level users can issue this command. Used to disable the 802.1x server on the Switch. disable 802.1x The disable 802.1x command is used to disable the 802.1x Port- based Network Access control server application on the Switch.
Page 146 DES-3550 Layer 2 Fast Ethernet Switch show 802.1x auth_configuration ports <portlist> − Specifies a port or range of ports to view. Parameters The following details are displayed: 802.1x Enabled / Disabled − Shows the current status of 802.1x functions on the Switch.
Page 147 ServerTimeout MaxReq ReAuthPeriod ReAuthenticate CTRL+C ESC q show 802.1x auth_state Purpose Syntax Description Parameters DES-3550 Layer 2 Fast Ethernet Switch : Enabled : Port_based : None : Both : Both : Auto : 60 : 30 : 30 : 30...
Page 148 ForceAuth ForceAuth CTRL+C ESC q DES-3550 Layer 2 Fast Ethernet Switch / Timeout − Shows the current state of the Backend Authenticator. Port Status: Authorized / Unauthorized − Shows the result of the authentication process. Authorized means that the user was authenticated, and can access the network.
Page 149 802.1x capability ports Purpose Syntax Description Parameters Restrictions Example usage: To configure 802.1x capability on ports 1-10: DES-3550:4#config 802.1x capability ports 1 – 10 authenticator Command: config 802.1x capability ports 1 – 10 authenticator Success. DES-3550:4# config 802.1x auth_parameter Purpose Syntax Description...
Page 150 Restrictions Example usage: To configure 802.1x authentication parameters for ports 1 – 20: DES-3550:4#config 802.1x auth_parameter ports 1–20 direction both Command: config 802.1x auth_parameter ports 1–20 direction both DES-3550 Layer 2 Fast Ethernet Switch all − Specifies all of the ports on the Switch.
Page 151 802.1x init Purpose Syntax Description Parameters DES-3550 Layer 2 Fast Ethernet Switch Used to configure the 802.1x authentication protocol on the Switch. config 802.1x auth_protocol [radius_eap | radius_pap] The config 802.1x auth_protocol command enables you to configure the authentication protocol.
Page 152 802.1x init Restrictions Example usage: To initialize the authentication state machine of all ports: DES-3550:4# config 802.1x init port_based ports all Command: config 802.1x init port_based ports all Success. DES-3550:4# config 802.1x auth_mode Purpose Syntax Description Parameters Restrictions Example usage: To configure 802.1x authentication by MAC address:...
Page 153 Command: config 802.1x reauth port_based ports 1-18 Success. DES-3550:4# config radius add Purpose Used to configure the settings the Switch will use to communicate with a RADIUS server. Syntax config radius add <server_index 1-3> <server_ip> key <passwd 32> [default | {auth_port <udp_port_number 1-65535> | acct_port <udp_port_number 1-65535>}]...
Page 154 The default is 1813. Restrictions Only administrator-level users can issue this command. Example usage: To configure the RADIUS server communication setttings: DES-3550:4#config radius add 1 10.48.74.121 key dlink default Command: config radius add 1 10.48.74.121 key dlink default Success. DES-3550:4# config radius delete...
Page 155 Syntax Description Parameters Restrictions Example usage: To configure the RADIUS settings: DES-3550:4#config radius 1 10.48.74.121 key dlink default Command: config radius 1 10.48.74.121 key dlink default Success. DES-3550:4# show radius Purpose Syntax Description Parameters Restrictions Example usage: DES-3550 Layer 2 Fast Ethernet Switch config radius <server_index 1-3>...
Page 156 DES-3550 Layer 2 Fast Ethernet Switch To display RADIUS settings on the Switch: DES-3550:4#show radius Command: show radius Index IP Address ----- ------------------ 10.1.1.1 20.1.1.1 30.1.1.1 Total Entries : 3 DES-3550:4# Auth-Port Acct-Port Status Number Number --------- --------- ----------- 1812...
Page 157: Access Control List (Acl) Commands
The DES-3550 implements Access Control Lists that enable the Switch to deny network access to specific devices or device groups based on IP settings or MAC address. Command create access_profile delete access_profile config access_profile profile_id show access_profile Due to a chipset limitation, the Switch currently supports a maximum of 9 access profiles, each containing a maximum of 50 rules −...
Page 158 − in this case, when a logical AND operation between an IP address specified in the next step and the ip_source_mask match. The default for an access profile on the Switch is to permit traffic flow. If you want to restrict traffic, you must use the deny parameter.
Page 159 Specific values for the rules are entered using the config access_profile command, below. Parameters ethernet − Specifies that the Switch will examine the layer 2 part of each packet header. vlan − Specifies that the Switch will examine the VLAN part of •...
Page 160 Restrictions Example usage: DES-3550 Layer 2 Fast Ethernet Switch dst_port_mask <hex 0x0-0xffff> − Specifies a TCP port mask • for the destination port. flag_mask [all | {urg | ack | psh | rst | syn | fin}] – Enter the •...
Page 161 Only administrator-level users can issue this command. Used to configure an access profile on the Switch and to define specific values that will be used to by the Switch to determine if a given packet should be forwarded or filtered. Masks entered using...
Page 162 The lower access ID, the higher the priority the rule will be given. ethernet − Specifies that the Switch will look only into the layer 2 part of each packet. vlan <vlan_name 32> − Specifies that the access profile will •...
Page 163 DES-3550 Layer 2 Fast Ethernet Switch config access_profile source_ip <ipaddr> − Specifies that the access profile will • apply to only packets with this source IP address. destination_id <value 0-255> − Specifies that the access • profile will apply to only packets with this destination IP address.
Page 164 DES-3550 Layer 2 Fast Ethernet Switch config access_profile syn: TCP control flag (synchronize) • fin: TCP control flag (finish) • udp − Specifies that the Switch will examine the Universal • Datagram Protocol (UDP) field in each packet. src_port <value 0-65535> − Specifies that the access profile •...
Page 165 To configure the access profile with the profile ID of 1 to filter frames that have IP addresses in the range between 10.42.73.0 to 10.42.73.255: DES-3550:4# config access_profile profile_id 2 add access_id 1 ip source_ip 10.42.73.1 deny Command: config access_profile profile_id 1 add access_id 1 ip source_ip 10.42.73.1 deny...
Page 166 DES-3550 Layer 2 Fast Ethernet Switch Masks : VLAN ---------------- ID Mode --- ------ ---------------- 1 Permit default Access Profile ID : 246 Type : IP Frame Filter Ports : All Masks : Source IP Addr --------------- 255.0.0.0 ID Mode...
Page 167: Traffic Segmentation Commands
Parameters Restrictions Example usage: To configure ports 1 through 10 to be able to forward frames to port 11 through 15: DES-3550:4# config traffic_segmentation 1-10 forward_list 11-15 Command: config traffic_segmentation 1-10 forward_list 11-15 Success. DES-3550:4# DES-3550 Layer 2 Fast Ethernet Switch...
Page 168 1-50 1-50 1-50 CTRL+C ESC q Quit SPACE n Next Page ENTER Next Entry a All DES-3550 Layer 2 Fast Ethernet Switch Used to display the current traffic segmentation configuration on the Switch. show traffic_segmentation <portlist> The show traffic_segmentation command is used to display the current traffic segmentation configuration on the Switch.
Page 169: Time And Sntp Commands
Each command is listed, in detail, in the following sections. config sntp Purpose Syntax Description Parameters DES-3550 Layer 2 Fast Ethernet Switch IME AND Parameters {primary <ipaddr> | secondary <ipaddr> | poll-interval <int 30- 99999>} <date ddmmmyyyy > <time hh:mm:ss >...
Page 170 Restrictions Example usage: To configure SNTP settings: DES-3550:4#config sntp primary 10.1.1.1 secondary 10.1.1.2 poll-interval 30 Command: config sntp primary 10.1.1.1 secondary 10.1.1.2 poll-interval 30 Success. DES-3550:4# show sntp Purpose Syntax Description Parameters Restrictions Example usage: To display SNTP configuration information:...
Page 171 Command: disable sntp Success. DES-3550:4# config time Purpose DES-3550 Layer 2 Fast Ethernet Switch This will enable SNTP support. SNTP service must be separately configured (see config sntp). Enabling and configuring SNTP support will override any manually configured system time settings. None.
Page 172 Parameters Restrictions Example usage: To configure time zone settings: DES-3550 Layer 2 Fast Ethernet Switch config time <date ddmmmyyyy> <time hh:mm:ss> This will configure the system time and date settings. These will be overridden if SNTP is configured and enabled.
Page 173 DES-3550 Layer 2 Fast Ethernet Switch DES-3550:4#config time_zone operator + hour 2 min 30 Command: config time_zone operator + hour 2 min 30 Success. DES-3550:4# config dst Purpose Used to enable and configure time adjustments to allow for the use of Daylight Savings Time (DST).
Page 174 Restrictions Example usage: To configure daylight savings time on the Switch: DES-3550 Layer 2 Fast Ethernet Switch • <start_day sun-sat> - The day of the week in which DST begins expressed using a three character abbreviation (sun, mon, tue, wed, thu, fri, sat) e_day - Configure the day of the week in which DST ends.
Page 175 DES-3550:4#config dst repeating s_week 2 s_day tue s_mth 4 s_time 15:00 e_week 2 e_day wed e_mth 10 e_time 15:30 offset 30 Command: config dst repeating s_week 2 s_day tue s_mth 4 s_time 15:00 e_week 2 e_day wed e_mth 10 e_time 15:30 offset 30 Success.
Page 176: Arp Commands
DES-3550:4#create arpentry 10.48.74.121 00-50-BA-00-07-36 Command: create arpentry 10.48.74.121 00-50-BA-00-07-36 Success. DES-3550:4# config arpentry Purpose Syntax DES-3550 Layer 2 Fast Ethernet Switch Parameters <ipaddr> <macaddr> <ipaddr> <macaddr> {[<ipaddr> | all]} {ipif <ipif_name 12> | ipaddress <ipaddr> | [static | local]} <value 0-65535>...
Page 177 Command: delete arpentry 10.48.74.121 Success. DES-3550:4# DES-3550 Layer 2 Fast Ethernet Switch This command is used to configure a static entry in the ARP Table. The user may specify the IP address and the corresponding MAC address of an entry in the Switch’s ARP table.
Page 178 Parameters Restrictions Example Usage: To display the ARP table: DES-3550 Layer 2 Fast Ethernet Switch Used to configure the age-out timer for ARP table entries on the Switch. config arp_aging time <value 0-65535> This command sets the maximum amount of time, in minutes, that an ARP entry can remain in the Switch’s ARP table, without being...
Page 179 Total Entries = 20 DES-3550:4# clear arptable Purpose Syntax Description Parameters Restrictions Example Usage: To remove dynamic entries in the ARP table: DES-3550 Layer 2 Fast Ethernet Switch IP Address MAC Address --------------- ----------------- 10.0.0.0 FF-FF-FF-FF-FF-FF 10.1.1.169 00-50-BA-70-E4-4E 10.1.1.254 00-01-30-FA-5F-00 10.9.68.1...
Page 180 DES-3550 Layer 2 Fast Ethernet Switch DES-3550:4#clear arptable Command: clear arptable Success. DES-3550:4#...
Page 181: Routing Table Commands
Switch and the IP address above. The default setting is 1. Only administrator-level users can issue this command. Used to delete a default IP route entry from the Switch’s IP routing table. delete iproute [default] This command will delete an existing default entry from the Switch’s...
Page 182 --------------- 0.0.0.0 10.0.0.0/8 Total Entries: 2 DES-3550:4# DES-3550 Layer 2 Fast Ethernet Switch None. Only administrator-level users can issue this command. Used to display the Switch’s current IP routing table. show iproute This command will display the Switch’s current IP routing table.
Page 183: Mac Notification Commands
Command: enable mac_notification Success. DES-3550:4# disable mac_notification Purpose Syntax DES-3550 Layer 2 Fast Ethernet Switch MAC N Parameters {interval <int 1-2147483647> | historysize <int 1-500> [<portlist> | all] [enable | disable] <portlist> Used to enable global MAC address table notification on the Switch.
Page 184 Description Parameters Restrictions Example usage: To configure the Switch’s MAC address table notification global settings: DES-3550:4#config mac_notification interval 1 historysize 500 Command: config mac_notification interval 1 historysize 500 Success. DES-3550:4# DES-3550 Layer 2 Fast Ethernet Switch This command is used to disable MAC address notification without changing configuration.
Page 185 Restrictions Example usage: To view the Switch’s MAC address table notification global settings: DES-3550 Layer 2 Fast Ethernet Switch Used to configure MAC address notification status settings. config mac_notification ports [<portlist | all] [enable | disable] MAC address notificiation is used to monitor MAC addresses learned and entered into the FDB.
Page 186 DES-3550:4#show mac_notification ports Command: show mac_notification ports Port # MAC Address Table Notification State ------ ----------------------------------------------------- DES-3550 Layer 2 Fast Ethernet Switch : Enabled Used to display the Switch’s MAC address table notification status settings show mac_notification ports <portlist> This command is used to display the Switch’s MAC address table notification status settings.
Page 187 DES-3550 Layer 2 Fast Ethernet Switch Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled CTRL+C ESC q Quit SPACE n Next Page p Previous Page r Refresh...
Page 188: Access Authentication Control Commands
If TACACS / XTACACS / TACACS+ / RADIUS authentication is enabled on the Switch, it will contact a TACACS / XTACACS / TACACS+ / RADIUS server to verify the user. If the user is verified, he or she is granted access to the Switch.
Page 189 NOTE: TACACS, XTACACS and TACACS+ are separate entities and are not compatible. The Switch and the server must be configured exactly the same, using the same protocol. (For example, if the Switch is set up for TACACS authentication, so must be the host server.) The TACACS (Terminal Access Controller Access Control System) commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table.
Page 190 Command: enable authen_policy Success. DES-3550:4# disable authen_policy Purpose Syntax DES-3550 Layer 2 Fast Ethernet Switch Parameters 65535> | key [<key_string 254> | none] | timeout <int 1-255> | retransmit <int 1-255>} <ipaddr> protocol [tacacs | xtacacs | tacacs+ | radius] <int 1-255>...
Page 191 Command: show authen_policy Authentication Policy: Enabled DES-3550:4# DES-3550 Layer 2 Fast Ethernet Switch This command will disable the administrator-defined authentication policy for users trying to access the Switch. When disabled, the Switch will access the local user account database for username and password verification.
Page 192 Switch will send an authentication request to the second tacacs host in the server group and so on, until the list is exhausted. At that point, the Switch will restart the same sequence with the following protocol listed, xtacacs.
Page 193 DES-3550 Layer 2 Fast Ethernet Switch config authen_login enable admin part of this section for more detailed information, concerning the enable admin command.) Parameters default – The default method list for access authentication, as defined by the user. The user may choose one or a combination of up to four(4) of the following authentication methods: tacacs –...
Page 194 Success. DES-3550:4# Example usage: To configure the default method list with authentication methods xtacacs, tacacs+ and local, in that order: DES-3550:4#config authen_login default method xtacacs tacacs+ local Command: config authen_login default method xtacacs tacacs+ local Success. DES-3550:4# delete authen_login method_list_name...
Page 195 Purpose Syntax Description Parameters DES-3550 Layer 2 Fast Ethernet Switch Only administrator-level users can issue this command. Used to display a previously configured user defined method list of authentication methods for users logging on to the Switch. show authen_login [default | method_list_name <string 15> | all] This command is used to show a list of authentication methods for user login.
Page 196 To create a user-defined method list, named “Permit” for promoting user privileges to Adminstrator privileges: DES-3550:4#create authen_enable method_list_name Permit Command: show authen_login method_list_name Permit Success. DES-3550 Layer 2 Fast Ethernet Switch Only administrator-level users can issue this command. Method Name --------...
Page 197 If no verification is found, the Switch will send an authentication request to the second TACACS host in the server group and so on, until the list is exhausted. At that point, the Switch will restart the same sequence with the following protocol listed, xtacacs.
Page 198 Command: config authen_enable method_list_name Trinity method tacacs xtacacs local Success. DES-3550 Layer 2 Fast Ethernet Switch server group previously configured on the Switch. local_enable - Adding this parameter will require the user to be authenticated using the local user account database on the Switch.
Page 199 DES-3550:4# Example usage: To configure the default method list with authentication methods xtacacs, tacacs+ and local, in that order: DES-3550:4#config authen_enable default method xtacacs tacacs+ local Command: config authen_enable default method xtacacs tacacs+ local Success. DES-3550:4# delete authen_enable method_list_name Purpose...
Page 200 Method List Name Priority Method Name Comment ---------------- Permit default DES-3550 Layer 2 Fast Ethernet Switch Adminstrator level privileges. default – Entering this parameter will display the default method list for users attempting to gain access to Administrator level privileges on the Switch.
Page 201 Restrictions Example usage: To configure the default method list for the web interface: DES-3550 Layer 2 Fast Ethernet Switch Used to configure various applications on the Switch for authentication using a previously configured method list. config authen application [console | telnet | ssh | http | all] [login | enable] [default | method_list_name <string 15>]...
Page 202 Success. DES-3550:4# show authen application Purpose Syntax Description Parameters Restrictions Example usage: To display the login and enable method list for all applications on the Switch: DES-3550:4#show authen application Command: show authen application Application ----------------- ------------------ Console Telnet HTTP DES-3550:4#...
Page 203 To create a TACACS+ authentication server host, with port number 1234, a timeout value of 10 seconds and a retransmit count of 5. DES-3550:4#create authen server_host 10.1.1.121 protocol tacacs+ port 1234 timeout 10 retransmit 5 Command: create authen server_host 10.1.1.121 protocol tacacs+ port...
Page 204 DES-3550 Layer 2 Fast Ethernet Switch 1234 timeout 10 retransmit 5 Success. DES-3550:4# config authen server_host Purpose Used to configure a user-defined authentication server host. Syntax create authen server_host <ipaddr> protocol [tacacs | xtacacs | tacacs+ | radius] {port <int 1-65535> | key [<key_string 254> | none] | timeout <int 1-255>...
Page 205 Description Parameters DES-3550 Layer 2 Fast Ethernet Switch timeout <int 1-255> - Enter the time in seconds the Switch will wait for the server host to reply to an authentication request. The default value is 5 seconds. retransmit <int 1-255> - Enter the value in the retransmit field to change how many times the device will resend an authentication request when the server does not respond.
Page 206 TACACS, XTACACS, TACACS+ or RADIUS. Port – The virtual port number on the server host. The default value is Timeout - The time in seconds the Switch will wait for the server host to reply to an authentication request.
Page 207 DES-3550:4#create authen server_group group_1 Command: create authen server_group group_1 Success. DES-3550:4# config authen server_group Purpose Syntax Description DES-3550 Layer 2 Fast Ethernet Switch Protocol Port Timeout Retransmit Key -------- ----- ------- --------------- ------------------ TACACS Used to create a user-defined authentication server group.
Page 208 Restrictions Example usage: To add an authentication host to server group “group_1”: DES-3550:4# config authen server_group group_1 add server_host 10.1.1.121 protocol tacacs+ DES-3550 Layer 2 Fast Ethernet Switch may define the type of server group by protocol or by previously defined server group.
Page 209 Purpose Syntax Description Parameters DES-3550 Layer 2 Fast Ethernet Switch Used to delete a user-defined authentication server group. delete authen server_group <string 15> This command will delete an authentication server group. <string 15> - Enter an alphanumeric string of up to 15 characters to define the previously created server group to be deleted.
Page 210 10.53.13.94 (This group has no entry) (This group has no entry) Used to configure the amount of time the Switch will wait for a user to enter authentication before timing out. config authen parameter response_timeout <int 1-255> This command will set the time the Switch will wait for a response of authentication from the user.
Page 211 Purpose Syntax Description Parameters Restrictions Example usage: To set the maximum number of authentication attempts at 5: DES-3550:4# config authen parameter attempt 5 Command: config authen parameter attempt 5 Success. DES-3550:4# show authen parameter Purpose Syntax Description...
Page 212 Used to promote user level privileges to administrator level privileges enable admin This command is for users who have logged on to the Switch on the normal user level, to become promoted to the administrator level. After logging on to the Switch users will have only user level privileges.
Page 213 Enter the case-sensitive new password:****** Enter the new password again for confirmation:****** Success. DES-3550:4# DES-3550 Layer 2 Fast Ethernet Switch Used to configure the local enable password for administrator level privileges. config admin local_enable This command will configure the locally enabled password for the enable admin command.
Page 214: Ssh Commands
Finally, enable SSH on the Switch using the enable ssh command. • After following the above steps, you can configure an SSH Client on the remote PC and manage the Switch using secure, in-band communication. The Secure Shell (SSH) commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table.
Page 215 Command: disable ssh Success. DES-3550:4# config ssh authmode Purpose Syntax Description DES-3550 Layer 2 Fast Ethernet Switch None. Only administrator-level users can issue this command. Used to disable SSH. disable ssh This command allows you to disable SSH on the Switch. None.
Page 216 DES-3550:4#show ssh authmode Command: show ssh authmode The SSH authmode: Password DES-3550 Layer 2 Fast Ethernet Switch password – This parameter may be chosen if the administrator wishes to use a locally configured password for authentication on the Switch. publickey - This parameter may be chosen if the administrator wishes to use a publickey configuration set on a SSH server, for authentication.
Page 217 Purpose Syntax Description Parameters Restrictions Usage Example: To configure the SSH server: DES-3550:4# config ssh server maxsession 2 contimeout 300 authfail 2 Command: config ssh server maxsession 2 contimeout 300 authfail 2 Success. DES-3550:4# show ssh server Purpose Syntax Description...
Page 218 DES-3550:4# config ssh user Purpose Syntax Description Parameters DES-3550 Layer 2 Fast Ethernet Switch None. : 300 : never : 22 Used to configure the SSH user. config ssh user <username 15> authmode {hostbased [hostname <domain_name> | hostname_IP <domain_name>...
Page 219 Restrictions Example usage: To configure the SSH user: DES-3550:4# config ssh user Trinity authmode Password Command: config ssh user Trinity authmode Password Enter a case sensitive new password: ******* Enter the new password again for conformation:******* Success.
Page 220 DES-3550 Layer 2 Fast Ethernet Switch Note: To configure the SSH user, the administrator must create a user account on the Switch. For information concerning configuring a user account, please see the section of this manual entitled Basic Switch Commands and then the command, create user account.
Page 221 Restrictions Usage Example: To configure SSH algorithm: DES-3550:4# config ssh algorithm Blowfish enable Command: config ssh algorithm Blowfish enable Success. DES-3550:4# show ssh algorithm Purpose Syntax Description Parameters Restrictions Usage Example: To display SSH algorithms cuurently set on the Switch:...
Page 222 DES-3550 Layer 2 Fast Ethernet Switch SHA1 :Enabled Public Key Algorithm :Enabled :Enabled DES-3550:4#...
Page 223: Ssl Commands
1. Key Exchange: The first part of the cyphersuite string specifies the public key algorithm to be used. This Switch utilizes the Rivest Shamir Adleman (RSA) public key algorithm and the Digital Signature Algorithm (DSA), specified here as the DHE_DSS Diffie-Hellman (DHE) public key algorithm.
Page 224 To enable SSL on the Switch for all ciphersuites: DES-3550:4#enable ssl Command:enable ssl Note: Web will be disabled if SSL is enabled. DES-3550 Layer 2 Fast Ethernet Switch Parameters <ipaddr> certfilename <path_filename 64> keyfilename <path_filename 64> To enable the SSL function on the Switch.
Page 225 Success. DES-3550:4# NOTE: Enabling SSL on the Switch will enable all ciphersuites. To utilize a particular ciphersuite, the user must eliminate other ciphersuites by using the disable ssl command along with the appropriate ciphersuites. NOTE: Enabling the SSL function on the Switch will disable the port for the web manager (port 80).
Page 226 DES-3550:4#config ssl cachetimeout timeout 7200 Command: config ssl cachetimeout timeout 7200 Success. DES-3550:4# DES-3550 Layer 2 Fast Ethernet Switch Used to configure the SSL cache timeout. config ssl cachetimeout timeout <value 60-86400> This command will set the time between a new key exchange between a client and a host using the SSL function.
Page 227 Parameters Restrictions Example usage: To view the SSL status on the Switch: DES-3550 Layer 2 Fast Ethernet Switch Used to show the SSL cache timeout. show ssl cachetimeout Entering this command will allow the user to view the SSL cache timeout cuurently implemented on the Switch.
Page 228 Command: show ssl certificate Loaded with RSA Certificate! DES-3550:4# DES-3550 Layer 2 Fast Ethernet Switch Used to view the SSL certificate file status on the Switch. show ssl certificate This command is used to view the SSL certificate file information currently implemented on the Switch.
Page 229 <path_filename 64> keyfilename <path_filename 64> This command is used to download a certificate file for the SSL function on the Switch from a TFTP server. The certificate file is a data record used for authenticating devices on the network. It contains information on the owner, keys for authentication and digital signatures.
Page 230 CS. The SIM group is a group of switches that are managed as a single entity. The DES-3550 may take on three different roles: Commander Switch (CS) – This is a switch that has been manually configured as the controlling device for a group, and takes on the following characteristics: It has an IP Address.
Page 231 6. The CaS can be configured through the CS to become a MS. After configuring one switch to operate as the CS of a SIM group, additional DES-3550 switches may join the group by either an automatic method or by manually configuring the Switch to be a MS. The CS will then serve as the in band entry point for access to the MS.
Page 232 DES-3550:4# show sim Purpose Syntax Description DES-3550 Layer 2 Fast Ethernet Switch Used to disable Single IP Management (SIM) on the Switch disable sim This command will disable SIM globally on the Switch. None. Only administrator-level users can issue this command.
Page 233 Device Name - Displays the user-defined device name on the Switch. MAC Address - Displays the MAC Address of the Switch. Capabilities – Displays the type of switch, be it Layer 2 (L2) or Layer 3 (L3). Platform – Switch Description including name and model number.
Page 234 DES-3550:4#show sim member Command: show sim member ID MAC Address --- ----------------- 00-01-02-03-04-00 00-55-55-00-55-00 Total Entries: 2 DES-3550 Layer 2 Fast Ethernet Switch : VER-1 : Build 2.00-B02 : 00-35-26-11-11-00 : L3 : DES-3550 L2 Switch : Enabled : Commander...
Page 235 DES-3550:4#show sim neighbor Command: show sim neighbor Neighbor Info Table Port MAC Address ------ ------------------ 00-35-26-00-11-99 00-35-26-00-11-91 00-35-26-00-11-90 DES-3550 Layer 2 Fast Ethernet Switch Platform / Hold Capability Time ------------------------ ----- DES-3550 L2 Switch DES-3550 L2 Switch Platform / Hold...
Page 236 The CaS may be defined by its ID number and a password (if necessary). delete <member_id 1-32> - Use this parameter to delete a member switch of a SIM group. The member switch should be defined by ID number. Only administrator-level users can issue this command.
Page 237 Purpose Syntax Description Parameters DES-3550 Layer 2 Fast Ethernet Switch Used to configure role parameters for the SIM protocol on the Switch. config sim [{[commander {group_name <groupname 64> | candidate] | dp_interval <30-90> | hold_time <sec 100-300>}] This command is used to configure parameters of switches of the SIM.
Page 238 Restrictions To change the time interval of the discovery protocol: DES-3550:4# config sim commander dp_interval 30 Command: config sim commander dp_interval 30 Success. DES-3550:4# To change the hold time of the discovery protocol: DES-3550:4# config sim commander hold_time 120 Command: config sim commander hold_time 120 Success.
Page 239 Success. DES-3550:4# To update the name of a group: DES-3550:4# config sim commander group_name Trinity Command: config sim commander group_name Trinity Success. DES-3550:4# download sim Purpose Syntax Description Parameters Restrictions Example usage: To download firmware: DES-3550:4# download sim firmware 10.53.13.94 c:/des3526.had...
Page 240 ----------------------- 00-01-02-03-04-00 Success 00-07-06-05-04-03 Success 00-07-06-05-04-03 Success DES-3550:4# To download configuration files: DES-3550:4# download sim configuration 10.53.13.94 c:/des3526.txt members all Command: download sim firmware 10.53.13.94 c:/des3526.txt members all This device is updating configuation. Please wait... Download Status : MAC Address...
Page 241 Command: upload sim_ms configuration 10.55.47.1 D:\configuration.txt 1 Success. DES-3550:4# DES-3550 Layer 2 Fast Ethernet Switch upload a configuration file to. <path_filename> – Enter a user-defined path and file name on the TFTP server the user wishes to upload configuration files to.
Page 242 The switch history commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the following table. Command config command_history show command_history Each command is listed, in detail, in the following sections. Purpose Syntax Description Parameters...
Page 243 802.1x capability ports config 802.1x init config 802.1x reauth DES-3550 Layer 2 Fast Ethernet Switch Used to display all commands in the Command Line Interface (CLI). This command will display all of the commands available through the Command Line Interface (CLI).
Page 244 Parameters Restrictions Example usage To display the command history: DES-3550 Layer 2 Fast Ethernet Switch Used to configure the command history. config command_history <value 1-40> This command is used to configure the command history. <value 1-40> − The number of previously executed commands maintained in the buffer.
Page 245 DES-3550 Layer 2 Fast Ethernet Switch DES-3550:4#show command_history Command: show command_history ? show show vlan show command history DES-3550:4#...
Page 246: Physical And Environmental
DES-3550 Layer 2 Fast Ethernet Switch Physical and Environmental AC input & 100 - 240 VAC, 50-60 Hz (internal universal power supply) External Redundant Redundant power supply – will take over when internal power supply power Supply: fails. Power 90 watts maximum...
Page 247 DES-3550 Layer 2 Fast Ethernet Switch IEEE 802.3x Full-duplex Flow Control IEEE 802.3 Nway auto-negotiation Protocols: CSMA/CD Data Transfer Rates: Half-duplex Ethernet Fast Ethernet 10 Mbps Gigabit Ethernet 100Mbps Fiber Optic SFP (Mini GBIC) Support IEEE 802.3z 1000BASE-LX (DEM-310GT transceiver) IEEE 802.3z 1000BASE-SX (DEM-311GT transceiver)
Page 248 DES-3550 Layer 2 Fast Ethernet Switch RAM Buffer: 16 MB per device Filtering Address Table: 8K MAC address per device Packet Filtering / Full-wire speed for all connections. Forwarding Rate: 148,810 pps per port (for 100Mbps) 1,488,100 pps per port (for 1000Mbps) MAC Address Learning: Automatic update.

D-Link DES-3550 Command Line Interface Reference Manual

Quick Links

Layer 2 Switch

Related Manuals for D-Link DES-3550

Summary of Contents for D-Link DES-3550

Table of Contents