Table of Contents

Advertisement

Advertisement

Table of Contents
loading

Summary of Contents for D-Link DGS-3000

  • Page 2: Table Of Contents

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Table of Contents Chapter 1 Using Command Line Interface ..................... 1 Chapter 2 Basic Command List ......................8 Chapter 3 802.1Q VLAN Command List ....................23 Chapter 4 802.1X Command List ......................39 Chapter 5 Access Authentication Control Command List ..............
  • Page 3 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 42 Japanese Web-Based Access Control (JWAC) Command List ........446 Chapter 43 Jumbo Frame Command List .................... 472 Chapter 44 Layer 2 Protocol Tunneling (L2PT) Command List ............474 Chapter 45 Link Aggregation Command List ..................
  • Page 4 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 85 Telnet Client Command List ....................816 Chapter 86 TFTP Client Command List ....................817 Chapter 87 Time and SNTP Command List ..................824 Chapter 88 Trace Route Command List ....................832 Chapter 89 Traffic Control Command List ...................
  • Page 5: Using Command Line Interface

    DGS-3000-26TC:admin# There is no initial username or password. Just press the Enter key twice to display the CLI input cursor − DGS-3000-26TC:admin#. This is the command line where all commands are input. Setting the Switch’s IP Address Each Switch must be assigned its own IP Address, which is used for communication with an SNMP network manager or other TCP/IP application (for example BOOTP, TFTP).
  • Page 6 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Boot Procedure V1.00.002 ------------------------------------------------------------------------------- Power On Self Test ........100 % MAC Address : B0-C5-54-30-00-A0 H/W Version : A1 Please Wait, Loading V1.10.013 Runtime Image ....100 % UART init ..........
  • Page 7 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin# ? Command:? cable_diag ports cfm linktrace cfm lock md cfm loopback clear clear address_binding dhcp_snoop binding_entry ports clear address_binding nd_snoop binding_entry ports clear arptable clear attack_log clear cfm pkt_cnt...
  • Page 8 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#config account Command: config account Next possible completions: <username> DGS-3000-26TC:admin#config account In the above example, the command config account was entered without the required parameter <username>, the CLI returned the Next possible completions: <username> prompt. The up arrow cursor control key was pressed to re-enter the previous command (config account) at the command prompt.
  • Page 9 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show Command: show Next possible completions: 802.1p 802.1x access_profile account accounting acct_client address_binding arp_spoofing_prevention arpentry attack_log auth_client auth_diagnostics auth_session_statistics auth_statistics authen authen_enable authen_login authen_policy authentication authorization autoconfig bandwidth_control boot_file...
  • Page 10: Command Syntax Symbols

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Command Syntax Symbols Syntax Description angle brackets < > Encloses a variable or value. Users must specify the variable or value. For example, in the command create ipif <ipif_name 12>...
  • Page 11 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Keys Description Backspace Delete character to left of cursor and shift remainder of line to left. Insert Toggle on and off. When toggled on, inserts text and shifts previous text to right.
  • Page 12: Chapter 2 Basic Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 2 Basic Command List show session show serial_port config serial_port {baud_rate [9600 | 19200 | 38400 | 115200] | auto_logout [never | 2_minutes | 5_minutes | 10_minutes | 15_minutes]}...
  • Page 13 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show session Command: show session Live Time From Level Name --- ------------ --------------------------------------- ----- --------------- 00:01:46.360 10.90.90.10 puser puser 00:05:49.340 Serial Port admin admin Total Entries: 2 CTRL+C ESC q...
  • Page 14: Enable Clipaging

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide config serial_port Description This command is used to configure the serial bit rate used to communicate with the management host and the idle connection auto logout time. Format config serial_port {baud_rate [9600 | 19200 | 38400 | 115200] | auto_logout [never |...
  • Page 15: Disable Clipaging

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters None. Restrictions Only Administrators and Operators can issue this command. Example To enable pausing of the screen display when show command output reaches the end of the page:...
  • Page 16 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide login Description This command is used to allow user login to the Switch. Format login Parameters None. Restrictions None. Example To login the Switch with a user name dlink:...
  • Page 17 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#logout Command: logout ********** * Logout * ********** DGS-3000-26TC Gigabit Ethernet Switch Command Line Interface Firmware: Build 1.10.013 Copyright(C) 2014 D-Link Corporation. All rights reserved. UserName: Description This command is used to display a description of a specific command or general command.
  • Page 18 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format clear Parameters None. Restrictions None. Example To clear screen: DGS-3000-26TC:admin#clear Command: clear DGS-3000-26TC:admin# 2-10 show command_history Description This command is used to display command history. Format show command_history Parameters None.
  • Page 19 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show command_history Command: show command_history ? ping login show serial_port show session ? config bpdu_protection ports ? reset ? create account ? create ipif show DGS-3000-26TC:admin# 2-11 config command_history Description This command is used to configure the number of commands that the Switch can recall.
  • Page 20 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 2-12 config greeting_message Description This command is used to configure the greeting message (or banner). Format config greeting_message {default} Parameters default - (Optional) Add this parameter to the config greeting_message command will return the greeting message (banner) to its original factory default entry.
  • Page 21 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format show greeting_message Parameters None. Restrictions Only Administrators and Operators can issue this command. Example To display greeting message: DGS-3000-26TC:admin#show greeting_message Command: show greeting_message =============================================================================== DGS-3000-26TC Gigabit Ethernet Switch Command Line Interface Firmware: Build 1.10.013...
  • Page 22: Config Terminal Width

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Restrictions Only Administrators and Operators can issue this command. Example To edit the command prompt: DGS-3000-26TC:admin#config command_prompt Prompt# Command: config command_prompt Prompt# Success. Prompt#:admin# 2-15 config terminal width Description This command is used to set current terminal width.
  • Page 23: Show Terminal Width

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 2-16 show terminal width Description This command is used to display the configuration of current terminal width. Format show terminal width Parameters None. Restrictions None. Example To display the configuration of current terminal width:...
  • Page 24 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide optional. For non combo ports, the user doesn't need to specify medium_type in the command. fiber - Specify the fiber port. copper - Specify the copper port speed - Specify the port speed.
  • Page 25: Show Ports

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide the advertised speed. This setting has no effect when the port is working in the forced mode. enable - Specify to enable the option to automatically downgrade the advertised speed.
  • Page 26 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show ports details Command: show ports details Port : 1 -------------------- Port Status : Link Up Description HardWare Type : Gigabits Ethernet MAC Address : B0-C5-54-30-00-A1 Bandwidth : 100000Kbit...
  • Page 27: Chapter 3 802.1Q Vlan Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 3 802.1Q VLAN Command List create vlan <vlan_name 32> tag <vlanid 2-4094> {type [1q_vlan | private_vlan]} {advertisement} create vlan vlanid <vidlist> {type [1q_vlan | private_vlan]} {advertisement} delete vlan <vlan_name 32>...
  • Page 28: Create Vlan Vlanid

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide private_vlan - (Optional) Specify that the private VLAN type will be used. advertisement - (Optional) Specify the VLAN as being able to be advertised out. Restrictions Only Administrators, Operators and Power-Users can issue this command.
  • Page 29: Delete Vlan

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#create vlan vlanid 10-30 Command: create vlan vlanid 10-30 Success. DGS-3000-26TC:admin# delete vlan Description This command is used to delete a previously configured VLAN by the name on the Switch.
  • Page 30: Config Vlan

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide <vidlist> - Enter the VLAN ID list here. Restrictions Only Administrators, Operators and Power-Users can issue this command. Example To remove VLANs from 10-30: DGS-3000-26TC:admin#delete vlan vlanid 10-30 Command: delete vlan vlanid 10-30 Success.
  • Page 31: Config Vlan Vlanid

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#config vlan v2 add tagged 4-8 Command: config vlan v2 add tagged 4-8 Success. DGS-3000-26TC:admin# config vlan vlanid Description This command is used to configure multiple VLANs at one time. But conflicts will be generated if you configure the name of multiple VLANs at one time.
  • Page 32: Show Vlan

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide config port_vlan Description This command is used to set the ingress checking status, the sending and receiving GVRP information. Format config port_vlan [<portlist> | all] {gvrp_state [enable | disable] | ingress_checking [enable | disable] | acceptable_frame [tagged_only | admit_all] | pvid <vlanid 1-4094>}(1)
  • Page 33: Show Vlan Ports

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format show vlan {<vlan_name 32>} Parameters <vlan_name 32> - (Optional) Enter the VLAN name to be displayed. The VLAN name can be up to 32 characters long. Restrictions None.
  • Page 34: Show Vlan Vlanid

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters <portlist> - (Optional) Enter the list of ports for which the VLAN information will be displayed. Restrictions None. Example To display the VLAN configuration for port 6: DGS-3000-26TC:admin#show vlan ports 6...
  • Page 35 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show vlan vlanid 1 Command: show vlan vlanid 1 VLAN Name : default VLAN Type : Static Advertisement : Enabled Member Ports : 1-26 Static Ports : 1-26 Current Tagged Ports...
  • Page 36: Enable Pvid Auto Assign

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show port_vlan Command: show port_vlan Port PVID GVRP Ingress Checking Acceptable Frame Type ------- ---- -------- ---------------- --------------------------- Enabled Enabled Only VLAN-tagged Frames Enabled Enabled Only VLAN-tagged Frames Enabled...
  • Page 37: Disable Pvid Auto Assign

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Example To enable the auto-assign PVID: DGS-3000-26TC:admin#enable pvid auto_assign Command: enable pvid auto_assign Success. DGS-3000-26TC:admin# 3-13 disable pvid auto assign Description This command is used to disable auto assignment of PVID.
  • Page 38: Config Gvrp

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters None. Restrictions None. Example To display PVID auto-assignment state: DGS-3000-26TC:admin#show pvid auto_assign Command: show pvid auto_assign PVID Auto-assignment: Enabled DGS-3000-26TC:admin# 3-15 config gvrp Description This command is used to set the GVRP timer’s value. The default value for Join time is 200 milliseconds;...
  • Page 39: Show Gvrp

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Example To set the Join time to 200 milliseconds: DGS-3000-26TC:admin#config gvrp timer join 200 Command: config gvrp timer join 200 Success. DGS-3000-26TC:admin# 3-16 show gvrp Description This command is used to display the GVRP global setting.
  • Page 40: Disable Gvrp

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format enable gvrp Parameters None. Restrictions Only Administrators, Operators and Power-Users can issue this command. Example To enable the generic VLAN Registration Protocol (GVRP): DGS-3000-26TC:admin#enable gvrp Command: enable gvrp Success.
  • Page 41 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 3-19 config private_vlan Description This command is used to add or remove a secondary VLAN from a private VLAN. Format config private_vlan [<vlan_name 32> | vid <vlanid 2-4094>] [add [isolated | community] | remove] [<vlan_name 32>...
  • Page 42 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide name can be up to 32 characters long. vlanid - (Optional) Specify the VLAN ID of the private VLAN or its secondary VLAN. <vidlist> - Enter the VLAN ID used here.
  • Page 43: Chapter 4 802.1X Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 4 802.1X Command List enable 802.1x disable 802.1x create 802.1x user <username 15> delete 802.1x user <username 15> show 802.1x user config 802.1x auth_protocol [local | radius_eap] config 802.1x fwd_pdu system [enable | disable] config 802.1x fwd_pdu ports [<portlist>...
  • Page 44 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Restrictions Only Administrators, Operators and Power-Users can issue this command. Example Used to enable the 802.1X function: DGS-3000-26TC:admin#enable 802.1x Command: enable 802.1x Success. DGS-3000-26TC:admin# disable 802.1x Description This command is used to disable the 802.1X function.
  • Page 45 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format create 802.1x user <username 15> Parameters <username 15> - Enter the username to be added. This value can be up to 15 characters long. Restrictions Only Administrators, Operators and Power-Users can issue this command.
  • Page 46 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#delete 802.1x user test Command: delete 802.1x user test Success. DGS-3000-26TC:admin# show 802.1x user Description This command is used to display the 802.1X user. Format show 802.1x user Parameters None.
  • Page 47 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters local - Specify the authentication protocol as local. radius_eap - Specify the authentication protocol as RADIUS EAP. Restrictions Only Administrators, Operators and Power-Users can issue this command. Example To configure the 802.1X authentication protocol to RADIUS EAP:...
  • Page 48 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#config 802.1x fwd_pdu system enable Command: config 802.1x fwd_pdu system enable Success. DGS-3000-26TC:admin# config 802.1x fwd_pdu ports Description This command is used to control the forwarding of EAPOL PDU. When 802.1X functionality is disabled globally or for a port, and if 802.1X fwd_pdu is enabled both globally and for the port, a...
  • Page 49 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format config 802.1x authorization attributes radius [enable | disable] Parameters radius - If specified to enable, the authorization attributes (for example VLAN, 802.1p default priority, and ACL) assigned by the RADUIS server will be accepted. The default state is enabled.
  • Page 50 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Example To display the 802.1X port level configurations: DGS-3000-26TC:admin#show 802.1x auth_configuration ports Command: show 802.1x auth_configuration ports 1 Port Number Capability : None AdminCrlDir : Both OpenCrlDir : Both...
  • Page 51 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#config 802.1x capability ports 1-10 authenticator Command: config 802.1x capability ports 1-10 authenticator Success. DGS-3000-26TC:admin# 4-12 config 802.1x max_users Description This command is used to limit the maximum number of users that can be learned via 802.1X authentication.
  • Page 52 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide <value 1-10> | reauth_period <sec 1-65535> | max_users [<value 1-448> | no_limit] | enable_reauth [enable | disable]}(1)] Parameters ports - Specify a range of ports to be configured. <portlist> - Enter the list of ports used for the configuration here.
  • Page 53 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Example To configure the parameters that control the operation of the authenticator associated with a port: DGS-3000-26TC:admin#config 802.1x auth_parameter ports 1-20 direction both Command: config 802.1x auth_parameter ports 1-20 direction both Success.
  • Page 54 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format config 802.1x auth_mode [port_based | mac_based] Parameters port_based - Specifies the authentication as the port-based mode. mac_based - Specifies the authentication as the MAC-based mode. Restrictions Only Administrators, Operators and Power-Users can issue this command.
  • Page 55 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Example To re-authenticate the device connected to the port: DGS-3000-26TC:admin#config 802.1x reauth port_based ports all Command: config 802.1x reauth port_based ports all Success. DGS-3000-26TC:admin# 4-17 create 802.1x guest_vlan Description This command is used to assign a static VLAN to be guest VLAN.
  • Page 56 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format delete 802.1x guest_vlan <vlan_name 32> Parameters <vlan_name 32> - Enter the VLAN name here. The VLAN name can be up to 32 characters long. Restrictions Only Administrators, Operators and Power-Users can issue this command.
  • Page 57 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#config 802.1x guest_vlan ports 2-8 state enable Command: config 802.1x guest_vlan ports 2-8 state enable Warning, The ports are moved to Guest VLAN. Success. DGS-3000-26TC:admin# 4-20 config 802.1x trap state Description This command is used to enable or disable the sending of 802.1X traps.
  • Page 58 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters None. Restrictions None. Example To show 802.1x guest VLAN on the Switch: DGS-3000-26TC:admin#show 802.1x guest_vlan Command: show 802.1x guest_vlan Guest VLAN Setting ----------------------------------------------------------- Guest VLAN : guestVLAN Enabled Guest VLAN Ports : 2-8...
  • Page 59 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show auth_statistics ports 1 Command: show auth_statistics ports 1 MAC Address : 00—01-02-03-04-05 Port Number : 1 EapolFramesRx EapolFramesTx EapolStartFramesRx EapolReqIdFramesTx EapolLogoffFramesRx EapolReqFramesTx EapolRespIdFramesRx EapolRespFramesRx InvalidEapolFramesRx EapLengthErrorFramesRx LastEapolFrameVersion LastEapolFrameSource...
  • Page 60 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show auth_diagnostics ports 1 Command: show auth_diagnostics ports 1 Mac Address : 00-01-02-03-04-05 Port Number : 1 EntersConnecting EapLogoffsWhileConnecting EntersAuthenticating SuccessWhileAuthenticating TimeoutsWhileAuthenticating FailWhileAuthenticating ReauthsWhileAuthenticating EapStartsWhileAuthenticating EapLogoffWhileAuthenticating ReauthsWhileAuthenticated EapStartsWhileAuthenticated EapLogoffWhileAuthenticated...
  • Page 61 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show auth_session_statistics ports 1 Command: show auth_session_statistics ports 1 Mac Address : 00-01-02-03-04-05 Port Number : 1 SessionOctetsRx SessionOctetsTx SessionFramesRx SessionFramesTx SessionId SessionAuthenticMethod Remote Authentication Server SessionTime SessionTerminateCause SupplicantLogoff...
  • Page 62: Chapter 5 Access Authentication Control Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 5 Access Authentication Control Command List enable password encryption disable password encryption enable authen_policy disable authen_policy enable authen_policy_encryption disable authen_policy_encryption show authen_policy create authen_login method_list_name <string 15> config authen_login [default | method_list_name <string 15>] method {tacacs | xtacacs | tacacs+ | radius | server_group <string 15>...
  • Page 63: Enable Password Encryption

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide config accounting service [network | shell | system] state [enable {[radius_only | method_list_name <string 15> | default_method_list]} | disable] show accounting service show aaa enable password encryption Description This command is used to enable password encryption. The user account configuration information will be stored in the configuration file, and can be applied to the system later.
  • Page 64 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters None. Restrictions Only Administrators can issue this command. Example To disable the password encryption: DGS-3000-26TC:admin#disable password encryption Command: disable password encryption Success. DGS-3000-26TC:admin# enable authen_policy Description This command is used to enable system access authentication policy.
  • Page 65 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#enable authen_policy Command: enable authen_policy Success. DGS-3000-26TC:admin# disable authen_policy Description This command is used to disable system access authentication policy. Disable system access authentication policy. When authentication is disabled, the device will adopt the local user account database to authenticate the user for login, and adopt the local enable password to authenticate the enable password for promoting the user‘s privilege to Admin...
  • Page 66 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters None. Restrictions Only Administrators can issue this command. Example To enable the authentication policy encryption: DGS-3000-26TC:admin#enable authen_policy_encryption Command: enable authen_policy_encryption Success. DGS-3000-26TC:admin# disable authen_policy_encryption Description This command is used to disable the authentication policy encryption. When disabled, TACACS+ and RADIUS key will be in the plain text form.
  • Page 67 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide show authen_policy Description This command is used to display that system access authentication policy is enabled or disabled. Format show authen_policy Parameters None. Restrictions Only Administrators can issue this command.
  • Page 68 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#create authen_login method_list_name login_list_1 Command: create authen_login method_list_name login_list_1 Success. DGS-3000-26TC:admin# config authen_login Description This command is used to configure a user-defined or default method list of authentication methods for user login.
  • Page 69 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Example To configure a user-defined method list for user login: DGS-3000-26TC:admin#config authen_login method_list_name login_list_1 method tacacs+ tacacs local Command: config authen_login method_list_name login_list_1 method tacacs+ tacacs local Success. DGS-3000-26TC:admin#...
  • Page 70 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters default - Displays default user-defined method list for user login. method_list_name - Displays the specific user-defined method list for user login. <string 15> - Enter the method list name here. This value can be up to 15 characters long.
  • Page 71 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#create authen_enable method_list_name enable_list_1 Command: create authen_enable method_list_name enable_list_1 Success. DGS-3000-26TC:admin# 5-13 config authen_enable Description This command is used to configure a user-defined or default method list of authentication methods for promoting user's privilege to Admin level.
  • Page 72 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#config authen_enable method_list_name enable_list_1 method tacacs+ tacacs local_enable Command: config authen_ enable method_list_name enable_list_1 method tacacs+ tacacs local_enable Success. DGS-3000-26TC:admin# 5-14 delete authen_enable Description This command is used to delete a user-defined method list of authentication methods for promoting user's privilege to Admin level.
  • Page 73: Config Authen Application

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters default - Displays default user-defined method list for promoting user's privilege to Admin level. method_list_name - Displays the specific user-defined method list for promoting user's privilege to Admin level.
  • Page 74: Show Authen Application

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Restrictions Only Administrators can issue this command. Example To configure the login method list for Telnet: DGS-3000-26TC:admin#config authen application telnet login method_list_name login_list_1 Command: config authen application telnet login method_list_name login_list_1 Success.
  • Page 75 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 5-18 create authen server_group Description This command is used to create a user-defined authentication server group. The maximum supported number of server groups including built-in server groups is 8. Each group consists of 8 server hosts as maximum.
  • Page 76 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide add - Adds a server host to a server group. delete - Removes a server host from a server group. server_host - Specify the IP address of the server host.
  • Page 77 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#delete authen server_group mix_1 Command: delete authen server_group mix_1 Success. DGS-3000-26TC:admin# 5-21 show authen server_group Description This command is used to display the authentication server groups. Format show authen server_group {<string 15>} Parameters <string 15>...
  • Page 78 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 5-22 create authen server_host Description This command is used to create an authentication server host. When an authentication server host is created, IP address and protocol are the index. That means over 1 authentication protocol services can be run on the same physical host.
  • Page 79 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#create authen server_host 10.1.1.222 protocol tacacs+ port 15555 timeout 10 Command: create authen server_host 10.1.1.222 protocol tacacs+ port 15555 timeout 10 Key is empty for tacacs+ or RADIUS. Success.
  • Page 80 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Example To configure a TACACS+ authentication server host’s key value: DGS-3000-26TC:admin#config authen server_host 10.1.1.222 protocol tacacs+ key "This is a secret." Command: config authen server_host 10.1.1.222 protocol tacacs+ key "This is a secret."...
  • Page 81 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 5-25 show authen server_host Description This command is used to display the authentication server hosts. Format show authen server_host Parameters None. Restrictions Only Administrators can issue this command. Example...
  • Page 82: Config Authen Parameter Attempt

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Example To configure the amount of time waiting or user input to be 60 seconds: DGS-3000-26TC:admin#config authen parameter response_timeout 60 Command: config authen parameter response_timeout 60 Success. DGS-3000-26TC:admin# 5-27...
  • Page 83: Enable Admin

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters None. Restrictions Only Administrators can issue this command. Example To display the parameters of authentication: DGS-3000-26TC:admin#show authen parameter Command: show authen parameter Response Timeout : 60 seconds User Attempts...
  • Page 84 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:puser#enable admin Command: enable admin PassWord:***** Success. DGS-3000-26TC:admin# 5-30 config admin local_enable Description This command is used to config the local enable password of administrator level privilege. When the user chooses the “local_enable” method to promote the privilege level, the enable password of local device is needed.
  • Page 85 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 5-31 create accounting method_list_name Description This command is used to create a user-defined list of accounting methods for accounting services on the Switch. The maximum supported number of accounting method lists is 8.
  • Page 86 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Restrictions Only Administrators can issue this command. Example To configure a user-defined method list called “shell_acct”, that Specify a sequence of the built-in TACACS+ server group, followed by the RADIUS server group for accounting service on the...
  • Page 87: Show Accounting

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 5-34 show accounting Description This command is used to display the list of accounting methods on the Switch. Format show accounting [default | method_list_name <string 15> | all] Parameters default - Displays the user-defined list of default accounting methods.
  • Page 88: Config Accounting Service

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide by the create accounting method_list_name <string 15> command. <string> - Enter the name of the method list. none - Disables AAA command accounting services by specified command level. Restrictions Only Administrators, Operators and Power-Users can issue this command.
  • Page 89: Show Accounting Service

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Example Enable it to configure accounting shell state: DGS-3000-26TC:admin#config accounting service shell state enable Command: config accounting service shell state enable Success. DGS-3000-26TC:admin# 5-37 show accounting service Description This command is used to show the status of RADIUS accounting services.
  • Page 90 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format show aaa Parameters None. Restrictions Only Administrators can issue this command. Example To display AAA global configuration: DGS-3000-26TC:admin#show aaa Command: show aaa Authentication Policy: Enabled Accounting Network Service State: Disabled...
  • Page 91: Chapter 6 Access Control List (Acl) Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 6 Access Control List (ACL) Command List create access_profile profile_id <value 1-512> {profile_name <name 32>} [ethernet {vlan {<hex 0x0-0x0fff>} | source_mac <macmask 000000000000-ffffffffffff> | destination_mac <macmask 000000000000-ffffffffffff> | 802.1p | ethernet_type} | ip {vlan {<hex 0x0-0x0fff>} | source_ip_mask <netmask>...
  • Page 92 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide show time_range show current_config access_profile create access_profile Description This command is used to create access control list profiles. When creating ACL, each profile can have 256 rules/access IDs. However, when creating ACL type as Ethernet or IPv4 at the first time, 62 rules are reserved for the system.
  • Page 93 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide profile_name - The name of the profile must be specified. The maximum length is 32 characters. <name 32> - Enter the profile name here. ethernet - Specify this is an ethernet mask.
  • Page 94 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide <hex 0x0-0xffffffff> - Enter the offset chunk 4 mask here. ipv6 - Specify this is the IPv6 mask. class - (Optional) Specify the IPv6 class. flowlabel - (Optional) Specify the IPv6 flow label.
  • Page 95 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide delete access_profile Description This command is used to delete access list profiles. This command can only delete profiles that were created using the ACL module. Format delete access_profile [profile_id <value 1-512> | profile_name <name 32> |all] Parameters profile_id - Specify the index of the access list profile.
  • Page 96 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 0x0-0xffff>} | flag [all | {urg | ack | psh | rst | syn | fin}]} | udp {src_port <value 0-65535> {mask <hex 0x0-0xffff>} | dst_port <value 0-65535> {mask <hex 0x0-0xffff>}} | protocol_id <value 0-255>...
  • Page 97 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide <netmask> - Enter the source netmask used here. destination_ip - (Optional) Specify an IP destination address. <ipaddr> - Enter the destination IP address used for this configuration here. mask - (Optional) Specify an additional mask parameter that can be configured.
  • Page 98 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide offset_chunk_2 - (Optional) Specify the value of the packet bytes to be matched. Offset chunk 2 will be used. <hex 0x0-0xffffffff> - Enter the offset chunk 2 mask here.
  • Page 99 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide permit - Specify that packets matching the access rule are permitted by the Switch. priority - (Optional) Specify that the priority of the packet will change if the packet matches the access rule.
  • Page 100 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format show access_profile {[profile_id <value 1-512> | profile_name <name 32>]} Parameters profile_id - (Optional) Specify the index of the access list profile. <value 1-512> - Enter the profile ID used here. This value must be between 1 and 512.
  • Page 101 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide MASK on VLAN : 0xFFF DSCP ICMP Available HW Entries : 193 ------------------------------------------------------------------------------ Rule ID : 1 Ports: 2 Match on VLAN ID DSCP Action: Permit ============================================================================== ============================================================================== Profile ID: 3...
  • Page 102 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Action: Permit Priority Replace DSCP ============================================================================== DGS-3000-26TC:admin# The following example displays an access profile that supports an entry mask for each rule: DGS-3000-26TC:admin#show access_profile profile_id 2 Command: show access_profile profile_id 2...
  • Page 103 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show access_profile profile_id 4 Command: show access_profile profile_id 4 Access Profile Table Profile ID: 4 Profile name:4 Type: User Defined MASK on offset_chunk_1 : 3 value : 0x0000FFFF offset_chunk_2 : 5...
  • Page 104 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide The replace DSCP action can be performed on packets that conform (GREEN) and packets that do not conform (YELLOW and RED). If drop YELLOW/RED is selected, the action to replace the DSCP will not take effect.
  • Page 105 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide mode. color_aware - (Optional) Specify the meter mode as color-aware. The final color of the packet is determined by the initial color of the packet and the metering result.
  • Page 106 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide permit - Permits the packet. replace_dscp - (Optional) Changes the DSCP of the packet. <value 0-63> - Enter the replace DSCP value here. This value must be between 0 and drop - Drops the packet.
  • Page 107 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide <value 1-512> - Enter the profile ID used here. This value must be between 1 and 512. profile_name - (Optional) Specify the name of the profile. <name 32> - Enter the profile name used here. The maximum length is 32 characters.
  • Page 108 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide end_time - Specify the ending time of a day. (24-hr time) <time hh:mm:ss> - Enter the ending time here. (24-hr time). For example, 19:00 means 7PM. 19 is also acceptable. The time specified in the start_time parameter must be smaller than the time specified in the end_time parameter.
  • Page 109 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Example To display the current time range settings: DGS-3000-26TC:admin#show time_range Command: show time_range Time Range Information ----------------------------- Range Name Weekdays : Mon Start Time : 01:01:01 End Time : 02:01:01...
  • Page 110 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show current_config access_profile Command: show current_config access_profile #------------------------------------------------------------------- # ACL create access_profile ethernet vlan profile_id 1 config access_profile profile_id 1 add access_id 1 ethernet vlan default port 1 permit create access_profile ip source_ip_mask 255.255.255.255 profile_id 2...
  • Page 111: Address Resolution Protocol (Arp) Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 7 Address Resolution Protocol (ARP) Command List create arpentry <ipaddr> <macaddr> delete arpentry [<ipaddr> | all] config arpentry <ipaddr> <macaddr> config arp_aging time <value 0-65535> clear arptable show arpentry {ipif <ipif_name 12> | ipaddress <ipaddr> | static | mac_address <macaddr>}...
  • Page 112: Delete Arpentry

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide delete arpentry Description This command is used to delete an ARP entry, by specifying either the IP address of the entry or all. Specify ‘all’ clears the Switch’s ARP table.
  • Page 113: Clear Arptable

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Example To configure a static ARP entry, whose IP address is 10.48.74.121, set its MAC address to 00-50- BA-00-07-37: DGS-3000-26TC:admin#config arpentry 10.48.74.121 00-50-BA-00-07-37 Command: config arpentry 10.48.74.121 00-50-BA-00-07-37 Success.
  • Page 114: Show Arpentry

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters None. Restrictions Only Administrators, Operators and Power-Users can issue this command. Example To clear the ARP table: DGS-3000-26TC:admin#clear arptable Command: clear arptable Success. DGS-3000-26TC:admin# show arpentry Description This command is used to display the ARP table. You can filter the display by IP address, MAC address, Interface name, or static entries.
  • Page 115 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show arpentry Command: show arpentry ARP Aging Time : 20 Interface IP Address MAC Address Type ------------- --------------- ----------------- --------------- System 10.0.0.0 FF-FF-FF-FF-FF-FF Local/Broadcast System 10.1.1.1 00-02-03-04-05-06 Static System 10.1.1.2...
  • Page 116: Chapter 8 Arp Spoofing Prevention Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 8 ARP Spoofing Prevention Command List config arp_spoofing_prevention [add gateway_ip <ipaddr> gateway_mac <macaddr> ports [<portlist> | all] | delete gateway_ip <ipaddr>] show arp_spoofing_prevention config arp_spoofing_prevention Description This command is used to configure the spoofing prevention entry to prevent spoofing of MAC for the protected gateway.
  • Page 117 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#config arp_spoofing_prevention add gateway_ip 10.254.254.251gateway_mac 00-00-00-11-11-11 ports 1-2 Command: config arp_spoofing_prevention add gateway_ip 10.254.254.251 gateway_mac 00-00-00-11-11-11 ports 1-2 Success. DGS-3000-26TC:admin# show arp_spoofing_prevention Description This command is used to show the ARP spoofing prevention entry.
  • Page 118: Chapter 9 Auto-Configuration Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 9 Auto-Configuration Command List enable autoconfig disable autoconfig show autoconfig config autoconfig timeout <value 1-65535> enable autoconfig Description This command is used to enable auto configuration. When enabled, during power on initialization, the Switch will get configure file path name and TFTP server IP address from the DHCP server.
  • Page 119: Show Autoconfig

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format disable autoconfig Parameters None. Restrictions Only Administrators and Operators can issue this command. Example To disable autoconfig: DGS-3000-26TC:admin#disable autoconfig Command: disable autoconfig Success. DGS-3000-26TC:admin# show autoconfig Description This command is used to display if the auto-configuration is enabled or disabled.
  • Page 120 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show autoconfig Command: show autoconfig Autoconfig State: Disabled Timeout : 50 sec DGS-3000-26TC:admin# config autoconfig timeout Description This command is used to configure the timeout value. This timer is used to limit the length of time in getting configuration settings from the network.
  • Page 121: Chapter 10 Basic Commands Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 10 Basic Commands Command List create account [admin | operator | power_user | user] <username 15> {encrypt [plain_text | sha_1] <password>} config account <username> {encrypt [plain_text | sha_1] <password>} show account delete account <username>...
  • Page 122: Config Account

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide encrypt - (Optional) Specify the encryption applied to the account. plain_text - Specify the password in plain text form. sha_1 - Specify the password in the SHA-1 encrypted form.
  • Page 123: Show Account

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters <username> - Enter the user name of the account that has been defined. encrypt - (Optional) Specify that the password will be encrypted. plain_text - Specify the password in plain text form.
  • Page 124: Delete Account

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters None. Restrictions Only Administrators can issue this command. Example To display the accounts that have been created: DGS-3000-26TC:admin#show account Command: show account Current Accounts: Username Access Level ---------------...
  • Page 125: Show Switch

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#delete account System Command: delete account System Success. DGS-3000-26TC:admin# 10-5 show switch Description This command is used to display the Switch information. Format show switch Parameters None. Restrictions None.
  • Page 126: Enable Telnet

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show switch Command: show switch Device Type : DGS-3000-26TC Gigabit Ethernet Switch MAC Address : 00-01-02-03-04-00 IP Address : 10.90.90.90 (Manual) VLAN Name : default Subnet Mask : 255.0.0.0 Default Gateway : 0.0.0.0...
  • Page 127: Disable Telnet

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#enable telnet 23 Command: enable telnet 23 Success. DGS-3000-26TC:admin# 10-7 disable telnet Description This command is used to disable Telnet. Format disable telnet Parameters None. Restrictions Only Administrators and Operators can issue this command.
  • Page 128: Disable Web

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Restrictions Only Administrators and Operators can issue this command. Example To enable HTTP and configure port number: DGS-3000-26TC:admin#enable web 80 Command: enable web 80 Note: SSL will be disabled if web is enabled.
  • Page 129 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format reboot {force_agree} Parameters force_agree - (Optional) The reboot command will be executed immediatedly without further confirmation. Restrictions Only Administrators can issue this command. Example To reboot the Switch:...
  • Page 130: Config Firmware Image

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Example To reset the Switch: DGS-3000-26TC:admin#reset system Command: reset system Are you sure you want to proceed with system reset?(y/n) y-(reset all include configuration, save, reboot ) n-(cancel command) y Reboot &...
  • Page 131: Config Ipif

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format create ipif <ipif_name 12> <network_address> <vlan_name 32> {state [enable|disable]} Parameters ipif - Specify the name of the IP interface. <ipif_name 12> - Enter the IP interface name here. This name can be up to 12 characters long.
  • Page 132 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide <vlan_name 32> - Enter the VLAN name used here. This name can be up to 32 characters long. state - (Optional) Specify the state of the interface. enable - Enables the state of the interface.
  • Page 133: Delete Ipif

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 10-15 delete ipif Description This command is used to delete an IP interface. Format delete ipif [<ipif_name 12> {ipv6address <ipv6networkaddr>} | all] Parameters <ipif_name 12> - Enter the IP interface name used here. This name can be up to 12 characters long.
  • Page 134: Disable Ipif

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Restrictions Only Administrators, Operators and Power-Users can issue this command. Example To enable an IP interface: DGS-3000-26TC:admin#enable ipif newone Command: enable ipif newone Success. DGS-3000-26TC:admin# 10-17 disable ipif Description This command is used to disable an IP interface.
  • Page 135 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format show ipif {<ipif_name 12>} Parameters <ipif_name 12> - (Optional) Enter the IP interface name used here. This name can be up to 12 characters long. Restrictions None. Example...
  • Page 136 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters <ipif_name 12> - Enter the IP interface name used here. This name can be up to 12 characters long. all - Specify that all the IP interfaces will be used.
  • Page 137 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#disable ipif_ipv6_link_local_auto newone Command: disable ipif_ipv6_link_local_auto newone Success. DGS-3000-26TC:admin# 10-21 show ipif_ipv6_link_local_auto Description This commands is used to display the link local address automatic configuration state. Format show ipif_ipv6_link_local_auto {<ipif_name 12>} Parameters <ipif_name 12>...
  • Page 138: Chapter 11 Bpdu Attack Protection Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 11 BPDU Attack Protection Command List config bpdu_protection ports [<portlist> | all ] {state [enable | disable] | mode [ drop | block | shutdown} (1) config bpdu_protection recovery_timer [<sec 60-1000000> | infinite]...
  • Page 139 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#config bpdu_protection ports 1 state enable mode drop Commands: config bpdu_protection ports 1 state enable mode drop Success. DGS-3000-26TC:admin# 11-2 config bpdu_protection recovery_timer Description This command is used to configure BPDU protection recovery timer. When a port enters the ‘under attack’...
  • Page 140 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters trap - Specify the trap state. log - Specify the log state. none - Neither attack_detected nor attack_cleared is trapped or logged. attack_detected - Events will be logged or trapped when the BPDU attacks is detected.
  • Page 141 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 11-5 disable bpdu_protection Description This command is used to disable BPDU protection function globally for the Switch. Format disable bpdu_protection Parameters None. Restrictions Only Administrators, Operators and Power-Users can issue this command.
  • Page 142 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show bpdu_protection Commands: show bpdu_protection BPDU Protection Global Settings --------------------------------------- BPDU Protection status : Enabled BPDU Protection Recovery Time : 60 seconds BPDU Protection Trap State : None BPDU Protection Log State...
  • Page 143: Chapter 12 Cable Diagnostics Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 12 Cable Diagnostics Command List cable_diag ports [<portlist> | all] 12-1 cable_diag ports Description This command is used to configure cable diagnostics on ports. For FE port, two pairs of cable will be diagnosed.
  • Page 144 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide When the link partner is Gigabit Ethernet ports: • Where the link partner is powered on with no errors and the link is up, this command can detect the cable length •...
  • Page 145: Chapter 13 Command Logging Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 13 Command Logging Command List enable command logging disable command logging show command logging 13-1 enable command logging Description This command is used to enable the command logging function. This is disabled by default.
  • Page 146: Show Command Logging

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format disable command logging Parameters None. Restrictions Only Administrators can issue this command. Example To disable the command logging: DGS-3000-26TC:admin#disable command logging Command: disable command logging Success. DGS-3000-26TC:admin# 13-3...
  • Page 147: Chapter 14 Compound Authentication Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 14 Compound Authentication Command List create authentication guest_vlan [vlan <vlan_name 32> | vlanid <vlanid 1-4094>] enable authorization attributes delete authentication guest_vlan [vlan <vlan_name 32> | vlanid <vlanid 1-4094>] disable authorization attributes config authentication guest_vlan [vlan <vlan_name 32>...
  • Page 148: Enable Authorization Attributes

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#create authentication guest_vlan vlan guestVLAN Command: create authentication guest_vlan vlan guestVLAN Success. DGS-3000-26TC:admin# 14-2 enable authorization attributes Description This command is used to enable authorization. When authorization for attributes is enabled, the authorized attributes (for example VLAN, 802.1p default priority, and ACL) assigned by the...
  • Page 149: Disable Authorization Attributes

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters vlan - Specify the guest VLAN by VLAN name. <vlan_name 32> - Enter the VLAN name here. This name can be up to 32 characters long. vlanid - Specify the guest VLAN by VLAN ID.
  • Page 150 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#disable authorization attributes Command: disable authorization attributes Success. DGS-3000-26TC:admin# 14-5 config authentication guest_vlan Description This command is used to assign or remove ports to or from a guest VLAN.
  • Page 151: Config Authentication Ports

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 14-6 config authentication mac_format Description This command is used to set the MAC address format that will be used for authentication username via the RADIUS server. Format config authentication mac_format {case [lowercase | uppercase] | delimiter {[hyphen | colon...
  • Page 152 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format config authentication ports [<portlist> | all] {auth_mode [port_based | host_based {vlanid <vid_list> state [enable | disable]}] | multi_authen_methods [none | any | dot1x_impb | impb_jwac | impb_wac | mac_impb| mac_jwac| mac_wac]}(1) Parameters <portlist>...
  • Page 153: Config Authentication Server Failover

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#config authentication ports all auth_mode host_based Command: config authentication ports all auth_mode host_based Success. DGS-3000-26TC:admin# The following example sets the compound authentication method of all ports to “any”: DGS-3000-26TC:admin#config authentication ports all multi_authen_methods any Command: config authentication ports all multi_authen_methods any Success.
  • Page 154: Show Authorization

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 14-9 show authorization Description This command is used to display authorization status. Format show authorization Parameters None. Restrictions None. Example This example displays authorization status: DGS-3000-26TC:admin#show authorization Command: show authorization Authorization for Attributes: Enabled.
  • Page 155 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show authentication Command: show authentication Authentication Server Failover: Local. DGS-3000-26TC:admin# 14-11 show authentication guest_vlan Description This command is used to display guest VLAN information. Format show authentication guest_vlan Parameters None.
  • Page 156: Show Authentication Ports

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters None. Restrictions None. Example To display the authentication MAC format setting: DGS-3000-26TC:admin#show authentication mac_format Command: show authentication mac_format Case : Uppercase Delimiter : None Delimiter Number DGS-3000-26TC:admin# 14-13...
  • Page 157 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show authentication ports 1-3 Command: show authentication ports 1-3 Port Methods Auth Mode Authentication VLAN(s) ---- -------------- ----------- ---------------------- None Host-based None Host-based None Host-based DGS-3000-26TC:admin#...
  • Page 158: Chapter 15 Configuration Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 15 Configuration Command List show config [effective | modified | current_config | boot_up | file <pathname 64>] {[include | exclude | begin] <filter_string 80> {<filter_string 80> {<filter_string 80>}} {[include | exclude | begin] <filter_string 80>...
  • Page 159 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide boot_up - Specify the list of the boot-up configuration. file - Specify to display the configuration file. <pathname 64> - Enter an absolute pathname on the device file system. If pathname is not specified, the boot-up configuration is implied.
  • Page 160: Config Configuration

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show config modified Command: show config modified #------------------------------------------------------------------------------- DGS-3000-26TC Gigabit Ethernet Switch Configuration Firmware: Build 1.10.013 Copyright(C) 2014 D-Link Corporation. All rights reserved. #------------------------------------------------------------------------------- # DEVICE # BASIC # ACCOUNT LIST...
  • Page 161 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#config configuration config.cfg boot_up Command: config configuration config.cfg boot_up Success. DGS-3000-26TC:admin# 15-3 save Description This command is used to save the current configuration to a file. Format save {[config <pathname 64> | log | all]} Parameters config - (Optional) Specify to save the configuration.
  • Page 162: Show Boot File

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#save log Command: save log Saving all system logs to NV-RAM..Done. DGS-3000-26TC:admin# To save all the configurations and logs to NV-RAM: DGS-3000-26TC:admin#save all Command: save all Saving all configurations and logs to NV-RAM..Done.
  • Page 163: Connectivity Fault Management (Cfm) Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 16 Connectivity Fault Management (CFM) Command List create cfm md <string 22> {md_index <uint 1-4294967295>} level <int 0-7> config cfm md [<string 22> | md_index <uint 1-4294967295>] {mip [none | auto | explicit] | sender_id [none | chassis | manage | chassis_manage]} create cfm ma <string 22>...
  • Page 164: Create Cfm Md

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 1-4294967295>] ma [<string 22> | ma_index <uint 1-4294967295>]] {trans_id <uint>} delete cfm linktrace {[md [<string 22> | md_index <uint 1-4294967295>] {ma [<string 22> | ma_index <uint 1-4294967295>] {mepid <int 1-8191>}} | mepname <string 32>]}...
  • Page 165: Sender_Id [None | Chassis | Manage | Chassis_Manage]

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 16-2 config cfm md Description This command is used to configure the parameters of a maintenance domain. The creation of MIPs on an MA is useful to trace the link, MIP by MIP. It also allows the user to perform a loopback from an MEP to an MIP.
  • Page 166: Create Cfm Ma {Ma_Index } Md

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format create cfm ma <string 22> {ma_index <uint 1-4294967295>} md [<string 22> | md_index <uint 1-4294967295>] Parameters <string 22> - Enter the maintenance association name. This name can be up to 22 characters long.
  • Page 167 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters <string 22> - Enter the maintenance association name. This name can be up to 22 characters long. ma_index - Specify the maintenance association index. <uint 1-4294967295> - Enter the maintenance association index value here. This value must be between 1 and 4294967295.
  • Page 168: Create Cfm Mep Mepid Md

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#config cfm ma op1 md op_domain vlanid 1 ccm_interval 1sec Command: config cfm ma op1 md op_domain vlanid 1 ccm_interval 1sec Success. DGS-3000-26TC:admin# 16-5 create cfm mep Description This command is used to create an MEP. Different MEPs in the same MA must have a different MEPID.
  • Page 169: Config Cfm Mep

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#create cfm mep mep1 mepid 1 md op_domain ma op1 direction inward port 2 Command: create cfm mep mep1 mepid 1 md op_domain ma op1 direction inward port Success.
  • Page 170: Config Cfm Ais Md [ | Md_Index ] Ma [ | Ma_Index

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide pdu_priority - The 802.1p priority is set in the CCMs and the LTMs messages transmitted by the MEP. The default value is 7. <int 0-7> - Enter the PDU priority value here. This value must be between 0 and 7.
  • Page 171 Example To configure the AIS function so that it is enabled and has a client level of 5: DGS-3000-26TC:admin# config cfm ais md op-domain ma op-ma mepid 1 state enable level 5 Command: config cfm ais md op-domain ma op-ma mepid 1 state enable level 5 Success.
  • Page 172: Delete Cfm Mep

    Example To configure the LCK function state as enabled and specify a client level of 5: DGS-3000-26TC:admin# config cfm lock md op-domain ma op-ma mepid 1 state enable level 5 Command: config cfm lock md op-domain ma op-ma mepid 1 state enable level 5 Success.
  • Page 173: Delete Cfm Ma [ | Ma_Index ] Md [ | Md_Index

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide <uint 1-4294967295> - Enter the maintenance domain index value here. This value must be between 1 and 4294967295. ma - Specify the maintenance association name. <string 22> - Enter the maintenance association name used here. This name can be up to 22 characters long.
  • Page 174: Delete Cfm Md [ | Md_Index ]

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Example To delete a CFM MA: DGS-3000-26TC:admin#delete cfm ma op1 md op_domain Command: delete cfm ma op1 md op_domain Success. DGS-3000-26TC:admin# 16-11 delete cfm md Description This command is used to delete a previously created maintenance domain. All the MEPs and maintenance associations created in the maintenance domain will be deleted automatically.
  • Page 175: Disable Cfm

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format enable cfm Parameters None. Restrictions Only Administrators, Operators and Power-Users can issue this command. Example To enable the CFM globally: DGS-3000-26TC:admin#enable cfm Command: enable cfm Success. DGS-3000-26TC:admin# 16-13...
  • Page 176: Config Cfm Ports State [Enable | Disable]

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 16-14 config cfm ports Description This command is used to enable or disable the CFM function on a per-port basis. By default, the CFM function is disabled on all ports.
  • Page 177: Show Cfm {[Md [ | Md_Index ] {Ma [ | Ma_Index

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Restrictions None. Example To show the CFM ports: DGS-3000-26TC:admin#show cfm ports 3-6 Command: show cfm ports 3-6 Port State ----- -------- Enabled Enabled Enabled Disabled DGS-3000-26TC:admin# 16-16 show cfm Description This command is used to show the CFM configuration.
  • Page 178 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Restrictions None. Example To show the CFM configuration: DGS-3000-26TC:admin#show cfm Command: show cfm CFM State: Enabled MD Index MD Name Level ---------- ---------------------- ----- op_domain DGS-3000-26TC:admin#show cfm md op_domain...
  • Page 179: Show Cfm Fault {Md [ | Md_Index ] {Ma [

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide CFM Port Status : Enabled MAC Address : 78-54-2E-B6-6C-01 MEP State : Enabled CCM State : Enabled PDU Priority Fault Alarm : Disabled Alarm Time : 250 centisecond((1/100)s) Alarm Reset Time...
  • Page 180: Show Cfm Port

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters md - (Optional) Specify the maintenance domain name. <string 22> - Enter the maintenance domain name used here. This name can be up to 22 characters long. md_index - (Optional) Specify the maintenance domain index.
  • Page 181 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Restrictions None. Example To show the MEPs and MIPs created on a port: DGS-3000-26TC:admin#show cfm port 2 Command: show cfm port 2 MAC Address: 00-01-02-03-04-02 MD Name MA Name...
  • Page 182: Cfm Loopback

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Restrictions Only Administrators, Operators and Power-Users can issue this command. Example To start management lock: DGS-3000-26TC:admin# cfm lock md op-domain ma op-ma mepid 1 remote_mepid 2 action start Command: cfm lock md op-domain ma op-ma mepid 1 remote_mepid 2 action start Success.
  • Page 183: Cfm Linktrace

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide <string 1500> - Enter the pattern used here. This value can be up to 1500 characters long. pdu_priority - (Optional) The 802.1p priority to be set in the transmitted LBMs. If not specified, it uses the same priority as CCMs and LTMs sent by the MA.
  • Page 184: Show Cfm Linktrace

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide ma_index - Specify the maintenance association index. <uint 1-4294967295> - Enter the maintenance association index value here. This value can be between 1 and 4294967295. ttl - (Optional) Specify the link trace message TTL value. The default value is 64.
  • Page 185: Delete Cfm Linktrace

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide <uint 1-4294967295> - Enter the maintenance association index value here. This value must between 1 and 4294967295. trans_id - (Optional) Specify the identifier of the transaction displayed. <uint> - Enter the transaction ID used here.
  • Page 186: Show Cfm Mipccm

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format delete cfm linktrace {[md [<string 22> | md_index <uint 1-4294967295>] {ma [<string 22> | ma_index <uint 1-4294967295>] {mepid <int 1-8191>}} | mepname <string 32>]} Parameters md - (Optional) Specify the maintenance domain name.
  • Page 187 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Restrictions None. Example To show MIP CCM database entries: DGS-3000-26TC:admin#show cfm mipccm Command: show cfm mipccm MAC Address Port ---------- ---- ----------------- ----- opma 00-11-22-33-44-55 opma 01-23-45-67-89-10 Total: 2...
  • Page 188 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 16-26 show cfm mp_ltr_all Description This command is used to show the current configuration of the "all MPs reply LTRs" function. Format show cfm mp_ltr_all Parameters None. Restrictions None.
  • Page 189 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide characters long. ma_index - Specify the maintenance association index. <uint 1-4294967295> - Enter the maintenance association index value here. This value must between 1 and 4294967295. mepid - Specify the MEP ID used.
  • Page 190 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide ccm - (Optional) Specify the CCM RX counters. Restrictions None. Example To show the CFM packet’s RX/TX counters: DGS-3000-26TC:admin#show cfm pkt_cnt Command: show cfm pkt_cnt CFM RX Statistics -----------------------------------------------------------------------------...
  • Page 191 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show cfm pkt_cnt ccm Command: show cfm pkt_cnt ccm CCM RX counters: XCON = Cross-connect CCMs Error = Error CCMs Normal = Normal CCMs MEP Name Port Level Direction...
  • Page 192 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide will be cleared. <portlist> - Enter the list of ports used for this configuration here. rx - (Optional) Specify to clear the RX counter. tx - (Optional) Specify to clear the TX counter. If not specified, both of them will be cleared.
  • Page 193: Chapter 17 Cpu Interface Filtering Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 17 CPU Interface Filtering Command List create cpu access_profile profile_id <value 1-5> [ethernet {vlan | source_mac <macmask 000000000000-ffffffffffff> | destination_mac <macmask 000000000000-ffffffffffff> | 802.1p | ethernet_type} | ip {vlan | source_ip_mask <netmask> | destination_ip_mask <netmask> | dscp | [icmp {type | code} | igmp {type} | tcp {src_port_mask <hex 0x0-0xffff>...
  • Page 194 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> | offset_48-63 <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> | offset_64-79 <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff> <hex 0x0-0xffffffff>} | ipv6 {class | flowlabel | source_ipv6_mask <ipv6mask>...
  • Page 195 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide and 31. <hex 0x0-0xffffffff> - Enter the mask pattern offset of the frame between 16 and 31 here. offset_32-47 - (Optional) Specify that the mask pattern offset of the frame will be between 32 and 47.
  • Page 196 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters profile_id - Specify the index of access list profile. <value 1-5> - Enter the profile ID value here. This value must be between 1 and 5. all - Specify that al the access list profiles will be deleted.
  • Page 197 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide <vlan_name 32> - Enter the name of the VLAN here. This name can be up to 32 characters long. vlan_id - (Optional) Specify the VLAN ID used. <vlanid 1-4094> - Enter the VLAN ID used here.
  • Page 198 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide user_define - (Optional) Specify that the rule applies to the IP protocol ID and the mask options behind the first 4 bytes of the IP payload. <hex 0x0-0xffffffff> - Enter the user-defined IP protocol ID mask here.
  • Page 199 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#config cpu access_profile profile_id 1 add access_id 1 ip vlan default source_ip 20.2.2.3 destination_ip 10.1.1.252 dscp 3 icmp type 11 code 32 port 1 deny Command: config cpu access_profile profile_id 1 add access_id 1 ip vlan default source_ip 20.2.2.3 destination_ip 10.1.1.252 dscp 3 icmp type 11 code 32 port 1...
  • Page 200 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters None. Restrictions Only Administrators and Operators can issue this command. Example To disable CPU interface filtering: DGS-3000-26TC:admin#disable cpu_interface_filtering Command: disable cpu_interface_filtering Success. DGS-3000-26TC:admin# 17-6 show CPU access_profile Description This command is used to display current access list table.
  • Page 201 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show cpu access_profile Command: show cpu access_profile CPU Interface Filtering State: Disabled CPU Interface Access Profile Table Total Unused Rule Entries : 500 Total Used Rule Entries =============================================================================== Profile ID: 1...
  • Page 202: Chapter 18 Debug Software Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 18 Debug Software Command List debug error_log [dump | clear | upload_toTFTP {<ipaddr> <path_filename 64>}] debug buffer [utilization | dump | clear | upload_toTFTP <ipaddr> <path_filename 64>] debug output [module <module_list> | all] [buffer | console]...
  • Page 203: Debug Buffer

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#debug error_log dump Command: debug error_log dump ************************************************************************** # debug log: 1 # level: fatal # clock: 10000ms # time : 2009/03/11 13:00:00 ====================== SOFTWARE FATAL ERROR ======================= Invalid mutex handle : 806D6480 Current TASK : bcmARL.0...
  • Page 204 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format debug buffer [utilization | dump | clear | upload_toTFTP <ipaddr> <path_filename 64>] Parameters utilization - Displays the debug buffer’s state. dump - Displays the debug message in the debug buffer.
  • Page 205: Debug Output

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 18-3 debug output Description This command is used to set a specified module’s debug message output to debug buffer or local console. If the user uses the command in a Telnet session, the error message also is output to the local console.
  • Page 206: Debug Config State

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Restrictions Only Administrators can issue this command. Example To set the Switch to not need a reboot when a fatal error occurs: DGS-3000-26TC:admin#debug config error_reboot disable Command: debug config error_reboot disable Success.
  • Page 207: Debug Show Status

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format debug show error_reboot state Parameters None. Restrictions Only Administrators can issue this command. Example To show the debug error reboot state: DGS-3000-26TC:admin#debug show error_reboot state Command: debug show error_reboot state...
  • Page 208 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#debug show status module MSTP Command: debug show status module MSTP Debug Global State : Enabled MSTP : Disabled DGS-3000-26TC:admin# To show the debug state: DGS-3000-26TC:admin#debug show status Command: debug show status...
  • Page 209 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin# debug dhcpv6_relay hop_count state enable Command: debug dhcpv6_relay hop_count state enable Success. DGS-3000-26TC:admin# 18-9 debug dhcpv6_relay output Description This command is used to set debug message to output to buffer or console.
  • Page 210 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide sending - Set packet sending debug flag. state - Specify if the designated flags function will be enabled or disabled. enable - Enable the designated flags. disable - Disable the designated flags.
  • Page 211 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 18-12 debug dhcpv6_relay state enable Description This command is used to enable the DHCPv6 relay Debug function. Format debug dhcpv6_relay state enable Parameters None. Restrictions Only Administrators can issue this command.
  • Page 212 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Example To enabled the DHCPv6 server packet sending debug: DGS-3000-26TC:admin# debug dhcpv6_server packet sending state enable Command: debug dhcpv6_server packet sending state enable Success. DGS-3000-26TC:admin# 18-14 debug dhcpv6_server state disable Description This command is used to disable the DHCPv6 server debug function.
  • Page 213 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters None. Restrictions Only Administrators can issue this command. Example To enabled the DHCPv6 server debug function: DGS-3000-26TC:admin# debug dhcpv6_server state enable Command: debug dhcpv6_server state enable Success. DGS-3000-26TC:admin#...
  • Page 214: Chapter 19 Dhcp Local Relay Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 19 DHCP Local Relay Command List config dhcp_local_relay vlan <vlan_name 32> state [enable | disable] config dhcp_local_relay vlan vlanid <vlan_id> state [enable | disable] config dhcp_local_relay option_82 circuit_id [default | vendor1 | vendor6] config dhcp_local_relay option_82 ports <portlist>...
  • Page 215 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 19-2 config dhcp_local_relay vlan vlanid Description This command is used to enable or disable DHCP local relay function for specified VLAN ID. Format config dhcp_local_relay vlan vlanid <vlan_id> state [enable | disable] Parameters vlanid - Specify the VLAN ID.
  • Page 216 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide d. Sub-option’s length, it should be 4 e. VLAN ID (S-VID) Module ID, for standalone switch, it is 0; for stacking switch, it is the box ID that assigned by stacking.
  • Page 217 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide F13: ASCII format string ‘0’. F14: Slash (/). F15: Port number. The incoming port number DHCP client packets. ASCII format string. F16: Colon (:) F17: ‘cvlan’ is the client’s VLAN ID. The value ranges from 1 to 4094. ASCII format string.
  • Page 218 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide drop - Specify to discard if the packet has the option 82 field. keep - Specify to retain the existing option 82 field in the packet. Restrictions Only Administrators, Operators and Power-Users can issue this command.
  • Page 219 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 19-6 enable dhcp_local_relay Description This command is used to globally enable the DHCP local relay function on the Switch. Format enable dhcp_local_relay Parameters None. Restrictions Only Administrators, Operators and Power-Users can issue this command.
  • Page 220 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#disable dhcp_local_relay Command: disable dhcp_local_relay Success. DGS-3000-26TC:admin# 19-8 show dhcp_local_relay Description This command is used to display the current DHCP local relay configuration. Format show dhcp_local_relay Parameters None. Restrictions None.
  • Page 221 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format show dhcp_local_relay option_82 ports {<portlist>} Parameters <portlist> - (Optional) Enter a list of ports to be displayed. Restrictions None. Example To display DHCP local relay option 82 configuration of port 1 to 5:...
  • Page 222: Chapter 20 Dhcp Relay Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 20 DHCP Relay Command List config dhcp_relay {hops <int 1-16> | time <sec 0-65535>} config dhcp_relay add ipif <ipif_name 12> <ipaddr> config dhcp_relay add vlanid <vlan_id_list> <ipaddr> config dhcp_relay delete ipif <ipif_name 12> <ipaddr>...
  • Page 223 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters hops - (Optional) Specify the maximum number of relay hops that the DHCP/BOOTP packets can cross. The range is 1 to 16. The default value is 4. The DHCP packet will be dropped when the relay hop count in the received packet is equal to or greater than this setting.
  • Page 224 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#config dhcp_relay add ipif System 10.43.21.12 Command: config dhcp_relay add ipif System 10.43.21.12 Success. DGS-3000-26TC:admin# 20-3 config dhcp_relay add vlanid Description This command is used to add an IP address as a destination to forward (relay) DHCP/BOOTP packets.
  • Page 225 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show dhcp_relay Command: show dhcp_relay DHCP/BOOTP Relay Status : Disabled DHCP/BOOTP Hops Count Limit DHCP/BOOTP Relay Time Threshold : 0 DHCP Vendor Class Identifier Option 60 State: Disabled DHCP Client Identifier Option 61 State: Disabled...
  • Page 226 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#config dhcp_relay delete ipif System 10.43.21.12 Command: config dhcp_relay delete ipif System 10.43.21.12 Success. DGS-3000-26TC:admin# 20-5 config dhcp_relay delete vlanid Description This command is used to delete an IP address as a destination to forward (relay) DHCP/BOOTP packets.
  • Page 227 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters state - (Optional) When the state is enabled, the DHCP packet will be inserted with the option 82 field before being relayed to server. The DHCP packet will be processed based on the behaviour defined in check and policy setting.
  • Page 228 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#config dhcp_relay option_82 state enable Command: config dhcp_relay option_82 state enable Success. DGS-3000-26TC:admin#config dhcp_relay option_82 check disable Command: config dhcp_relay option_82 check disable Success. DGS-3000-26TC:admin#config dhcp_relay option_82 policy replace Command: config dhcp_relay option_82 policy replace Success.
  • Page 229 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide byte byte byte byte bytes bytes bytes byte byte bytes a. Sub-option type (1 means circuit ID). b. Length. c. Circuit ID’s sub-option’s first tag, it should be 0.
  • Page 230 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide only use the first 128 bytes. F22: Slash (/). F23: ASCII format string ‘0’. F24: Slash (/). F25: ASCII format string ‘0’. F26: Slash (/). F27: Chassis ID. This value is the same as F11.
  • Page 231 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#enable dhcp_relay Command: enable dhcp_relay Success. DGS-3000-26TC:admin# 20-9 disable dhcp_relay Description This command is used to disable the DHCP relay function on the Switch. Format disable dhcp_relay Parameters None.
  • Page 232 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide If no parameter is specified , the system will display all DHCP relay configuration. Restrictions None. Example To display DHCP relay configuration: DGS-3000-26TC:admin#show dhcp_relay ipif System Command: show dhcp_relay ipif System...
  • Page 233 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide packets. enable - Specify that the option 60 rule will be enabled. disable - Specify that the option 60 rule will be disabled. Restrictions Only Administrators, Operators and Power-Users can issue this command.
  • Page 234 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#config dhcp_relay option_60 add string "abc" relay 10.90.90.1 exact-match Command: config dhcp_relay option_60 add string "abc" relay 10.90.90.1 exact- match Success. DGS-3000-26TC:admin# 20-13 config dhcp_relay option_60 default Description This command is used to configure the DHCP relay option 60 default drop option.
  • Page 235 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 20-14 config dhcp_relay option_60 delete Description This command is used to delete DHCP relay option 60 entry. Format config dhcp_relay option_60 delete [string <multiword 255> {relay <ipaddr>} | ipaddress <ipaddr>...
  • Page 236 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters string - (Optional) Displays the DHCP relay Option 60 string specified by the user. <multiword 255> - Enter the entry's string value here. This value can be up to 255 characters long.
  • Page 237 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters state - Specify whether the DHCP relay option 61 is enabled or disabled. enable - Enables the function DHCP relay use option 61 ruler to relay DHCP packet.
  • Page 238 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Example To configure the DHCP relay option 61 function: DGS-3000-26TC:admin#config dhcp_relay option_61 add mac_address 00-11-22-33-44- 55 drop Command: config dhcp_relay option_61 add mac_address 00-11-22-33-44-55 drop Success DGS-3000-26TC:admin# 20-18 config dhcp_relay option_61 default Description This command is used to configure the default ruler for option 61.
  • Page 239 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format config dhcp_relay option_61 delete [mac_address <macaddr> | string <multiword 255> | all] Parameters mac_address - The entry with the specified MAC address will be deleted. <macaddr> - Enter the MAC address here.
  • Page 240 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show dhcp_relay option_61 Command: show dhcp_relay option_61 Default Relay Rule:Drop Matching Rules: Client-ID Type Relay Rule ----------- ---- --------- 00-11-22-33-44-55 MAC Address Drop Total Entries : 1 DGS-3000-26TC:admin# 20-21...
  • Page 241 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 20-22 show dhcp_relay ports Description This command is used to display the DHCP relay of each port. Format show dhcp_relay ports {<portlist>} Parameters <portlist> - (Optional) Enter a list of ports to be displayed.
  • Page 242 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters <int> - Enter the enterprise number. string - Specify the DHCP relay Option 125 string used. <multiword 255> - Enter the DHCP relay Option 125 string used. This string can be up to 255 characters long.
  • Page 243 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide relay - Specify which packet will be relayed based on the relay rules. drop - Specify to drop the packet that matches option 125 rules set. Restrictions Only Administrators, Operators and Power-Users can issue this command.
  • Page 244 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide <ipaddr> - Enter the IP address here. ipadddress - Specify to delete all the entries whose IP address is equal to the specified IP address. <ipaddr> - Enter to IP address used here.
  • Page 245 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin# config dhcp_relay option_125 state enable Command: config dhcp_relay option_125 state enable. Success DGS-3000-26TC:admin# 20-27 show dhcp_ relay option_125 Description This command is used to show dhcp_relay option_125 command displays the option 125 entry specified by the user.
  • Page 246 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show dhcp_relay option_125 Command: show dhcp_relay option_125 Default Processing Mode: Drop Default Servers: 192.168.0.1 Enterprise ID : 171 --------------------------------------------------------------------- Match Data Data Type Match Type IP Address ---------- ---------...
  • Page 247: Chapter 21 Dhcp Server Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 21 DHCP Server Command List enable dhcp_server enable dhcp class disable dhcp_server disable dhcp class create dhcp excluded_address begin_address <ipaddr> end_address <ipaddr> create dhcp class <class_name 12> create dhcp pool <pool_name 12>...
  • Page 248 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 21-1 enable dhcp_server Description This command is used to enable the DHCP server to distribute IP addresses, subnet masks, gateway addresses, and DNS server addresses to your network. Note: The DHCP server, DHCP client, DHCP relay and the DHCP local relay features are mutually exclusive.
  • Page 249 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Example To enable DHCP class: DGS-3000-26TC:admin#enable dhcp class Command: enable dhcp class Success. DGS-3000-26TC:admin# 21-3 disable dhcp_server Description This command is used to disable the DHCP server function on the switch.
  • Page 250 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters None. Restrictions Only Administrators, Operators and Power-Users can issue this command. Example To disable DHCP class: DGS-3000-26TC:admin#disable dhcp class Command: disable dhcp class Success. DGS-3000-26TC:admin# 21-5 create dhcp excluded_address Description This command is used to create a DHCP server exclude address.
  • Page 251 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#create dhcp excluded_address begin_address 10.10.10.1 end_address 10.10.10.10 Command: create dhcp excluded_address begin_address 10.10.10.1 end_address 10.10.10.10 Success. DGS-3000-26TC:admin# 21-6 create dhcp class Description This command is used to create DHCP class.
  • Page 252 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters <pool_name 12> - Enter the name of the DHCP pool. Restrictions Only Administrators, Operators and Power-Users can issue this command. Example To create a DHCP pool: DGS-3000-26TC:admin#create dhcp pool nyknicks Command: create dhcp pool nyknicks Success.
  • Page 253 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Example To configure manual bindings: DGS-3000-26TC:admin#create dhcp pool manual_binding engineering 10.10.10.1 hardware_address 00-80-C8-02-02-02 type ethernet Command: create dhcp pool manual_binding engineering 10.10.10.1 hardware_address 00-80-C8-02-02-02 type ethernet Success. DGS-3000-26TC:admin# 21-9...
  • Page 254 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide the string <multiword 255> or hex <string 255> to add value for this option, the value of the DHCP client packet’s option needs to match exactly. Use wildcard character “*” for a partial match of a specified string.
  • Page 255 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 21-11 config dhcp pool network_addr Description This command is used to specify the network for the DHCP pool. The addresses in the network are free to be assigned to the DHCP client. The prefix length Specify the number of bits that comprise the address prefix.
  • Page 256 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters <pool_name 12> - Enter the DHCP pool name. <domain_name 64> - (Optional) Enter the domain name of the client. Restrictions Only Administrators, Operators and Power-Users can issue this command.
  • Page 257 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#config dhcp pool dns_server nyknicks 10.10.10.1 Command: config dhcp pool dns_server nyknicks 10.10.10.1 Success. DGS-3000-26TC:admin# 21-14 config dhcp pool netbios_name_server Description This command is used to specify the NetBIOS WINS server that is available to a Microsoft DHCP client.
  • Page 258 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide The NetBIOS node type for Microsoft DHCP clients can be one of four settings: broadcast, peer-to- peer, mixed, or hybrid. Use this command to configure a NetBIOS over TCP/IP device that is described in RFC 1001/1002.
  • Page 259 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Restrictions Only Administrators, Operators and Power-Users can issue this command. Example To configure the default router: DGS-3000-26TC:admin#config dhcp pool default_router clippers 10.10.10.1 Command: config dhcp pool default_router clippers 10.10.10.1 Success.
  • Page 260 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 21-18 config dhcp pool boot_file Description This command is used to specify the name of the file that is used as a boot image. The boot file is used to store the boot image for the client. The boot image is generally the operating system the client uses to load.
  • Page 261 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Restrictions Only Administrators, Operators and Power-Users can issue this command. Example To configure the next server: DGS-3000-26TC:admin#config dhcp pool next_server engineering 192.168.0.1 Command: config dhcp pool next_server engineering 192.168.0.1 Success.
  • Page 262 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 21-21 config dhcp ping_timeout Description This command is used to specify the amount of time the DHCP server must wait before timing out a ping packet. By default, the DHCP server waits 100 milliseconds before timing out a ping packet.
  • Page 263 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide option - Specify the option value used. <value 1-254> - Enter the option value used here. This must be between 1 and 254. string - Specify the character string associated with the option.
  • Page 264 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format config dhcp pool option_43 <pool_name 12> [add string <multiword 255> | delete] Parameters <pool_name 12> - Enter the DHCP pool name here. This name can be up to 12 characters long.
  • Page 265 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide <profile_name 12> - Enter the DHCP server option profile name here. This name can be up to 12 characters long. Restrictions Only Administrators, Operators and Power-Users can issue this command.
  • Page 266: Clear Dhcp Binding

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Restrictions Administrators, Operators and Power-Users can issue this command. Example To add an address range for DHCP class1 in pool1, and display DHCP pool information: DGS-3000-26TC:admin#config dhcp pool class pool1 add class1 begin_address 20.0.0.20 end_address 20.0.0.50...
  • Page 267 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 21-27 clear dhcp conflict_ip Description This command is used to clear an entry or all entries from the conflict IP database. Format clear dhcp conflict_ip [<ipaddr> | all] Parameters <ipaddr>...
  • Page 268 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Example To delete a DHCP server exclude address: DGS-3000-26TC:admin#delete dhcp excluded_address begin_address 10.10.10.1 end_address 10.10.10.10 Command: delete dhcp excluded_address begin_address 10.10.10.1 end_address 10.10.10.10 Success. DGS-3000-26TC:admin# 21-29 delete dhcp pool Description This command is used to delete a DHCP pool.
  • Page 269 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters <pool_name 12> - Enter the DHCP pool name. <ipaddr> - Enter the IP address which will be assigned to a specified client. all - Specify to delete all IP addresses.
  • Page 270 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 21-32 delete dhcp class Description This command is used to delete a DHCP class. Format delete dhcp class <class_name 12> Parameters <class_name 12> - Enter the DHCP class’s name.
  • Page 271: Show Dhcp Binding

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show dhcp excluded_address Command: show dhcp excluded_address Index Begin Address End Address ----- ------------- -------------- 192.168.0.1 192.168.0.100 10.10.10.10 10.10.10.11 Total Entries : 2 DGS-3000-26TC:admin# 21-34 show dhcp binding Description This command is used to display dynamic binding entries.
  • Page 272 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 21-35 show dhcp pool Description This command is used to display the information for DHCP pool. If pool name is not specified, information for all pools will be displayed.
  • Page 273 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters <pool_name 12> - (Optional) Enter the DHCP pool name. Restrictions None. Example To display the configured manual binding entries: DGS-3000-26TC:admin#show dhcp pool manual_binding Command: show dhcp pool manual_binding...
  • Page 274 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show dhcp_server Command: show dhcp_server DHCP Server Global State: Disabled Ping Packet Number Ping Timeout : 100 ms DGS-3000-26TC:admin# 21-38 show dhcp conflict_ip Description This command is used to display the IP address that has been identified as being in conflict.
  • Page 275 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format show dhcp option_profile {<profile_name 12>} Parameters <profile_name 12> - (Optional) Enter the DHCP server option profile name here. This name can be up to 12 characters long. If no parameter is specified, the system will display all DHCP option profile configurations.
  • Page 276 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Example To display the current DHCP class configuration: DGS-3000-26TC:admin#show dhcp class Command: show dhcp class DHCP Class Status : Disabled DHCP Class Name : class1 Option Type Value ---------...
  • Page 277: Chapter 22 Dhcp Server Screening Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 22 DHCP Server Screening Command List create filter dhcpv6_server permit sip <ipv6addr> ports [<portlist> | all] create filter icmpv6_ra_all_node permit sip <ipv6addr> ports [<portlist> | all] config filter dhcp_server [add permit server_ip <ipaddr> {client_mac <macaddr>} ports [<portlist>...
  • Page 278 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#create filter dhcpv6_server permit sip 2200::5 ports 5 Command: create filter dhcpv6_server permit sip 2200::5 ports 5 Success. DGS-3000-26TC:admin# 22-2 create filter icmpv6_ra_all_node permit sip Description This command is used to create a permit entry. The specific ICMPv6 RA All-nodes packets with source IPv6 address can be forwarded on the specified port(s).
  • Page 279 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide the unauthorized machine, giving the attacker the possibility of filtering traffic for passwords or employing a ‘man-in-the-middle’ attack. DHCP filtering works by allowing the administrator to configure each port as a trusted or untrusted port.
  • Page 280 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide disable - Disables the trap and log function. Restrictions Only Administrators, Operators and Power-Users can issue this command. Example To add an entry from the DHCP server filter list in the Switch’s database: DGS-3000-26TC:admin#config filter dhcp_server add permit server_ip 10.90.90.20...
  • Page 281 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Restrictions Only Administrators, Operators and Power-Users can issue this command. Example To enable the Filter DHCPv6 Server log state: DGS-3000-26TC:admin#config filter dhcpv6_server log enable Command: config filter dhcpv6_server log enable Success.
  • Page 282 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 22-6 config filter dhcpv6_server trap Description This command is used to enable or disable the filter DHCPv6 server trap state. Format config filter dhcpv6_server trap [enable | disable] Parameters enable - Specify that the trap for the filter DHCPv6 server will be enabled.
  • Page 283 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Example To enable the filter ICMPv6 RA all-nodes log state: DGS-3000-26TC:admin#config filter icmpv6_ra_all_node log enable Command: config filter icmpv6_ra_all_node log enable Success. DGS-3000-26TC:admin# 22-8 config filter icmpv6_ra_all_node ports Description This command is used to configure the state of the filter ICMPv6 RA all-nodes packets on the switch.
  • Page 284 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 22-9 config filter icmpv6_ra_all_node trap Description This command is used to enable or disable the filter ICMPv6 RA all-nodes trap state. If the ICMPv6 RA all-nodes server trap state is disabled, no trap will be sent out.
  • Page 285 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Example To delete permit entry from the filter DHCPv6 server forward list: DGS-3000-26TC:admin#delete filter dhcpv6_server permit sip 2200::4 Command: delete filter dhcpv6_server permit sip 2200::4 Success. DGS-3000-26TC:admin# 22-11 delete filter icmpv6_ra_all_node permit sip Description This command is used to delete a filter ICMPv6 RA all-nodes permit entry.
  • Page 286 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters None. Restrictions None. Example To display the DHCP server/client filter list created on the Switch: DGS-3000-26TC:admin#show filter dhcp_server Command: show filter dhcp_server Enabled Ports: 1-10 Trap & Log State: Disabled...
  • Page 287 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show filter dhcpv6_server Command: show filter dhcpv6_server Enabled ports:1-8 Trap State: Disabled State: Enabled Permit Source Address Table: Source IP Address Port --------------------------------------- --------------- Total Entries:0 DGS-3000-26TC:admin# 22-14 show filter icmpv6_ra_all_node Description This command is used to display the filter ICMPv6 RA all-nodes information.
  • Page 288 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show filter icmpv6_ra_all_node Command: show filter icmpv6_ra_all_node Enabled ports:1 Trap State: Disabled State: Enabled Permit Source Address Table: Source IP Address Port --------------------------------------- --------------- 3FFE::1 Total Entries:1 DGS-3000-26TC:admin#...
  • Page 289: Chapter 23 Dhcpv6 Relay Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 23 DHCPv6 Relay Command List enable dhcpv6_relay enable dhcpv6_local_relay disable dhcpv6_relay disable dhcpv6_local_relay config dhcpv6_relay [add | delete] ipif <ipif_name 12> <ipv6addr> config dhcpv6_relay hop_count <value 1-32> config dhcpv6_relay ipif [<ipif_name 12> | all] state [enable | disable] config dhcpv6_local_relay vlan [<vlan_name 32>...
  • Page 290 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 23-2 disable dhcpv6_relay Description This command is used to disable the DHCPv6 relay function on the Switch. Format disable dhcpv6_relay Parameters None. Restrictions Only Administrators, Operators and Power-Users can issue this command.
  • Page 291 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin# enable dhcpv6_local_relay Command: enable dhcpv6_local_relay Success. DGS-3000-26TC:admin# 23-4 disable dhcpv6_local_relay Description This command is used to disable the DHCPv6 local relay function of the switch Format disable dhcpv6_local_relay Parameters None.
  • Page 292 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide <ipif_name 12> - Enter the IP interface name here. This name can be up to 12 characters long. <ipv6addr> - Enter the DHCPv6 server IP address. Restrictions Only Administrators, Operators and Power-Users can issue this command.
  • Page 293 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 23-7 config dhcpv6_relay ipif Description This command is used to configure the DHCPv6 relay state of one specific interface or all interfaces. Format config dhcpv6_relay ipif [<ipif_name 12> | all] state [enable | disable] Parameters <ipif_name 12>...
  • Page 294 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide disable - Specify to disable the DHCPv6 local relay function's state for the specified VLAN. Restrictions Only Administrators, Operators, and Power-Users can issue this command. Example To enable the DHCPv6 local relay function for the default VLAN:...
  • Page 295 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide VLAN ID Module Port ID Type 1 byte 2 byte 1 byte 1 byte F01: Sub-option type 2. F02: VLAN ID. The VLAN ID of the incoming DHCP client packet.
  • Page 296 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide F17: ASCII format string ‘0’. F18: Space. F19: System name of the Switch. NOTE: If the System name exceeds 128 bytes, it will only use the first 128 bytes.
  • Page 297 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 23-10 config dhcpv6_relay option_37 Description This command is used to configure the processing of option 37 for the DHCPv6 relay function Format config dhcpv6_relay option_37 {state [enable | disable] | check [enable | disable] | remote_id [default | cid_with_user_define <desc 128>...
  • Page 298 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#config dhcpv6_relay option_37 state enable Command: config dhcpv6_relay option_37 state enable Success. DGS-3000-26TC:admin#config dhcpv6_relay option_37 check enable Command: config dhcpv6_relay option_37 check enable Success. DGS-3000-26TC:admin#config dhcpv6_relay option_37 remote_id default Command: config dhcpv6_relay option_37 remote_id default Success.
  • Page 299 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters ipif - (Optional) The name of the IP interface for which to display the current DHCPv6 relay configuration. <ipif_name 12> - Enter the IP interface name used here. This name can be up to 12 characters long.
  • Page 300 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Restrictions None. Example To display local DHCPv6 relay configuration: DGS-3000-26TC:admin#oper#show dhcpv6_local_relay Command: show dhcpv6_local_relay DHCPv6 Local Relay Status : Disabled DHCPv6 Local Relay VID List : 1,3-4 DGS-3000-26TC:admin#...
  • Page 301: Chapter 24 Dhcpv6 Server Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 24 DHCPv6 Server Command List create dhcpv6 pool <pool_name 12> delete dhcpv6 pool [<pool_name 12> | all] show dhcpv6 pool {<pool_name 12>} config dhcpv6 pool ipv6network_addr <pool_name 12> begin <ipv6networkaddr> end <ipv6networkaddr>...
  • Page 302 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin# create dhcpv6 pool pool1 Command : create dhcpv6 pool pool1 success DGS-3000-26TC:admin# 24-2 delete dhcpv6 pool Description This command is used to delete one or all DHCPv6 pools.
  • Page 303 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters <pool_name 12> - (Optional) Enter the DHCPv6 pool name to be displayed here. This name can be up to 12 characters long. If no parameters are specified, all the DHCPv6 pools will be displayed.
  • Page 304 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format config dhcpv6 pool ipv6network_addr <pool_name 12> begin <ipv6networkaddr> end <ipv6networkaddr> Parameters <pool_name 12> - Enter the DHCPv6 pool name used here. This name can be up to 12 characters long.
  • Page 305 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Restrictions Only Administrators, Operators and Power-Users can issue this command. Example To configure the domain name for the DHCPv6 pool pool1: DGS-3000-26TC:admin# config dhcpv6 pool domain_name pool1 dlink.com Command: config dhcpv6 pool domain_name pool1 dlink.com Success.
  • Page 306 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 24-7 config dhcpv6 pool lifetime Description This command is used to configure the preferred-lifetime and valid-lifetime of IPv6 address within a DHCPv6 pool. • Preferred lifetime - This is the length of time a valid address is preferred (i.e. the time until deprecation) When the preferred lifetime expires, the address becomes deprecated.
  • Page 307 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format config dhcpv6 pool manual_binding <pool_name 12> [add < ipv6addr> client_duid <string 28> | delete [<ipv6addr> | all] ] Parameters <pool_name 12> - Enter the DHCPv6 pool name used here. This name can be up to 12 characters long.
  • Page 308 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Restrictions None. Example To display the manual binding entries of the DHCPv6 pool: DGS-3000-26TC:admin# show dhcpv6 manual_binding Command: show dhcpv6 manual_binding Pool Name :net100 Entry IPv6 Address: 3000:100:1::ABCD DUID...
  • Page 309 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin# show dhcpv6 binding Command: show dhcpv6 binding Pool Name: net90 IPv6 Address: 3000:90:1::7 DUID : 0003000600cd14517000 Preferred(s): 120 Valid(s): 240 Pool Name: net100-2 IPv6 Address: 3000:100:1::1 DUID : 00030006001572200300...
  • Page 310 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format enable dhcpv6_server Parameters None. Restrictions Only Administrators, Operators and Power-Users can issue this command. Example To configure the DHCPv6 server global state to enable: DGS-3000-26TC:admin# enable dhcpv6_server Command: enable dhcpv6_server Success.
  • Page 311 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin# disable dhcpv6_server Command: disable dhcpv6_server Success. DGS-3000-26TC:admin# 24-14 show dhcpv6_server Description This command is used to display the DHCPv6 server setting. Format show dhcpv6_server {ipif <ipif_name 12>} Parameters ipif - (Optional) Specify the IP interface name to be displayed.
  • Page 312 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 24-15 config dhcpv6 pool excluded_address Description This command is used to configure the reserved IPv6 addresses on the DHCPv6 server. This command will configure the IPv6 addresses range that the DHCPv6 server should not assign to DHCPv6 client.
  • Page 313 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 24-16 show dhcpv6 excluded_address Description This command is used to display the groups of IPv6 addresses which are excluded from the legal assigned IPv6 address Format show dhcpv6 excluded_address {<pool_name 12>} Parameters <pool_name 12>...
  • Page 314 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format config dhcpv6_server ipif [<ipif_name 12> | all] state [enable | disable] Parameters <ipif_name 12> - Enter the IP interface name used. This name can be up to 12 characters long.
  • Page 315: Digital Diagnostic Monitoring (Ddm) Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 25 Digital Diagnostic Monitoring (DDM) Command List config ddm [trap | log] [enable | disable] config ddm ports [<portlist> | all] [[temperature_threshold {high_alarm <degrees> | low_alarm <degrees> | high_warning<degrees> | low_warning <degrees>}(1) | voltage_threshold {high_alarm <voltage>...
  • Page 316 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#config ddm log enable Command: config ddm log enable Success. DGS-3000-26TC:admin# To configure DDM trap state to enable: DGS-3000-26TC:admin#config ddm trap enable Command: config ddm trap enable Success. DGS-3000-26TC:admin#...
  • Page 317 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide high_alarm - Specify the high threshold value for the temperature alarm.When the operating parameter rises above this value, the action associated with the alarm is taken. <voltage> - Enter the high threshold alarm value used here.
  • Page 318 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Restrictions Only Administrators and Operators can issue this command. Example To configure the port 25’s temperature threshold: DGS-3000-26TC:admin#config ddm ports 25 temperature_threshold high_alarm 84.9532 low_alarm -10 high_warning 70 low_warning 2.25 Command: config ddm ports 25 temperature_threshold high_alarm 84.9532 low_alarm...
  • Page 319: Show Ddm

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide To configure the port 25’s receive power threshold: DGS-3000-26TC:admin#config ddm ports 25 rx_power_threshold high_alarm 4.55 low_alarm 0.01 high_warning 3.5 low_warning 0.03 Command: config ddm ports 25 rx_power_threshold high_alarm 4.55 low_alarm 0.01 high_warning 3.5 low_warning 0.03...
  • Page 320 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 25-4 show ddm ports Description This command is used to show the current operating DDM parameters and configuration values of the optic module of the specified ports. There are two types of thresholds: the administrative configuration and the operation configuration threshold.
  • Page 321 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide dbm - Specify the DDM TX and RX power unit as dBm. Restrictions Only Administrators and Operators can issue this command. Example To configure the DDM TX and RX power unit as dBm:...
  • Page 322: D-Link Unidirectional Link Detection (Duld) Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 26 D-Link Unidirectional Link Detection (DULD) Command List config duld ports [<portlist> | all] {state [enable | disable] | mode [shutdown | normal] | discovery_time <sec 5-65535>}(1) show duld ports {<portlist>}...
  • Page 323 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#config duld ports 1 state enable Command: config duld ports 1 state enable Success. DGS-3000-26TC:admin# 26-2 show duld ports Description This command is used to show unidirectional link detection information.
  • Page 324: Chapter 27 Domain Name System (Dns) Resolver Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 27 Domain Name System (DNS) Resolver Command List config name_server add [<ipaddr> | <ipv6addr>] {primary} config name_server delete [<ipaddr> | <ipv6addr>] {primary} config name_server timeout <second 1-60> show name_server create host_name <name 255>...
  • Page 325 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 27-2 config name_server delete Description This command is used to delete a DNS resolver name server from the Switch. Format config name_server delete [<ipaddr> | <ipv6addr>] {primary} Parameters <ipaddr> - Enter the IPv4 address of the DNS Resolver name server.
  • Page 326 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#config name_server timeout 10 Command: config name_server timeout 10 Success. DGS-3000-26TC:admin# 27-4 show name_server Description This command is used to display the current DNS Resolver name servers and name server time out on the Switch.
  • Page 327 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format create host_name <name 255> [<ipaddr> | <ipv6addr>] Parameters <name 255> - Enter the hostname used. This name can be up to 255 characters long. <ipaddr> - Enter the host IP address.
  • Page 328 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#delete host_name www.example.com Command: delete host_name www.example.com Success. DGS-3000-26TC:admin# 27-7 show host_name Description This command is used to display the current host name. Format show host_name {static | dynamic} Parameters static - (Optional) Specify to display the static host name entries.
  • Page 329 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 27-8 enable dns_resolver Description This command is used to enable the DNS Resolver state of the Switch. Format enable dns_resolver Parameters None. Restrictions Only Administrators, Operators and Power-Users can issue this command.
  • Page 330 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#disable dns_resolver Command: disable dns_resolver Success. DGS-3000-26TC:admin#...
  • Page 331: Chapter 28 Dos Attack Prevention Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 28 DoS Attack Prevention Command List config dos_prevention dos_type [{land_attack | blat_attack | tcp_null_scan | tcp_xmasscan | tcp_synfin | tcp_syn_srcport_less_1024 | ping_death_attack | tcp_tiny_frag_attack} | all] {action [drop] | state [enable | disable]}...
  • Page 332 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Example To configure land attack and blat attack prevention, the action is drop: DGS-3000-26TC:admin#config dos_prevention dos_type land_attack blat_attack action drop state enable Command: config dos_prevention dos_type land_attack blat_attack action drop state enable Success.
  • Page 333 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show dos_prevention Command: show dos_prevention Trap:Disabled Log:Disabled Function Version : 1.01 DoS Type State Action Frame Counts -------------------------- -------- ---------------- ------------ Land Attack Enabled Drop Blat Attack Enabled Drop...
  • Page 334 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 28-4 config dos_prevention log Description This command is used to enable or disable dos prevention log state. Format config dos_prevention log [enable | disable] Parameters enable - Enables DoS prevetion log state.
  • Page 335: Chapter 29 Energy Efficient Ethernet (Eee) Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 29 Energy Efficient Ethernet (EEE) Command List config eee ports [<portlist> | all] state [enable | disable] show eee ports {<portlist>} 29-1 config eee ports Description This command is used to enable or disable the EEE function on the specified port(s) on the Switch.
  • Page 336 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format show eee ports {<portlist>} Parameters <portlist> - (Optional) Enter a list of ports to be displayed. Restrictions None. Example To display the EEE state: DGS-3000-26TC:admin#show eee ports 1-6,9...
  • Page 337: Ethernet Ring Protection Switching (Erps) Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 30 Ethernet Ring Protection Switching (ERPS) Command List enable erps disable erps create erps raps_vlan <vlanid 1-4094> delete erps raps_vlan <vlanid 1-4094> config erps raps_vlan <vlanid> [state [enable | disable] | ring_mel <value 0-7> | ring_port [west [<port>...
  • Page 338 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Example To enable ERPS: DGS-3000-26TC:admin#enable erps Command: enable erps Success. DGS-3000-26TC:admin# 30-2 disable erps Description This command is used to disable the global ERPS function on a switch. Format...
  • Page 339 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format create erps raps_vlan <vlanid 1-4094> Parameters <vlanid 1-4094> - Enter the VLAN which will be the R-APS VLAN. Restrictions Only Administrators, Operators and Power-Users can issue this command.
  • Page 340 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#delete erps raps_vlan 4094 Command: delete erps raps_vlan 4094 Success. DGS-3000-26TC:admin# 30-5 config erps raps_vlan Description This command is used to configure the ERPS R-APS VLAN settings. The ring MEL is one field in the R-APS PDU. Note that if CFM (Connectivity Fault Management) and ERPS are used at the same time, the R-APS PDU is one of a suite of Ethernet OAM PDU.
  • Page 341 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide APS PDU with an NR flag, it will start the WTR timer. The RPL owner will block the original unblocked RPL port and start to send R-APS PDU with an RB flag after the link recovery is confirmed within this period of time.
  • Page 342 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide sub-ring. state - Specify the propagation state of the topology change for the sub-ring. enable - Enable the propagation state of the topology change for the sub-ring. disable - Disable the propagation state of the topology change for the sub-ring.
  • Page 343 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#config erps raps_vlan 4094 rpl_port west Command: config erps raps_vlan 4094 rpl_port west Success. DGS-3000-26TC:admin# To configure the protected VLAN for a specific R-APS VLAN: DGS-3000-26TC:admin# config erps raps_vlan 4094 protected_vlan add vlanid 10-20 Command: config erps raps_vlan 4094 protected_vlan add vlanid 10-20 Success.
  • Page 344 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin# config erps raps_vlan 4094 sub_ring raps_vlan 4093 tc_propagation state enable Command: config erps raps_vlan 4094 sub_ring raps_vlan 4093 tc_propagation state enable Success. DGS-3000-26TC:admin# 30-6 config erps log Description This command is used to configure the log state of the ERPS events.
  • Page 345 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide configuration may invalid. In this case, to avoid temporary loop, user configuration will not apply to state machine immediately. The ERPS will run protocol by previous configuration which is valid. If the admin value is different from the operational value, it means that the new configuration is not applied.
  • Page 346 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show erps Command: show erps ERPS Information Global Status : Enabled Log Status : Disabled Trap Status : Disabled ------------------------ R-APS VLAN : 4092 Ring Status : Enabled Admin West Port...
  • Page 347 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Admin RPL Owner : Disabled Operational RPL Owner : Disabled Protected VLANs : 250-300 Ring MEL Revertive : Enabled Holdoff Time 0 milliseconds Guard Time : 500 milliseconds WTR Time...
  • Page 348 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin# config erps trap enable Command: config erps trap enable Success. DGS-3000-26TC:admin#...
  • Page 349: Chapter 31 External Alarm Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 31 External Alarm Command List config external_alarm channel <value 1-2> message <sentence 1-128> show external_alarm 31-1 config external_alarm channel Description This command is used to configure external alarm message for a channel.
  • Page 350 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters None. Restrictions None. Example To display the real-time status of external alarm: DGS-3000-26TC:admin#show external_alarm Command: show external_alarm Channel Status Alarm Message ----------- --------- ----------------------------------------------------- Normal External Alamr: UPS is Exhausted.
  • Page 351: Chapter 32 Filter Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 32 Filter Command List config filter netbios [<portlist> | all] state [enable | disable] show filter netbios config filter extensive_netbios [<portlist> | all] state [enable | disable] show filter extensive_netbios...
  • Page 352 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters None. Restrictions None. Example To display the filter netbios list created on the Switch: DGS-3000-26TC:admin#show filter netbios Command: show filter netbios Enabled ports: 1-3 DGS-3000-26TC:admin# 32-3 config filter extensive_netbios Description This command is used to configure the Switch to filter NETBIOS packets over 802.3 flame on the...
  • Page 353 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#config filter extensive_netbios 1-10 state enable Command: config filter extensive_netbios 1-10 state enable Success. DGS-3000-26TC:admin# 32-4 show filter extensive_netbios Description This command is used to display the extensive netbios state on the Switch.
  • Page 354: Chapter 33 Filter Database (Fdb) Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 33 Filter Database (FDB) Command List create fdb <vlan_name 32> <macaddr> [port <port> | drop] create fdb vlanid <vidlist> <macaddr> [port <port> | drop] create multicast_fdb <vlan_name 32> <macaddr>...
  • Page 355: Create Fdb Vlanid

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#create fdb default 00-00-00-00-01-02 port 5 Command: create fdb default 00-00-00-00-01-02 port 5 Success. DGS-3000-26TC:admin# To filter a unicast MAC: DGS-3000-26TC:admin#create fdb default 00-00-00-00-01-02 drop Command: create fdb default 00-00-00-00-01-02 drop Success.
  • Page 356 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide To filter a unicast MAC: DGS-3000-26TC:admin#create fdb vlanid 1 00-00-00-00-02-02 drop Command: create fdb vlanid 1 00-00-00-00-02-02 drop Success. DGS-3000-26TC:admin# 33-3 create multicast_fdb Description This command is used to create a static entry in the multicast MAC address forwarding table (database).
  • Page 357 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters <vlan_name 32> - Enter the VLAN name on which the MAC address resides. The maximum name length is 32. <macaddr> - Enter the MAC address that will be added or deleted to the forwarding table.
  • Page 358 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#config fdb aging_time 600 Command: config fdb aging_time 600 Success. DGS-3000-26TC:admin# 33-6 config multicast vlan_filtering_mode Description This command is used to configure the multicast packet filtering mode for VLANs.
  • Page 359: Delete Fdb

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 33-7 delete fdb Description This command is used to delete a static entry from the forwarding database. Format delete fdb <vlan_name 32> <macaddr> Parameters <vlan_name 32> - Enter VLAN name on which the MAC address resides. The maximum name length is 32.
  • Page 360 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Restrictions Only Administrators, Operators and Power-Users can issue this command. Example To clear all FDB dynamic entries: DGS-3000-26TC:admin#clear fdb all Command: clear fdb all Success. DGS-3000-26TC:admin# 33-9 show multicast_fdb Description This command is used to display the multicast forwarding database of the Switch.
  • Page 361: Show Fdb

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show multicast_fdb Command: show multicast_fdb VLAN Name : default MAC Address : 01-00-5E-00-00-00 Egress Ports : 1-5 Mode : Static Total Entries: 1 DGS-3000-26TC:admin# 33-10 show fdb Description This command is used to display the current unicast MAC address forwarding database.
  • Page 362 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show fdb Command: show fdb Unicast MAC Address Aging Time = 300 VLAN Name MAC Address Port Type Status ---- -------------------------------- ----------------- ----- ------- ------- default 00-01-02-03-04-00 cpu Self...
  • Page 363 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide <vidlist> - Enter the VLAN ID list here. vlan - (Optional) Specify the name of the VLAN. The maximum name length is 32. <vlan_name 32> - Enter the VLAN name here. The VLAN name can be up to 32 characters long.
  • Page 364: Chapter 34 Flash File System (Ffs) Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 34 Flash File System (FFS) Command List show storage_media_info md {<drive_id>} <pathname> rd {<drive_id>} <pathname> cd {<pathname>} dir {<drive_id>} {<pathname>} rename {<drive_id>} <pathname> <filename> del {<drive_id>} <pathname> {recursive} erase {<drive_id>} <pathname>...
  • Page 365 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 34-2 Description This command is used to create a directory. Format md {<drive_id>} <pathname> Parameters <drive_id> - (Optional) Enter the drive ID used, for example, C:. <pathname> - Enter the directory. The path name can be specified either as a full path name or partial name.
  • Page 366 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Restrictions Only Administrators and Operators can issue this command. Example To remove a directory: DGS-3000-26TC:admin#rd c:/abc Command: rd c:/abc Success. DGS-3000-26TC:admin# 34-4 Description This command is used to change the current directory. The current directory is changed under the current drive.
  • Page 367 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 34-5 Description This command is used to list all the files located in a directory of a drive. If pathname is not specified, then all of the files in the specified drive will be displayed. If none of the parameters are specified, the files in the current drive will be displayed.
  • Page 368 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format rename {<drive_id>} <pathname> <filename> Parameters <drive_id> - (Optional) Enter the drive ID used, for example, C:. <pathname> - Enter the file (in path form) to be renamed. <filename> - Enter the new name of the file.
  • Page 369 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Example Delete a directory with parameter “recursive”: DGS-3000-26TC:admin#dir Command: dir Directory of / c: Idx Info Attr Size Update Time Name --- ------- ---- -------- ------------------- ---------------- drw- 0...
  • Page 370 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters <drive_id> - (Optional) Enter the drive ID used, for example, C:. <pathname> - Enter the file to be deleted. If it is specified in the associated form, then it is related to the current directory.
  • Page 371 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 34-9 move Description This command is used to move a file around the file system. Note that when a file is moved, it can be specified whether to rename at the same time.
  • Page 372 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide name or partial name. For partial path name, it indicates the file is in the current directory. Restrictions Only Administrators and Operators can issue this command. Example To copy a file: DGS-3000-26TC:admin#copy c:/log.txt c:/log1.txt...
  • Page 373: Chapter 35 Ftp Client Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 35 FTP Client Command List download firmware_fromFTP [[<ipaddr> | <ipv6addr>] {tcp_port <tcp_port_number 1-65535>} src_file <path_filename 64> | ftp:<string 128 >] {dest_file <path_filename 64> {boot_up}} upload firmware_toFTP [[<ipaddr> | <ipv6addr>] {tcp_port <tcp_port_number 1-65535>} dest_file <path_filename 64>...
  • Page 374 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Examples This example shows how to download a firmware file from an FTP server. DGS-3000-26TC:admin# download firmware_fromFTP 10.54.71.1 tcp_port 21 px.had Command: download firmware_fromFTP 10.54.71.1 tcp_port 21 px.had Connecting to server....Done.
  • Page 375 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide <pathname 64> - Enter the source file's name and path here. This can be up to 64 characters long. Restrictions Only Administrators and Operators can issue this command. Example This example shows how to upload a firmware file from the Switch to an FTP server.
  • Page 376 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Examples This example shows how to download the configuration file from an FTP server. DGS-3000-26TC:admin# download cfg_fromFTP 10.54.71.1 cfg01.txt 1 Command: download cfg_fromFTP 10.54.71.1 cfg01.txt 1 Connecting to server....Done.
  • Page 377 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide characters long. include – (Optional) Specify to include a filter string. exclude - (Optional) Specify to exclude a filter string. begin - (Optional) Specify to use a filter string that begins with the string specified.
  • Page 378 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 35-5 upload log_toFTP Description This command is used to upload a log file from the Switch to an FTP server. Format upload log_toFTP [[<ipaddr> | <ipv6addr>] {tcp_port <tcp_port_number 1-65535>} dest_file <path_filename 64>...
  • Page 379 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin# upload log_toFTP ftp: john:123456@10.90.90.15:21/log/log.txt Command: upload log_toFTP ftp: john:123456@10.90.90.15:21/log/log.txt Connecting to server....Done. Upload log......Done. DGS-3000-26TC:admin# 35-6 upload attack_log_toFTP Description This command is used to upload the attack log from the Switch to an FTP server.
  • Page 380 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide This example shows how to upload the attack log to an FTP server using a string. DGS-3000-26TC:admin# upload attack_log_toFTP ftp: john:123456@10.90.90.15:21/log.txt Command: upload attack_log_toFTP ftp: john:123456@10.90.90.15:21/log.txt Connecting to server....Done.
  • Page 381: Chapter 36 Gratuitous Arp Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 36 Gratuitous ARP Command List config gratuitous_arp send ipif_status_up [enable | disable] config gratuitous_arp send dup_ip_detected [enable | disable] config gratuitous_arp learning [enable | disable] config gratuitous_arp send periodically ipif <ipif_name 12> interval <value 0-65535>...
  • Page 382 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 36-2 config gratuitous_arp send dup_ip_detected Description This command is used to enable or disable the sending of gratuitous ARP request packets while the duplicate IP is detected. The duplicate IP detected means that the system received an ARP request packet that is sent by an IP address that matches the system’s own IP address.
  • Page 383 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters enable - Enables the learning of ARP entry based on the received gratuitous ARP packet. This is the default value. disable - Disables the learning of ARP entry based on the received gratuitous ARP packet.
  • Page 384 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#config gratuitous_arp send periodically ipif System interval 5 Command: config gratuitous_arp send periodically ipif System interval 5 Success. DGS-3000-26TC:admin# 36-5 enable gratuitous_arp Description This command is used to enable gratuitous ARP trap and log state. The switch can trap and log the IP conflict event to inform the administrator.
  • Page 385 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format disable gratuitous_arp {ipif <ipif_name 12>} {trap | log}(1) Parameters ipif - (Optional) Specify the interface name of L3 interface <ipif_name 12> - Enter the IP interface name here. This name can be up to 12 characters long.
  • Page 386 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show gratuitous_arp Command: show gratuitous_arp Send on IPIF Status Up : Enabled Send on Duplicate IP Detected : Enabled Gratuitous ARP Learning : Enabled IP Interface Name : System...
  • Page 387: Chapter 37 Historical Counter Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 37 Historical Counter Command List show historical_counter [packet | error] [ports <portlist>] [15_minute {slot <index 1-5>} | 1_day {slot <index 1-2>}] show historical_utilization [cpu | memory] [15_minute {slot <index 1-5>} | 1_day {slot <index 1- 2>}]...
  • Page 388 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show historical_counter packet ports 1 15_minute slot 1 Command: show historical_counter packet ports 1 15_minute slot 1 Port 1 15-Minute Slot 1 Starttime : 27 Jan 2000 22:32:51 Endtime...
  • Page 389 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 37-2 show historical_utilization Description This command is used to display the historical utilization of CPU and memory. There are two kinds of statistics offered, 15-minute based and 1-day based. For statistics based on 15 minutes, there are five counting slots for the historical statistic count.
  • Page 390 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show historical_utilization cpu 1_day Command: show historical_utilization cpu 1_day CPU Utilization ------------------------------------------------------------------------------- ---- 1-Day Slot 1 (27 Jan 2000 23:06:16 – 27 Jan 2000 23:06:16) 1-Day Slot 2 (26 Jan 2000 23:06:16 – 25 Jan 2000 23:06:16)
  • Page 391 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format clear historical_counters ports [<portlist> | all] Parameters <portlist> - Enter a port or range of ports to be selected. all - Specify that all ports will be selected.
  • Page 392: Chapter 38 Igmp Snooping Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 38 IGMP Snooping Command List The Internet Group Management Protocol (IGMP) is a L3 protocol used to manage the membership of Internet Protocol multicast groups. IGMP is used by IP hosts and adjacent multicast routers to establish multicast group memberships.
  • Page 393 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide clear igmp_snooping statistics counter show igmp_snooping host {[vlan <vlan_name 32> | vlanid <vlanid_list> | ports <portlist> | group <ipaddr>]} 38-1 config igmp_snooping Description This command is used to configure IGMP snooping on the Switch.
  • Page 394 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#config igmp_snooping vlan_name default state enable Command: config igmp_snooping vlan_name default state enable Success. DGS-3000-26TC:admin# 38-2 config igmp_snooping rate_limit Description This command is used to configure the rate of IGMP control packet that is allowed per port or per VLAN.
  • Page 395 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 38-3 config igmp_snooping querier Description This command is used to configure the time in seconds between general query transmissions, the maximum time in seconds to wait for reports from members, and the permitted packet loss that guarantees IGMP snooping.
  • Page 396 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide function but does not provide the multicast routing function, then this state must be configured as disabled. Otherwise, if the Layer 3 router is not selected as the querier, it will not send the IGMP query packet.
  • Page 397 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Example To enable IGMP Access Control for all ports: DGS-3000-26TC:admin#config igmp access_authentication ports all state enable Command: config igmp access_authentication ports all state enable Success. DGS-3000-26TC:admin# 38-5 config router_ports...
  • Page 398 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format config router_ports_forbidden [ <vlan_name 32> | vlanid <vlanid_list> ] [add | delete] <portlist> Parameters <vlan_name 32> - Enter the name of the VLAN on which the router port resides.
  • Page 399 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#enable igmp_snooping Command: enable igmp_snooping Success. DGS-3000-26TC:admin# 38-8 disable igmp_snooping Description This command is used to disable IGMP snooping on the Switch. Disabling IGMP snooping allows all IGMP and IP multicast traffic to flood within a given IP interface.
  • Page 400 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide The static member port will only affect V2 IGMP operation. The Reserved IP multicast address 224.0.0.X must be excluded from the configured group. The VLAN must be created first before a static group can be created.
  • Page 401 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Restrictions Only Administrators, Operators and Power-Users can issue this command. Example To delete an IGMP snooping static group for VLAN 1, group 239.1.1.1: DGS-3000-26TC:admin#delete igmp_snooping static_group vlan default 239.1.1.1 Command: delete igmp_snooping static_group vlan default 239.1.1.1...
  • Page 402 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#config igmp_snooping static_group vlan default 239.1.1.1 delete 9-10 Command: create igmp_snooping static_group vlan default 239.1.1.1 delete 9-10 Success. DGS-3000-26TC:admin# 38-12 show igmp_snooping static_group Description This command is used to display the IGMP snooping multicast group static members.
  • Page 403 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide not activated by IGMP membership registration, but activated by the traffic. For an ordinary IGMP snooping entry, the IGMP protocol will take care of the aging out of the entry. For a data-driven entry, the entry can be specified not to be aged out or to be aged out by the aged timer.
  • Page 404 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#config igmp_snooping data_driven_learning vlan_name default state enable Command: config igmp_snooping data_driven_learning vlan_name default state enable Success. DGS-3000-26TC:admin# 38-14 config igmp_snooping data_driven_learning max_learned_entry Description This command is used to configure the maximum number of groups that can be learned by data driven.
  • Page 405 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format clear igmp_snooping data_driven_group [all | [vlan_name <vlan_name> | vlanid <vlanid_list>] [<ipaddr> | all]] Parameters all - Specify all VLANs to which IGMP snooping groups will be deleted. vlan_name - Specify the VLAN name.
  • Page 406 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Restrictions None. Example To show IGMP snooping: DGS-3000-26TC:admin#show igmp_snooping Command: show igmp_snooping IGMP Snooping Global State : Enabled Data Driven Learning Max Entries : 128 VLAN Name : default...
  • Page 407 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Restrictions None. Example To display the IGMP snooping rate limit for ports 1 to 15: DGS-3000-26TC:admin#show igmp_snooping rate_limit ports 1-15 Command: show igmp_snooping rate_limit ports 1-15 Port Rate Limit...
  • Page 408 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Example To show IGMP snooping groups when IGMP v3 is supported: DGS-3000-26TC:admin#show igmp_snooping group Command: show igmp_snooping group Source/Group : 10.0.0.1/225.0.0.1 VLAN Name/VID : default/1 Member Ports UP Time...
  • Page 409 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show igmp_snooping group Command: show igmp_snooping group Source/Group : NULL/226.0.0.1 VLAN Name/VID : default/1 Member Ports UP Time : 10 Expiry Time : 258 Filter Mode : EXCLUDE Source/Group : NULL/226.0.0.2...
  • Page 410 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters vlan - (Optional) Specify the name of the VLAN for which you want to view IGMP snooping forwarding table information. <vlan_name 32> - Enter the VLAN name here. The VLAN name can be up to 32 characters long.
  • Page 411 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters vlan - Specify the name of the VLAN on which the router port resides. <vlan_name 32> - Enter the VLAN name here. The VLAN name can be up to 32 characters long.
  • Page 412 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters vlan - Specify a VLAN to be displayed. <vlan_name> - Enter the VLAN name here. vlanid - Specify a list of VLANs to be displayed. <vlanid_list> - Enter the VLAN ID list here.
  • Page 413 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show igmp_snooping statistic counter vlanid 67 Command: show igmp_snooping statistic counter vlanid 67 VLAN Name : VLAN67 -------------------------------------------------- Group Number Receive Statistics Query IGMP v1 Query IGMP v2 Query...
  • Page 414 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show igmp_snooping statistic counter ports 1 Command: show igmp_snooping statistic counter ports 1 Port # -------------------------------------------------- Group Number Receive Statistics Query IGMP v1 Query IGMP v2 Query IGMP v3 Query...
  • Page 415 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format show igmp access_authentication ports [all | <portlist>] Parameters all - Specify all ports to be displayed. <portlist> - Enter a range of ports to be displayed. Restrictions None.
  • Page 416 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show igmp access_authentication ports all Command: show igmp access_authentication ports all Port State ----- --------- Enabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled...
  • Page 417 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#clear igmp_snooping statistic counter Command: clear igmp_snooping statistic counter Success. DGS-3000-26TC:admin# 38-24 show igmp_snooping host Description This command is used to display the IGMP hosts that have joined groups on specific ports or specific VLANs.
  • Page 418 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show igmp_snooping host vlan default Command: show igmp_snooping host vlan default VLAN ID Group Port No IGMP Host -------- ----------------- --------- ------------ 225.0.1.0 198.19.1.2 225.0.1.0 198.19.1.3 225.0.1.0 198.19.1.4 225.0.1.2 198.19.1.3...
  • Page 419: Chapter 39 Ip-Mac-Port Binding (Impb) Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 39 IP-MAC-Port Binding (IMPB) Command List create address_binding ip_mac ipaddress <ipaddr> mac_address <macaddr> {ports [<portlist> | all]} config address_binding ip_mac ports [<portlist> | all] {arp_inspection [strict | loose | disable] | ip_inspection [enable | disable] | protocol [ipv4 | ipv6 | all] | allow_zeroip [enable | disable] | forward_dhcppkt [enable | disable] | stop_learning_threshold <int 0-500>}...
  • Page 420 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format create address_binding ip_mac ipaddress <ipaddr> mac_address <macaddr> {ports [<portlist> | all]} Parameters ipaddress - Specify the IP address used for the IMPB entry. <ipaddr> - Enter the IP address used here.
  • Page 421 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide packets are detected. If not specified strict or loose, default is strict. disable - Disable ARP inspection function. The default value is disabled. ip_inspection - (Optional) Specify that the IP inspection option will be configured.
  • Page 422 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters <ipv6addr> - Enter the IPv6 address. mac_address - Specify the MAC address. <macaddr> - Enter the MAC address here. ports - (Optional) Specify a range of ports or all ports.
  • Page 423 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Example To configure a static IPv6 IMPB entry so that that IPv6 address fe80::240:5ff:fe00:28 is bound to the MAC address 00-00-00-00-00-11: DGS-3000-26TC:admin#config address_binding ip_mac ipv6address fe80::240:5ff:fe00:28 mac_address 00-00-00-00-00-11 Command: config address_binding ip_mac ipv6address FE80::240:5FF:FE00:28 mac_address 00-00-00-00-00-11 Success.
  • Page 424 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 39-6 delete address_binding ip_mac Description This command is used to delete an IMPB entry. Format delete address_binding ip_mac [all | ipaddress <ipaddr> mac_address <macaddr> | ipv6address <ipv6addr> mac_address <macaddr>] Parameters all - Specify that all the MAC address will be used.
  • Page 425 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters ipaddress - Specify the IP address of the entry being updated. <ipaddr> - Enter the IP address used here. mac_address - Specify the MAC address of the entry being updated <macaddr>...
  • Page 426 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show address_binding Command: show address_binding Roaming state : Enabled Trap/Log : Disabled DHCP Snoop(IPv4) : Disabled DHCP Snoop(IPv6) : Disabled ND Snoop : Disabled Function Version : 3.93 DGS-3000-26TC:admin#...
  • Page 427 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters all - Specify that all the addresses in the database that the system has auto learned and blocked to be displayed. vlan_name - Specify the name of the VLAN to which the blocked MAC address belongs.
  • Page 428 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Restrictions None. Example To show IMPB entries: GS-3000-26TC:admin#show address_binding ip_mac all Command: show address_binding ip_mac all M(Mode) - D:DHCP, N:ND S:Static ACL - A:Active I:Inactive IP Address MAC Address...
  • Page 429 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format enable address_binding dhcp_snoop {[ipv6 | all]} Parameters ipv6 - (Optional) Specify to enable the IPv6 entries. all - (Optional) Specify to enable all DHCP snooping mode. Restrictions Only Administrators, Operators and Power-Users can issue this command.
  • Page 430 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#disable address_binding dhcp_snoop Command: disable address_binding dhcp_snoop Success. DGS-3000-26TC:admin# 39-13 clear address_binding dhcp_snoop binding_entry ports Description This command is used to clear the DHCP snooping entries learned for the specified ports.
  • Page 431 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters max_entry - (Optional) Displays the maximum number of entries per port. ports - Specify the ports used for this configuration. <portlist> - Enter a list of ports used here.
  • Page 432 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 39-15 show address_binding dhcp_snoop binding_entry Description This command is used to display the DHCP snooping binding entries. Format show address_binding dhcp_snoop binding_entry {port <port>} Parameters port - (Optional) Specify the port used for this configuration.
  • Page 433 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters ports - Specify the list of ports you would like to set the maximum number of entries that can be learned. <portlist> - Enter the list of ports used here.
  • Page 434 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#enable address_binding nd_snoop Command: enable address_binding nd_snoop Success. DGS-3000-26TC:admin# 39-18 disable address_binding nd_snoop Description This command is used to disable ND snooping on the Switch. Format disable address_binding nd_snoop Parameters None.
  • Page 435 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide all - Specify that all the ports will be usd for this configuration. max_entry - Specify the maximum number of entries. <value 1-50> - Enter the maximum number of entries used here. This value must be between 1 and 50.
  • Page 436 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide To show the ND snooping maximum entry information for ports 1-5: DGS-3000-26TC:admin#show address_binding nd_snoop ports 1-5 Command: show address_binding nd_snoop ports 1-5 Port Max Entry ---- --------- No Limit...
  • Page 437 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show address_binding nd_snoop binding_entry Command: show address_binding nd_snoop binding_entry S (Status) - A: Active, I: Inactive Time - Left Time (sec) IP Address MAC Address LT(sec) Port --------------------------------------- ----------------- -- ---------- -----...
  • Page 438 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format enable address_binding trap_log Parameters None. Restrictions Only Administrators, Operators and Power-Users can issue this command. Example To enable the IMPB traps and logs: DGS-3000-26TC:admin#enable address_binding trap_log Command: enable address_binding trap_log Success.
  • Page 439 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#disable address_binding trap_log Command: disable address_binding trap_log Success. DGS-3000-26TC:admin# 39-25 config address_binding recover_learning Description This command is used to recover IMPB checking. Format config address_binding recover_learning ports [<portlist> | all] Parameters ports - Specify the list of ports that need to recover the IMPB check.
  • Page 440 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters event - Prints out the debug messages when IMPB module receives ARP/IP packets. dhcp - Prints out the debug messages when the IMPB module receives the DHCP packets.
  • Page 441 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#no debug address_binding Command: no debug address_binding Success. DGS-3000-26TC:admin# 39-28 enable address_binding roaming Description This command is used to enable the IMPB roaming. Format enable address_binding roaming Parameters None.
  • Page 442 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Restrictions Only Administrators, Operators and Power-Users can issue this command. Example To disable the IMPB roaming: DGS-3000-26TC:admin#disable address_binding roaming Command: disable address_binding roaming Success. DGS-3000-26TC:admin#...
  • Page 443: Chapter 40 Ipv6 Neighbor Discover Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 40 IPv6 Neighbor Discover Command List create ipv6 neighbor_cache ipif <ipif_name 12> <ipv6addr> <macaddr> delete ipv6 neighbor_cache ipif [<ipif_name 12> | all] [<ipv6addr> | static | dynamic | all] show ipv6 neighbor_cache ipif [<ipif_name 12>...
  • Page 444 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 40-2 delete ipv6 neighbor_cache Description This command is used to delete a neighbor cache entry or static neighbor cache entries from the address cache or all address cache entries on this IP interface. Both static and dynamic entries can be deleted.
  • Page 445 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide <ipif_name 12> - Enter the IP interface name here. This name can be up to 12 characters long. all - Specify that all the interface will be displayed. ipv6address - Specify the neighbor’s address.
  • Page 446: Show Ipv6 Nd

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Restrictions Only Administrators, Operators and Power-Users can issue this command. Example To configure the retrans_time of IPv6 ND neighbor solicitation: DGS-3000-26TC:admin#config ipv6 nd ns ipif Zira retrans_time 1000000 Command: config ipv6 nd ns ipif Zira retrans_time 1000000 Success.
  • Page 447: Chapter 41 Ipv6 Route Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 41 IPv6 Route Command List create ipv6route [default | <ipv6networkaddr>] [<ipif_name 12> <ipv6addr> | <ipv6addr>] {<metric 1-65535>} {[primary | backup]} delete ipv6route [[default | <ipv6networkaddr>] [<ipif_name 12> <ipv6addr> | <ipv6addr>] | all] show ipv6route {[<ipv6networkaddr>...
  • Page 448: Delete Ipv6Route

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 41-2 delete ipv6route Description This command is used to delete an IPv6 static route. If the next hop is a global address, it is not needed to indicate the interface name. If the next hop is a link local address, then the interface name must be specified.
  • Page 449 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide longest prefix matched route will be displayed static - (Optional) Specify to display only static routes. One static route may be active or inactive. Restrictions None. Example Show all the IPv6 routes:...
  • Page 450: Chapter 42 Japanese Web-Based Access Control (Jwac) Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 42 Japanese Web-Based Access Control (JWAC) Command List enable jwac disable jwac config jwac [quarantine_server_url [<string 128> | ipv6 <string 128>] | clear_quarantine_server_url {ipv6}] show jwac enable jwac redirect disable jwac redirect config jwac redirect {destination [quarantine_server | jwac_login_page] | delay_time <sec 0-...
  • Page 451 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 42-1 enable jwac Description This command is used to enable the Japanese Web-based access control (JWAC) function. Using the JWAC function, PC users need to pass two stages of authentication. The first stage is to do the authentication with the quarantine server and the second stage is the authentication with the Switch.
  • Page 452 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Example To disable JWAC: DGS-3000-26TC:admin#disable jwac Command: disable jwac Success. DGS-3000-26TC:admin# 42-3 config jwac Description This command is used to configure the quarantine server URL. If the redirection is enabled and the...
  • Page 453 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin# config jwac quarantine_server_url http://10.90.90.88/authpage.html Command: config jwac quarantine_server_url http://10.90.90.88/authpage.html Success. DGS-3000-26TC:admin# To configure Quarantine Server URL (Add IPv6 Quarantine Server URL on v1.10): DGS-3000-26TC:admin# config jwac quarantine_server_url ipv6 http://[3000::2]/authpage.html...
  • Page 454 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show jwac Command: show jwac State : Disabled Enabled Ports Virtual IP/URL : 1.1.1.1/- Virtual IPv6/URL : ::/- Switch HTTP Port : 80 (HTTP) UDP Filtering : Enabled Forcible Logout...
  • Page 455 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#enable jwac redirect Command: enable jwac redirect Success. DGS-3000-26TC:admin# 42-6 disable jwac redirect Description This command is used to disable JWAC redirect. When redirect is disabled, only access to quarantine_server and the jwac_login_page from an unauthenticated host is allowed, all other Web access will be denied.
  • Page 456 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters destination - Specify the destination which the unauthenticated host will be redirected to. quarantine_server - Specify the unauthenticated host will be redirected to the quarantine_server. jwac_login_page - Specify the unauthenticated host will be redirected to the jwac_login_page.
  • Page 457 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#enable jwac forcible_logout Command: enable jwac forcible_logout Success. DGS-3000-26TC:admin# 42-9 disable jwac forcible_logout Description This command is used to disable JWAC forcible logout. Format disable jwac forcible_logout Parameters None.
  • Page 458 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters None. Restrictions Only Administrators, Operators and Power-Users can issue this command. Example To enable JWAC UDP filtering: DGS-3000-26TC:admin#enable jwac udp_filtering Command: enable jwac udp_filtering Success. DGS-3000-26TC:admin# 42-11 disable jwac udp_filtering Description This command is used to disable JWAC UDP filtering.
  • Page 459 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 42-12 enable jwac quarantine_server_monitor Description This command is used to enable the JWAC quarantine server monitor. When enabled, the JWAC switch will monitor the quarantine server to ensure the server is okay. If the Switch detects no quarantine server, it will redirect all unauthenticated HTTP accesses to the JWAC Login Page forcibly if the redirect is enabled and the redirect destination is configured to be quarantine server.
  • Page 460 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Example To disable JWAC quarantine server monitoring: DGS-3000-26TC:admin#disable jwac quarantine_server_monitor Command: disable jwac quarantine_server_monitor Success. DGS-3000-26TC:admin# 42-14 config jwac quarantine_server_error_timeout Description This command is used to set the quarantine server error timeout. When the quarantine server monitor is enabled, the JWAC switch will periodically check if the quarantine works okay.
  • Page 461 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters <ipaddr> - Enter the IP address of the virtual IP. <ipv6addr> - Enter the IPv6 address of the virtual IP. url - (Optional) Specify the URL of the virtual IP.
  • Page 462 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters add - Specify to add a network address to which the traffic will not be blocked. Up to 100 network addresses can be added. delete - Specify to delete a network address to which the traffic will not be blocked.
  • Page 463 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide https - (Optional) Specify the JWAC run HTTPS protocol on this TCP port. Restrictions Only Administrators, Operators and Power-Users can issue this command. Example To configure the TCP port which the JWAC switch listens to:...
  • Page 464 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide port_based - Specify the port authentication mode as port-based. Restrictions Only Administrators, Operators and Power-Users can issue this command. Example To configure the JWAC port state: DGS-3000-26TC:admin#config jwac ports 1-9 state enable Command: config jwac ports 1-9 state enable Success.
  • Page 465 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show jwac ports 1-4 Command: show jwac ports 1-4 Port State Aging Time Idle Time Block Time Auth Mode (min) (min) (sec) Hosts ----- -------- ---------- --------- ---------- ----------...
  • Page 466 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 42-21 create jwac user Description This command is used to create JWAC users in the local database. When “local” is chosen while configuring the JWAC RADIUS protocol, the local database will be used.
  • Page 467 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Restrictions Only Administrators, Operators and Power-Users can issue this command. Example To configure a JWAC user: DGS-3000-26TC:admin#config jwac user 112233 Command: config jwac user 112233 Enter a old password:****...
  • Page 468 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 42-24 show jwac user Description This command is used to display JWAC users in the local database. Format show jwac user Parameters None. Restrictions None. Example To display the current JWAC local users:...
  • Page 469 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide authenticating - (Optional) Specify the state of host to delete. blocked - (Optional) Specify the state of host to delete. mac_addr - Deletes a specified host with this MAC address.
  • Page 470 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show jwac auth_state ports 1-4 Command: show jwac auth_state ports 1-4 Pri - Priority. State - A:Authenticated, B:Blocked, -:Authenticating Time - Aging Time/Idle Time for authenticated entries. Port MAC Address...
  • Page 471 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Example To disable the configuration authorized from the local database: DGS-3000-26TC:admin#config jwac authorization attributes local disable Command: config jwac authorization attributes local disable Success. DGS-3000-26TC:admin# 42-28 show jwac update_server Description This command is used to display the JWAC update server.
  • Page 472 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin# show jwac update_server Command: show jwac update_server Index TCP/UDP Port State ----- ------------------------------------------- ------- ----- -------- 10.0.0.0/8 Inactive 10.1.1.1/32 Inactive 10.3.3.3/32 Inactive 10.3.3.4/32 Inactive 10.3.3.5/32 Inactive 10.3.3.6/32 Inactive 10.3.3.7/32...
  • Page 473 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide <desc 32> - Enter the login window title of the authenticate page. The login window title description can be up to 32 characters long. user_name_title - Specify the user name title of the authenticate page.
  • Page 474 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Restrictions Only Administrators, Operators and Power-Users can issue this command. Example To customize the authenticate page: DGS-3000-26TC:admin#config jwac authenticate_page japanese Command: config jwac authenticate_page japanese Success. DGS-3000-26TC:admin# 42-31 show jwac authenticate_page Description This command is used to display the element mapping of the customized authenticate page.
  • Page 475 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show jwac authenticate_page Command: show jwac authenticate_page Current Page : English Version English Page Element ----------------------------------------------------------- Page Title Login Window Title : Authentication Login User Name Title : User Name...
  • Page 476: Chapter 43 Jumbo Frame Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 43 Jumbo Frame Command List enable jumbo_frame disable jumbo_frame show jumbo_frame 43-1 enable jumbo_frame Description This command is used to configure the jumbo frame setting as enable. Format...
  • Page 477 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters None. Restrictions Only Administrators and Operators can issue this command. Example To disable the Jumbo frame: DGS-3000-26TC:admin#disable jumbo_frame Command: disable jumbo_frame Success. DGS-3000-26TC:admin# 43-3 show jumbo_frame Description This command is used to display the current configuration of jumbo frame.
  • Page 478: Chapter 44 Layer 2 Protocol Tunneling (L2Pt) Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 44 Layer 2 Protocol Tunneling (L2PT) Command List enable l2protocol_tunnel disable l2protocol_tunnel config l2protocol_tunnel ports [<portlist> | all] type [uni tunneled_protocol [{stp | gvrp | protocol_mac [01-00-0C-CC-CC-CC | 01-00-0C-CC-CC-CD]}(1) | all] {threshold <value 0- 65535>} | nni | none]...
  • Page 479 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters None. Restrictions Only Administrators and Operators can issue this command. Example To disable the Layer 2 protocol tunneling function: DGS-3000-26TC:admin#disable l2protocol_tunnel Command: disable l2protocol_tunnel Success. DGS-3000-26TC:admin# 44-3 config l2protocol_tunnel ports Description This command is used to configure Layer 2 protocol tunneling on ports.
  • Page 480 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide threshold - (Optional) Specify the drop threshold for packets-per-second accepted on the UNI ports. The ports drop the PDU if the protocol’s threshold is exceeded. <value 0-65535> - Enter the threshold range value between 0 to 65535 (packet/second).
  • Page 481 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show l2protocol_tunnel Command: show l2protocol_tunnel Global State : Enabled UNI Ports : 1-4 NNI Ports DGS-3000-26TC:admin# To show Layer 2 protocol tunneling information summary: DGS-3000-26TC:admin#show l2protocol_tunnel uni Command: show l2protocol_tunnel uni...
  • Page 482: Chapter 45 Link Aggregation Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 45 Link Aggregation Command List create link_aggregation group_id <value> {type [lacp | static]} delete link_aggregation group_id <value> config link_aggregation group_id <value> {master_port <port> | ports <portlist> | state [enable |...
  • Page 483 <value> - Enter the group ID value here. For the DGS-3000-10TC, this value must be between 1 and 5. For the DGS-3000-24TC, this value must be between 1 and 12. For the DGS-3000-26TC, this value must be between 1 and 13.
  • Page 484 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide <portlist> - Enter the list of port used for the configuration here. state - (Optional) Specify to enable or disable the specified link aggregation group. If not specified, the group will keep the previous state, the default state is disabled. If configure LACP group, the ports’...
  • Page 485 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#config link_aggregation algorithm mac_source_dest Command: config link_aggregation algorithm mac_source_dest Success. DGS-3000-26TC:admin# 45-5 show link_aggregation Description This command is used to display the current link aggregation configuration on the Switch.
  • Page 486 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show link_aggregation Command: show link_aggregation Link Aggregation Algorithm = MAC-Source-Dest Group ID Type : LACP Master Port Member Port : 5-7 Active Port Status : Enabled Flooding Port :...
  • Page 487 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide active - Specify to set the LACP mode as active. passive - Specify to set the LACP mode as passive. Restrictions Only Administrators, Operators and Power-Users can issue this command.
  • Page 488 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show lacp_port Command: show lacp_port Port Activity ------ -------- Active Active Active Active Active Active Active Active Active Active Active Active DGS-3000-26TC:admin#...
  • Page 489: Link Layer Discovery Protocol (Lldp) Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 46 Link Layer Discovery Protocol (LLDP) Command List enable lldp disable lldp config lldp [message_tx_interval <sec 5-32768> | message_tx_hold_multiplier <int 2-10> | tx_delay <sec 1-8192> | reinit_delay <sec 1-10>] config lldp notification_interval <sec 5-3600>...
  • Page 490: Disable Lldp

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format enable lldp Parameters None. Restrictions Only Administrators, Operators and Power-Users can issue this command. Example To enable LLDP: DGS-3000-26TC:admin#enable lldp Command: enable lldp Success. DGS-3000-26TC:admin# 46-2 disable lldp Description This command is used to stop sending and receiving of LLDP advertisement packet.
  • Page 491: Config Lldp

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#disable lldp Command: disable lldp Success. DGS-3000-26TC:admin# 46-3 config lldp Description This command is used to change the packet transmission interval. Format config lldp [message_tx_interval <sec 5-32768> | message_tx_hold_multiplier <int 2-10> | tx_delay <sec 1-8192>...
  • Page 492: Config Lldp Ports

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 46-4 config lldp notification_interval Description This command is used to configure the timer of notification interval for sending notification to configured SNMP trap receiver(s). Format config lldp notification_interval <sec 5-3600>...
  • Page 493 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters <portlist> - Enter a list of ports used for the configuration here. all - Specify that all the ports will be used for this configuration. notification - Enables or disables the SNMP trap notification of LLDP data changes detected on advertisements received from neighbor devices.
  • Page 494 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide <vlan_name 32> - Enter the name of the VLAN here. This name can be up to 32 characters long. vlanid - Specify the VLAN ID used for this configuration.
  • Page 495 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#config lldp ports 1-5 notification enable Command: config lldp ports 1-5 notification enable Success. DGS-3000-26TC:admin# To configure port 1-5 to transmit and receive: DGS-3000-26TC:admin#config lldp ports 1-5 admin_status tx_and_rx Command: config lldp ports 1-5 admin_status tx_and_rx Success.
  • Page 496 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#config lldp ports all dot1_tlv_protocol_vid vlanid 1-3 enable Command: config lldp ports all dot1_tlv_protocol_vid vlanid 1-3 enable Success. DGS-3000-26TC:admin# To configure exclude the VLAN name TLV from the outbound LLDP advertisements for all ports:...
  • Page 497: Show Lldp

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide disable - Disable the forwarding of LLDP-PDU events. By default it is disabled. Restrictions Only Administrators, Operators and Power-Users can issue this command. Example To configure LLDP to forward LLDP PDUs:...
  • Page 498 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show lldp Command: show lldp LLDP System Information Chassis ID Subtype : MAC Address Chassis ID : 00-01-02-03-04-00 System Name System Description : Gigabit Ethernet Switch System Capabilities : Repeater, Bridge...
  • Page 499: Show Lldp Ports

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show lldp mgt_addr ipv4 10.90.90.90 Command: show lldp mgt_addr ipv4 10.90.90.90 Address 1 : ------------------------------------------------ Subtype : IPv4 Address : 10.90.90.90 IF Type : IfIndex : 1.3.6.1.4.1.171.10.133.2.1 Advertising Ports...
  • Page 500 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show lldp ports Command: show lldp ports 1 Port ID ----------------------------------------------------------------- Admin Status : TX_and_RX Notification Status : Enabled Advertised TLVs Option Port Description Disabled System Name Enabled System Description...
  • Page 501 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Example To display outbound LLDP advertisements for port 1 in detailed mode. Port description on the display should use the same value as ifDescr. DGS-3000-26TC:admin#show lldp local_ports 1 mode detailed...
  • Page 502 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show lldp local_ports 1 mode normal Command: show lldp local_ports 1 mode normal Port ID : 1 ----------------------------------------------------------------------------- Port ID Subtype : MAC Address Port ID : 00-01-02-03-04-01 Port Description : D-Link DGS-3000-26TC R1.10.013...
  • Page 503 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide brief - Display the information in brief mode. normal - Display the information in normal mode. This is the default display mode. detailed - Display the information in detailed mode.
  • Page 504 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin# show lldp remote_ports 3 mode normal Command: show lldp remote_ports 3 mode normal Port ID : 3 ------------------------------------------------------------------------------- Remote Entities Count : 1 Entity 1 Chassis ID Subtype...
  • Page 505 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin# show lldp remote_ports 3 mode detailed Command: show lldp remote_ports 3 mode detailed Port ID : 3 ------------------------------------------------------------------------------- Remote Entities Count : 1 Entity 1 Chassis ID Subtype...
  • Page 506: Show Lldp Statistics

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 46-12 show lldp statistics Description This command is used to display an overview of neighbor detection activity on the Switch. Format show lldp statistics Parameters None. Restrictions None. Example...
  • Page 507 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Example To display statistics information of port 1: DGS-3000-26TC:admin#show lldp statistics ports 1 Command: show lldp statistics ports 1 Port ID : 1 --------------------------------------------- LLDPStatsTXPortFramesTotal : 23 LLDPStatsRXPortFramesDiscardedTotal LLDPStatsRXPortFramesErrors...
  • Page 508 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 46-15 config lldp_med log state Description This command is used to configure the log state of LLDP-MED events. Format config lldp_med log state [enable | disable] Parameters enable - Enables the log state for LLDP-MED events.
  • Page 509 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Restrictions Only Administrators and Operators can issue this command. Example To enable topology change notification on ports 1-2: DGS-3000-26TC:admin#config lldp_med notification topo_change ports 1-2 state enable Command: config lldp_med notification topo_change ports 1-2 state enable Success.
  • Page 510 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#config lldp_med ports all med_transmit_capabilities all state enable Command: config lldp_med ports all med_transmit_capabilities all state enable Success. DGS-3000-26TC:admin# 46-18 show lldp_med ports Description This command is used to display LLDP-MED per port configuration for advertisement options.
  • Page 511 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format show lldp_med Parameters None. Restrictions None. Example To display the Switch’s general LLDP-MED configuration status: DGS-3000-26TC:admin#show lldp_med Command: show lldp_med LLDP-MED System Information: Device Class : Network Connectivity Device...
  • Page 512 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Restrictions None. Example To display LLDP-MED information currently available for populating outbound LLDP-MED advertisements for port 1: DGS-3000-26TC:admin#show lldp_med local_ports 1 Command: show lldp_med local_ports 1 Port ID -----------------------------------------------------------------...
  • Page 513 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show lldp_med remote_ports 1 Command: show lldp_med remote_ports 1 Port ID : 1 --------------------------------------------------------------------------- Remote Entities Count : 1 Entity 1 Chassis ID Subtype : MAC Address Chassis ID...
  • Page 514 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Power Request : 8 Watts Inventory Management: Hardware Revision Firmware Revision Software Revision Serial Number Manufacturer Name Model Name Asset ID DGS-3000-26TC:admin#...
  • Page 515: Chapter 47 Loop Back Detection (Lbd) Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 47 Loop Back Detection (LBD) Command List config loopdetect {recover_timer [<value 0> | <sec 60-1000000>] | interval <sec 1-32767> | mode [port-based | vlan-based]}(1) config loopdetect ports [<portlist> | all] state [enable | disable]...
  • Page 516: Config Loopdetect Ports

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Example To set the auto-recover time to 0, which disables the auto-recovery mechanism, the interval to 20 seconds and specify VLAN-based mode: DGS-3000-26TC:admin#config loopdetect recover_timer 0 interval 20 mode vlan-...
  • Page 517: Enable Loopdetect

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 47-3 enable loopdetect Description This command is used to enable the LBD function globally on the Switch. The default state is disabled. Format enable loopdetect Parameters None. Restrictions Only Administrators, Operators and Power-Users can issue this command.
  • Page 518: Show Loopdetect

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#disable loopdetect Command: disable loopdetect Success. DGS-3000-26TC:admin# 47-5 show loopdetect Description This command is used to display the LBD global configuration. Format show loopdetect Parameters None. Restrictions None. Example...
  • Page 519 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format show loopdetect ports {<portlist>} Parameters ports - Specify the range of member ports that will display the LBD settings. <portlist> - Enter the list of port to be configured here.
  • Page 520: Config Loopdetect Log

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Restrictions Only Administrators, Operators and Power-Users can issue this command. Example To specify that traps will be sent when the loop condition is detected or cleared: DGS-3000-26TC:admin#config loopdetect trap both Command: config loopdetect trap both Success.
  • Page 521: Chapter 48 Mac Notification Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 48 MAC Notification Command List enable mac_notification disable mac_notification config mac_notification {interval <sec 1-2147483647> | historysize <int 1-500>} config mac_notification ports [<portlist> | all] [enable | disable] show mac_notification show mac_notification ports {<portlist>}...
  • Page 522 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters None. Restrictions Only Administrators, Operators and Power-Users can issue this command. Example To disable mac_notification function: DGS-3000-26TC:admin#disable mac_notification Command: disable mac_notification Success. DGS-3000-26TC:admin# 48-3 config mac_notification Description This command is used to configure the Switch’s MAC address table notification global settings.
  • Page 523 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#config mac_notification interval 1 historysize 500 Command: config mac_notification interval 1 historysize 500 Success. DGS-3000-26TC:admin# 48-4 config mac_notification ports Description This command is used to configure the port’s MAC address table notification status settings.
  • Page 524 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters None. Restrictions None. Example To show the Switch’s Mac address table notification global settings: DGS-3000-26TC:admin#show mac_notification Command: show mac_notification Global MAC Notification Settings State : Disabled Interval History Size : 1...
  • Page 525 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show mac_notification ports Command: show mac_notification ports Port MAC Address Table Notification State ------ ------------------------------------ Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled...
  • Page 526: Chapter 49 Mac-Based Access Control Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 49 MAC-based Access Control Command List enable mac_based_access_control disable mac_based_access_control config mac_based_access_control password <passwd 16> config mac_based_access_control password_type [manual_string | client_mac_address] config mac_based_access_control method [local | radius] config mac_based_access_control guest_vlan ports <portlist>...
  • Page 527 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Restrictions Only Administrators, Operators and Power-Users can issue this command. Example To enable the MAC-based Access Control global state: DGS-3000-26TC:admin#enable mac_based_access_control Command: enable mac_based_access_control Success. DGS-3000-26TC:admin# 49-2 disable mac_based_access_control Description This command is used to disable MAC-based Access Control.
  • Page 528 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format config mac_based_access_control password <passwd 16> Parameters password - In RADIUS mode, the Switch will communicate with the RADIUS server using this password. The maximum length of the key is 16.
  • Page 529 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#config mac_based_access_control password_type client_mac_address Command: config mac_based_access_control password_type client_mac_address Success. DGS-3000-26TC:admin# 49-5 config mac_based_access_control method Description This command is used to configure the MAC-based Access Control authentication method. Format...
  • Page 530 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters ports - Specify MAC-based Access Control guest VLAN membership. <portlist> - Enter the list of port used for this configuration here. Restrictions Only Administrators, Operators and Power-Users can issue this command.
  • Page 531 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format config mac_based_access_control ports [<portlist> | all] {state [enable | disable] | mode [port_based | host_based] | aging_time [infinite | <min 1-1440>] | block_time <sec 0-300> | max_users [<value 1-1000> | no_limit]}(1) Parameters <portlist>...
  • Page 532 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#config mac_based_access_control ports 1-8 aging_time infinite block_time 120 Command: config mac_based_access_control ports 1-8 aging_time infinite block_time 120 Success. DGS-3000-26TC:admin# 49-8 create mac_based_access_control Description This command is used to assign a static 802.1Q VLAN as a MAC-based Access Control guest VLAN.
  • Page 533 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format delete mac_based_access_control [guest_vlan <vlan_name 32> | guest_vlanid <vlanid 1- 4094>] Parameters guest_vlan - Specify the name of the MAC-based Access Control’s guest VLAN. <vlan_name 32> - Enter the VLAN name here. This name can be up to 32 characters long.
  • Page 534 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Example To clear MAC-based Access Control clients’ authentication information for all ports: DGS-3000-26TC:admin#clear mac_based_access_control auth_state ports all Command: clear mac_based_access_control auth_state ports all Success. DGS-3000-26TC:admin# To delete the MAC-based Access Control authentication information for the host that has a MAC...
  • Page 535 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Example To create one MAC-based Access Control local database entry for MAC address 00-00-00-00-00- 01 and specify that the host will be assigned to the “default” VLAN after the host has been...
  • Page 536 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#config mac_based_access_control_local mac 00-00-00-00-00-01 vlan default Command: config mac_based_access_control_local mac 00-00-00-00-00-01 vlan default Success. DGS-3000-26TC:admin# 49-13 delete mac_based_access_control_local Description This command is used to delete a MAC-based Access Control local database entry.
  • Page 537 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#delete mac_based_access_control_local vlan VLAN3 Command: delete mac_based_access_control_local vlan VLAN3 Success. DGS-3000-26TC:admin# 49-14 config mac_based_access_control authorization attributes Description This command is used to enable or disable the acceptation of an authorized configuration.
  • Page 538 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 49-15 show mac_based_access_control Description This command is used to display the MAC-based Access Control setting. Format show mac_based_access_control {ports {<portlist>}} Parameters ports - (Optional) Displays the MAC-based Access Control settings for a specific port or range of ports.
  • Page 539 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters mac - (Optional) Displays MAC-based Access Control local database entries for a specific MAC address. <macaddr> - Enter the MAC address used here. vlan - (Optional) Displays MAC-based Access Control local database entries for a specific target VLAN name.
  • Page 540 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Example To display the MAC-based Access Control authentication status on port 1-4 DGS-3000-26TC:admin#show mac_based_access_control auth_state ports 1-4 Command: show mac_based_access_control auth_state ports 1-4 (P): Port-based Port MAC Address State...
  • Page 541 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 49-19 config mac_based_access_control trap state Description This command is used to enable or disable sending of MAC-based Access Control traps. Format config mac_based_access_control trap state [enable | disable] Parameters enable - Enables trap for MAC-based Access Control.
  • Page 542 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Example To disable log state of MAC-based Access Control: DGS-3000-26TC:admin#config mac_based_access_control log state disable Command: config mac_based_access_control log state disable Success. DGS-3000-26TC:admin#...
  • Page 543: Mac-Based Vlan Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 50 MAC-based VLAN Command List create mac_based_vlan mac_address <macaddr> [vlan <vlan_name 32> | vlanid <vlanid 1- 4094>] delete mac_based_vlan {mac_address <macaddr> [vlan <vlan_name 32> | vlanid <vlanid 1- 4094>]}...
  • Page 544 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 50-2 delete mac_based_vlan Description This command is used to delete the static MAC-based VLAN entry. Format delete mac_based_vlan {mac_address <macaddr> [vlan <vlan_name 32> | vlanid <vlanid 1- 4094>]} Parameters mac_address - (Optional) Specify the MAC address used.
  • Page 545 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide vlan - (Optional) Specify the VLAN that you would like to display. <vlan_name 32> - Enter the VLAN name here. This name can be up to 32 characters long.
  • Page 546: Chapter 51 Mirror Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 51 Mirror Command List config mirror port <port> {[add | delete] source ports <portlist> [rx | tx | both]} enable mirror disable mirror show mirror 51-1 config mirror Description This command is used to configure a mirror port −...
  • Page 547: Enable Mirror

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 51-2 enable mirror Description This command is used to enable mirror function without having to modify the mirror session configuration. Format enable mirror Parameters None. Restrictions Only Administrators and Operators can issue this command.
  • Page 548: Show Mirror

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#disable mirror Command: disable mirror Success. DGS-3000-26TC:admin# Restrictions None. 51-4 show mirror Description This command is used to display the current mirror function state and mirror session configuration on the Switch.
  • Page 549: Mld Snooping Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 52 MLD Snooping Command List The Multicast Listener Discovery (MLD) is used by IPv6 routers to discover multicast listeners on a directly attached link, much as IGMP is used in IPv4. The protocol is embedded in ICMPv6 instead of using a separate protocol.
  • Page 550 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format config mld_snooping [vlan_name <vlan_name 32> | vlanid <vlanid_list> | all ] {state [enable | disable] | fast_done [enable | disable] | report_suppression [enable | disable] | proxy_reporting {state [enable | disable] | source_ip <ipv6addr>}(1)}(1) Parameters vlan_name - Specify the name of the VLAN for which MLD snooping is to be configured.
  • Page 551 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 52-2 config mld_snooping querier Description This command is used to configure the timer in seconds between general query transmissions, the maximum time in seconds to wait for reports from listeners, and the permitted packet loss that is guaranteed by MLD snooping.
  • Page 552 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Restrictions Only Administrators, Operators and Power-Users can issue this command. Example To configure the MLD snooping querier: DGS-3000-26TC:admin#config mld_snooping querier vlan_name default query_interval 125 state enable Command: config mld_snooping querier vlan_name default query_interval 125 state enable Success.
  • Page 553 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#config mld_snooping mrouter_ports vlan default add 1-10 Command: config mld_snooping mrouter_ports vlan default add 1-10 Success. DGS-3000-26TC:admin# 52-4 config mld_snooping router_ports_forbidden Description This command is used to designate a range of ports as being not connected to multicast-enabled routers.
  • Page 554 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide member port of the multicast group that the port is reported, and the router will be a default member of this multicast group. The multicast packet destined for this multicast group will be forwarded to all the members of this multicast group.
  • Page 555 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#disable mld_snooping Command: disable mld_snooping Success. DGS-3000-26TC:admin# 52-7 show mld_snooping Description This command is used to display the current MLD snooping configuration on the Switch. Format show mld_snooping {[vlan <vlan_name 32> | vlanid <vlanid_list>]}...
  • Page 556 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show mld_snooping Command: show mld_snooping MLD Snooping Global State : Disabled Multicast router Only : Disabled Data Driven Learning Max Entries : 256 VLAN Name : default Query Interval...
  • Page 557 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 52-8 show mld_snooping group Description This command is used to display the current MLD snooping group information on the Switch. Format show mld_snooping group {[vlan <vlan_name 32> | vlanid <vlanid_list> | ports <portlist>] {<ipv6addr>}} {data_driven}...
  • Page 558 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show mld_snooping group Command: show mld_snooping group Source/Group : 2001::1/FE1E::1 VLAN Name/VID : default/1 Member Ports : 1-2 UP Time : 26 Expiry Time : 258 Filter Mode : INCLUDE...
  • Page 559 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 52-9 show mld_snooping forwarding Description This command is used to display the Switch’s current MLD snooping forwarding table. It provides an easy way for users to check the list of ports that the multicast group that comes from specific sources will be forwarded to.
  • Page 560 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 52-10 show mld_snooping mrouter_ports Description This command is used to display the currently configured router ports on the Switch. Format show mld_snooping mrouter_ports [vlan <vlan_name 32> | vlanid <vlanid_list> | all] {[static...
  • Page 561 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide The static group will only take effect when MLD snooping is enabled on the VLAN. An active static group must be equal to a static MLD group with a link-up member port. For those static member ports, the device needs to emulate the MLD protocol operation to the querier, and forward the traffic destined to the multicast group to the member ports.
  • Page 562 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide <ipv6addr> - Enter the multicast group IP address. Restrictions Only Administrators, Operators and Power-Users can issue this command. Example To delete an MLD snooping static group for VLAN 1, group FF1E::1:...
  • Page 563 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#config mld_snooping static_group vlan default FF1E::1 delete 9-10 Command: config mld_snooping static_group vlan default FF1E::1 delete 9-10 Success. DGS-3000-26TC:admin# 52-14 show mld_snooping static_group Description This command used to display the MLD snooping multicast group static members.
  • Page 564 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide When data-driven learning is enabled for the VLAN, when the Switch receives the IP multicast traffic, on this VLAN, an MLD snooping group will be created. That is, the learning of an entry is not activated by MLD membership registration, but activated by the traffic.
  • Page 565 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 52-16 config mld_snooping data_driven_learning max_learned_entry Description This command is used to configure the maximum number of groups that can be learned by data driven. When the table is full, the system will stop the learning of the new data-driven groups. Traffic for the new groups will be dropped.
  • Page 566 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide <vlan_name> - Enter the VLAN name here. vlanid - Specify the VLAN ID. <vlanid_list> - Enter the VLAN ID list here. <ipv6addr> - Enter the group’s IP address learned by data driven.
  • Page 567 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show mld_snooping statistic counter vlanid 1 Command: show mld_snooping statistic counter vlanid 1 VLAN name : default -------------------------------------------------- Group Number Receive Statistics Query MLD v1 Query MLD v2 Query...
  • Page 568 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format clear mld _snooping statistics counter Parameters None. Restrictions Only Administrators, Operators and Power-Users can issue this command. Example To clear MLD snooping statistics counter: DGS-3000-26TC:admin#clear mld_snooping statistics counter Command: clear mld_snooping statistics counter Success.
  • Page 569 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Example To configure the MLD snooping per port rate limit: DGS-3000-26TC:admin#config mld_snooping rate_limit ports 1 100 Command: config mld_snooping rate_limit ports 1 100 Success. DGS-3000-26TC:admin# 52-21 show mld_snooping rate_limit...
  • Page 570 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 52-22 show mld_snooping host Description This command is used to display the MLD hosts that have joined groups on specific ports or specific VLANs. Format show mld_snooping host {[vlan <vlan_name 32> | vlanid <vlanid_list> | ports <portlist> | group <ipv6addr>]}...
  • Page 571 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show mld_snooping host vlan default Command: show mld_snooping host vlan default VLAN ID: Group: FF1E::1 Port: Host: 2001::1 VLAN ID: Group: FF1E::2 Port: Host: 2001::1 VLAN ID: Group: FF1E::3...
  • Page 572: Chapter 53 Mstp Debug Enhancement Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 53 MSTP debug enhancement Command List debug stp config ports [<portlist> | all] [event | bpdu | state_machine | all] state [disable | brief | detail] debug stp show information debug stp show flag {ports <portlist>}...
  • Page 573: Debug Stp Show Information

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#debug stp config ports all all state brief Command: debug stp config ports all all state brief Success. DGS-3000-26TC:admin# 53-2 debug stp show information Description This command is used to display STP detailed information.
  • Page 574: Debug Stp Show Flag

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#debug stp show information Command: debug stp show information Warning: only support local device. Spanning Tree Debug Information: ---------------------------------------- Port Status In Hardware Table: Instance 0: Port 1 : FOR...
  • Page 575: Debug Stp Show Counter

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#debug stp show flag Command: debug stp show flag Global State: Disabled Port Index Event Flag BPDU Flag State Machine Flag ---------------------------------------------------------- Disabled Disabled Disabled Disabled Disabled Disabled Disabled...
  • Page 576: Debug Stp Clear Counter

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide If no parameter is specified, display the global counters. Restrictions Only Administrators can issue this command. Example To show the STP counters for port 9: DGS-3000-26TC:admin#debug stp show counter ports 9...
  • Page 577: Debug Stp State

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Restrictions Only Administrators can issue this command. Example To clear all STP counters on the Switch: DGS-3000-26TC:admin#debug stp clear counter ports all Command: debug stp clear counter ports all Success.
  • Page 578: Multicast Filter Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 54 Multicast Filter Command List create mcast_filter_profile {[ipv4 | ipv6]} profile_id <value 1-24> profile_name <name 1-32> config mcast_filter_profile [profile_id <value 1-24> | profile_name <name 1-32> ] {profile_name <name 1-32> | [add | delete] <mcast_address_list>}(1) config mcast_filter_profile ipv6 [profile_id <value 1-24>...
  • Page 579 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Example To create a multicast address profile with a profile ID of 2 and a profile name of MOD: DGS-3000-26TC:admin#create mcast_filter_profile profile_id 2 profile_name MOD Command: create mcast_filter_profile profile_id 2 profile_name MOD Success.
  • Page 580 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 54-3 config mcast_filter_profile ipv6 Description This command is used to add or delete a range of IPv6 multicast addresses to the profile. Format config mcast_filter_profile ipv6 [profile_id <value 1-24> | profile_name <name 1-32> ] {profile_name <name 1-32>...
  • Page 581 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters ipv4 - (Optional) Specify to delete an IPv4 multicast profile. ipv6 - (Optional) Specify to delete an IPv6 multicast profile. profile_id - Specify the ID of the profile <value 1-24>...
  • Page 582 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide <name 1-32> - Enter the profile name here. The profile name can be up to 32 characters long. Restrictions None. Example To display all the defined multicast address profiles:...
  • Page 583 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide access - (Optional) Specify the access of packets matching the addresses defined in the profiles. permit - Specify that packets matching the addresses defined in the profiles will be permitted.
  • Page 584 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Restrictions Only Administrators, Operators and Power-Users can issue this command. Example To configure the maximum number of multicast group that ports 1 and 3 can join to 100: DGS-3000-26TC:admin#config max_mcast_group ports 1, 3 max_group 100 Command: config max_mcast_group ports 1, 3 max_group 100 Success.
  • Page 585 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show max_mcast_group ports 1-2 Command: show max_mcast_group ports 1-2 Port Max Multicast Group Number Action ------ ---------------------------- --------- Drop Infinite Drop Total Entries: 2 DGS-3000-26TC:admin# To display the maximum number of multicast groups that VLANs 1 and 2 can join:...
  • Page 586 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Restrictions None. Example To show the limited multicast address range on ports 1 and 3: DGS-3000-26TC:admin#show limited_multicast_addr ports 1,3 Command: show limited_multicast_addr ports 1,3 Port Access : Deny Profile ID Name...
  • Page 587 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format config cpu_filter l3_control_pkt <portlist> [{dvmrp|pim|igmp_query |ospf | rip | vrrp} | all] state [enable | disable] Parameters <portlist> - Enter the port list to filter control packets. dvmrp – (Optional) Specify to filter the DVMRP control packets.
  • Page 588 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Example To display the filtering status for port 1 and 2: DGS-3000-26TC:admin#show cpu_filter l3_control_pkt ports 1-2 Command: show cpu_filter l3_control_pkt ports 1-2 Port IGMP Query DVMRP OSPF VRRP ----...
  • Page 589 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide all - Specify that the Switch will examine all above field within each packet. replace - Specify to change the priority or DSCP. priority - Specify the priority value <value 0-7>...
  • Page 590 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show control_pkt Command: show control_pkt Protocol Priority DSCP --------- -------- ------ igmp None None vrrp None None None None None None dvmrp None ospf None None None None ipv6 pim...
  • Page 591: Chapter 55 Multicast Vlan Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 55 Multicast VLAN Command List enable igmp_snooping multicast_vlan enable mld_snooping multicast_vlan disable igmp_snooping multicast_vlan disable mld_snooping multicast_vlan create igmp_snooping multicast_vlan <vlan_name 32> <vlanid 2-4094> {remap_priority [<value 0-7> | none] {replace_priority}} create igmp_snooping multicast_vlan_group_profile <profile_name 1-32>...
  • Page 592 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format enable igmp_snooping multicast_vlan Parameters None. Restrictions Only Administrators can issue this command. Example To enable the IGMP snooping multicast VLAN function globally: DGS-3000-26TC:admin#enable igmp_snooping multicast_vlan Command: enable igmp_snooping multicast_vlan Success.
  • Page 593 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#enable mld_snooping multicast_vlan Command: enable mld_snooping multicast_vlan Success. DGS-3000-26TC:admin# 55-3 disable igmp_snooping multicast_vlan Description This command is used to disable the IGMP multicast VLAN function. The command disable igmp_snooping is used to disable the ordinary IGMP snooping function. By default, the multicast VLAN is disabled.
  • Page 594 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters None. Restrictions Only Administrators can issue this command. Example To disable MLD snooping multicast VLAN: DGS-3000-26TC:admin#disable mld_snooping multicast_vlan Command: disable mld_snooping multicast_vlan Success. DGS-3000-26TC:admin# 55-5 create igmp_snooping multicast_vlan...
  • Page 595 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Restrictions Only Administrators, Operators and Power-Users can issue this command. Example To create an IGMP snooping multicast VLAN with the VLAN name mv1 and the VID 2: DGS-3000-26TC:admin#create igmp_snoop multicast_vlan mv1 2 Command: create igmp_snoop multicast_vlan mv1 2 Success.
  • Page 596 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide snooping multicast VLANs must use a unique VLAN ID and name, i.e. they cannot use the VLAN ID or name of any existing 802.1Q VLAN. Also keep in mind the following conditions: multicast VLANs cannot be configured or displayed using 802.1Q VLAN commands;...
  • Page 597 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters <profile_name 1-32> - Enter the multicast VLAN profile name. The maximum length is 32 characters. Restrictions Only Administrators, Operators and Power-Users can issue this command. Example To create an MLD snooping multicast group profile with the name “Knicks”:...
  • Page 598 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide tag_member_port - Specify the port or range of ports that will become tagged members of the multicast VLAN. <portlist> - Enter the list of port to be configured here.
  • Page 599 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide multicast address, such as 225.1.1.1, 225.1.1.3, 225.1.1.8, a multicast address range, such as 225.1.1.1-225.2.2.2, or both of types, such as 225.1.1.1, 225.1.1.18-225.1.1.20. Restrictions Only Administrators, Operators and Power-Users can issue this command.
  • Page 600 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Restrictions Only Administrators, Operators and Power-Users can issue this command. Example To add an IGMP snooping profile to a multicast VLAN group with the name “v1”: DGS-3000-26TC:admin#config igmp_snooping multicast_vlan_group v1 add...
  • Page 601 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 55-13 config mld_snooping multicast_vlan Description This command is used to configure MLD snooping multicast VLAN parameters. The member port list and source port list cannot overlap. However, the member port of one multicast VLAN can overlap with another multicast VLAN.
  • Page 602 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#config mld_snooping multicast_vlan v1 add member_port 1,3 state enable Command: config mld_snooping multicast_vlan v1 add member_port 1,3 state enable Success. DGS-3000-26TC:admin# 55-14 config mld_snooping multicast_vlan_group_profile Description This command is used to configure an MLD snooping multicast group profile on the switch.
  • Page 603 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 55-15 config mld_snooping multicast_vlan_group Description This command is used to configure the multicast group which is used with the specific multicast VLAN. The following two cases can be considered as examples:...
  • Page 604 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 55-16 config mld_snooping multicast_vlan forward_unmatched Description This command is used to configure the forwarding mode for MLD snooping multicast VLAN unmatched packets. When the switch receives an MLD snooping packet, it will match the packet against the multicast profile to determine which multicast VLAN to associate with.
  • Page 605 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Restrictions Only Administrators, Operators and Power-Users can issue this command. Example To delete an IGMP snooping multicast group profile with the name “MOD”: DGS-3000-26TC:admin#delete igmp_snooping multicast_vlan_group_profile profile_name MOD Command: delete igmp_snooping multicast_vlan_group_profile profile_name MOD Success.
  • Page 606 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format delete mld_snooping multicast_vlan_group_profile [profile_name <profile_name 1-32> | all] Parameters profile_name - Specify the multicast VLAN group profile name. The maximum length is 32 characters. <profile_name 1-32> - Enter the multicast VLAN group profile name. The profile name can be up to 32 characters long.
  • Page 607 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#delete mld_snooping multicast_vlan v1 Command: delete mld_snooping multicast_vlan v1 Success. DGS-3000-26TC:admin# 55-21 show igmp_snooping multicast_vlan_group_profile Description This command is used to show the IGMP snooping multicast group profiles. Format show igmp_snooping multicast_vlan_group_profile {<...
  • Page 608 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format show igmp_snooping multicast_vlan_group {<vlan_name 32>} Parameters <vlan_name 32> - (Optional) Enter the VLAN name here. The VLAN name can be up to 32 characters long. Restrictions None. Example...
  • Page 609 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show igmp_snooping multicast_vlan Command: show igmp_snooping multicast_vlan IGMP Multicast VLAN Global State : Disabled IGMP Multicast VLAN Forward Unmatched : Disabled VLAN Name : test : 100 Member(Untagged) Ports...
  • Page 610 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show mld_snooping multicast_vlan_group_profile Command: show mld_snooping multicast_vlan_group_profile Profile Name Multicast Addresses ----------------------- -------------------------------- rock FF1E::1 FF1E::10-FF1E::20 Total Entries : 1 DGS-3000-26TC:admin# 55-25 show mld_snooping multicast_vlan_group Description This command is used to allow group profile information for a specific multicast VLAN to be displayed.
  • Page 611 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 55-26 show mld_snooping multicast_vlan Description This command is used to allow information for a specific multicast VLAN to be displayed. Format show mld_snooping multicast_vlan {<vlan_name 32>} Parameters <vlan_name 32> - (Optional) Enter the name of the multicast VLAN to be displayed.
  • Page 612: Multiple Spanning Tree Protocol (Mstp) Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 56 Multiple Spanning Tree Protocol (MSTP) Command List enable stp disable stp config stp {maxage <value 6-40> | maxhops <value 6-40> | hellotime <value 1-2> | forwarddelay <value 4-30> | txholdcount <value 1-10> | fbpdu [enable | disable] | nni_bpdu_addr [dot1d |...
  • Page 613: Disable Stp

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#enable stp Command: enable stp Success. DGS-3000-26TC:admin# 56-2 disable stp Description This command is used to disable STP globally. Format disable stp Parameters None. Restrictions Only Administrators, Operators and Power-Users can issue this command.
  • Page 614: Show Stp

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide <value 6-40> - Enter the maximum age value here. This value must be between 6-40. maxhops - (Optional) Specify to restrict the forwarded times of one BPDU. The default value is <value 6-40>...
  • Page 615 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Restrictions None. Example To show STP: DGS-3000-26TC:admin#show stp Command: show stp STP Bridge Global Settings --------------------------- STP Status : Enabled STP Version : RSTP Max Age : 25 Hello Time...
  • Page 616 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#create stp instance_id 2 Command: create stp instance_id 2 Success. DGS-3000-26TC:admin# 56-6 config stp instance_id Description This command is used to map or remove the VLAN range of the specified MST instance for the existed MST instances.
  • Page 617 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 56-7 delete stp instance_id Description This command is used to delete an MST Instance. Format delete stp instance_id <value 1-7> Parameters instance_id - Specify the MSTP instance ID. Instance 0 represents for default instance, CIST.
  • Page 618 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Example To change the name and revision level of the MST configuration identification: DGS-3000-26TC:admin#config stp mst_config_id name R&D_BlockG revision_level 1 Commands: config stp mst_config_id name R&D_BlockG revision_level 1 Success.
  • Page 619: Config Stp Ports

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format config stp mst_ports <portlist> instance_id <value 0-7> {internalCost [auto | <value 1- 200000000>] | priority <value 0-240>} Parameters mst_ports - Specify to be distinguished from the parameters of ports only at CIST level.
  • Page 620 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 200000000. hellotime - (Optional) The default value is 2 . This parameter is for MSTP version. For STP and RSTP version, uses the per system hellotime parameter. <value 1-2> - Enter the hello time value here. This value must be between 1 and 2.
  • Page 621: Show Stp Ports

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 56-12 show stp ports Description This command is used to show the port information includes parameters setting and operational value. Format show stp ports {<portlist>} Parameters ports - Displays parameters of the designated port numbers, to be distinguished from showing parameters of the bridge.
  • Page 622: Config Stp Version

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters priority - Specify the bridge priority value. This value must be divisible by 4096. <value 0-61440> - Enter the bridge priority value here. This value must be between 0 and 61440.
  • Page 623: Show Stp Instance

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#config stp version mstp Command: config stp version mstp Success. DGS-3000-26TC:admin# To config STP version with the same value of old configuration: DGS-3000-26TC:admin#config stp version mstp Command: config stp version mstp Configure value is the same with current value.
  • Page 624 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show stp instance Command: show stp instance STP Instance Settings --------------------------- Instance Type : CIST Instance Status : Enabled Instance Priority : 32768(bridge priority : 32768, sys ID ext : 0 )
  • Page 625: Chapter 57 Nd Spoofing Prevention Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 57 ND Spoofing Prevention Command List config nd_spoofing_prevention [add gateway_ip <ipv6addr> gateway_mac <macaddr> ports [<portlist> | all] | delete gateway_ip <ipv6addr>] show nd_spoofing_prevention 57-1 config nd_spoofing_prevention Description This command is used to configure the spoofing prevention entry to prevent spoofing of MAC for the protected gateway.
  • Page 626 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 57-2 show nd_spoofing_prevention Description This command is used to display the nd spoofing prevention entry. Format show nd_spoofing_prevention Parameters None. Restrictions None. Example To show the command logging configuration status:...
  • Page 627: Chapter 58 Network Load Balancing (Nlb) Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 58 Network Load Balancing (NLB) Command List create nlb unicast_fdb <macaddr> config nlb unicast_fdb <macaddr>[add|delete]<portlist> delete nlb unicast_fdb <macaddr> create nlb multicast_fdb [<vlan_name 32> | vlanid <vlanid>] <macaddr>...
  • Page 628 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 58-2 config nlb unicast_fdb Description This command is used to add or delete the forwarding ports for the specified NLB unicast FDB entry. Format config nlb unicast_fdb <macaddr> [add | delete] <portlist>...
  • Page 629 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Example To delete the NLB unicast FDB entry, for the product that support the VLAN information on the unicast forwarding: DGS-3000-26TC:admin#delete nlb unicast_fdb 02-bf-01-01-01-01 Command: delete nlb unicast_fdb 02-BF-01-01-01-01 Success.
  • Page 630 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format config nlb multicast_fdb [<vlan_name 32> | vlanid <vlanid>] <macaddr> [add | delete] <portlist> Parameters <vlan_name 32> - Enter the VLAN of the NLB multicast FDB entry to be configured.
  • Page 631: Show Nlb Fdb

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Example To delete NLB multicast FDB entry: DGS-3000-26TC:admin#delete nlb multicast_fdb default 03-bf-01-01-01-01 Command: delete nlb multicast_fdb default 03-bf-01-01-01-01 Success. DGS-3000-26TC:admin# 58-7 show nlb fdb Description This command is used to show the NLB Configured entry.
  • Page 632: Chapter 59 Network Monitoring Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 59 Network Monitoring Command List clear counters {ports <portlist>} show error ports <portlist> show packet ports <portlist> show utilization [cpu | ports] show utilization dram show utilization flash...
  • Page 633: Show Packet Ports

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format show errors ports <portlist> Parameters <portlist> - Enter a range of ports to be displayed. Restrictions None. Example To display the errors of the port: DGS-3000-26TC:admin#show error ports 3...
  • Page 634: Show Utilization

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Example To display the packets analysis for port 7: DGS-3000-26TC:admin#show packet ports 7 Command: show packet ports 7 Port Number : 7 ================================================================== Frame Size/Type Frame Counts Frames/sec ---------------...
  • Page 635 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Example To display the ports utilization: DGS-3000-26TC:admin#show utilization ports Command: show utilization ports Port TX/sec RX/sec Util Port TX/sec RX/sec Util ----- ---------- ---------- ---- ----- ---------- ---------- ----...
  • Page 636: Show Utilization Flash

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters None. Restrictions None. Example To display DRAM utilization: DGS-3000-26TC:admin#show utilization dram Command: show utilization dram DRAM Utilization : Total DRAM : 131072 Used DRAM : 118556 Utilization : 90 %...
  • Page 637 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show utilization flash Command: show utilization flash Flash Memory Utilization : Total Flash : 29618 Used Flash : 5784 Utilization : 19 % CTRL+C ESC q Quit SPACE n...
  • Page 638: Chapter 60 Oam Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 60 OAM Command List config ethernet_oam ports [<portlist> | all ] [mode [active | passive] | state [enable | disable] | link_monitor [error_symbol {threshold <range 0-4294967295> | window <millisecond 1000- 60000>...
  • Page 639 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide notify_state [enable | disable]}(1) | error_frame_period {threshold <range 0-4294967295> | window <number 148810-100000000> | notify_state [enable | disable]}(1) ]| critical_link_event [dying_gasp | critical_event] notify_state [enable | disable] | remote_loopback [start | stop] | received_remote_loopback [process | ignore]] Parameters <portlist>...
  • Page 640 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide start - If start is specified, it will request the peer to change to the remote loopback mode. stop - If stop is specified, it will request the peer to change to the normal operation mode.
  • Page 641 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#config ethernet_oam ports 1 link_monitor error_frame threshold 2 window 1000 notify_state enable Command: config ethernet_oam ports 1 link_monitor error_frame threshold 2 window 1000 notify_state enable Success. DGS-3000-26TC:admin# To configure the error frame seconds threshold to 2 and period to 10000 ms for port 1:...
  • Page 642 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide To configure the method of processing the received remote loopback command as “process” on port 1: DGS-3000-26TC:admin#config ethernet_oam ports 1 received_remote_loopback process Command: config ethernet_oam ports 1 received_remote_loopback process Success.
  • Page 643 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide The event log displays Ethernet OAM event log information. The switch can buffer 1000 event logs. The event log is different from sys-log as it provides more detailed information than sys-log. Each OAM event will be recorded in both OAM event log and syslog.
  • Page 644 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 60-3 clear ethernet_oam ports Description This command is used to clear Ethernet OAM information. Format clear ethernet_oam ports [<portlist> | all] [event_log | statistics] Parameters <portlist> - Enter a range of Ethernet OAM ports to be cleared.
  • Page 645: Chapter 61 Password Recovery Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 61 Password Recovery Command List enable password_recovery disable password_recovery show password_recovery 61-1 enable password_recovery Description This command is used to enable the password recovery mode. Format enable password_recovery Parameters None.
  • Page 646 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters None. Restrictions Only Administrators can issue this command. Example To disable the password recovery mode: DGS-3000-26TC:admin#disable password_recovery Command: disable password_recovery Success. DGS-3000-26TC:admin# 61-3 show password_recovery Description This command is used to display the password recovery state.
  • Page 647: Chapter 62 Peripherals Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 62 Peripherals Command List show device_status show environment config temperature threshold {high <temperature -500-500> | low <temperature -500-500>} config temperature [trap | log] state [enable | disable] 62-1...
  • Page 648: Config Temperature Threshold

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format show environment Parameters None. Restrictions None. Example To display the device environment: DGS-3000-26TC:admin#show environment Command: show environment Temperature Trap State : Enabled Temperature Log State : Enabled Internal Power...
  • Page 649: Config Temperature

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Example To configure the warning temperature threshold: DGS-3000-26TC:admin#config temperature threshold high 80 Command: config temperature threshold high 80 Success. DGS-3000-26TC:admin# 62-4 config temperature Description This command is used to configure the trap state for temperature warning event.
  • Page 650: Chapter 63 Ping Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 63 Ping Command List ping [<ipaddr> | <domain_name 255>] {times <value 1-255> | timeout <sec 1-99>} ping6 [<ipv6addr> | <domain_name 255>] {times <value 1-255> | size <value 1-6000>| timeout <sec 1-99>}...
  • Page 651 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#ping 10.51.17.1 times 4 Command: ping 10.51.17.1 times 4 Reply from 10.51.17.1, time<10ms Reply from 10.51.17.1, time<10ms Reply from 10.51.17.1, time<10ms Reply from 10.51.17.1, time<10ms Ping Statistics for 10.51.17.1...
  • Page 652 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#ping6 3000::1 times 4 Command: ping6 3000::1 times 4 Reply from 3000::1, bytes=200, time<10ms Reply from 3000::1, bytes=200, time<10ms Reply from 3000::1, bytes=200, time<10ms Reply from 3000::1, bytes=200, time<10ms...
  • Page 653: Chapter 64 Port Security Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 64 Port Security Command List config port_security system max_learning_addr [<max_lock_no 1-3328> | no_limit] config port_security ports [<portlist> | all] [{admin_state [enable | disable] | max_learning_addr <max_lock_no 0-3328> | lock_address_mode [permanent | deleteontimeout | deleteonreset]} (1)| {vlan [<vlan_name 32>...
  • Page 654 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#config port_security system max_learning_addr 256 Command: config port_security system max_learning_addr 256 Success. DGS-3000-26TC:admin# 64-2 config port_security ports Description This command is used to configure the admin state, the maximum number of addresses that can be learnt and the lock address mode.
  • Page 655 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Restrictions Only Administrators, Operators and Power-Users can issue this command. Example To configure the port-based port security setting so that the maximum number of port security entries is restricted to 10, and the lock_address mode is set to permanent on port 6:...
  • Page 656 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#config port_security vlan vlanid 1 max_learning_addr 64 Command: config port_security vlan vlanid 1 max_learning_addr 64 Success. DGS-3000-26TC:admin# 64-4 delete port_security_entry Description This command is used to delete a port security entry.
  • Page 657 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format clear port_security_entry {ports [<portlist> | all] {[vlan <vlan_name 32> | vlanid <vidlist>]}} Parameters ports - (Optional) Specify the range of ports to be configured. <portlist> - Enter the port security entries learned on the specified port.
  • Page 658 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Restrictions None. Example To show all the port security entries: DGS-3000-26TC:admin#show port_security_entry Command: show port_security_entry MAC Address Port Lock Mode ----------------- ---- ----- --------------- 00-00-00-00-00-01 DeleteOnTimeout Total Entries: 1...
  • Page 659 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show port_security Command: show port_security Port Security Trap/Log : Disabled System Maximum Address : 256 VLAN Configuration (Only VLANs with limitation are displayed) VLAN Name Max. Learning Addr. ----...
  • Page 660 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format disable port_security trap_log Parameters None. Restrictions Only Administrators, Operators and Power-Users can issue this command. Example To prevent a port security trap from being sent from the switch:...
  • Page 661: Chapter 65 Power Saving Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 65 Power Saving Command List config power_saving mode {length_detection | link_detection | led | port | hibernation} [enable | disable] config power_saving hibernation [[add | delete] time_range <range_name 32> | clear_time_range] config power_saving led [[add | delete] time_range <range_name 32>...
  • Page 662 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide enable - Specify to enable power saving state. disable - Specify to disable power saving state. Restrictions Only Administrators and Operators can issue this command. Example To enable the power saving state of port, hibernation:...
  • Page 663 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#config power_saving hibernation add time_range range_1 Command: config power_saving hibernation add time_range range_1 Success. DGS-3000-26TC:admin# 65-3 config power_saving led Description This command is used to add or delete the power saving schedule on the LED of all ports. When any schedule is up, all port’s LED will be turned off even device’s LED working on PoE mode.
  • Page 664 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide NOTE: The port’s admin state has high priority. If the port’s admin state is disabled, the specific port will always be shut down (disabled). Currently only three time ranges are supported.
  • Page 665 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters length_detection - (Optional) Displays the length detection configuration of power saving. link_detection - (Optional) Displays the link detection configuration of power saving. led - (Optional) Displays the port LED configuration of power saving.
  • Page 666 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 65-6 config led state Description This command is used to configure the LED admin state of all ports. When the port LED admin state is disabled, the LEDs of all ports are turned off. If the port LED admin state is enabled, the port LEDs are controlled by the ports' link status.
  • Page 667 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Example To display the setting of all port’s LED admin state: DGS-3000-26TC:admin#show led Command: show led Port LED State: Disabled DGS-3000-26TC:admin#...
  • Page 668: Chapter 66 Pppoe Circuit Id Insertions Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 66 PPPoE Circuit ID Insertions Command List config pppoe circuit_id_insertion state [enable | disable] config pppoe circuit_id_insertion ports <portlist> {state [enable | disable] | circuit_id [mac | ip | udf <string 32>]}(1)
  • Page 669 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 66-2 config pppoe circuit_id_insertion ports Description This command is used to configure port’s PPPoE Circuit ID insertion function. When the port’s state and the global state are enabled, the system will insert the Circuit ID TAG to the received PPPoE discovery initiation and request packet if the TAG is absent, and remove the Circuit ID TAG from the received PPPoE offer and session confirmation packet.
  • Page 670 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters None. Restrictions None. Example To display PPPoE circuit ID insertion status: DGS-3000-26TC:admin#show pppoe circuit_id_insertion Command: show pppoe circuit_id_insertion Global PPPoE State: Enabled DGS-3000-26TC:admin# 66-4 show pppoe circuit_id_insertion ports Description This command is used to display Switch’s port PPPoE Circuit ID insertion configuration.
  • Page 671 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show pppoe circuit_id_insertion ports Command: show pppoe circuit_id_insertion ports 2-5 Port State Circuit ID ---- -------- --------------------------------------------- Enabled Switch IP Enabled Switch IP Enabled Switch IP Enabled Switch IP...
  • Page 672: Chapter 67 Protocol Vlan Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 67 Protocol VLAN Command List create dot1v_protocol_group group_id <id> {group_name <name 32>} config dot1v_protocol_group [group_id <id> | group_name <name 32>] [add protocol [ethernet_2 | ieee802.3_snap | ieee802.3_llc] <protocol_value> | delete protocol [ethernet_2 | ieee802.3_snap | ieee802.3_llc] <protocol_value>]...
  • Page 673 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 67-2 config dot1v_protocol_group add protocol Description This command is used to add a protocol to a protocol group. The selection of a protocol can be a pre-defined protocol type or a user defined protocol.
  • Page 674 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format delete dot1v_protocol_group [group_id <id> | group_name <name 32> | all] Parameters group_id - Specify the group ID to be deleted. <id> - Enter the group ID used here.
  • Page 675 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show dot1v_protocol_group group_id 10 Command: show dot1v_protocol_group group_id 10 Protocol Group ID Protocol Group Name Frame Type Protocol Value ----------------- -------------------------------- -------------- -------------- General_Group EthernetII 86DD Total Entries: 1...
  • Page 676: Show Port Dot1V

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Restrictions Only Administrators, Operators and Power-Users can issue this command. Example The example is to assign VLAN marketing-1 for untaged IPv6 packet ingress from port 3. To configure the group ID 10 on port 3 to be associated with VLAN marketing-1:...
  • Page 677 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show port dot1v ports 1 Command: show port dot1v ports 1 Port: 1 Protocol Group ID VLAN Name Protocol Priority ------------------- --------------------------------- ----------------- default VLAN2 VLAN3 VLAN4 Total Entries: 4...
  • Page 678: Chapter 68 Qinq Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 68 QinQ Command List enable qinq disable qinq config qinq inner_tpid <hex 0x1 - 0xffff> config qinq ports [<portlist> | all] {role [uni | nni] | missdrop [enable | disable] | outer_tpid <hex 0x1 - 0xffff>...
  • Page 679: Disable Qinq

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 68-2 disable qinq Description This command is used to disable the QinQ. When QinQ is disabled, all dynamic learned L2 addresses will be cleared, all dynamic registered VLAN entries will be cleared, and GVRP will be disabled.
  • Page 680: Config Qinq Ports

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Example To configure the inner TPID in the system to 0x9100: DGS-3000-26TC:admin#config qinq inner_tpid 0x9100 Command: config qinq inner_tpid 0x9100 Success. DGS-3000-26TC:admin# 68-4 config qinq ports Description This command is used to configure the QinQ port's parameters.
  • Page 681: Show Qinq

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#config qinq ports 1-4 role nni outer_tpid 0x88A8 Command: config qinq ports 1-4 role nni outer_tpid 0x88A8 Success. DGS-3000-26TC:admin# 68-5 show qinq Description This command is used to display the global QinQ status.
  • Page 682: Show Qinq Ports

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Restrictions None. Example To display the inner-TPID of a system: DGS-3000-26TC:admin#show qinq inner_tpid Command: show qinq inner_tpid Inner TPID: 0x9100 DGS-3000-26TC:admin# 68-7 show qinq ports Description This command is used to display the QinQ configuration of the ports.
  • Page 683 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show qinq ports 1-2 Command: show qinq ports 1-2 Port ID: --------------------------------------------------------- Role: Miss Drop: Disabled Outer Tpid: 0x8100 Add Inner Tag: Disabled Port ID: --------------------------------------------------------- Role: Miss Drop:...
  • Page 684 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Restrictions Only Administrators, Operators and Power-Users can issue this command. Example To replace the C-Tag in which the CVID is 20, with the S-Tag and the S-VID is 200 at UNI Port 1:...
  • Page 685 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#delete vlan_translation ports 1-4 Command: delete vlan_translation ports 1-4 Success. DGS-3000-26TC:admin# 68-10 show vlan_translation Description This command is used to display the existing C-VLAN-based VLAN translation rules. Format show vlan_translation {[ports <portlist> | cvid <vidlist>]} Parameters ports - (Optional) Specify a list of ports to be displayed.
  • Page 686: Chapter 69 Quality Of Service (Qos) Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 69 Quality of Service (QoS) Command List config bandwidth_control [<portlist> | all] {rx_rate [no_limit | <value 64-10240000>] | tx_rate [no_limit | <value 64-10240000>]} show bandwidth_control {<portlist>} config per_queue bandwidth_control {ports [<portlist> | all]} <cos_id_list 0-7> {{min_rate [no_limit | <value 64-10240000>]} max_rate [no_limit | <value 64-10240000>]}(1)
  • Page 687 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide maximum limit in Kbits/sec. The actual bandwidth will be an adjusted value based on the user specified bandwidth. The actual limit may be equal to the user specified limit, but will not exceed it.
  • Page 688 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show bandwidth_control 1-10 Command: show bandwidth_control 1-10 Bandwidth Control Table Port RX Rate TX Rate Effective RX Effective TX (Kbit/sec) (Kbit/sec) (Kbit/sec) (Kbit/sec) ----- ---------- ---------- ---------------- ---------------- No Limit...
  • Page 689 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide receive. If the specified rate is not multiple of minimum granularity, the rate will be adjusted. Restrictions Only Administrators can issue this command. Example To configure the ports 1-10 CoS bandwidth queue 1 min rate to 130 and max rate to 100000:...
  • Page 690: Config Scheduling

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show per_queue bandwidth_control 10 Command: show per_queue bandwidth_control 10 Queue Bandwidth Control Table On Port: 10 Queue Min Rate(Kbit/sec) Max Rate(Kbit/sec) No Limit No Limit No Limit No Limit...
  • Page 691 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#config scheduling ports 10 1 weight 25 Command: config scheduling ports 10 1 weight 25 Success. DGS-3000-26TC:admin# 69-6 config scheduling_mechanism Description This command is used to configure the traffic scheduling mechanism for each CoS queue.
  • Page 692: Show Scheduling

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#config scheduling_mechanism ports 1 strict Command: config scheduling_mechanism ports 1 strict Success. DGS-3000-26TC:admin# 69-7 show scheduling Description This command is used to display the current traffic scheduling parameters. Format show scheduling {<portlist>}...
  • Page 693 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 69-8 show scheduling_mechanism Description This command is used to show the traffic scheduling mechanism. Format show scheduling_mechanism {<portlist>} Parameters <portlist> - (Optional) Enter a range of ports to be displayed.
  • Page 694 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show scheduling_mechanism Command: show scheduling_mechanism Port Mode ----- ------ Strict Strict Strict Strict Strict Strict Strict Strict Strict Strict Strict Strict Strict Strict Strict Strict Strict Strict Strict Strict...
  • Page 695 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Restrictions Only Administrators, Operators and Power-Users can issue this command. Example To configure the 802.1p user priority: DGS-3000-26TC:admin#config 802.1p user_priority 1 3 Command: config 802.1p user_priority 1 3 Success.
  • Page 696 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show 802.1p user_priority Command: show 802.1p user_priority QOS Class of Traffic: Priority-0 -> <Class-2> Priority-1 -> <Class-0> Priority-2 -> <Class-1> Priority-3 -> <Class-3> Priority-4 -> <Class-4> Priority-5 -> <Class-5>...
  • Page 697 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#config 802.1p default_priority all 5 Command: config 802.1p default_priority all 5 Success. DGS-3000-26TC:admin# 69-12 show 802.1p default_priority Description This command is used to display the current configured default priority settings on the Switch.
  • Page 698: Config Dscp Trust

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show 802.1p default_priority 1-10 Command: show 802.1p default_priority 1-10 Port Priority Effective Priority ---- ----------- ------------------ DGS-3000-26TC:admin# 69-13 config dscp trust Description This command is used to configure the state of DSCP trust per port. When DSCP is not trusted, 802.1p is trusted.
  • Page 699 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#config dscp trust 1-8 state enable Command: config dscp trust 1-8 state enable Success. DGS-3000-26TC:admin# 69-14 config 802.1p map Description This command is used to configure the mapping of 802.1p to the packet’s initial color. The mapping of 802.1p to a color is used to determine the initial color of the packet when the policing...
  • Page 700: Show Dscp Trust

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format show 802.1p map 1p_color {<portlist>} Parameters <portlist> - (Optional) Enter a list of ports. Restrictions None. Example To show the 802.1p color mapping on port 1: DGS-3000-26TC:admin#show 802.1p map 1p_color 1 Command: show 802.1p map 1p_color 1...
  • Page 701: Config Dscp Map

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show dscp trust 1-8 Command: show dscp trust 1-8 Port DSCP-Trust ---- ---------- Disabled Disabled Disabled Disabled Disabled Disabled Disabled Disabled DGS-3000-26TC:admin# 69-17 config dscp map Description This command is used to configure DSCP mapping. The mapping of DSCP to priority will be used to determine the priority of the packet (which will be then used to determine the scheduling queue) when the port is in DSCP trust state.
  • Page 702: Show Dscp Map

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide parameter. green - Specify the result color of mapping to be green. red - Specify the result color of mapping to be red. yellow - Specify the result color of mapping to be yellow.
  • Page 703 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Example In case of project support per port configure, show DSCP map configuration on port 1. DGS-3000-26TC:admin#show dscp map 1 dscp_dscp Command: show dscp map 1 dscp_dscp DSCP to DSCP Mapping:...
  • Page 704 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show 802.1p queue statistics port 10 Command: show 802.1p queue statistics port 10 Notes: (1)Min Bandwidth: minimum bandwidth setting, associated with per queue bandwidth control, if user doesn't configure it, the min bandwidth will be 0.
  • Page 705: Chapter 70 Radius Client Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 70 RADIUS Client Command List config radius add <server_index 1-3> [<server_ip> | <ipv6addr>] [key <password 32> | encryption_key <password 56>] [default | {auth_port <udp_port_number 1-65535> | acct_port <udp_port_number 1-65535> | timeout <sec 1-255> | retransmit <int 1-20>}(1)] config radius delete <server_index 1-3>...
  • Page 706: Config Radius Delete

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide retransmit - The count for re-transmitting. The default value is 2. <int 1-20> - Enter the re-transmit value here. This value must be between 1 and 20. Restrictions Only Administrators, Operators and Power-Users can issue this command.
  • Page 707: Config Radius

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 70-3 config radius Description This command is used to configure a RADIUS server. Format config radius <server_index 1-3> {ipaddress [<server_ip> | <ipv6addr>] | [key <password 32> | encryption_key <password 56 >] | auth_port [<udp_port_number 1-65535 >| default] | acct_port [<udp_port_number 1-65535>...
  • Page 708: Show Radius

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#config radius 1 auth_port 60 Command: config radius 1 auth_port 60 Success. DGS-3000-26TC:admin# 70-4 show radius Description This command is used to display RADIUS server configurations. Format show radius Parameters None.
  • Page 709 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters None. Restrictions None. Example To display authentication client information: DGS-3000-26TC:admin#show auth_client Command: show auth_client radiusAuthClient ==> radiusAuthClientInvalidServerAddresses radiusAuthClientIdentifier radiusAuthServerEntry ==> radiusAuthServerIndex :1 radiusAuthServerAddress 0.0.0.0 radiusAuthClientServerPortNumber radiusAuthClientRoundTripTime radiusAuthClientAccessRequests radiusAuthClientAccessRetransmissions...
  • Page 710 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters None. Restrictions None. Example To display information of RADIUS accounting client: DGS-3000-26TC:admin#show acct_client Command: show acct_client radiusAcctClient ==> radiusAcctClientInvalidServerAddresses radiusAcctClientIdentifier radiusAuthServerEntry ==> radiusAccServerIndex : 1 radiusAccServerAddress 0.0.0.0 radiusAccClientServerPortNumber...
  • Page 711: Chapter 71 Remote Copy Protocol (Rcp) Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 71 Remote Copy Protocol (RCP) Command List download firmware_fromRCP [{ username <username 15>} {<ipaddr>} src_file <path_filename 64> |rcp: <string {user@}ipaddr/path_filename>] {dest_file <pathname 64>} {boot_up} upload firmware_toRCP [{username <username 15>} {<ipaddr>} dest_file <path_filename 64> | rcp: <string {user@}ipaddr/path_filename>] {src_file <pathname 64>}...
  • Page 712 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Restrictions Only Administrators can issue this command. Example To download firmware from an RCP server: DGS-3000-26TC:admin#download firmware_fromRCP username rcp_user 10.90.90.90 src_file /home/ Command: download firmware_fromRCP username rcp_user 10.90.90.90 src_file /home/ Connecting to server....
  • Page 713 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Example To upload firmware image to an RCP server: DGS-3000-26TC:admin#upload firmware_toRCP rcp: rcp_user@172.18.212.106/DGS- 3000-1.12.had src_file 1.12.had Command: upload firmware_toRCP rcp: rcp_user@172.18.212.106/DGS-3000-1.12.had src_file 1.12.had Connecting to server....Done. Upload firmware....Done.
  • Page 714 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#download cfg_fromRCP username rcp_user 172.18.212.106 src_file /home/DGS-3000.cfg Command: download cfg_fromRCP username rcp_user 172.18.212.106 src_file /home/DGS-3000.cfg Connecting to server....Done. Download configuration....Done. DGS-3000-26TC:admin# 71-4 upload cfg_toRCP Description This command is used to upload a configuration file from the device to an RCP server. If the remote filename is not specified, the default file name will be modelname-image-id.
  • Page 715 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide include - (Optional) Includes lines that contain the specified filter string. exclude - (Optional) Excludes lines that contain the specified filter string. begin - (Optional) The first line that contains the specified filter string will be the first line of the output.
  • Page 716 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters username - (Optional) Specify the remote user name on the RCP server. <username 15> - Enter the remote user name on the RCP server. <ipaddr> - (Optional) Enter the IP address of the RCP server.
  • Page 717 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format upload attack_log_toRCP [{username <username 15>} {<ipaddr>} dest_file <path_filename 64> | rcp: <string {user@}ipaddr/path_filename>] Parameters username - (Optional) Specify the remote user name on the RCP Server. <username 15> - Enter the remote username used here. This name can be up to 15 characters long.
  • Page 718 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide unspecified. <ipaddr> - Enter the IP address of the RCP server. username - Specify the remote user name on the RCP server. <username> - Enter the remote user name on the RCP server.
  • Page 719 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 71-9 show rcp server Description This command is used to display Remote Copy Protocol (RCP) global server information. Format show rcp server Parameters None. Restrictions Only Administrators can issue this command.
  • Page 720: Chapter 72 Rspan Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 72 RSPAN Command List enable rspan disable rspan create rspan vlan [vlan_name <vlan_name> | vlan_id <vlanid 1-4094>] delete rspan vlan [vlan_name <vlan_name> | vlan_id <vlanid 1-4094>] config rspan vlan [vlan_name <vlan_name> | vlan_id <vlanid 1-4094>] [redirect [add | delete] ports <portlist>...
  • Page 721: Create Rspan Vlan

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters None. Restrictions Only Administrators and Operators can issue this command. Example To disable all previously entered RSPAN configurations: DGS-3000-26TC:admin#disable rspan Command: disable rspan Success. DGS-3000-26TC:admin# 72-3 create rspan vlan Description This command is used to create an RSPAN VLAN.
  • Page 722: Delete Rspan Vlan

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#create rspan vlan vlan_id 3 Command: create rspan vlan vlan_id 3 Success. DGS-3000-26TC:admin# 72-4 delete rspan vlan Description This command is used to delete RSPAN VLANs. Format delete rspan vlan [vlan_name <vlan_name> | vlan_id <vlanid 1-4094>] Parameters vlan_name - Specify the RSPAN VLAN by VLAN name.
  • Page 723: Config Rspan Vlan

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 72-5 config rspan vlan Description This command is used by the source switch to configure the source setting for the RSPAN VLAN. The redirect command is used by the intermediate or last switch to configure the output port of the RSPAN VLAN packets, and makes sure that the RSPAN VLAN packets can egress to the redirect ports.
  • Page 724: Show Rspan

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#config rspan vlan vlan_name vlan2 source add ports 2-5 rx Command: config rspan vlan vlan_name vlan2 source add ports 2-5 rx Success. DGS-3000-26TC:admin# To configure an RSPAN source entry for per flow RSPAN, without any source ports:...
  • Page 725 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show rspan vlan_id 2 Command: show rspan vlan_id 2 RSPAN : Enabled RSPAN VLAN ID -------------------- Source Port : 10 : 10 Redirect Port : 11 DGS-3000-26TC:admin# To display all RSPAN VLAN settings:...
  • Page 726: Chapter 73 Safeguard Engine Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 73 Safeguard Engine Command List config safeguard_engine {state [enable | disable]| utilization {rising <20-100> | falling <20-100>} | trap_log [enable | disable] | mode [strict | fuzzy]} show safeguard_engine...
  • Page 727 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#config safeguard_engine state enable utilization rising 50 falling 30 trap_log enable Command: config safeguard_engine state enable utilization rising 50 falling 30 trap_log enable Success. DGS-3000-26TC:admin# 73-2 show safeguard_engine Description This command is used to show safeguard engine information.
  • Page 728: Chapter 74 Secure Shell (Ssh) Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 74 Secure Shell (SSH) Command List config ssh algorithm [3DES | AES128 | AES192 | AES256 | arcfour | blowfish | cast128 | twofish128 | twofish192 | twofish256 | MD5| SHA1 | RSA | DSA] [enable | disable]...
  • Page 729: Show Ssh Algorithm

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Restrictions Only Administrators, Operators and Power-Users can issue this command. Example To enable SSH server public key algorithm: DGS-3000-26TC:admin#config ssh algorithm DSA enable Command: config ssh algorithm DSA enable Success.
  • Page 730: Config Ssh Authmode

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show ssh algorithm Command: show ssh algorithm Encryption Algorithm -------------------------- 3DES : Enabled AES128 : Enabled AES192 : Enabled AES256 : Enabled Arcfour : Enabled Blowfish : Enabled Cast128...
  • Page 731: Show Ssh Authmode

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Example To configure user authentication method: DGS-3000-26TC:admin#config ssh authmode publickey enable Command: config ssh authmode publickey enable Success. DGS-3000-26TC:admin# 74-4 show ssh authmode Description This command is used to show the user authentication method.
  • Page 732 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format config ssh user <username 15> authmode [hostbased [hostname <domain_name 32> | hostname_IP <domain_name 32> [<ipaddr> | <ipv6addr>]] | password | publickey] Parameters <username 15> - Enter the user name. This name can be up to 15 characters long.
  • Page 733: Config Ssh Server

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Example To show user information about SSH configuration: DGS-3000-26TC:admin#show ssh user authmode Command: show ssh user authmode Current Accounts: User Name Authentication Host Name Host IP --------------- --------- -------------------------------- ---------------...
  • Page 734: Enable Ssh

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Example To configure SSH server maximum session number is 3: DGS-3000-26TC:admin#config ssh server maxsession 3 Command: config ssh server maxsession 3 Success. DGS-3000-26TC:admin# 74-8 enable ssh Description This command is used to enable SSH server services.
  • Page 735: Show Ssh Server

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters None. Restrictions Only Administrators, Operators and Power-Users can issue this command. Example To disable the SSH server services: DGS-3000-26TC:admin#disable ssh Command: disable ssh Success. DGS-3000-26TC:admin# 74-10 show ssh server Description This command is used to show the SSH server general information.
  • Page 736 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show ssh server Command: show ssh server The SSH Server Configuration Maximum Session Connection Timeout : 120 Authentication Fail Attempts : 2 Rekey Timeout : Never TCP Port Number...
  • Page 737: Chapter 75 Secure Sockets Layer (Ssl) Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 75 Secure Sockets Layer (SSL) Command List download ssl certificate {<ipaddr> certfilename <path_filename 64> keyfilename <path_filename 64>} enable ssl {ciphersuite {RSA_with_RC4_128_MD5 | RSA_with_3DES_EDE_CBC_SHA | DHE_DSS_with_3DES_EDE_CBC_SHA | RSA_EXPORT_with_RC4_40_MD5}} disable ssl {ciphersuite {RSA_with_RC4_128_MD5 | RSA_with_3DES_EDE_CBC_SHA |...
  • Page 738: Enable Ssl

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#download ssl certificate 10.55.47.1 certfilename cert.der keyfilename pkey.der Command: download ssl certificate 10.55.47.1 certfilename cert.der keyfilename pkey.der Certificate Loaded Successfully! DGS-3000-26TC:admin# 75-2 enable ssl Description This command is used to enable SSL status and it’s ciphersuites. Using “enable ssl” command will enable SSL feature which means enable SSLv3 and TLSv1.
  • Page 739: Disable Ssl

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#enable ssl Command: enable ssl Success. DGS-3000-26TC:admin# NOTE: Web will be disabled when SSL is enabled. 75-3 disable ssl Description This command is used to disable SSL feature and supported ciphercuites. Using “disable ssl”...
  • Page 740: Show Ssl

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#disable ssl Command: disable ssl Success. DGS-3000-26TC:admin# 75-4 show ssl Description This command is used to display the certificate status. User must download specified certificate type according to desired key exchange algorithm. The options may be no certificate, RSA type or...
  • Page 741: Show Ssl Cachetimeout

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show ssl certificate Command: show ssl certificate Loaded with RSA Certificate! DGS-3000-26TC:admin# 75-5 show ssl cachetimeout Description This command is used to show cahce timeout value which is designed for dlktimer library to remove the session id after expired.
  • Page 742 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format config ssl cachetimeout <value 60-86400> Parameters <value 60-86400> - Enter the timeout value here. This value must be between 60 and 86400. Restrictions Only Administrators, Operators and Power-Users can issue this command.
  • Page 743: Chapter 76 Show Technical Support Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 76 Show Technical Support Command List show tech_support upload tech_support_toTFTP {<ipaddr> <path_filename 64>} 76-1 show tech_support Description This command is especially used by the technical support personnel to dump the device overall operation information.
  • Page 744 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show tech_support Command: show tech_support #------------------------------------------------------------------------------ DGS-3000-26TC Gigabit Ethernet Switch Technical Support Information Firmware: Build 1.10.013 Copyright(C) 2014 D-Link Corporation. All rights reserved. #------------------------------------------------------------------------------ ******************** Basic System Information ********************...
  • Page 745 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide This command can be interrupted by Ctrl-C or ESC when it is executing. Format upload tech_support_toTFTP {<ipaddr> <path_filename 64>} Parameters <ipaddr> - (Optional) Enter the IP address of TFTP server.
  • Page 746: Chapter 77 Simple Mail Transfer Protocol (Smtp) Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 77 Simple Mail Transfer Protocol (SMTP) Command List enable smtp disable smtp config smtp {server <ipaddr> | server_port <tcp_port_number 1-65535> | self_mail_addr <mail_addr 64> | [add mail_receiver <mail_addr 64> | delete mail_receiver <index 1-8>] | server_ipv6 <ipv6addr>...
  • Page 747 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format disable smtp Parameters None. Restrictions Only Administrators can issue this command. Example To disable SMTP status: DGS-3000-26TC:admin#disable smtp Command: disable smtp Success. DGS-3000-26TC:admin# 77-3 config smtp Description This command is used to configure SMTP client parameters.
  • Page 748 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Restrictions Only Administrators can issue this command. Example To configure an SMTP server IP address, this demonstrates how to configure the server IP to 172.18.208.9 and the TCP port to 25: DGS-3000-26TC:admin# config smtp server 172.18.208.9 server_port 25...
  • Page 749 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin# config smtp server 172:18:208::9 server_port_ipv6 25 Command: config smtp server 172:18:208::9 server_port_ipv6 25 Success. DGS-3000-26TC:admin# 77-4 show smtp Description This command is display the current SMTP information. Format...
  • Page 750 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show smtp Command: show smtp SMTP Status : Enabled SMTP Server Address : 172.18.208.9 SMTP Server Port : 25 SMTP IPv6 Server Address: 172:18:208::9 SMTP IPv6 Server Port : 25 Self Mail Address : Smtp@30xx.dev...
  • Page 751 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#smtp send_testmsg Command: smtp send_testmsg Subject:e-mail heading Content:e-mail content Sending mail, please wait... Success. DGS-3000-26TC:admin#...
  • Page 752: Chapter 78 Simple Network Management Protocol (Snmp) Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 78 Simple Network Management Protocol (SNMP) Command List enable community_encryption disable community_encryption show community encryption create snmp community <community_string 32> view <view_name 32> [read_only | read_write] delete snmp community <community_string 32>...
  • Page 753 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide show rmon 78-1 enable community_encryption Description This command is used to enable the encryption state on the SNMP community string. Format enable community_encryption Parameters None. Restrictions Only Administrators can issue this command.
  • Page 754: Create Snmp Community

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Example To disable the encryption state on the SNMP community string: DGS-3000-26TC:admin# disable community_encryption Command: disable community_encryption Success. DGS-3000-26TC:admin# 78-3 show community_encryption Description This command is used to display the encryption state on the SNMP community string.
  • Page 755: Delete Snmp Community

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Read and write or read-only permission for the MIB objects accessible to the community. Format create snmp community <community_string 32> view <view_name 32> [read_only | read_write] Parameters <community_string 32> - Enter the community string value here. This string can be up to 32 characters long.
  • Page 756: Show Snmp Community

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Example To delete a SNMP community “System”: DGS-3000-26TC:admin#delete snmp community System Command: delete snmp community System Success. DGS-3000-26TC:admin# 78-6 show snmp community Description This command is used to display the community string configurations.
  • Page 757: Create Snmp User

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 78-7 create snmp community_masking view Description This command is used to choose a security method for creating an SNMP community string, but the community string encrypted or not depends on the SNMP community encryption state.
  • Page 758 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters <user_name 32> - (Optional) Enter the name of the user on the host that connects to the agent. The name can be up to 32 characters long. <groupname 32> - (Optional) Enter the name of the group to which the user is associated. The name can be up to 32 characters long.
  • Page 759: Delete Snmp User

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 78-9 delete snmp user Description This command is used to remove a user from an SNMP group and delete the associated group in SNMP group. Format delete snmp user <username 32>...
  • Page 760: Create Snmp Group

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Example To show SNMP user: DGS-3000-26TC:admin#show snmp user Command: show snmp user Username Group Name VerAuthPriv -------------------------------- -------------------------- ----------- initial initial V3 NoneNone user123 group123 V3 MD5 DES Total Entries : 2...
  • Page 761: Delete Snmp Group

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#create snmp group group123 v3 auth_priv read_view CommunityView write_view CommunityView notify_view CommunityView Command: create snmp group group123 v3 auth_priv read_view CommunityView write_view CommunityView notify_view CommunityView Success. DGS-3000-26TC:admin# 78-12 delete snmp group Description This command is used to remove a SNMP group.
  • Page 762 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters None. Restrictions None. Example To show SNMP groups: DGS-3000-26TC:admin#show snmp groups Command: show snmp groups Vacm Access Table Settings Group Name : public ReadView Name : CommunityView WriteView Name...
  • Page 763: Create Snmp View

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 78-14 create snmp view Description This command is used to assign views to community strings to limit which MIB objects an SNMP manager can access. Format create snmp view <view_name 32> <oid> view_type [included | excluded] Parameters <view_name 32>...
  • Page 764: Show Snmp View

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Restrictions Only Administrators can issue this command. Example To delete SNMP view “view123”: DGS-3000-26TC:admin#delete snmp view view123 all Command: delete snmp view view123 all Success. DGS-3000-26TC:admin# 78-16 show snmp view Description This command is used to display the SNMP view record.
  • Page 765: Create Snmp

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show snmp view Command: show snmp view Vacm View Table Settings View Name Subtree View Type --------------------- ------------------------ ---------- view123 1.3.6 Included restricted 1.3.6.1.2.1.1 Included restricted 1.3.6.1.2.1.11 Included restricted 1.3.6.1.6.3.10.2.1...
  • Page 766: Delete Snmp

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Example To create SNMP host “10.0.0.1” with community string “public”: DGS-3000-26TC:admin#create snmp host 10.0.0.1 v1 public Command: create snmp host 10.0.0.1 v1 public Success. DGS-3000-26TC:admin# 78-18 delete snmp Description This command is used to delete a recipient of an SNMP trap operation.
  • Page 767: Show Snmp V6Host

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format show snmp host {<ipaddr>} Parameters <ipaddr> - (Optional) Enter the IP address of the recipient for which the traps are targeted. If no parameter specified, all SNMP hosts will be displayed.
  • Page 768: Config Snmp Engineid

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Example To show SNMP v6 host: DGS-3000-26TC:admin#show snmp v6host Command: show snmp v6host SNMP Host Table ------------------------------------------------------------------ Host IPv6 Address : 3FFE::3 SNMP Version : V3 na/np Community Name/SNMPv3 User Name : initial...
  • Page 769: Show Snmp Engineid

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Example To configure SNMP engine ID to “1023457890”: DGS-3000-26TC:admin#config snmp engineID 1023457890 Command: config snmp engineID 1023457890 Success. DGS-3000-26TC:admin# 78-22 show snmp engineID Description This command is used to display the identification of the SNMP engine on the Switch. The default value is suggested in RFC2271.
  • Page 770: Disable Snmp

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format enable snmp Parameters None. Restrictions Only Administrators and Operators can issue this command. Example To enable SNMP: DGS-3000-26TC:admin#enable snmp Command: enable snmp Success. DGS-3000-26TC:admin# 78-24 disable snmp Description This command is used to disable the SNMP function.
  • Page 771 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 78-25 config snmp system_name Description This command is used to configure the name for the Switch. Format config snmp system_name {<sw_name>} Parameters <sw_name> - (Optional) Enter the SNMP system name used here. This name can be up to 255 characters long.
  • Page 772: Enable Snmp Traps

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#config snmp system_location HQ 5F Command: config snmp system_location HQ 5F Success. DGS-3000-26TC:admin# 78-27 config snmp system_contact Description This command is used to enter the name of a contact person who is responsible for the Switch.
  • Page 773: Disable Snmp Traps

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Restrictions Only Administrators and Operators can issue this command. Example To enable SNMP trap support: DGS-3000-26TC:admin#enable snmp traps Command: enable snmp traps Success. DGS-3000-26TC:admin# 78-29 disable snmp traps Description This command is used to disable SNMP trap support on the Switch.
  • Page 774 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format enable snmp authenticate_traps Parameters None. Restrictions Only Administrators and Operators can issue this command. Example To enable SNMP authentication trap support: DGS-3000-26TC:admin#enable snmp authenticate_traps Command: enable snmp authenticate_traps Success.
  • Page 775 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 78-32 enable snmp linkchange_traps Description This command is used to configure the sending of linkchange traps. Format enable snmp linkchange_traps Parameters None. Restrictions Only Administrators and Operators can issue this command.
  • Page 776 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#disable snmp linkchange_traps Command: disable snmp linkchange_traps Success. DGS-3000-26TC:admin# 78-34 config snmp linkchange_traps ports Description This command is used to configure the sending of linkchange traps and per port control for sending of change trap.
  • Page 777 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters enable - Enables the trap of the coldstart event. The default state is enabled. disable - Disables the trap of the coldstart event. Restrictions Only Administrators can issue this command.
  • Page 778: Show Snmp Traps

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 78-37 show snmp traps Description This command is used to display the SNMP trap sending status. Format show snmp traps {linkchange_traps {ports <portlist>}} Parameters linkchange_traps - (Optional) Specify that the SNMP trap sending status will be displayed.
  • Page 779: Show Rmon

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Restrictions Only Administrators can issue this command. Example To configure the trap state for RMON events: DGS-3000-26TC:admin#config rmon trap rising_alarm disable Command: config rmon trap rising_alarm disable Success. DGS-3000-26TC:admin#...
  • Page 780: Chapter 79 Simple Red Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 79 Simple RED Command List enable sred disable sred config sred [<portlist> | all] [<class_id 0-7> | all] {threshold {low <value 0-100> | high <value 0- 100>} | drop_rate {low <value 1-8> | high <value 1-8>} | drop_green [enable | disable]} show sred {<portlist>...
  • Page 781 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters None. Restrictions Only Administrators, Operators and Power-Users can issue this command. Example To disable sRED: DGS-3000-26TC:admin#disable sred Command: disable sred Success. DGS-3000-26TC:admin# 79-3 config sred Description This command is used to configure the sRED port’s queue settings.
  • Page 782 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide disable - Probabilistic drop red colored packets if the queue depth is above the low threshold, and probabilistic drop yellow colored packets if the queue depth is above the high threshold.
  • Page 783 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show sred Command: show sred Simple RED Globale Status: Enabled Port Class Drop Green Threshold Drop Rate High Low High ---- ----- --------- ---- ---- ---- ---- Disabled Disabled...
  • Page 784 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show sred drop_counter Command: show sred drop_counter Port Yellow ---- -------------- --------------- DGS-3000-26TC:admin#...
  • Page 785: Chapter 80 Single Ip Management Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 80 Single IP Management Command List enable sim disable sim show sim {[candidates {<candidate_id 1-100>} | members{<member_id 1-32>} | group {commander_mac <macaddr>} | neighbor]} reconfig {member_id <value 1-32> | exit} config sim_group [add <candidate_id 1-100>...
  • Page 786 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 80-2 disable sim Description This command is used to disable single IP management on the Switch. Format disable sim Parameters None. Restrictions Only Administrators, Operators and Power-Users can issue this command.
  • Page 787 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Restrictions None. Example To show the self information in detail: DGS-3000-26TC:admin#show sim Command: show sim SIM Version : VER-1.61 Firmware Version : 1.10.013 Device Name MAC Address : 00-01-02-03-04-00...
  • Page 788 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show sim members Command: show sim members MAC Address Platform / Hold Firmware Device Name Capability Time Version --- ----------------- ------------------------ ----- --------- ---------------- 00-01-02-03-04-00 DGS-3000-26TC L2 Switch 1.10.010...
  • Page 789 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show sim neighbor Command: show sim neighbor Neighbor Table Port MAC Address Role ------ ------------------ --------- 00-35-26-00-11-99 Commander 00-35-26-00-11-91 Member 00-35-26-00-11-90 Candidate Total Entries: 3 DGS-3000-26TC:admin# 80-4 reconfig Description This command is used to re-Telnet to member.
  • Page 790 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format config sim_group [add <candidate_id 1-100> {<password>} | delete <member_id 1-32>] Parameters add - Specify to add a specific candidate to the group. <candidate_id 1-100> - Enter the candidate ID to be added to the group here. This value must be between 1 and 100.
  • Page 791 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format config sim [[commander {group_name <groupname 64>} | candidate] | dp_interval <sec 30- 90> | hold_time <sec 100-255>] Parameters commander - Specify to transfer the role to the commander.
  • Page 792 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide To change the time interval of discovery protocol: DGS-3000-26TC:admin#config sim dp_interval 30 Command: config sim dp_interval 30 Success. DGS-3000-26TC:admin# To change the hold time of discovery protocol: DGS-3000-26TC:admin#config sim hold_time 200 Command: config sim hold_time 200 Success.
  • Page 793 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26-TCS:admin# download sim_ms firmware_from_tftp 10.55.47.1 D:\firmware.had members 1 Commands: download sim_ms firmware_from_tftp 10.55.47.1 D:\firmware.had members This device is updating firmware. Please wait... Download Status : MAC Address Result -----------------...
  • Page 794 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 80-8 upload sim_ms Description This command is used to upload configuration or logs from indicated devices to the TFTP server. Format upload sim_ms [configuration_to_tftp | log_to_tftp] {[<ipaddr> | <ipv6addr>] <path_filename>...
  • Page 795 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 80-9 config sim trap Description This command is used to control sending of traps issued from the member switch. Format config sim trap [enable | disable] Parameters enable - Enable the trap state.
  • Page 796: Chapter 81 Super Vlan Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 81 Super VLAN Command List create super_vlan [<vlan_name 32> | vlanid <vlanid 1-4094>] {sub_vlan <vidlist>} config super_vlan [<vlan_name 32> | vlanid <vlanid 1-4094>] [add | delete] sub_vlan <vidlist>...
  • Page 797 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin# create super_vlan vlanid 10 Command: create super_vlan vlanid 10 Success. DGS-3000-26TC:admin# 81-2 config super_vlan Description This command is used to configure the sub-VLANs of a super VLAN. A sub-VLAN only can belong to one super VLAN and you cannot bind an IP interface on it.
  • Page 798 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format delete super_vlan [<vlan_name 32> | vlanid <vlanid 1-4094>] Parameters <vlan_name 32> - Enter the VLAN name used here. This name can be up to 32 characters long. vlanid - Specify the VLAN ID used.
  • Page 799 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Restrictions Only Administrators, Operators and Power-Users can issue this command. Example To configure IP range of sub VLAN 1 to 10.1.1.1-10.1.1.3: DGS-3000-26TC:admin# config sub_vlan vlanid 1 add ip_range 10.1.1.1 to 10.1.1.3 Command: config sub_vlan vlanid 1 add ip_range 10.1.1.1 to 10.1.1.3...
  • Page 800 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin# show super_vlan Command: show super_vlan Super VID : 3 VLAN Name : super3 IP Subnet: 172.6.0.254/16 Status : Inactive Sub VID : 200-204 Total Entries: 1 DGS-3000-26TC:admin# 81-6...
  • Page 801 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin# show sub_vlan Command: show sub_vlan Sub VID Status Super VID IP Range ------- ------- ---------- ------------------------ Active 10.1.1.1-10.1.1.10 10.1.2.1-10.1.2.20 Active 10.1.3.0-10.1.3.100 Inactive 10.1.4.0-10.1.4.255 Active 10.1.5.0-10.1.5.255 Inactive 10.1.6.0-10.1.6.255 Total Entries: 5...
  • Page 802: Chapter 82 Syslog And Trap Source-Interface Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 82 Syslog and Trap Source- interface Command List config syslog source_ipif [<ipif_name 12> {<ipaddr> | <ipv6addr> } | none] show syslog source_ipif config trap source_ipif [<ipif_name 12> {<ipaddr> | <ipv6addr> } | none]...
  • Page 803 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#config syslog source_ipif none Command: config syslog source_ipif none Success DGS-3000-26TC:admin# 82-2 show syslog source_ipif Description This command is used to display the syslog source IP interface. Format show syslog source_ipif Parameters None.
  • Page 804 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters <ipif_name 12> - Enter the IP interface name here. This name can be up to 12 characters long. <ipaddr> - (Optional) Enter the IP address used for the configuration here.
  • Page 805 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show trap source_ipif Command: show trap source_ipif Trap Source IP Interface Configuration: IP Interface : System IPv4 Address : None IPv6 Address : None DGS-3000-26TC:admin#...
  • Page 806: Chapter 83 System Log Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 83 System Log Command List clear log show log {[index <value_list> | severity {module <module_list>} {emergency | alert | critical | error | warning | notice | informational | debug | <level_list 0-7>} | module<module_list>]}...
  • Page 807: Show Log

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#clear log Command: clear log Success. DGS-3000-26TC:admin# 83-2 show log Description This command is used to display the Switch’s history log. Format show log {[index <value_list> | severity {module <module_list>} {emergency | alert | critical | error | warning | notice | informational | debug | <level_list 0-7>} | module<module_list>]}...
  • Page 808: Enable Syslog

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show log index 1-3 Command: show log index 1-3 Index Date Time Level Log Text ----- ---------- -------- ------- ---------------------------------------------- 2000-01-01 00:00:40 CRIT(2) System started up 2000-01-01 00:00:40 CRIT(2) System cold start 2000-01-01 01:49:30 INFO(6) Anonymous: execute command "reset system".
  • Page 809: Disable Syslog

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format enable syslog Parameters None. Restrictions Only Administrators and Operators can issue this command. Example To enable the sending of syslog messages: DGS-3000-26TC:admin#enable syslog Command: enable syslog Success. DGS-3000-26TC:admin#...
  • Page 810: Show Syslog

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 83-6 show syslog Description This command is used to display the syslog protocol global state. Format show syslog Parameters None. Restrictions None. Example To display the syslog protocol global state:...
  • Page 811: Config Syslog Host

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide critical - Severity level 2. error - Severity level 3. warning - Severity level 4. notice - Severity level 5. informational - Severity level 6. debug - Severity level 7.
  • Page 812 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format config syslog host [<index> | all] {severity [emergency | alert | critical | error | warning | notice | informational | debug| <level 0-7>] | facility [local0 | local1 | local2 | local3 | local4 | local5 | local6 | local7] | udp_port <udp_port_number>...
  • Page 813: Delete Syslog Host

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#config syslog host all severity debug facility local0 Command: config syslog host all severity debug facility local0 Success. DGS-3000-26TC:admin# 83-9 delete syslog host Description This command is used to delete the syslog host(s).
  • Page 814 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide If no parameter is specified, all hosts will be displayed. Restrictions None. Example To show the syslog host information: DGS-3000-26TC:admin#show syslog host Command: show syslog host Syslog Global State: Disabled...
  • Page 815 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Example To configure the method for saving a log as on demand: DGS-3000-26TC:admin#config log_save_timing on_demand Command: config log_save_timing on_demand Success. DGS-3000-26TC:admin# 83-12 show log_save_timing Description This command is used to show the method for saving the log.
  • Page 816 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format show attack_log {index <value_list>} Parameters index - (Optional) Specify the list of index numbers of the entries that need to be displayed. For example, the index 1-5 will display the attack log messages from 1 to 5.
  • Page 817 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#clear attack_log Command: clear attack_log Success. DGS-3000-26TC:admin#...
  • Page 818: Chapter 84 System Severity Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 84 System Severity Command List config system_severity [trap | log | all] [emergency | alert| critical | error | warning | notice | information | debug | <level 0-7>]...
  • Page 819 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#config system_severity trap warning Command: config system_severity trap warning Success. DGS-3000-26TC:admin# 84-2 show system_severity Description This command is used to display the severity level controls for the system. Format...
  • Page 820: Telnet Client Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 85 Telnet Client Command List telnet [<ipaddr> | <domain_name 255> |<ipv6addr>] {tcp_port <value 1-65535>} 85-1 telnet Description This command is used to start the Telnet client to connect to the specific Telnet server. The parameters specified by the command will only be used for the establishment of this specific session.
  • Page 821: Chapter 86 Tftp Client Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 86 TFTP Client Command List download [firmware_fromTFTP {[<ipaddr> | <ipv6addr> | <domain_name 255>] src_file <path_filename 64> {dest_file <pathname 64>} {boot_up}} | cfg_fromTFTP{ [<ipaddr> | <ipv6addr> | <domain_name 255>] src_file <path_filename 64> {dest_file <pathname 64>}}] upload [cfg_toTFTP {[<ipaddr>...
  • Page 822 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide src_file - Specify the path name and file name of the FTP server. It can be a relative path name or an absolute path name. If path name is not specified, it refers to the TFTP server path.
  • Page 823 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide dest_file – (Optional) Specify the path name on the TFTP server. <path_filename 64> - Enter the location of the Switch configuration file on the TFTP server. This file will be replaced by the uploaded file from the Switch. The maximum length is 64 characters.
  • Page 824 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#upload firmware_toTFTP 10.90.90.10 dest_file d:\firmware.had Command: upload firmware_toTFTP 10.90.90.10 dest_file d:\firmware.had Connecting to server....Done. Upload firmware......Done. Success. DGS-3000-26TC:admin# To display a scenario where the uploading of the firmware to the TFTP server failed, because of an incorrect or missing filename from the source.
  • Page 825 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide To upload the attack log from the Switch to the TFTP server: DGS-3000-26TC:admin#upload attack_log_toTFTP 10.90.90.10 dest_file d:\attack.txt Command: upload attack_log_toTFTP 10.90.90.10 dest_file d:\attack.txt Success. DGS-3000-26TC:admin# 86-3 config tftp Description This command is used to configure the TFTP server and file pathname on the TFTP server.
  • Page 826: Show Tftp

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide debug_error_log_file - Specify the path and name of the debugged error log file that will be used for the upload. <path_filename 64> - Enter the path and name of the debugged error log file that will be used for the upload.
  • Page 827 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters None. Restrictions None. Example To display the TFTP server’s settings: DGS-3000-26TC:admin#show tftp Command: show tftp TFTP Server Settings IPv4 Address : File Type Path_filename -------------------- ---------------------- firmware_file cfg_file...
  • Page 828: Chapter 87 Time And Sntp Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 87 Time and SNTP Command List config sntp {primary <ipaddr> | secondary <ipaddr> | poll-interval <int 30-99999>}(1) config sntp ipv6server {primary <ipv6addr> | secondary <ipv6addr> }(1) show sntp...
  • Page 829: Show Sntp

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#config sntp primary 10.1.1.1 secondary 10.1.1.2 poll- interval 30 Command: config sntp primary 10.1.1.1 secondary 10.1.1.2 poll-interval 30 Success. DGS-3000-26TC:admin# 87-2 config sntp ipv6server Description This command is used to configure the SNTP IPv6 server information.
  • Page 830: Enable Sntp

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters None. Restrictions None. Example To show SNTP: DGS-3000-26TC:admin#show sntp Command: show sntp Current Time Source : System Clock SNTP : Disabled IPv4 Primary SNTP Server : 10.1.1.1 IPv4 Secondary SNTP Server: 10.1.1.2...
  • Page 831: Disable Sntp

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#enable sntp Command: enable sntp Success. DGS-3000-26TC:admin# 87-5 disable sntp Description This command is used to turn off SNTP support. Format disable sntp Parameters None. Restrictions Only Administrators, Operators and Power-Users can issue this command.
  • Page 832 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Restrictions Only Administrators, Operators and Power-Users can issue this command. Example To configure time: DGS-3000-26TC:admin#config time 30jun2014 16:30:30 Command: config time 30jun2014 16:30:30 Success. DGS-3000-26TC:admin# 87-7 config time_zone Description This command is used to configure time zone of the device.
  • Page 833: Config Dst

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 87-8 config dst Description This command is used to configure Daylight Saving Time of the device. Format config dst [disable | repeating {s_week <start_week 1-4,last> | s_day <start_weekday sun- sat>...
  • Page 834: Show Time

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide must be in the hh:mm format. e_date - (Optional) Specify the end date of Daylight Saving Time. <end_date 1-31> - Enter the ending date of Daylight Saving Time here. This range must be between 1 an 31.
  • Page 835 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Example To show time: DGS-3000-26TC:admin#show time Command: show time Current Time Source : System Clock Boot Time : 9 May 2014 06:20:55 Current Time : 9 May 2014 07:46:10...
  • Page 836: Chapter 88 Trace Route Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 88 Trace Route Command List traceroute [<ipaddr> | <domain_name 255>] {ttl <value 1-60> | port <value 30000-64900> | timeout <sec 1-65535> | probe <value 1-9>} traceroute6 [<ipv6addr> | <domain_name 255>] {ttl <value 1-60> | port <value 30000-64900> | timeout <sec 1-65535>...
  • Page 837 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#traceroute 10.48.74.121 probe 3 Command: traceroute 10.48.74.121 probe 3 <10 ms. 10.12.73.254 <10 ms. 10.19.68.1 <10 ms. 10.48.74.121 Trace complete. DGS-3000-26TC:admin# 88-2 traceroute6 Description This command is used to trace the IPv6 routed path between the Switch and a destination end station.
  • Page 838 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#traceroute6 3000::1 probe 3 Command: traceroute6 3000::1 probe 3 <10 ms. 1345:142::11 <10 ms. 2011:14::100 <10 ms. 3000::1 Trace complete. DGS-3000-26TC:admin# To trace the IPv6 routed path between the Switch and 1210:100::11 with port 40000:...
  • Page 839: Chapter 89 Traffic Control Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 89 Traffic Control Command List config traffic control [<portlist> | all] {broadcast [enable | disable] | multicast [enable | disable] | unicast [enable | disable] | action [drop | shutdown] | threshold <value 0-255000> | countdown [<min 0>...
  • Page 840 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide runs out, port will be shutdown forever. The parameter is not applicable if “drop” (mode) is specified for the “action” parameter. <min 0> - Enter 0 to disable the forever state, meaning that the port will not enter the shutdown forever state.
  • Page 841: Show Traffic Control

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Example To enable both the occurred mode and cleared mode traffic control traps: DGS-3000-26TC:admin#config traffic trap both Command: config traffic trap both Success. DGS-3000-26TC:admin# 89-3 show traffic control Description This command is used to display the current traffic control settings.
  • Page 842 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show traffic control 1-10 Command: show traffic control 1-10 Traffic Control Trap : [Both] Traffic Control Log : Enabled Traffic Control Auto Recover Time: 0 Minutes Port Thres Broadcast Multicast Unicast...
  • Page 843 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Example To configure the traffic log state on the Switch: DGS-3000-26TC:admin#config traffic control log state enable Command: config traffic control log state enable Success. DGS-3000-26TC:admin# 89-5 config traffic control auto_recover_time...
  • Page 844: Chapter 90 Traffic Segmentation Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 90 Traffic Segmentation Command List config traffic_segmentation [<portlist> | all] forward_list [null | all | <portlist>] show traffic_segmentation {<portlist>} 90-1 config traffic_segmentation Description This command is used to configure the traffic segmentation.
  • Page 845 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format show traffic_segmentation {<portlist>} Parameters <portlist> - (Optional) Enter a range of ports to be displayed. If no parameter is specified, the system will display all current traffic segmentation tables.
  • Page 846: Chapter 91 Trusted Host Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 91 Trusted Host Command List create trusted_host [<ipaddr> | <ipv6addr> | network <network_address> | ipv6_prefix <ipv6networkaddr>] {snmp | telnet | ssh | http | https | ping} delete trusted_host [ipaddr <ipaddr> | ipv6address <ipv6addr> | network <network_address> | ipv6_prefix <ipv6networkaddr >...
  • Page 847 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#create trusted_host 10.48.74.121 Command: create trusted_host 10.48.74.121 Success. DGS-3000-26TC:admin# 91-2 delete trusted_host Description This command is used to delete a trusted host entry made using the create trusted_host command above.
  • Page 848 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format config trusted_host [<ipaddr> | <ipv6addr> | network <network_address> | ipv6_prefix <ipv6networkaddr>] [add | delete] {snmp | telnet | ssh | http | https | ping | all} Parameters <ipaddr>...
  • Page 849 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Restrictions None. Example To display trusted host: DGS-3000-26TC:admin#show trusted_host Command: show trusted_host Management Stations IP Address Access Interface ---------------------------------------------------------------- 10.48.74.121 SNMP Telnet SSH HTTP HTTPs Ping Total Entries: 1...
  • Page 850: Unicast Routing Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 92 Unicast Routing Command List create iproute [default | <network_address>] <ipaddr> {<metric 1-65535>} {[primary | backup]} delete iproute [default | <network_address>] <ipaddr> show iproute {<network_address> | <ipaddr>} {static}...
  • Page 851: Delete Iproute

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin# create iproute 10.48.74.121/255.0.0.0 10.1.1.254 primary Command: create iproute 10.48.74.121/8 10.1.1.254 primary DGS-3000-26TC:admin# create iproute 11.53.73.131/8 10.1.2.11 Command: Command: create iproute 11.53.73.131/8 10.1.2.11 Success. DGS-3000-26TC:admin# 92-2 delete iproute Description This command is used to delete an IP route entry from the Switch’s IP routing table.
  • Page 852 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format show iproute {<network_address> | <ipaddr>} {static} Parameters <network_address> - (Optional) Enter the destination network address of the route to be displayed. <ipaddr> - (Optional) Enter the destination IP address of the route to be displayed. The longest prefix matched route will be displayed static - (Optional) Specify to display only static routes.
  • Page 853: Chapter 93 Vlan Trunking Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 93 VLAN Trunking Command List enable vlan_trunk disable vlan_trunk config vlan_trunk ports [<portlist> | all] state [enable | disable] show vlan_trunk 93-1 enable vlan_trunk Description This command is used to enable the VLAN trunk function. When the VLAN trunk function is enabled, the VLAN trunk ports shall be able to forward all tagged frames with any VID.
  • Page 854 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters None. Restrictions Only Administrators can issue this command. Example To disable the VLAN Trunk: DGS-3000-26TC:admin#disable vlan_trunk Command: disable vlan_trunk Success. DGS-3000-26TC:admin# 93-3 config vlan_trunk ports Description This command is used to configure a port as a VLAN trunk port. By default, none of the port is a VLAN trunk port.
  • Page 855 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide state - Specify that the port is a VLAN trunk port or not. enable - Specify that the port is a VLAN trunk port. disable - Specify that the port is not a VLAN trunk port.
  • Page 856 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Port 6 is LA-1 member port; port 7 is LA-1 master port. DGS-3000-26TC:admin#config vlan_trunk ports 7 state disable Command: config vlan_trunk ports 7 state disable Success. DGS-3000-26TC:admin#config vlan_trunk ports 6-7 state disable Command: config vlan_trunk ports 6-7 state disable Success.
  • Page 857 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show vlan Command: show vlan VLAN Trunk State : Enabled VLAN Trunk Member Ports : 1-5 VLAN Name : default VLAN Type : Static Advertisement : Enabled Member Ports...
  • Page 858: Chapter 94 Voice Vlan Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 94 Voice VLAN Command List enable voice_vlan [<vlan_name 32> | vlanid <vlanid 1-4094>] disable voice_vlan config voice_vlan priority <int 0-7> config voice_vlan oui [add | delete] <macaddr> <macmask> {description <desc 32>} config voice_vlan ports [<portlist>...
  • Page 859 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#enable voice_vlan v2 Command: enable voice_vlan v2 Success. DGS-3000-26TC:admin# 94-2 disable voice_vlan Description This command is used to disable the voice VLAN function on a switch. When the voice VLAN function is disabled, the voice VLAN will become unassigned.
  • Page 860 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters <int 0-7> - Enter the priotity of the voice VLAN. This value must be between 0 and 7. The default priority is 5. Restrictions Only Administrators, Operators and Power-Users can issue this command.
  • Page 861 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide description - (Optional) The description for the user-defined OUI. <desc 32> - Enter the description here. This value can be up to 32 characters long. Restrictions Only Administrators, Operators and Power-Users can issue this command.
  • Page 862 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Restrictions Only Administrators, Operators and Power-Users can issue this command. Example To configure voice VLAN ports 4-6 to enable: DGS-3000-26TC:admin#config voice_vlan ports 4-6 state enable Command: config voice_vlan ports 4-6 state enable Success.
  • Page 863 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#config voice_vlan aging_time 60 Command: config voice_vlan aging_time 60 Success. DGS-3000-26TC:admin# 94-7 config voice_vlan log state Description This command is used to configure the log state for voice VLAN. If there is a new voice device detected/or a port joins/leaves the voice VLAN dynamically, and the log is enabled, a log will be triggered.
  • Page 864 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters None. Restrictions None. Example To display the voice VLAN global information when voice VLAN is enabled: DGS-3000-26TC:admin#show voice_vlan Command: show voice_vlan Voice VLAN State : Enabled VLAN ID...
  • Page 865 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Restrictions None. Example To display the OUI information of voice VLAN: DGS-3000-26TC:admin#show voice_vlan oui Command: show voice_vlan oui OUI Address Mask Description ------------------ ------------------ -------------- 00-01-E3-00-00-00 FF-FF-FF-00-00-00 Siemens 00-03-6B-00-00-00...
  • Page 866 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show voice_vlan ports 1-5 Command: show voice_vlan ports 1-5 Ports Status Mode ----- --------- -------------- Disabled Auto Untagged Disabled Auto Untagged Disabled Auto Untagged Enabled Auto Untagged Enabled Auto Untagged...
  • Page 867 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show voice_vlan voice_device ports 1-5 Command: show voice_vlan voice_device ports 1-5 Ports Voice Device Start Time Last Active Time ----- ----------------- ---------------- ---------------- 00-E0-BB-00-00-01 2008-10-6 09:00 2008-10-6 10:30 00-E0-BB-00-00-02...
  • Page 868 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin#show voice_vlan lldp_med voice_device Command: show voice_vlan lldp_med voice_device Index Local Port Chassis ID Subtype : MAC Address Chassis ID : 00-E0-BB-00-00-11 Port ID Subtype : Network Address Port ID : 172.18.1.1...
  • Page 869: Chapter 95 Web-Based Access Control (Wac) Command List

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Chapter 95 Web-based Access Control (WAC) Command List enable wac disable wac config wac authorization attributes {radius [enable | disable] | local [enable | disable]}(1) config wac ports [<portlist> | all] {state [enable | disable] | aging_time [infinite | <min 1-1440>] | idle_time [infinite | <min 1-1440>] | block_time [<sec 0-300>]}(1)
  • Page 870: Disable Wac

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Example To enable the WAC function: DGS-3000-26TC:admin#enable wac Command: enable wac Success. DGS-3000-26TC:admin# 95-2 disable wac Description This command is used to disable the WAC function. Format disable wac Parameters None.
  • Page 871: Config Wac Ports

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Parameters radius - If specified to enable, the authorized data assigned by the RADUIS server will be accepted if the global authorization network is enabled. The default state is enabled.
  • Page 872: Config Wac Method

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide idle of traffic. <min 1-1440> - Enter an idle time between 1 and 1440 minutes. block_time - If a host fails to pass the authentication, it will be blocked for this period of time before it can be re-authenticated.The default value is 60 seconds.
  • Page 873 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Example To configure the WAC authentication method: DGS-3000-26TC:admin#config wac method radius Command: config wac method radius Success. DGS-3000-26TC:admin# 95-6 config wac default_redirpath Description This command is used to configure the WAC default redirect path. If default redirect path is configured, the user will be redirected to the default redirect path after successful authentication.
  • Page 874 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format config wac clear_default_redirpath Parameters None. Restrictions Only Administrators, Operators and Power-Users can issue this command. Example To clear the WAC default redirect path: DGS-3000-26TC:admin#config wac clear_default_redirpath Command: config wac clear_default_redirpath Success.
  • Page 875 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Example Set virtual IP address: DGS-3000-26TC:admin# config wac virtual_ip 1.1.1.1 Command: config wac virtual_ip 1.1.1.1 Success. DGS-3000-26TC:admin# 95-9 config wac switch_http_port Description This command is used to configure the TCP port which the WAC switch listens to. The TCP port for HTTP or HTTPs is used to identify the HTTP or HTTPs packets that will be trapped to CPU for authentication processing, or to access the login page.
  • Page 876: Create Wac User

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 95-10 create wac user Description This command is used to create accounts for Web-based Access Control. This user account is independent of the login user account. If VLAN is not specified, the user will not get a VLAN assigned after the authentication.
  • Page 877: Config Wac User

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide all_users - Specify this option to delete all current WAC users. Restrictions Only Administrators, Operators and Power-Users can issue this command. Example To delete a WAC account: DGS-3000-26TC:admin#delete wac user duhon Command: delete wac user duhon Success.
  • Page 878: Show Wac

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin# config wac user abc vlanid 100 Command: config wac user abc vlanid 100 Enter a old password:** Enter a case-sensitive new password:** Enter the new password again for confirmation:** Success.
  • Page 879: Show Wac Ports

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide 95-14 show wac ports Description This command is used to display WAC port information. Format show wac ports {<portlist>} Parameters <portlist> - (Optional) Enter a range of member ports to display the status.
  • Page 880 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Example To show Web authentication user accounts: DGS-3000-26TC:admin# show wac user Command: show wac user User Name Password ----------------- ----------------- --------- ************ 1000 Total Entries DGS-3000-26TC:admin# 95-16 show wac auth_state ports Description This command is used to display the authentication state for ports.
  • Page 881 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin# show wac auth_state ports Command: show wac auth_state ports P:Port-based Pri:Priority Port MAC Address Original State VID Pri Aging Time/ Idle RX VID Block Time Time ------ -------------------- ---- -------------- ---- -- ----------- ----...
  • Page 882 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin# clear wac auth_state ports 1-5 Command: clear wac auth_state ports 1-5 Success. DGS-3000-26TC:admin# 95-18 config wac authentication_page element Description This command is used to customize the authenticate page elements.
  • Page 883 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide DGS-3000-26TC:admin# config wac authentication_page element notification_line 1 Copyright @ 2014 D-Link All Rights Reserved Command: config wac authentication_page element notification_line 1 Copyright @ 2014 D-Link All Rights Reserved Success.
  • Page 884 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Format config wac trap state [enable | disable] Parameters enable - Specify to enable the WAC trap state. disable - Specify to disable the WAC trap state. Restrictions Only Administrators, Operators and Power-Users can issue this command.
  • Page 885: Appendix A Password Recovery Procedure

    This chapter explains how the Password Recovery feature can help network administrators reach this goal. The following steps explain how to use the Password Recovery feature on D-Link devices to easily recover passwords. Complete these steps to reset the password: For security reasons, the Password Recovery feature requires the user to physically access the device.
  • Page 886 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Command Parameters reset account The reset account command deletes all the previously created accounts. reset password The reset password command resets the password of the {<username>} specified user. If a username is not specified, the passwords of all users will be reset.
  • Page 887: Appendix B System Log Entries

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Appendix B System Log Entries The following table lists all possible entries and their corresponding meanings that will appear in the System Log of this Switch. Category Event Description...
  • Page 888 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Category Event Description Log Information Severity Log message successfully uploaded. Log message successfully uploaded by Informational <session> (Username: <username>, IP: <ipaddr>, MAC: <macaddr>) Log message upload was Log message upload by <session> was Warning unsuccessful.
  • Page 889 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Category Event Description Log Information Severity string! Topology changed. Topology changed Notice (Instance:<InstanceID>, Port:<portNum>,MAC:<macaddr>) Enable spanning tree protocol. Spanning Tree Protocol is enabled Informational Disable spanning tree protocol. Spanning Tree Protocol is disabled Informational New root bridge.
  • Page 890 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Category Event Description Log Information Severity <username>, IP: <ipaddr>, ) Logout through SSH. Logout through SSH (Username: Informational <username>, IP: <ipaddr> ) SSH session timed out. SSH session timed out (Username: Informational <username>, IP: <ipaddr>)
  • Page 891 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Category Event Description Log Information Severity (Username: <username> ) Successful login through Console Successful login through Console Informational authenticated by AAA server. authenticated by AAA server <serverIP> (Username: <username>)
  • Page 892 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Category Event Description Log Information Severity authenticated by AAA local_enable from <userIP> authenticated by AAA method. local_enable method (Username: <username> ) Enable Admin failed through Web Enable Admin failed through Web from...
  • Page 893 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Category Event Description Log Information Severity Enable Admin failed through Web Enable Admin failed through Web from Warning authenticated by AAA server. <userIP> authenticated by AAA server <serverIP> (Username: <username> )
  • Page 894 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Category Event Description Log Information Severity Dynamic IMPB entry conflicts with Dynamic IMPB entry conflicts with Warning static IMPB. static IMPB(IP: <ipaddr>, MAC: <macaddr>, Port <portNum>) Creating IMPB entry failed due to no...
  • Page 895 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Category Event Description Log Information Severity 802.1x Authentication success. 802.1x Authentication success from Informational (Username: <username>, Port: <portNum>, MAC: <macaddr>) Cross-connect is detected. CFM cross-connect. VLAN:<vlanid>, Critical Local(MD Level:<mdlevel>, Port <portNum>, Direction:<mepdirection>)
  • Page 896 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Category Event Description Log Information Severity BPDU attack happened. Port <port> enter BPDU under Informational protection state (mode: shutdown) BPDU attack automatically recover. Port <port> recover from BPDU under...
  • Page 897 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Category Event Description Log Information Severity Direction:<mepdirection>, MEPID:<mepid>) LCK condition detected. LCK condition detected. MD Notice Level:<mdlevel>, VLAN:<vlanid>, Local(Port <portNum>, Direction:<mepdirection>, MEPID:<mepid>) LCK condition cleared. LCK condition cleared. MD Notice Level:<mdlevel>, VLAN:<vlanid>,...
  • Page 898 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Category Event Description Log Information Severity <macaddr>) Attack log message upload Attack log message upload by Warning unsuccessfully. <session> unsuccessfully. (Username: <username>, IP: <ipaddr>, MAC: <macaddr>) DHCPv6 Client DHCPv6 client interface administrator DHCPv6 client on interface <intf-name>...
  • Page 899: Appendix C Trap Log Entries

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Appendix C Trap Log Entries This table lists the trap logs found on the Switch. Trap Name Trap Description risingAlarm The SNMP trap that is generated when an alarm entry crosses its 1.3.6.1.2.1.16.0.1...
  • Page 900 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Trap Name Trap Description newRoot The newRoot trap indicates that the sending agent has become 1.3.6.1.2.1.17.0.1 the new root of the Spanning Tree; the trap is sent by a bridge soon after its election as the new root, e.g., upon expiration of the...
  • Page 901 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Trap Name Trap Description mechanism. Binding: 1: swPktStormCtrlPortIndex swSafeGuardChgToExh This trap indicates System change operation mode from normal to 1.3.6.1.4.1.171.12.19.4. austed exhausted. 1.0.1 Binding: 1: swSafeGuardCurrentStatus swSafeGuardChgToNor This trap indicates System change operation mode from 1.3.6.1.4.1.171.12.19.4.
  • Page 902 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Trap Name Trap Description swWACLoggedFail The trap is sent when a WAC client fails to login. 1.3.6.1.4.1.171.12.27.11 .1.0.2 Binding: 1: swWACAuthStatePort 2: swWACAuthStateOriginalVid 3: swWACAuthStateMACAddr 4: swWACAuthUserName 5: swWACClientAddrType...
  • Page 903 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Trap Name Trap Description Binding: 1.swFilterDetectedIP 2.swFilterDetectedport swSingleIPMSColdStart Commander switch will send swSingleIPMSColdStart notification 1.3.6.1.4.1.171.12.8.6.0. to indicated host when its Member generate cold start notification. Binding: 1: swSingleIPMSID 2: swSingleIPMSMacAddr swSingleIPMSWarmStart Commander switch will send swSingleIPMSWarmStart notification 1.3.6.1.4.1.171.12.8.6.0.
  • Page 904 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Trap Name Trap Description 2: agentGratuitousARPMacAddr 3: agentGratuitousARPPortNumber 4: agentGratuitousARPInterfaceName agentCfgOperCompleteT The trap is sent when the configuration is completely saved, 1.3.6.1.4.1.171.12.1.7.2. uploaded or downloaded. Binding: 1: unitID 2: agentCfgOperate...
  • Page 905 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Trap Name Trap Description 2: swFanID swHighTemperature High Temperature notification 1.3.6.1.4.1.171.12.11.2. Binding: 2.4.0.1 1: swTemperatureUnitIndex 2: swTemperSensorID 3: swTemperatureCurrent swHighTemperatureRec High Temperature notification 1.3.6.1.4.1.171.12.11.2. over Binding: 2.4.0.2 1: swTemperatureUnitIndex...
  • Page 906 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Trap Name Trap Description 1: dot1agCfmMdIndex 2: dot1agCfmMaIndex 3: dot1agCfmMepIdentifier swCFMExtLockCleared A notification is generated when local MEP exits lock status. 1.3.6.1.4.1.171.12.86.10 0.0.4 Binding: 1: dot1agCfmMdIndex 2: dot1agCfmMaIndex 3: dot1agCfmMepIdentifier...
  • Page 907: Appendix Dradius Attributes Assignment

    DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide Appendix D RADIUS Attributes Assignment The RADIUS Attributes Assignment on the Switch is used in the following modules: 802.1X (Port- based and Host-based), and MAC-based Access Control. The description that follows explains the following RADIUS Attributes Assignment types: •...
  • Page 908 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide default priority (according to the RADIUS server) to the port. However, if the user does not configure the priority attribute and authenticates successfully, the device will not assign a priority to this port.
  • Page 909 DGS-3000 Series Layer 2 Managed Gigabit Ethernet Switch CLI Reference Guide If the user has configured the ACL attribute of the RADIUS server (for example, ACL profile: create access_profile profile_id 1 profile_name profile1 ethernet vlan 0xFFF; ACL rule: config access_profile profile_id 1 add access_id auto_assign ethernet vlan_id 1 port all deny), the device will assign the ACL profiles and rules according to the RADIUS server.

Table of Contents