- Computers & electronics
- Networking
- Network switches
- TKH Security Solutions
- XSNet S4104 SW
- User manual
Command Line Console Management. TKH Security Solutions XSNet S4104 SW (EOL), XSNet S4104 SW
Add to My manuals205 Pages
advertisement
XSNet S4104SW/S4108SW
Command Line Console Management
The switch provides a command line console interface for configuration purposes. The switch can be configured either locally through its RS-232 port or remotely via a Telnet session. For the later, you must specify an IP address for the switch first.
This chapter describes how to configure the switch using its console by Commend Line.
Administration Console
Connect the DB9 straight cable to the RS-232 serial port of the device to the
RS-232 serial port of the terminal or computer running the terminal emulation application.
Direct access to the administration console is achieved by directly connecting a terminal or a PC equipped with a terminal-emulation program (such as
HyperTerminal) to the switch console port.
When using the management method, configure the terminal-emulation program to use the following parameters (you can change these settings after login):
[Default parameters]
115,200bps
8 data bits
No parity
1 stop bit
97
XSNet S4104SW/S4108SW
Exec Mode (View Mode)
Logon to Exec Mode (View Mode)
At the switch_a login: prompt just type in “root” and press <Enter> to logon to Exec Mode (or View Mode). switch_a login: root
98
XSNet S4104SW/S4108SW
Basic commands
Exec Mode (or View Mode) is the base mode from where users can perform basic commands like: clear, debug, disable, enable, exit, help, logout, no, quit, show, terminal
The CLI contains a text-based help facility. Access this help by typing in the full or partial command string then typing a question mark “?”. The CLI displays the command keywords or parameters along with a short description.
At the switch_a> prompt just press <?> to list the above basic commands. switch_a>?
At the switch_a> prompt just type in the full or partial command string then typing a question mark “?” to display the command keywords or parameters along with a short description. switch_a>show ?
99
XSNet S4104SW/S4108SW
Login timed out
The login session to Exec Mode (or View Mode) has timed out due to an extended period of inactivity (60 seconds) to indicate authentication attempt timed out. And the switch_a login:
prompt will show on the screen.
Logon back to Exec Mode (View Mode)
100
XSNet S4104SW/S4108SW
At the switch_a login: prompt just type in “root” and press <Enter> to logon back to Exec Mode (or View Mode). switch_a login: root
Exit from Exec Mode (View Mode)
At the switch_a> prompt just type in “exit” and press <Enter> to exit from
Exec Mode (or View Mode). switch_a>exit
101
XSNet S4104SW/S4108SW
Privileged Exec Mode (Enable Mode)
Logon to Privileged Exec Mode (Enable Mode)
At the switch_a> prompt just type in “enable” and press <Enter> to logon to
Privileged Exec Mode (or Enable Mode). And the switch_a# prompt will show on the screen. switch_a>enable
102
XSNet S4104SW/S4108SW
Commands
Privileged Exec Mode (or Enable Mode) allows users to run commands as following.
At the switch_a# prompt just press <?> to list the commands. switch_a#?
103
XSNet S4104SW/S4108SW
At the switch_a# prompt just type in the full or partial command string then typing a question mark “?” to display the command keywords or parameters along with a short description. switch_a#show ?
104
XSNet S4104SW/S4108SW
Login timed out
The login session to Privileged Exec Mode (or Enable Mode) has timed out due to an extended period of inactivity (60 seconds) to indicate authentication attempt timed out. And the switch_a login: prompt will show on the screen.
Logon back to Exec Mode (View Mode)
At the switch_a login:
prompt just type in “root” and press <Enter> to logon back to Exec Mode (or View Mode). switch_a login: root
105
XSNet S4104SW/S4108SW
Exit from Privileged Exec Mode (or Enable Mode)
At the switch_a#
prompt just type in “exit” and press <Enter> to exit from
Privileged Exec Mode (or Enable Mode). switch_a#exit
106
XSNet S4104SW/S4108SW
Configure Mode (Configure Terminal Mode)
Logon to Configure Mode (Configure Terminal Mode)
At the switch_a# prompt just type in “configure terminal” and press <Enter> to logon to Configure Mode (or Configure Terminal Mode). And the switch_a(config)#
prompt will show on the screen. switch_a#configure terminal
Commands
Configure Mode (or Configure Terminal Mode) serves as a gateway into the modes as following.
At the switch_a(config)# prompt just press <?> to list the commands. switch_a(config)#?
107
XSNet S4104SW/S4108SW
At the switch_a(config)# prompt just type in the full or partial command string then typing a question mark “?” to display the command keywords or parameters along with a short description. switch_a(config)#show ?
108
XSNet S4104SW/S4108SW
Login timed out
The login session to Configure Mode (or Configure Terminal Mode) has timed out due to an extended period of inactivity (60 seconds) to indicate authentication attempt timed out. And the switch_a login: prompt will show on the screen.
Logon back to Exec Mode (View Mode)
At the switch_a login: prompt just type in “root” and press <Enter> to logon back to Exec Mode (or View Mode). switch_a login: root
109
XSNet S4104SW/S4108SW
Exit from Configure Mode (or Configure Terminal Mode)
At the switch_a(config)#
prompt just type in “exit” and press <Enter> to exit from Configure Mode (or Configure Terminal Mode). switch_a(config)#exit
110
XSNet S4104SW/S4108SW
User Interface Configuration
Http Server, Http Secure-Server, Telnet, SSH
Http Server
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)# prompt will show on the screen. switch_a(config)#
2. Usage:
Use ip http server command to enable the web server software of the Switch.
User can remotely manage the Switch with a web browser from any management station on the network.
Use the no ip http server command to disable the web server software of the Switch.
Syntax:
(no) ip http server
4. Example:
The following example enables the web server software of the Switch: switch_a(config)#ip http server switch(config)#
Http Secure-Server
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)# prompt will show on the screen. switch_a(config)#
2. Usage:
Use ip http secure-server command to enable secure HTTP access. The
Switch supports HTTPS to encrypt all HTTP traffic and access the web browser interface of the Switch via HTTPS.
Use the no ip http secure-server
command to disable secure HTTP access.
(no) ip http secure-server
4. Example:
The following example enables secure HTTP access:
111
XSNet S4104SW/S4108SW switch_a(config)#ip http secure-server switch(config)#
Telnet
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)# prompt will show on the screen. switch_a(config)#
2. Usage:
Use ip enable telnet command to enable the Telnet server on the Switch.
User can use Telnet to access the console utility of the Switch over a network.
Use the no ip enable telnet command to disable the Telnet server on the
Switch.
Syntax:
(no) ip enable telnet
4. Example:
The following example enables the Telnet server on the Switch: switch_a(config)#ip enable telnet switch(config)#
SSH
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)#
prompt will show on the screen. switch_a(config)#
2. Usage:
Use ip enable ssh command to enable SSH (Secure Shell) login to the
Switch. User can use the SSH protocol for secure communication between a remote PC (the SSH Client) and the Switch (the SSH Server).
Use the no ip enable ssh command to disable SSH (Secure Shell) login to the Switch.
(no) ip enable ssh
4. Example:
The following example enables SSH (Secure Shell) login to the Switch: switch_a(config)#ip enable ssh switch(config)#
112
XSNet S4104SW/S4108SW
System
System Information, System Name/Password, IP Address, ARP Table, Route
Table, Save Configuration, Firmware Upgrade, Alarm Setting, Reboot,
Logout
System Name/Password
System Name:
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)# prompt will show on the screen. switch_a(config)#
2. Usage:
Use hostname command to set or change the network server name.
Use the no hostname command to disable this function.
(no) hostname HOSTNAME
HOSTNAME specifies the network name of the system.
4. Example:
The following example sets the hostname to switch , and shows the change in the prompt: switch_a(config)#hostname switch switch(config)#
Password:
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)# prompt will show on the screen. switch_a(config)#
2. Usage:
Use enable password
command to modify or create a password to be used when entering the Enable mode.
Syntax: enable password PASSWORD
PASSWORD specifies the new password of the system.
4. Example:
113
XSNet S4104SW/S4108SW
The following example sets the new password mypasswd to switch: switch_a(config)#enable password mypasswd switch_a(config)#
IP Address
IP Address/IP Subnet Mask:
1. Command Mode: Interface mode
Logon to Configure Mode (Configure Terminal Mode).
Then logon to Interface mode. vlan1.1 means vlan 1.
The switch_a(config-if)# prompt will show on the screen. switch_a(config)#interface vlan1.1 switch_a(config-if)#
2. Usage:
Use ip address command to set the IP address of an interface.
Use the no ip address command to remove the IP address from an interface. ip address IP-ADDRESS no ip address IP-ADDRESS no ip address
IP-ADDRESS A.B.C.D/M specifies the IP address and prefix length of an interface.
M specifies IP subnet mask, 8: 255.0.0.0, 16:255.255.0.0, 24:
255.255.255.0.
4. Example:
The following example sets the new IP address 192.168.1.10
and new IP subnet mask 255.255.255.0
to switch: switch_a(config)#interface vlan1.1 switch_a(config-if)#ip address 192.168.1.10/24 switch_a(config-if)#
DHCP Client:
1. Command Mode: Interface mode
Logon to Configure Mode (Configure Terminal Mode).
Then logon to Interface mode. vlan1.1 means vlan 1.
The switch_a(config-if)# prompt will show on the screen. switch_a(config)#interface vlan1.1 switch_a(config-if)#
114
XSNet S4104SW/S4108SW
2. Usage:
Use get ip dhcp enable command to get IP address through DHCP server.
Use the no get ip dhcp enable command to cancel the IP address which got through DHCP server.
(no) get ip dhcp enable
4. Example:
The following example gets IP address through DHCP server: switch_a(config)#interface vlan1.1 switch_a(config-if)#get ip dhcp enable switch_a(config-if)#
Default Gateway:
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)# prompt will show on the screen. switch_a(config)#
2. Usage:
Use ip default-gateway command to set the IP address of the default gateway.
Use the no ip default-gateway command to remove the IP address of the default gateway.
Syntax: ip default-gateway IP-ADDRESS no ip default-gateway
IP-ADDRESS A.B.C.D specifies the IP address of the default gateway.
4. Example:
The following example sets the default gateway
192.168.1.254
to switch: switch_a(config)#ip default-gateway 192.168.1.254 switch_a(config)#
DNS Server:
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)# prompt will show on the screen. switch_a(config)#
2. Usage:
Use ip dns command to set the IP address of the DNS server.
115
XSNet S4104SW/S4108SW
Use the no ip dns command to remove the IP address of the DNS server. ip dns IP-ADDRESS no ip dns
IP-ADDRESS A.B.C.D specifies the IP address of the DNS server.
4. Example:
The following example sets the DNS server 192.168.1.100
to switch: switch_a(config)#ip dns 192.168.1.100 switch_a(config)#
ARP Table
1. Command Mode: Privileged Exec mode
Logon to Privileged Exec Mode (Enable Mode).
The switch_a#
prompt will show on the screen. switch_a#
2. Usage:
Use show arp-table command to view ARP Table.
3. Command show arp-table
4. Example:
The following example shows the ARP Table of switch: switch_a#show arp-table
Route Table
1. Command Mode: Privileged Exec mode
Logon to Privileged Exec Mode (Enable Mode).
The switch_a# prompt will show on the screen. switch_a#
2. Usage:
Use show route-table
command to view Route Table. show route-table
4. Example:
The following example shows the Route Table of switch: switch_a#show route-table
116
XSNet S4104SW/S4108SW
Save Configuration
Load config from TFTP server:
1. Command Mode: Privileged Exec mode
Logon to Privileged Exec Mode (Enable Mode).
The switch_a# prompt will show on the screen. switch_a#
2. Usage:
Use install image command to load configuration file from tftp server to switch. install image IP-ADDRESS WORD
IP-ADDRESS specifies the IP address of tftp server.
WORD specifies the file name to be loaded to switch.
4. Example:
The following example specifies upgrading firmware (file name: flash.tgz
) from tftp server (IP address: 192.168.1.100) to switch: switch_a#install image 192.168.1.100 flash.tgz switch_a#
Load config to TFTP server:
1. Command Mode: Privileged Exec mode
Logon to Privileged Exec Mode (Enable Mode).
The switch_a#
prompt will show on the screen. switch_a#
2. Usage:
Use write config-file command to backup configuration file to tftp server.
Syntax: write config-file IP-ADDRESS
IP-ADDRESS specifies the IP address of tftp server.
4. Example:
The following example backups configuration file to tftp server (IP address:
192.168.1.100)
: switch_a#write config-file 192.168.1.100 switch_a#
Save Configuration:
117
XSNet S4104SW/S4108SW
1. Command Mode: Privileged Exec mode
Logon to Privileged Exec Mode (Enable Mode).
The switch_a# prompt will show on the screen. switch_a#
2. Usage:
Use copy running-config startup-config
command to write configurations to the file to be used at startup. This is the same as the write memory command.
Syntax: copy running-config startup-config
4. Example:
The following example specifies writing configurations to the file to be used at startup to switch: switch_a#copy running-config startup-config switch_a#
Restore Default:
1. Command Mode: Privileged Exec mode
Logon to Privileged Exec Mode (Enable Mode).
The switch_a#
prompt will show on the screen. switch_a#
2. Usage:
Use restore default command to restore default setting of the switch.
3. Command restore default
4. Example:
The following example restores default setting of the switch: switch_a#restore default switch_a#
Auto Save:
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)# prompt will show on the screen. switch_a(config)#
2. Usage:
Use this command to enable auto save configuration function. The
118
XSNet S4104SW/S4108SW configuration will be automatically saved at every configured interval while this command is enabled. Use the no form of this command to disable this feature.
Syntax: service auto-config enable no service auto-config enable
4. Example:
The following example enables or disables auto save configuration to switch: switch_a(config)#service auto-config enable switch_a(config)#no service auto-config enable switch_a(config)#
Auto Save Interval (5~65536 sec):
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)# prompt will show on the screen. switch_a(config)#
2. Usage:
Use this command to set the interval when the configuration would be automatically saved. The range of interval value is from 5 to 65535. And the default value is 30 seconds. service auto-config interval WORD
WORD specifies the interval value.
4. Example:
The following example sets the interval WORD ( 10 ) when the configuration would be automatically saved to switch: switch_a(config)#service auto-config interval 10 switch_a(config)#
Firmware Upgrade
1. Command Mode: Privileged Exec mode
Logon to Privileged Exec Mode (Enable Mode).
The switch_a# prompt will show on the screen. switch_a#
2. Usage:
Use install image command to upgrade firmware from tftp server to switch.
119
XSNet S4104SW/S4108SW install image IP-ADDRESS WORD
IP-ADDRESS specifies the IP address of tftp server.
WORD specifies the file name to be upgraded to switch.
4. Example:
The following example specifies upgrading firmware (file name: flash.tgz
) from tftp server (IP address: 192.168.1.100) to switch: switch_a#install image 192.168.1.100 flash.tgz switch_a#
Please follow the message on the screen during the firmware upgrade process. Do not turn off the power or perform other functions during this period of time.
At the “switch_a#
”
prompt just type in “reload” and press <Enter> to reboot the switch after completing the upgrade process.
120
XSNet S4104SW/S4108SW
Alarm Setting
Alarm-trigger if:
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)# prompt will show on the screen. switch_a(config)#
2. Usage:
Use this command to enable or disable alarm trigger on interface.
(no) alarm-trigger if INTERFACE
INTERFACE specifies the interface.
4. Example:
The following example enables alarm trigger on interface “ fe1 ” to switch: switch_a(config)#alarm-trigger if fe1 switch_a(config)#
Alarm-trigger power:
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)# prompt will show on the screen.
121
XSNet S4104SW/S4108SW switch_a(config)#
2. Usage:
Use this command to enable or disable alarm trigger of power source.
Syntax:
(no) alarm-trigger power POWER
POWER specifies the power source.
4. Example:
The following example enables alarm trigger of power “ 1 ” to switch: switch_a(config)#alarm-trigger power 1 switch_a(config)#
Reboot
1. Command Mode: Privileged Exec mode
Logon to Privileged Exec Mode (Enable Mode).
The switch_a#
prompt will show on the screen. switch_a#
2. Usage:
Use reload command to restart switch.
3. Command reload
4. Example:
The following example specifies restarting switch: switch_a#reload switch_a login:
Logout
1. Command Mode: Exec mode or Privileged Exec mode
Logon to Exec Mode (View Mode) or Privileged Exec Mode (Enable Mode).
The switch_a> or switch_a# prompt will show on the screen. switch_a> switch_a#
2. Usage:
Use logout
command to exit from the Exec mode or Privileged Exec mode. logout
122
XSNet S4104SW/S4108SW
4. Example:
The following example specifies to exit from the Exec mode or Privileged
Exec mode. switch_a>logout switch_a login:
123
XSNet S4104SW/S4108SW
Port
Configuration, Port Status, Rate Control, RMON Statistics, Per Port Vlan
Activities, Port Security
Configuration
Port Name:
1. Command Mode: Interface mode
Logon to Configure Mode (Configure Terminal Mode).
Then logon to Interface mode. fe1 means port 1.
The switch_a(config-if)# prompt will show on the screen. switch_a(config)#interface fe1 switch_a(config-if)#
2. Usage:
Use the portname command to specify the ascii name of port.
Use the no portname
to cancel the ascii name of port. portname LINE
(no) portname
LINE specifies the ascii name of port.
4. Example:
The following example shows the use of the portname command to specify the ascii name fe1 for the interface fe1 (port 1): switch_a(config)#interface fe1 switch_a(config-if)#portname fe1 switch_a(config-if)#
Admin Setting:
1. Command Mode: Interface mode
Logon to Configure Mode (Configure Terminal Mode).
Then logon to Interface mode. fe1 means port 1.
The switch_a(config-if)# prompt will show on the screen. switch_a(config)#interface fe1 switch_a(config-if)#
2. Usage:
Use the shutdown command to shut down the selected interface.
Use the no shutdown to disable this function.
124
XSNet S4104SW/S4108SW
(no) shutdown
4. Example:
The following example shows the use of the shutdown command to shut down the interface fe1 (port 1): switch_a(config)#interface fe1 switch_a(config-if)#shutdown switch_a(config-if)#
Bandwidth:
1. Command Mode: Interface mode
Logon to Configure Mode (Configure Terminal Mode).
Then logon to Interface mode. fe1 means port 1.
The switch_a(config-if)# prompt will show on the screen. switch_a(config)#interface fe1 switch_a(config-if)#
2. Usage:
Use this command to specify the bandwidth for each interface. The bandwidth value is in bits.
Use the no parameter with this command to remove the bandwidth for each interface.
Syntax:
Bandwidth BANDWIDTH no bandwidth
BANDWIDTH
<1-10000000000 bits> (usable units: k, m, g)
<1-999>k|m for 1 to 999 kilo bits or mega bits.
1g for 1 giga bits.
4. Example:
The following example shows the use of bandwidth BANDWIDTH ( 10 mega bits
) to the interface fe1 (port 1): switch_a(config)#interface fe1 switch_a(config-if)#bandwidth 10m switch_a(config-if)#
Duplex:
1. Command Mode: Interface mode
Logon to Configure Mode (Configure Terminal Mode).
125
XSNet S4104SW/S4108SW
Then logon to Interface mode. fe1 means port 1.
The switch_a(config-if)# prompt will show on the screen. switch_a(config)#interface fe1 switch_a(config-if)#
2. Usage:
Use duplex
command to specify the duplex mode to be used for each interface.
Use the no duplex to disable this function.
Syntax:
(no) duplex MODE
MODE specifies the duplex mode: auto, full, half.
4. Example:
The following example shows the use of duplex
MODE ( full
) to the interface fe1 (port 1): switch_a(config)#interface fe1 switch_a(config-if)#duplex full switch_a(config-if)#
Flow control:
1. Command Mode: Interface mode
Logon to Configure Mode (Configure Terminal Mode).
Then logon to Interface mode. fe1 means port 1.
The switch_a(config-if)#
prompt will show on the screen. switch_a(config)#interface fe1 switch_a(config-if)#
2. Usage:
Use flowcontrol on command to enable flow control, and configure the flow control mode for the port.
Use the no flowcontrol
to disable this function. flowcontrol on no flowcontrol
4. Example:
The following example shows the use of flowcontrol on to the interface fe1
(port 1): switch_a(config)#interface fe1 switch_a(config-if)#flowcontrol on switch_a(config-if)#
126
XSNet S4104SW/S4108SW
Port Status
1. Command Mode: Exec mode or Privileged Exec mode
Logon to Exec Mode (View Mode) or Privileged Exec Mode (Enable Mode).
The switch_a> or switch_a# prompt will show on the screen. switch_a> switch_a#
2. Usage:
Use the show interface command to display interface configuration and status. show interface IFNAME
IFNAME specifies the name of the interface for which status and configuration information is desired.
4. Example:
The following example shows the use of show interface to display interface configuration and status of the interface fe1 (port 1): switch_a>show interface fe1
Rate Control
1. Command Mode: Interface mode
Logon to Configure Mode (Configure Terminal Mode).
Then logon to Interface mode. fe1 means port 1.
The switch_a(config-if)# prompt will show on the screen. switch_a(config)#interface fe1 switch_a(config-if)#
2. Usage:
Use this command to specify the ingress/egress rate to be used for each interface. The bandwidth value is in bits.
Use the no parameter with this command to remove the ingress/egress rate to be used for each interface.
Syntax:
(no) rate-control ingress/egress VALUE
VALUE
<1-10000000000 bits> (usable units: k, m, g)
<1-999>k|m for 1 to 999 kilo bits or mega bits.
1g for 1 giga bits.
127
XSNet S4104SW/S4108SW
4. Example:
The following example shows the use of rate-control ingress VALUE ( 10 mega bits ) to the interface fe1 (port 1): switch_a(config)#interface fe1 switch_a(config-if)#rate-control ingress 10m switch_a(config-if)#
RMON Statistics
1. Command Mode: Exec mode or Privileged Exec mode
Logon to Exec Mode (View Mode) or Privileged Exec Mode (Enable Mode).
The switch_a> or switch_a# prompt will show on the screen. switch_a> switch_a#
2. Usage:
Use the show interface statistics command to display RMON statistics of interface.
Syntax: show interface statistics IFNAME
IFNAME specifies the name of the interface for which RMON statistics is desired.
4. Example:
The following example shows the use of show interface statistics to display
RMON statistics of the interface fe1 (port 1): switch_a>show interface statistics fe1
Per Port Vlan Activities
1. Command Mode: Exec mode or Privileged Exec mode
Logon to Exec Mode (View Mode) or Privileged Exec Mode (Enable Mode).
The switch_a> or switch_a# prompt will show on the screen. switch_a> switch_a#
2. Usage:
Use show vlan command to display information about a particular VLAN by specifying the VLAN ID. show vlan <2-4094>
128
XSNet S4104SW/S4108SW
<2-4094> VLAN ID.
4. Example:
The following is an output of show vlan command displaying information about VLAN 2: switch_a>show vlan 2
Port Security
Mode:
1. Command Mode: Interface mode
Logon to Configure Mode (Configure Terminal Mode).
Then logon to Interface mode. fe1 means port 1.
The switch_a(config-if)# prompt will show on the screen. switch_a(config)#interface fe1 switch_a(config-if)#
2. Usage:
Use port-security enable command to enable port security.
Use no port-security enable command to disable port security.
Syntax: port-security enable no port-security enable
4. Example:
The following example shows setting port-security enable to the interface fe1 (port 1): switch_a(config)#interface fe1 switch_a(config-if)#port-security enable switch_a(config-if)#
Add/Delete MAC Address:
1. Command Mode: Interface mode
Logon to Configure Mode (Configure Terminal Mode).
Then logon to Interface mode. fe1 means port 1.
The switch_a(config-if)#
prompt will show on the screen. switch_a(config)#interface fe1 switch_a(config-if)#
2. Usage:
Use this command to add or delete MAC address allowed for the port.
129
XSNet S4104SW/S4108SW port-security allowed-address MAC no port-security allowed-address MAC
MAC the Media Access Control (MAC) address in the HHHH.HHHH.HHHH format.
4. Example:
The following example adds a MAC address 2222.2222.2222
allowed to the interface fe1 (port 1): switch_a(config)#interface fe1 switch_a(config-if)#port-security allowed-address 2222.2222.2222 switch_a(config-if)#
130
XSNet S4104SW/S4108SW
Switching
Bridging, Static MAC Entry, Port Mirroring
Bridging
Aging Time (seconds):
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)# prompt will show on the screen. switch_a(config)#
2. Usage:
Use this command to specify an ageing-out time for a learned MAC address.
The learned MAC address will persist till this specified time.
Bridge GROUP ageing-time AGEINGTIME no bridge GROUP ageing-time
Group = <1-1> The ID of the bridge-group that this ageing time is for.
AGEINGTIME = <10-1000000> The number of seconds of persistence.
4. Example:
The following example sets the new AGEINGTIME (
1000
) to bridge GROUP
( 1 ): switch_a(config)#bridge 1 ageing-time 1000 switch_a(config)#
Threshold level (0-100):
1. Command Mode: Interface mode
Logon to Configure Mode (Configure Terminal Mode).
Then logon to Interface mode. fe1 means port 1.
The switch_a(config-if)#
prompt will show on the screen. switch_a(config)#interface fe1 switch_a(config-if)#
2. Usage:
Use storm-control level command to specify the rising threshold level for broadcasting, multicast, or destination lookup failure traffic. The storm control action occurs when traffic utilization reaches this level. storm-control level LEVEL
131
XSNet S4104SW/S4108SW
LEVEL <0-100> specifies the percentage of the threshold; percentage of the maximum speed (pps) of the interface.
4. Example:
The following example shows setting storm-control level
LEVEL (
30
) to the interface fe1 (port 1): switch_a(config)#interface fe1 switch_a(config-if)#storm-control level 30 switch_a(config-if)#
Broadcast:
1. Command Mode: Interface mode
Logon to Configure Mode (Configure Terminal Mode).
Then logon to Interface mode. fe1 means port 1.
The switch_a(config-if)#
prompt will show on the screen. switch_a(config)#interface fe1 switch_a(config-if)#
2. Usage:
Use storm-control broadcast enable command to enable broadcast traffic.
Use no storm-control broadcast command to disable broadcast traffic. storm-control broadcast enable no storm-control broadcast
4. Example:
The following example shows setting storm-control broadcast enable to the interface fe1 (port 1): switch_a(config)#interface fe1 switch_a(config-if)#storm-control broadcast enable switch_a(config-if)#
Multicast:
1. Command Mode: Interface mode
Logon to Configure Mode (Configure Terminal Mode).
Then logon to Interface mode. fe1 means port 1.
The switch_a(config-if)# prompt will show on the screen. switch_a(config)#interface fe1 switch_a(config-if)#
2. Usage:
132
XSNet S4104SW/S4108SW
Use storm-control multicast enable command to enable multicast traffic.
Use no storm-control multicast command to disable multicast traffic.
Syntax: storm-control multicast enable no storm-control multicast
4. Example:
The following example shows setting storm-control multicast enable to the interface fe1 (port 1): switch_a(config)#interface fe1 switch_a(config-if)#storm-control multicast enable switch_a(config-if)#
DLF:
1. Command Mode: Interface mode
Logon to Configure Mode (Configure Terminal Mode).
Then logon to Interface mode. fe1 means port 1.
The switch_a(config-if)#
prompt will show on the screen. switch_a(config)#interface fe1 switch_a(config-if)#
2. Usage:
Use storm-control dlf enable command to enable destination lookup failure traffic.
Use no storm-control dlf command to disable destination lookup failure traffic. storm-control dlf enable no storm-control dlf
dlf destination lookup failure
4. Example:
The following example shows setting storm-control dlf enable to the interface fe1 (port 1): switch_a(config)#interface fe1 switch_a(config-if)#storm-control dlf enable switch_a(config-if)#
Static MAC Entry
Static-MAC-Entry Forward:
1. Command Mode: Configure mode
133
XSNet S4104SW/S4108SW
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)# prompt will show on the screen. switch_a(config)#
2. Usage:
Use this command to statically configure a bridge entry to forward matching frames. bridge GROUP address MAC forward IFNAME VLANID no bridge GROUP address MAC forward IFNAME VLANID
GROUP <1-1> Bridge-group ID used for bridging.
MAC the Media Access Control (MAC) address in the HHHH.HHHH.HHHH format.
IFNAME the interface on which the frame comes in.
VLANID The VID of the VLAN that will be enabled or disabled on the bridge
<2-4094>.
4. Example:
The following example configures a bridge GROUP ( 1 ) to forward matching frames (MAC address 2222.2222.2222
) to the interface fe1 (port 1) in vlan
VLANID (
2
): switch_a(config)#bridge 1 address 2222.2222.2222 forward fe1 vlan 2 switch_a(config)#
Static-MAC-Entry Discard:
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)# prompt will show on the screen. switch_a(config)#
2. Usage:
Use this command to statically configure a bridge entry to discard matching frames in a particular VLAN. bridge GROUP address MAC discard vlan VLANID no bridge GROUP address MAC discard vlan VLANID
GROUP <1-1> Bridge-group ID used for bridging.
MAC the Media Access Control (MAC) address in the HHHH.HHHH.HHHH format.
VLANID The VID of the VLAN on the bridge <1-4094>.
4. Example:
The following example configures a bridge GROUP (
1
) to discard matching frames (MAC address 2222.2222.2222
) in vlan VLANID ( 1 ):
134
XSNet S4104SW/S4108SW switch_a(config)#bridge 1 address 2222.2222.2222 discard vlan 1 switch_a(config)#
Port Mirroring
1. Command Mode: Interface mode
Logon to Configure Mode (Configure Terminal Mode).
Then logon to Interface mode. fe1 means port 1.
The switch_a(config-if)# prompt will show on the screen. switch_a(config)#interface fe1 switch_a(config-if)#
2. Usage:
Use this command to define a mirror source port and its direction.
Use the no parameter with this command to disable port mirroring by the destination port on the specified source port.
Syntax: mirror interface SOURCEPORT direction SNOOPDIRECTION no mirror interface SOURCEPORT
SOURCEPORT Name of the Source interface to be used.
SNOOPDIRECTION [both|receive|transmit] both Specifies mirroring of traffic in both directions. receive Specifies mirroring of received traffic. transmit Specifies mirroring of transmitted traffic.
4. Example:
The following example enables port mirroring by the destination port fe1 (port
1) on the specified source port fe2 (port 2): switch_a(config)#interface fe1 switch_a(config-if)#mirror interface fe2 direction both switch_a(config-if)#
135
XSNet S4104SW/S4108SW
Trunking
Port Trunking, LACP Trunking
Port Trunking
1. Command Mode: Interface mode
Logon to Configure Mode (Configure Terminal Mode).
Then logon to Interface mode. fe1 means port 1.
The switch_a(config-if)#
prompt will show on the screen. switch_a(config)#interface fe1 switch_a(config-if)#
2. Usage:
Use static-channel-group command to create a static aggregator, or add a member port to an already-existing static aggregator.
Use the no static-channel-group command to detach the port from the static aggregator. static-channel-group <1-3> no static-channel-group
<1-3> Channel group number.
Maximum 4 ports in static-channel-group 1 and static-channel-group 2.
Maximum 2 ports in static-channel-group 3
4. Example:
The following example adding the interface fe1 (port 1) to static-channel-group 1 : switch_a(config)#interface fe1 switch_a(config-if)#static-channel-group 1 switch_a(config-if)#
LACP Trunking
Static Channel Group:
1. Command Mode: Interface mode
Logon to Configure Mode (Configure Terminal Mode).
Then logon to Interface mode. fe1 means port 1.
The switch_a(config-if)# prompt will show on the screen. switch_a(config)#interface fe1 switch_a(config-if)#
136
XSNet S4104SW/S4108SW
2. Usage:
Use static-channel-group command to create a static aggregator, or add a member port to an already-existing static aggregator.
Use the no static-channel-group command to detach the port from the static aggregator. static-channel-group < 1|3 > no static-channel-group
< 1|3 > Channel group number.
1 Channel group number 1 for FE ports.
3 Channel group number 3 for GE ports.
Maximum 4 ports in static-channel-group 1.
Maximum 4 ports in static-channel-group 3.
4. Example:
The following example adding the interface fe1 (port 1) to static-channel-group 1
: switch_a(config)#interface fe1 switch_a(config-if)#static-channel-group 1 switch_a(config-if)#
Channel Group:
1. Command Mode: Interface mode
Logon to Configure Mode (Configure Terminal Mode).
Then logon to Interface mode. fe1 means port 1.
The switch_a(config-if)#
prompt will show on the screen. switch_a(config)#interface fe1 switch_a(config-if)#
2. Usage:
Use channel-group command to add a port to a channel group specified by the channel group number (< 1|3 >). This command enables link aggregation on a port, so that it may be selected for aggregation by the local system.
Use the no channel-group command to turn off link aggregation on a port. channel-group < 1|3 > mode MODE no channel-group
< 1|3 > Channel group number.
1 Channel group number 1 for FE ports.
3 Channel group number 3 for GE ports.
Maximum 4 ports in channel-group 1.
Maximum 4 ports in channel-group 3.
MODE
137
XSNet S4104SW/S4108SW active Enable initiation of LACP negotiation on a port. passive Disable initiation of LACP negotiation on a port.
4. Example:
The following example enalbes initiation of LACP negotiation on the interface fe1 (port 1) to channel-group 1 : switch_a(config)#interface fe1 switch_a(config-if)#channel-group 1 mode active switch_a(config-if)#
Clear LACP Counters:
1. Command Mode: Privileged Exec mode
Logon to Privileged Exec Mode (Enable Mode).
The switch_a# prompt will show on the screen. switch_a#
2. Usage:
Use this command to clear all counters of all present LACP aggregators or a given LACP aggregator. clear lacp (<1-65535>) counters
<1-65535> Channel-group number.
4. Example:
The following example clears all counters of LACP channel group 1: switch_a#clear lacp 1 counters switch_a#
LACP Port Priority:
1. Command Mode: Interface mode
Logon to Configure Mode (Configure Terminal Mode).
Then logon to Interface mode. fe1 means port 1.
The switch_a(config-if)# prompt will show on the screen. switch_a(config)#interface fe1 switch_a(config-if)#
2. Usage:
Use lacp port-priority command to set the priority of a channel. Channels are selected for aggregation based on their priority with the higher priority
(numerically lower) channels selected first.
Use the no lacp port-priority command to reset the priority of port to the default value (32768).
138
XSNet S4104SW/S4108SW lacp port-priority <1-65535> no lacp port-priority
<1-65535> Specify the LACP port priority.
4. Example:
The following example sets the LACP port priority 34 of interface fe1 (port 1): switch_a(config)#interface fe1 switch_a(config-if)#lacp port-priority 34 switch_a(config-if)#
LACP Timeout:
1. Command Mode: Interface mode
Logon to Configure Mode (Configure Terminal Mode).
Then logon to Interface mode. fe1 means port 1.
The switch_a(config-if)# prompt will show on the screen. switch_a(config)#interface fe1 switch_a(config-if)#
2. Usage:
Use lacp timeout
command to set the short or long timeout on a port. The default is long timeout lacp timeout shor ∣ long timeout Number of seconds before invalidating a received LACP data unit
(DU).
short LACP short timeout. Short timeout value is 3 seconds. long LACP long timeout. Long timeout value is 90 seconds.
4. Example:
The following example sets the LACP short timeout on interface fe1 (port 1): switch_a(config)#interface fe1 switch_a(config-if)#lacp timeout short switch_a(config-if)#
LACP System Priority:
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)#
prompt will show on the screen. switch_a(config)#
139
XSNet S4104SW/S4108SW
2. Usage:
Use lacp system-priority command to set the system priority of a local system. This is used in determining the system responsible for resolving conflicts in the choice of aggregation groups. Note: Lower numerical values have higher priorities.
Use no lacp system-priority command to reset the system priority of the local system to the default value (32768).
Syntax: lacp system-priority <1-65535> no lacp system-priority
<1-65535> LACP system priority. The default system priority is 32768.
4. Example:
The following example sets the LACP system priority
6700
: switch_a(config)#lacp system-priority 6700 switch_a(config)#
140
XSNet S4104SW/S4108SW
STP / Ring
Global Configuration, RSTP Port Setting, MSTP Properties, MSTP Instance
Setting, MSTP Port Setting, Ring Setting, Chain Setting
Global Configuration
STP Version:
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)#
prompt will show on the screen. switch_a(config)#
2. Usage:
Use this command to choose the Spanning Tree protocol, Rapid Spanning
Tree protocol, or Multiple Spanning Tree protocol on a bridge.
Syntax: bridge GROUP protocol PROTOCOL vlan-bridge
GROUP <1-1> Bridge group name used for bridging.
PROTOCOL
ieee IEEE 802.1Q spanning-tree protocol.
mstp IEEE 802.1s multiple spanning-tree protocol. rstp IEEE 802.1w rapid spanning-tree protocol.
4. Example:
The following example chooses the PROTOCOL ( rstp ) on bridge GROUP
( 1 ): switch_a(config)#bridge 1 protocol rstp vlan-bridge switch_a(config)#
Multiple Spanning Tree Protocol:
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)#
prompt will show on the screen. switch_a(config)#
2. Usage:
Use this command to enable the Multiple Spanning Tree protocol on a bridge.
Use the no form of the command to disable the Multiple Spanning Tree protocol on a bridge. bridge GROUP multiple-spanning-tree enable
141
XSNet S4104SW/S4108SW no bridge GROUP multiple-spanning-tree enable BRIDGE-FORWARD
GROUP <1-1> Bridge group name used for bridging.
BRIDGE-FORWARD Puts all ports of the specified bridge into the forwarding state.
4. Example:
The following example enables or disables the multiple-spanning-tree on bridge GROUP ( 1 ): switch_a(config)#bridge 1 multiple-spanning-tree enable switch_a(config)#no bridge 1 multiple-spanning-tree enable bridge-forward switch_a(config)#
Rapid Spanning Tree Protocol:
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)# prompt will show on the screen. switch_a(config)#
2. Usage:
Use this command to enable the Rapid Spanning Tree protocol on a bridge.
Use the no form of the command to disable the Rapid Spanning Tree protocol on a bridge. bridge GROUP rapid-spanning-tree enable no bridge GROUP rapid-spanning-tree enable BRIDGE-FORWARD
GROUP <1-1> Bridge group name used for bridging.
BRIDGE-FORWARD Puts all ports of the specified bridge into the forwarding state.
4. Example:
The following example enables or disables the rapid-spanning-tree
on bridge GROUP ( 1 ): switch_a(config)#bridge 1 rapid-spanning-tree enable switch_a(config)#no bridge 1 rapid-spanning-tree enable bridge-forward switch_a(config)#
Spanning Tree Protocol:
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)# prompt will show on the screen. switch_a(config)#
2. Usage:
142
XSNet S4104SW/S4108SW
Use this command to enable the Spanning Tree protocol on a bridge.
Use the no form of the command to disable the Spanning Tree protocol on a bridge.
Syntax: bridge GROUP spanning-tree enable no bridge GROUP spanning-tree enable BRIDGE-FORWARD
GROUP <1-1> Bridge group name used for bridging.
BRIDGE-FORWARD Puts all ports of the specified bridge into the forwarding state.
4. Example:
The following example enables or disables the spanning-tree on bridge
GROUP ( 1 ): switch_a(config)#bridge 1 spanning-tree enable switch_a(config)#no bridge 1 spanning-tree enable bridge-forward switch_a(config)#
Bridge Priority (0..61440):
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)# prompt will show on the screen. switch_a(config)#
2. Usage:
Use this command to set bridge priority for the common instance. Using a lower priority indicates a greater likelihood of the bridge becoming root. bridge GROUP priority PRIORITY no bridge GROUP priority
GROUP <1-1> The ID of the bridge group for which the priority is set.
PRIORITY <0-61440> The bridge priority.
4. Example:
The following example sets the priority PRIORITY ( 4096 ) of bridge GROUP
(
1
): switch_a(config)#bridge 1 priority 4096 switch_a(config)#
Hello Time (sec) (1..9):
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)# prompt will show on the screen.
143
XSNet S4104SW/S4108SW switch_a(config)#
2. Usage:
Use this command to set the hello-time, the time in seconds after which (if this bridge is the root bridge) all the bridges in a bridged LAN exchange
Bridge Protocol Data Units (BPDUs). bridge GROUP hello-time HELLOTIME no bridge GROUP hello-time
GROUP <1-1> The ID of the bridge group to which this hello time is assigned.
HELLOTIME <1-9> The hello BPDU interval in seconds.
4. Example:
The following example sets the hello-time HELLOTIME ( 9 ) of bridge GROUP
(
1
): switch_a(config)#bridge 1 hello-time 9 switch_a(config)#
Max Age (sec) (6..28):
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)# prompt will show on the screen. switch_a(config)#
2. Usage:
Use this command to set the max-age for a bridge.
Use the no parameter with this command to restore the default value of max-age. bridge GROUP max-age MAXAGE no bridge GROUP max-age
GROUP <1-1> The ID of the bridge group to which this maximum age time is assigned.
MAXAGE <6-28> The maximum time, in seconds, to listen for the root bridge.
4. Example:
The following example sets the max-age MAXAGE ( 28 ) of bridge GROUP
( 1 ): switch_a(config)#bridge 1 max-age 28 switch_a(config)#
144
XSNet S4104SW/S4108SW
Forward Delay (sec) (4..30):
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)#
prompt will show on the screen. switch_a(config)#
2. Usage:
Use this command to set the time (in seconds) after which (if this bridge is the root bridge) each port changes states to learning and forwarding.
Use the no parameter with this command to restore the default value. bridge GROUP forward-time FORWARD_DELAY no bridge GROUP forward-time
GROUP <1-1> The ID of the bridge group to which this delay time is assigned.
FORWARD_DELAY <4-30> the forwarding time delay in seconds.
4. Example:
The following example sets the forward-time FORWARD_DELAY ( 30 ) of bridge GROUP (
1
): switch_a(config)#bridge 1 forward-time 30 switch_a(config)#
RSTP Port Setting
Priority(Granularity 16):
1. Command Mode: Interface mode
Logon to Configure Mode (Configure Terminal Mode).
Then logon to Interface mode. fe1 means port 1.
The switch_a(config-if)# prompt will show on the screen. switch_a(config)#interface fe1 switch_a(config-if)#
2. Usage:
Use this command to set the port priority for a bridge. The lower priority indicates a greater likelihood of the bridge becoming root.
Syntax: bridge GROUP priority PRIORITY
GROUP <1-1> the ID of the bridge group.
PRIORITY <0-240> The priority to be assigned to the group.
4. Example:
The following example sets the priority PRIORITY ( 100 ) of the interface fe1
145
XSNet S4104SW/S4108SW
(port 1) of bridge GROUP ( 1 ): switch_a(config)#interface fe1 switch_a(config-if)#bridge 1 priority 100 switch_a(config-if)#
Admin. Path Cost:
1. Command Mode: Interface mode
Logon to Configure Mode (Configure Terminal Mode).
Then logon to Interface mode. fe1 means port 1.
The switch_a(config-if)# prompt will show on the screen. switch_a(config)#interface fe1 switch_a(config-if)#
2. Usage:
Use this command to set the cost of a path associated with a bridge-group.
Use the no parameter with this command to restore the default cost of a path associated with a bridge-group. bridge GROUP path-cost PATHCOST no bridge GROUP path-cost
GROUP <1-1> the ID of the bridge group.
PATHCOST <1-200000000> The cost to be assigned to the group.
4. Example:
The following example sets the cost ( 123 ) of the interface fe1 (port 1) of bridge GROUP (
1
): switch_a(config)#interface fe1 switch_a(config-if)#bridge 1 path-cost 123 switch_a(config-if)#
Point to Point Link:
1. Command Mode: Interface mode
Logon to Configure Mode (Configure Terminal Mode).
Then logon to Interface mode. fe1 means port 1.
The switch_a(config-if)#
prompt will show on the screen. switch_a(config)#interface fe1 switch_a(config-if)#
2. Usage:
Use spanning-tree link-type command to set the link type of a port to enable or disable rapid transition.
146
XSNet S4104SW/S4108SW
Use the no spanning-tree link-type command to set a port to its default state and to disable rapid transition.
Syntax:
(no) spanning-tree link-type LINKTYPE
LINKTYPE The link type to be assigned to the port.
point-to-point Enable rapid transition.
shared Disable rapid transition.
4. Example:
The following example sets the link-type LINKTYPE ( point-to-point ) of the interface fe1 (port 1): switch_a(config)#interface fe1 switch_a(config-if)#spanning-tree link-type point-to-point switch_a(config-if)#
Autoedge:
1. Command Mode: Interface mode
Logon to Configure Mode (Configure Terminal Mode).
Then logon to Interface mode. fe1 means port 1.
The switch_a(config-if)# prompt will show on the screen. switch_a(config)#interface fe1 switch_a(config-if)#
2. Usage:
Use spanning-tree autoedge command to assist in automatic identification of the edge port.
Use the no spanning-tree autoedge command to disable this feature.
(no) spanning-tree autoedge
4. Example:
The following example enables the spanning-tree autoedge of the interface fe1 (port 1): switch_a(config)#interface fe1 switch_a(config-if)#spanning-tree autoedge switch_a(config-if)#
Edgeport:
1. Command Mode: Interface mode
Logon to Configure Mode (Configure Terminal Mode).
Then logon to Interface mode.
147
XSNet S4104SW/S4108SW fe1 means port 1.
The switch_a(config-if)# prompt will show on the screen. switch_a(config)#interface fe1 switch_a(config-if)#
2. Usage:
Use spanning-tree edgeport
command to set a port as an edge-port and to enable rapid transitions.
Use the no spanning-tree edgeport command to set a port to its default state (not an edge-port) and to disable rapid transitions.
Syntax:
(no) spanning-tree edgeport
4. Example:
The following example enables the spanning-tree edgeport of the interface fe1 (port 1): switch_a(config)#interface fe1 switch_a(config-if)#spanning-tree edgeport switch_a(config-if)#
MSTP Properties
Region Name:
1. Command Mode: MST Configuration mode
Logon to Configure Mode (Configure Terminal Mode).
Then logon to MST Configuration mode.
The switch_a(config-mst)# prompt will show on the screen. switch_a(config)#spanning-tree mst configuration switch_a(config-mst)#
2. Usage:
Use this command to create an MST region and specify a name to it. MST bridges of a region form different spanning trees for different VLANs. By default, each MST bridge starts with the region name as its bridge address.
This means each MST bridge is a region by itself, unless specifically added to one. bridge GROUP region REGION_NAME no bridge GROUP region
GROUP <1-1> Specify the bridge-group ID.
REGION_NAME Specify the name of the region.
4. Example:
The following example creates an MST region and specifies a name
( regionname ) to it in bridge GROUP ( 1 ):
148
XSNet S4104SW/S4108SW
Switch_a(config)#spanning-tree mst configuration switch_a(config-mst)#bridge 1 region regionname switch_a(config-mst)#
Revision Level:
1. Command Mode: MST Configuration mode
Logon to Configure Mode (Configure Terminal Mode).
Then logon to MST Configuration mode.
The switch_a(config-mst)# prompt will show on the screen. switch_a(config)#spanning-tree mst configuration switch_a(config-mst)#
2. Usage:
Use this command to specify the number for configuration information. The default value of revision number is 0.
Syntax: bridge GROUP revision REVISION_NUM
GROUP <1-1> Specify the bridge-group ID.
REVISION_NUM <0-255> Revision number.
4. Example:
The following example specifies a revision number (
25
) of MST configuration in bridge GROUP ( 1 ): switch_a(config)#spanning-tree mst configuration switch_a(config-mst)#bridge 1 revision 25 switch_a(config-mst)#
Max Hops:
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)# prompt will show on the screen. switch_a(config)#
2. Usage:
Use this command to specify the maximum allowed hops for BPDU in an
MST region. This parameter is used by all the instances of the MST.
Specifying the max hops for a BPDU prevents the messages from looping indefinetely in the network. When a bridge receives a MST BPDU that has exceeded the allowed max-hops, it discards the BPDU. bridge GROUP max-hops HOP_COUNT no bridge GROUP max-hops
149
XSNet S4104SW/S4108SW
GROUP <1-1> Specify the bridge-group ID.
HOP_COUNT Maximum hops the BPDU will be valid for.
4. Example:
The following example specifies the maximum allowed hops (
25
) for BPDU in bridge GROUP ( 1 ): switch_a(config)#bridge 1 max-hops 25 switch_a(config)#
MSTP Instance Setting
Bridge Instance VLAN:
1. Command Mode: MST Configuration mode
Logon to Configure Mode (Configure Terminal Mode).
Then logon to MST Configuration mode.
The switch_a(config-mst)#
prompt will show on the screen. switch_a(config)#spanning-tree mst configuration switch_a(config-mst)#
2. Usage:
Use this command to simultaneously add multiple VLANs for the corresponding instance of a bridge. This command can be used only after the
VLANs are defined. Use the no parameter with this command to simultaneously remove multiple VLANs for the corresponding instance of a bridge. bridge GROUP instance INSTANCE_ID vlan VLAN_ID no bridge GROUP instance INSTANCE_ID vlan VLAN_ID
GROUP <1-1> Specify the bridge-group ID.
INSTANCE_ID <1-15> Specify the instance ID.
VLAN_ID <1-4094> Specify multiple VLAN IDs corresponding to the bridge instance
4. Example:
The following example associates multiple VLANs ( 10 ) and ( 20 ) to instance
( 1 ) of bridge GROUP ( 1 ): switch_a(config)#bridge 1 protocol mstp switch_a(config)#spanning-tree mst configuration switch_a(config-mst)#bridge 1 instance 1 vlan 10, 20 switch_a(config-mst)#
Bridge Instance Priority:
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
150
XSNet S4104SW/S4108SW
The switch_a(config)# prompt will show on the screen. switch_a(config)#
2. Usage:
Use this command to set the bridge priority for an MST instance to the value specified. Use the no parameter with this command to restore the default value of the bridge priority. The lower the priority of the bridge, the better the chances are the bridge becoming a root bridge or a designated bridge for the
LAN. The priority values can be set only in increments of 4096.
Syntax: bridge GROUP instance INSTANCE_ID priority BRIDGE_PRIORITY no bridge GROUP instance INSTANCE_ID priority
GROUP <1-1> Specify the bridge-group ID.
INSTANCE_ID Specify the instance ID.
BRIDGE_PRIORITY <0-61440> Specify the bridge priority.
4. Example:
The following example sets the bridge priority ( 0 ) for an MST instance ( 3 ) in bridge GROUP ( 1 ): switch_a(config)#bridge 1 instance 3 priority 0 switch_a(config)#
MSTP Port Setting
Bridge-Group Instance:
1. Command Mode: Interface mode
Logon to Configure Mode (Configure Terminal Mode).
Then logon to Interface mode. fe1 means port 1.
The switch_a(config-if)# prompt will show on the screen. switch_a(config)#interface fe1 switch_a(config-if)#
2. Usage:
Use this command to assign a Multiple Spanning Tree instance to a port. Use the no parameter with this command to remove the instance. bridge GROUP instance INSTANCE_ID no bridge GROUP instance INSTANCE_ID
GROUP <1-1> Specify the bridge-group ID.
INSTANCE_ID Specify the instance ID.
4. Example:
The following example assigns a Multiple Spanning Tree instance (
3
) to a port
( fe1 ) in bridge GROUP ( 1 ):
151
XSNet S4104SW/S4108SW switch_a(config)#interface fe1 switch_a(config-if)#bridge-group 1 instance 3 switch_a(config-if)#
Bridge-Group Instance Priority:
1. Command Mode: Interface mode
Logon to Configure Mode (Configure Terminal Mode).
Then logon to Interface mode. fe1 means port 1.
The switch_a(config-if)#
prompt will show on the screen. switch_a(config)#interface fe1 switch_a(config-if)#
2. Usage:
Use this command to set the port priority for a bridge group. The Multiple
Spanning Tree Protocol uses port priority as a tiebreaker to determine which port should forward frames for a particular instance on a LAN, or which port should be the root port for an instance. A lower value implies a better priority.
In the case of the same priority, the interface index will serve as the tiebreaker, with the lower-numbered interface being preferred over others.
The permitted range is 0-240. The priority values can only be set in increments of 16. bridge GROUP instance INSTANCE_ID priority PRIORITY
GROUP <1-1> Specify the bridge-group ID.
INSTANCE_ID <1-15> Specify the instance ID.
PRIORITY <0-240> Specify the port priority in a range of <0-240>.
4. Example:
The following example sets the port priority ( 121 ) for Multiple Spanning Tree instance ( 3 ) to a port ( fe1 ) in bridge GROUP ( 1 ): switch_a(config)#interface fe1 switch_a(config-if)#bridge-group 1 instance 3 priority 121 switch_a(config-if)#
Bridge-Group Instance Path-Cost:
1. Command Mode: Interface mode
Logon to Configure Mode (Configure Terminal Mode).
Then logon to Interface mode. fe1 means port 1.
The switch_a(config-if)# prompt will show on the screen. switch_a(config)#interface fe1 switch_a(config-if)#
152
XSNet S4104SW/S4108SW
2. Usage:
Use this command to set the cost of a path associated with an interface. Use the no parameter with this command to restore the default cost value of the path. A lower path-cost indicates a greater likelihood of the specific interface becoming a root. bridge GROUP instance INSTANCE_ID path-cost PATH_COST
GROUP <1-1> Specify the bridge-group ID.
INSTANCE_ID <1-15> Specify the instance ID.
PATH_COST <1-200000000> Specify the cost of path in the range of
<1-200000000>.
4. Example:
The following example sets the path cost ( 1000 ) for Multiple Spanning Tree instance ( 3 ) to a port ( fe1 ) in bridge GROUP ( 1 ): switch_a(config)#interface fe1 switch_a(config-if)#bridge-group 1 instance 3 path-cost 1000 switch_a(config-if)#
Ring Setting
Ring state:
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)# prompt will show on the screen. switch_a(config)#
2. Usage:
Use this command to enable Ring state. Use the no parameter with this command to disable Ring state.
Syntax: bridge GROUP protocol ring no bridge GROUP ring enable BRIDGE-FORWARD
GROUP <1-1> Specify the bridge-group ID.
BRIDGE-FORWARD Puts all ports of the specified bridge into the forwarding state.
4. Example:
The following example enables Ring state in bridge GROUP ( 1 ): switch_a(config)#bridge 1 protocol ring switch_a(config)#
153
XSNet S4104SW/S4108SW
Set ring port:
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)# prompt will show on the screen. switch_a(config)#
2. Usage:
Use this command to set Ring port 1 and Ring port 2. ring set-port RING_PORT_1 RING_PORT_2
RING_PORT_1 Specify the Ring port 1.
RING_PORT_2 Specify the Ring port 2.
4. Example:
The following example sets the fe1 and fe2 as Ring port 1 and Ring port 2: switch_a(config)#ring set-port fe1 fe2 switch_a(config)#
Ring-coupling state:
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)#
prompt will show on the screen. switch_a(config)#
2. Usage:
Use this command to enable Ring-coupling state. Use the no parameter with this command to disable Ring-coupling state.
Syntax:
(no) ring-coupling enable
4. Example:
The following example enables Ring-coupling state: switch_a(config)#ring-coupling enable switch_a(config)#
Set ring-coupling port:
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)#
prompt will show on the screen. switch_a(config)#
2. Usage:
154
XSNet S4104SW/S4108SW
Use this command to set Ring-coupling port 1 and Ring-coupling port 2. ring set-coupling-port COUPLING_PORT_1 COUPLING_PORT_2
COUPLING_PORT_1 Specify the Ring-coupling port 1.
COUPLING_PORT_2 Specify the Ring-coupling port 2.
4. Example:
The following example sets the fe3 and fe4 as Ring-coupling port 1 and Ring port-coupling 2: switch_a(config)#ring set-coupling-port fe3 fe4 switch_a(config)#
Chain Setting
Chain Protocol:
1. Command Mode: Interface mode
Logon to Configure Mode (Configure Terminal Mode).
Then logon to Interface mode. fe1 means port 1.
The switch_a(config-if)#
prompt will show on the screen. switch_a(config)#interface fe1 switch_a(config-if)#
2. Usage:
Use this command to set Chain Protocol to an interface. Use the no parameter with this command to revoke Chain Protocol from an interface.
Syntax: chain port enable no chain port
4. Example:
The following example sets Chain Protocol to the interface fe1 (port 1): switch_a(config)#interface fe1 switch_a(config-if)#chain port enable switch_a(config-if)#
Chain Priority:
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)# prompt will show on the screen. switch_a(config)#
2. Usage:
155
XSNet S4104SW/S4108SW
Use this command to set the Switch priority for running chain protocol. Switch with lower priority will run as Master (forwarding) port. Use the no form of the command to restore default value (128).
Syntax:
Bridge GROUP chain-priority <0-255> no bridge GROUP chain-priority
Group = <1-1> Bridge Group name for bridging.
<0-255> The Switch priority for running chain protocol.
4. Example:
The following example sets the new Switch priority ( 10 ) to bridge GROUP ( 1 ): switch_a(config)#bridge 1 chain-priority 10 switch_a(config)#
Chain Timeout:
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)# prompt will show on the screen. switch_a(config)#
2. Usage:
Use this command to set the Switch timeout count for running chain protocol.
Chain recovery time = (Chain Timeout Count – 1) x 200ms.
Use the no form of the command to restore default value (5).
Default Chain recovery time = (5 – 1) x 200ms = 800ms.
Syntax:
Bridge GROUP chain-timeout <3-255> no bridge GROUP chain-timeout
Group = <1-1> Bridge Group name for bridging.
<3-255> The Switch timeout count for running chain protocol.
4. Example:
The following example sets the new Switch timeout ( 10 ) to bridge GROUP
( 1 ): switch_a(config)#bridge 1 chain-timeout 10 switch_a(config)#
156
XSNet S4104SW/S4108SW
VLAN
VLAN Mode Setting, 802.1Q VLAN Setting, 802.1Q Port Setting, Port Based
VLAN
802.1Q VLAN Setting
VLAN Database:
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)#
prompt will show on the screen. switch_a(config)#
2. Usage:
Use vlan database command to enter the VLAN configuration mode. vlan database
4. Example:
The following example changes to VLAN configuration mode from Configure mode: switch_a(config)#vlan database switch_a(config-vlan)#
Add VLAN/Delete VLAN:
1. Command Mode: VLAN Configure mode
Logon to Configure Mode (Configure Terminal Mode).
Logon to VLAN Configure Mode.
The switch_a(config-vlan)# prompt will show on the screen. switch_a(config)#vlan database switch_a(config-vlan)#
2. Usage:
This command enables or disables the state of a particular VLAN on a bridge basis. Specifying the disable state causes all forwarding over the specified
VLAN ID on the specified bridge to cease. Specifying the enable state allows forwarding of frames on the specified VLAN-aware bridge.
Syntax: vlan VLANID bridge GROUP name VLAN_NAME state enable/disable no vlan VLANID bridge GROUP
VLANID The VID of the VLAN that will be enabled or disabled on the bridge
<2-4094>.
157
XSNet S4104SW/S4108SW
GROUP <1-1> The ID of the bridge-group on which the VLAN will be affected.
VLAN_NAME The ASCII name of the VLAN. Maximum length: 16 characters. enable Sets VLAN into an enable state. disable Sets VLAN into a disable state.
4. Example:
The following example enables the vlan VLANID ( 2 ) and name VLAN_NAME
( vlan2
) of bridge GROUP (
1
): switch_a(config-vlan)#vlan 2 bridge 1 name vlan2 state enable switch_a(config-vlan)#
802.1Q Port Setting
Switchport mode access:
1. Command Mode: Interface mode
Logon to Configure Mode (Configure Terminal Mode).
Then logon to Interface mode. fe1 means port 1.
The switch_a(config-if)#
prompt will show on the screen. switch_a(config)#interface fe1 switch_a(config-if)#
2. Usage:
Use switchport mode access command to set the switching characteristics of the Layer-2 interface to access mode, and classify untagged frames only.
Use the no switchport access command to reset the mode of the Layer-2 interface to access (default). switchport mode access no switchport access
4. Example:
The following example sets the switchport mode access of the interface fe1
(port 1): switch_a(config)#interface fe1 switch_a(config-if)#switchport mode access switch_a(config-if)#
Switchport mode hybrid:
1. Command Mode: Interface mode
Logon to Configure Mode (Configure Terminal Mode).
Then logon to Interface mode.
158
XSNet S4104SW/S4108SW fe1 means port 1.
The switch_a(config-if)# prompt will show on the screen. switch_a(config)#interface fe1 switch_a(config-if)#
2. Usage:
Use switchport mode hybrid
command to set the switching characteristics of the Layer-2 interface as hybrid, and classify both tagged and untagged frames.
Use the no switchport hybrid command to reset the mode of the Layer-2 interface to access (default). switchport mode hybrid switchport mode hybrid acceptable-frame-type all/vlan-tagged no switchport hybrid
all Set all frames can be received.
vlan-tagged Set vlan-tagged frames can only be received.
4. Example:
The following example sets the switchport mode hybrid of the interface fe1
(port 1) and all frames to be received on interface fe1 (port 1): switch_a(config)#interface fe1 switch_a(config-if)#switchport mode hybrid acceptable-frame-type all switch_a(config-if)#
Switchport mode trunk:
1. Command Mode: Interface mode
Logon to Configure Mode (Configure Terminal Mode).
Then logon to Interface mode. fe1 means port 1.
The switch_a(config-if)# prompt will show on the screen. switch_a(config)#interface fe1 switch_a(config-if)#
2. Usage:
Use switchport mode trunk command to set the switching characteristics of the Layer-2 interface as trunk, and specify only tagged frames.
Use the no switchport trunk command to reset the mode of the Layer-2 interface to access (default). switchport mode trunk no switchport trunk
4. Example:
159
XSNet S4104SW/S4108SW
The following example sets the switchport mode trunk of the interface fe1
(port 1): switch_a(config)#interface fe1 switch_a(config-if)#switchport mode trunk switch_a(config-if)#
Switchport hybrid allowed vlan:
1. Command Mode: Interface mode
Logon to Configure Mode (Configure Terminal Mode).
Then logon to Interface mode. fe1 means port 1.
The switch_a(config-if)# prompt will show on the screen. switch_a(config)#interface fe1 switch_a(config-if)#
2. Usage:
Use this command to set the switching characteristics of the Layer-2 interface to hybrid. Both tagged and untagged frames will be classified over hybrid interfaces.
Use the no parameter to turn off allowed hybrid switching.
Syntax: switchport hybrid allowed vlan all switchport hybrid allowed vlan none switchport hybrid allowed vlan add VLANID egress-tagged enable/disable switchport hybrid allowed vlan remove VLANID no switchport hybrid vlan all Allow all VLANs to transmit and receive through the Layer-2 interface. none Allow no VLANs to transmit and receive through the Layer-2 interface. add Add a VLAN to the member set. remove Remove a VLAN from the member set.
VLANID <2-4094> The ID of the VLAN or VLANs that will be added to, or removed from, the Layer-2 interface.
For a VLAN range, specify two VLAN numbers: lowest, then highest number in the range, separated by a hyphen.
For a VLAN list, specify the VLAN numbers separated by commas. egress-tagged enable Enable the egress tagging for the outgoing frames. disable Disable the egress tagging for the outgoing frames.
4. Example:
The following example specifies to add
the interface fe1 (port 1) to VLANID
( 2 ) and enable the egress-tagged for the outgoing frames on interface fe1
(port 1): switch_a(config)#interface fe1 switch_a(config-if)#switchport hybrid allowed vlan add 2 egress-tagged enable
160
XSNet S4104SW/S4108SW switch_a(config-if)#
Switchport trunk allowed vlan:
1. Command Mode: Interface mode
Logon to Configure Mode (Configure Terminal Mode).
Then logon to Interface mode. fe1 means port 1.
The switch_a(config-if)# prompt will show on the screen. switch_a(config)#interface fe1 switch_a(config-if)#
2. Usage:
Use this command to set the switching characteristics of the Layer-2 interface to trunk. The all parameter indicates that any VLAN ID is part of its port’s member set. The none parameter indicates that no VLAN ID is configured on this port. The add and remove parameters will add and remove VLAN IDs to/from the port’s member set.
Use the no parameter to remove all VLAN IDs configured on this port. switchport trunk allowed vlan all switchport trunk allowed vlan none switchport trunk allowed vlan add VLANID switchport trunk allowed vlan remove VLANID switchport trunk allowed vlan except VLANID no switchport trunk vlan all Allow all VLANs to transmit and receive through the Layer-2 interface. none Allow no VLANs to transmit and receive through the Layer-2 interface. add Add a VLAN to transmit and receive through the Layer-2 interface. remove Remove a VLAN from transmit and receive through the Layer-2 interface. except All VLANs, except the VLAN for which the ID is specified, are part of its ports member set.
VLANID <2-4094> The ID of the VLAN or VLANs that will be added to, or removed from, the Layer-2 interface. A single VLAN, VLAN range, or VLAN list can be set.
For a VLAN range, specify two VLAN numbers: lowest, then highest number in the range, separated by a hyphen.
For a VLAN list, specify the VLAN numbers separated by commas.
4. Example:
The following example specifies to add the interface fe1 (port 1) to VLANID
( 2 ): switch_a(config)#interface fe1 switch_a(config-if)#switchport trunk allowed vlan add 2 switch_a(config-if)#
161
XSNet S4104SW/S4108SW
Port Based VLAN
Switchport portbase add/remove vlan:
1. Command Mode: Interface mode
Logon to Configure Mode (Configure Terminal Mode).
Then logon to Interface mode. fe1 means port 1.
The switch_a(config-if)#
prompt will show on the screen. switch_a(config)#interface fe1 switch_a(config-if)#
2. Usage:
Use this command to set or remove the default VLAN for the interface. switchport portbase add | remove vlan VLANID
VLANID The ID of the VLAN will be added to or removed from the Layer-2 interface.
4. Example:
The following example specifies to add the interface fe1 (port 1) to VLANID
( 2 ): switch_a(config)#interface fe1 switch_a(config-if)#switchport portbase add vlan 2 switch_a(config-if)#
162
XSNet S4104SW/S4108SW
QoS
Global Configuration, 802.1p Priority, DSCP
Global Configuration
QoS:
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)# prompt will show on the screen. switch_a(config)#
2. Usage:
Use mls qos enable
command to globally enable QoS.
Use the no mls qos command to globally disable QoS. mls qos enable
(no) mls qos
4. Example:
The following example globally enables QoS on the switch: switch_a(config)#mls qos enable switch_a(config)#
Trust:
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)#
prompt will show on the screen. switch_a(config)#
2. Usage:
Use mls qos trust command to turn on QoS trust CoS or DSCP.
Use the no mls qos trust command to turn off QoS trust CoS or DSCP.
Syntax:
(no) mls qos trust cos/dscp
cos Class of Service.
dscp Differentiated Service Code Point.
4. Example:
The following example turns on QoS trust CoS on the switch: switch_a(config)#mls qos trust cos
163
XSNet S4104SW/S4108SW switch_a(config)#
Strict Priority:
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)#
prompt will show on the screen. switch_a(config)#
2. Usage:
Use priority-queue out command to enable the egress expedite queue.
Use the no priority-queue out command to disable the egress expedite queue.
(no) priority-queue out
4. Example:
The following example enables the egress expedite queue on the switch: switch_a(config)#priority-queue out switch_a(config)#
Weighted Round Robin:
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)# prompt will show on the screen. switch_a(config)#
2. Usage:
Use wrr-queue bandwidth command to specify the bandwidth ratios of the transmit queues. wrr-queue bandwidth WRR_WTS
WRR_WTS Weighted Round Robin (WRR) weights for the 4 queues (4 values separated by spaces). Range is 1-55.
4. Example:
The following example specifies the bandwidth ratios of the transmit queues on the switch: switch_a(config)#wrr-queue bandwidth 1 2 4 8 switch_a(config)#
164
XSNet S4104SW/S4108SW
802.1p Priority
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)# prompt will show on the screen. switch_a(config)#
2. Usage:
Use wrr-queue cos-map
command to specify CoS values for a queue. wrr-queue cos-map QUEUE_ID COS_VALUE
QUEUE_ID Queue ID. Range is 0-3.
COS_VALUE CoS values. Up to 8 values (separated by spaces). Range is
0-7.
4. Example:
The following example shows mapping CoS values 0 and 1 to queue 1 on the switch: switch_a(config)#wrr-queue cos-map 1 0 1 switch_a(config)#
DSCP
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)# prompt will show on the screen. switch_a(config)#
2. Usage:
Use mls qos map dscp-queue command to map the DSCP values to a queue.
mls qos map dscp-queue DSCP_VALUE to QUEUE_ID
DSCP_VALUE DSCP values. Up to 8 values (separated by spaces). Range is 0-63.
QUEUE_ID Queue ID. Range is 0-3.
4. Example:
The following example shows mapping DSCP values 0 to 3 to queue 1 on the switch: switch_a(config)#mls qos map dscp-queue 0 1 2 3 to 1 switch_a(config)#
165
XSNet S4104SW/S4108SW
SNMP
SNMP General Setting, SNMP v1/v2c, SNMP v3
SNMP General Setting
SNMP Status:
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)# prompt will show on the screen. switch_a(config)#
2. Usage:
Use snmp-server enable
command to enable and no snmp-server enable command to disable SNMP to the switch.
(no) snmp-server enable
4. Example:
The following example enables SNMP to the switch: switch_a(config)#snmp-server enable switch_a(config)#
Description:
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)#
prompt will show on the screen. switch_a(config)#
2. Usage:
Use snmp-server description command to specify and no snmp-server description command to remove description for SNMP.
Syntax: snmp-server description DESCRIPTION no snmp-server description
DESCRIPTION The description for SNMP.
4. Example:
The following example specifies description ( description
) for SNMP: switch_a(config)#snmp-server description description switch_a(config)#
166
XSNet S4104SW/S4108SW
Location:
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)# prompt will show on the screen. switch_a(config)#
2. Usage:
Use snmp-server location
command to specify and no snmp-server location
command to remove location for SNMP. snmp-server location LOCATION no snmp-server location
LOCATION The location for SNMP.
4. Example:
The following example specifies location ( location ) for SNMP: switch_a(config)#snmp-server location location switch_a(config)#
Contact:
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)# prompt will show on the screen. switch_a(config)#
2. Usage:
Use snmp-server contact command to specify and no snmp-server contact command to remove contact for SNMP. snmp-server contact CONTACT no snmp-server contact
CONTACT The contact for SNMP.
4. Example:
The following example specifies contact ( contact ) for SNMP: switch_a(config)#snmp-server contact contact switch_a(config)#
Trap Community Name:
167
XSNet S4104SW/S4108SW
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)# prompt will show on the screen. switch_a(config)#
2. Usage:
Use this command to specify trap community name for SNMP.
Use the no parameter with this command to remove trap community name for
SNMP.
Syntax: snmp-server trap-community <1-5> NAME no snmp-server trap-community <1-5>
<1-5> The trap community 1-5.
NAME The trap community name for SNMP.
4. Example:
The following example specifies trap community name 1 ( name ) for SNMP: switch_a(config)#snmp-server trap-community 1 name switch_a(config)#
Trap Host IP Address:
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)# prompt will show on the screen. switch_a(config)#
2. Usage:
Use this command to specify trap host IP address for SNMP.
Use the no parameter with this command to remove trap host IP address for
SNMP.
Syntax: snmp-server trap-ipaddress <1-5> IP-ADDRESS no snmp-server trap-ipaddress <1-5>
<1-5> The trap host IP address 1-5.
IP-ADDRESS The trap host IP address for SNMP. A.B.C.D specifies the IP address.
4. Example:
The following example specifies trap host 1 IP address ( 192.168.1.20
) for
SNMP: switch_a(config)#snmp-server trap-ipaddress 1 192.168.1.20 switch_a(config)#
168
XSNet S4104SW/S4108SW
Link Down Trap:
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)#
prompt will show on the screen. switch_a(config)#
2. Usage:
Use snmp-server trap-type enable linkDown command to enable link down trap for SNMP.
Use the no snmp-server trap-type enable linkDown command to disable link down trap for SNMP.
(no) snmp-server trap-type enable linkDown
4. Example:
The following example enables link down trap for SNMP: switch_a(config)#snmp-server trap-type enable linkDown switch_a(config)#
Link Up Trap:
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)# prompt will show on the screen. switch_a(config)#
2. Usage:
Use snmp-server trap-type enable linkUp
command to enable link up trap for SNMP.
Use the no snmp-server trap-type enable linkUp command to disable link up trap for SNMP.
Syntax:
(no) snmp-server trap-type enable linkUp
4. Example:
The following example enables link up trap for SNMP: switch_a(config)#snmp-server trap-type enable linkUp switch_a(config)#
SNMP v1/v2c
Get Community Name:
1. Command Mode: Configure mode
169
XSNet S4104SW/S4108SW
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)# prompt will show on the screen. switch_a(config)#
2. Usage:
Use snmp-server community get command to specify and no snmp-server community get
command to remove get community name for
SNMP. snmp-server community get NAME no snmp-server community get
NAME The get community name for SNMP.
4. Example:
The following example specifies get community name ( name ) for SNMP: switch_a(config)#snmp-server community get name switch_a(config)#
Set Community Name:
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)# prompt will show on the screen. switch_a(config)#
2. Usage:
Use snmp-server community set command to specify and no snmp-server community set command to remove set community name for
SNMP. snmp-server community set NAME no snmp-server community set
NAME The set community name for SNMP.
4. Example:
The following example specifies set community name ( name ) for SNMP: switch_a(config)#snmp-server community set name switch_a(config)#
SNMP v3
SNMPv3 No-Auth:
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
170
XSNet S4104SW/S4108SW
The switch_a(config)# prompt will show on the screen. switch_a(config)#
2. Usage:
Add a user using snmp v3 with read-only or read-write access mode and without authentication. Use the no form of the command to delete this user.
(no) snmp-server v3-user USERNAME (ro | rw) noauth
USERNAME Specify a user name. ro read-only access mode rw read-write access mode
4. Example:
The following example adds a user ( myuser ) using snmp v3 with read-only access mode and without authentication: switch_a(config)#snmp-server v3-user myuser ro noauth switch_a(config)#
SNMPv3 Auth-MD5, SNMPv3 Auth-SHA:
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)# prompt will show on the screen. switch_a(config)#
2. Usage:
Add a user using snmp v3 with read-only or read-write access mode and with
MD5 or SHA authentication. Use the no form of the command to delete this user.
(no) snmp-server v3-user USERNAME (ro | rw) auth (md5 | sha)
AUTH_PASSWORD
USERNAME Specify a user name. ro read-only access mode rw read-write access mode md5 authentication method sha authentication method
AUTH_PASSWORD authentication password
4. Example:
The following example adds a user ( myuser ) using snmp v3 with read-write access mode and MD5 authentication ( mypassword
): switch_a(config)#snmp-server v3-user myuser rw auth md5 mypassword switch_a(config)#
171
XSNet S4104SW/S4108SW
SNMPv3 Priv Auth-MD5, SNMPv3 Priv Auth-SHA:
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)# prompt will show on the screen. switch_a(config)#
2. Usage:
Add a user using snmp v3 with read-only or read-write access mode, MD5 or
SHA authentication, and privacy. Use the no form of the command to delete this user.
(no) snmp-server v3-user USERNAME (ro | rw) priv auth (md5 | sha)
AUTH_PASSWORD des PRIV_PASS_PHRASE
USERNAME Specify a user name. ro read-only access mode rw read-write access mode md5 authentication method sha authentication method
AUTH_PASSWORD authentication password
PRIV_PASS_PHRASE encryption pass phrase
4. Example:
The following example adds a user ( myuser
) using snmp v3 with read-write access mode, MD5 authentication ( mypassword ), and encryption pass phrase ( mypassphrase ): switch_a(config)#snmp-server v3-user myuser rw priv md5 mypassword des mypassphrase switch_a(config)#
172
XSNet S4104SW/S4108SW
802.1x
Radius Configuration, Port Authentication
Radius Configuration
Radius Status:
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)# prompt will show on the screen. switch_a(config)#
2. Usage:
Use dot1x system-auth-ctrl
command to globally enable authentication.
Use no dot1x system-auth-ctrl command to globally disable authentication.
(no) dot1x system-auth-ctrl
4. Example:
The following example globally enables authentication: switch_a(config)#dot1x system-auth-ctrl switch_a(config)#
Radius Server IP:
Radius Server Port:
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)#
prompt will show on the screen. switch_a(config)#
2. Usage:
Use this command to specify the IP address of the remote radius server host and assign authentication and accounting destination port number.
Syntax:
(no) radius-server host IP-ADDRESS auth-port PORT
IP-ADDRESS A.B.C.D specifies the IP address of the radius server host.
PORT specifies the UDP destination port for authentication requests. The host is not used for authentication if set to 0.
4. Example:
The following example specifies the IP address ( 192.168.1.100
) of the remote radius server host and assigns authentication and accounting
173
XSNet S4104SW/S4108SW destination port number ( 1812 ): switch_a(config)#radius-server host 192.168.1.100 auth-port 1812 switch_a(config)#
Secret Key:
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)# prompt will show on the screen. switch_a(config)#
2. Usage:
Use this command to set the shared secret key between a Radius server and a client.
(no) radius-server host IP-ADDRESS key KEY
IP-ADDRESS A.B.C.D specifies the IP address of the radius server host.
KEY specifies the secret key shared among the radius server and the
802.1x client.
4. Example:
The following example specifies the IP address ( 192.168.1.100
) of the remote radius server host and set the secret key
(ipi
) shared among the radius server and the 802.1x client: switch_a(config)#radius-server host 192.168.1.100 key ipi switch_a(config)#
Timeout:
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)# prompt will show on the screen. switch_a(config)#
2. Usage:
Use this command to specify the number of seconds a Switch waits for a reply to a radius request before retransmitting the request. radius-server timeout SEC no radius-server timeout
SEC <1-1000> The number of seconds for a Switch to wait for a server host to reply before timing out. Enter a value in the range 1 to 1000.
4. Example:
174
XSNet S4104SW/S4108SW
The following example specifies 20 seconds for the Switch to wait for a server host to reply before timing out: switch_a(config)#radius-server timeout 20 switch_a(config)#
Retransmit:
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)# prompt will show on the screen. switch_a(config)#
2. Usage:
Use this command to specify the number of times the Switch transmits each radius request to the server before giving up. radius-server retransmit RETRIES no radius-server retransmit
RETRIES <1-100> Specifies the retransmit value. Enter a value in the range
1 to 100.
4. Example:
The following example specifies the retransmit value
12
: switch_a(config)#radius-server retransmit 12 switch_a(config)#
Port Authentication
Authentication State:
1. Command Mode: Interface mode
Logon to Configure Mode (Configure Terminal Mode).
Then logon to Interface mode. fe1 means port 1.
The switch_a(config-if)#
prompt will show on the screen. switch_a(config)#interface fe1 switch_a(config-if)#
2. Usage:
Use dot1x reauthetication command to enable reauthentication on a port.
Use no dot1x reauthetication command to disable reauthentication on a port.
(no) dot1x reauthentication
175
XSNet S4104SW/S4108SW
4. Example:
The following example specifies to enable reauthetication on the interface fe1
(port 1): switch_a(config)#interface fe1 switch_a(config-if)#dot1x reauthentication switch_a(config-if)#
Port Control:
1. Command Mode: Interface mode
Logon to Configure Mode (Configure Terminal Mode).
Then logon to Interface mode. fe1 means port 1.
The switch_a(config-if)# prompt will show on the screen. switch_a(config)#interface fe1 switch_a(config-if)#
2. Usage:
Use this command to force a port state.
Use no dot1x port-control command to remove a port from the 802.1x management. dot1x port-control auto | force-authorized | force-unauthorized no dot1x port-control
auto Specify to enable authentication on port.
force-authorized Specify to force a port to always be in an authorized state.
force-unauthorized Specify to force a port to always be in an unauthorized state.
4. Example:
The following example specifies to enable authetication on the interface fe1
(port 1): switch_a(config)#interface fe1 switch_a(config-if)#dot1x port-control auto switch_a(config-if)#
Periodic Reauthentication:
Reauthentication Period:
1. Command Mode: Interface mode
Logon to Configure Mode (Configure Terminal Mode).
Then logon to Interface mode. fe1 means port 1.
The switch_a(config-if)# prompt will show on the screen. switch_a(config)#interface fe1
176
XSNet S4104SW/S4108SW switch_a(config-if)#
2. Usage:
Use this command to set the interval between reauthorization attempts.
Use no dot1x timeout re-authperiod command to delete the interval between reauthorization attempts. dot1x timeout re-authperiod SECS no dot1x timeout re-authperiod
SECS <1-4294967295> Specify the seconds between reauthorization attempts. The default time is 3600 seconds.
4. Example:
The following example specifies to set the interval 25 seconds between reauthorization attempts: switch_a(config)#interface fe1 switch_a(config-if)#dot1x timeout re-authperiod 25 switch_a(config-if)#
177
XSNet S4104SW/S4108SW
Other Protocols
GVRP, IGMP Snooping, NTP, GMRP, DHCP Server
GVRP
GVRP:
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)# prompt will show on the screen. switch_a(config)#
2. Usage:
Use set gvrp enable bridge
command to enable (set) and set gvrp disable bridge command to disable (reset) GVRP globally for the bridge instance.
This command does not enable/disable GVRP in all ports of the bridge. After enabling GVRP globally, use the set port gvrp enable command to enable
GVRP on individual ports of the bridge. set gvrp enable bridge GROUP set gvrp disable bridge GROUP
GROUP Bridge-group ID used for bridging.
4. Example:
The following example globally enables GVRP to bridge GROUP ( 1 ): switch_a(config)#set gvrp enable bridge 1 switch_a(config)#
Dynamic VLAN creation:
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)# prompt will show on the screen. switch_a(config)#
2. Usage:
Use set gvrp dynamic-vlan-creation enable bridge
command to enable and set gvrp dynamic-vlan-creation disable bridge command to disable dynamic VLAN creation for a specific bridge instance.
Syntax: set gvrp dynamic-vlan-creation enable bridge GROUP set gvrp dynamic-vlan-creation disable bridge GROUP
GROUP Bridge-group ID used for bridging.
178
XSNet S4104SW/S4108SW
4. Example:
The following example enables dynamic VLAN creation for bridge GROUP
( 1 ): switch_a(config)#set gvrp dynamic-vlan-creation enable bridge 1 switch_a(config)#
Per port setting:
GVRP:
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)# prompt will show on the screen. switch_a(config)#
2. Usage:
Use set port gvrp enable command to enable and set port gvrp disable command to disable GVRP on a port or all ports in a bridge. set port gvrp enable all/IFNAME set port gvrp disable all/IFNAME all All ports added to recently configured bridge.
IFNAME The name of the interface.
4. Example:
The following example enables GVRP on the interface fe1 (port 1): switch_a(config)#set port gvrp enable fe1 switch_a(config)#
Per port setting:
GVRP applicant:
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)#
prompt will show on the screen. switch_a(config)#
2. Usage:
Use this command to set the GVRP applicant state to normal or active.
Syntax: set gvrp applicant state active/normal IFNAME active Active state normal Normal state
IFNAME Name of the interface.
179
XSNet S4104SW/S4108SW
4. Example:
The following example sets GVRP applicant state to active on the interface fe1 (port 1): switch_a(config)#set gvrp applicant state active fe1 switch_a(config)#
Per port setting:
GVRP registration:
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)# prompt will show on the screen. switch_a(config)#
2. Usage:
Use this command to set GVRP registration to normal, fixed, and forbidden registration mode for a given port. set gvrp registration normal IF_NAME set gvrp registration fixed IF_NAME set gvrp registration forbidden IF_NAME normal Specify dynamic GVRP multicast registration and deregistration on the port. fixed Specify the multicast groups currently registered on the switch are applied to the port, but any subsequent registrations or deregistrations do not affect the port. Any registered multicast groups on the port are not deregistered based on the GARP timers. forbidden Specify that all GVRP multicasts are deregistered, and prevent any further GVRP multicast registration on the port.
IF_NAME The name of the interface.
4. Example:
The following example sets GVRP registration to fixed registration mode on the interface fe1 (port 1): switch_a(config)#set gvrp registration fixed fe1 switch_a(config)#
IGMP Snooping
IGMP mode:
Querier:
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)# prompt will show on the screen.
180
XSNet S4104SW/S4108SW switch_a(config)#
2. Usage:
Use ip igmp snooping querier command to enable IGMP querier operation on a subnet (VLAN) when no multicast routing protocol is configured in the subnet (VLAN). When enabled, the IGMP Snooping querier sends out periodic IGMP queries for all interfaces on that VLAN.
Use the no ip igmp snooping querier
command to disable IGMP querier configuration.
Syntax:
(no) ip igmp snooping querier
4. Example:
The following example enables IGMP snooping querier: switch_a(config)# ip igmp snooping querier switch_a(config)#
IGMP mode:
Passive:
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)#
prompt will show on the screen. switch_a(config)#
2. Usage:
Use ip igmp snooping command to enable IGMP Snooping. This command is given in the Global Config mode. IGMP Snooping is enabled at the switch level.
Use the no ip igmp snooping
command to globally disable IGMP Snooping.
(no) ip igmp snooping enable
4. Example:
The following example enables IGMP snooping on the switch: switch_a(config)# ip igmp snooping enable switch_a(config)#
IGMP version:
1. Command Mode: Interface mode
Logon to Configure Mode (Configure Terminal Mode).
Then logon to Interface mode. vlan1.1 means vlan 1.
181
XSNet S4104SW/S4108SW
The switch_a(config-if)# prompt will show on the screen. switch_a(config)#interface vlan1.1 switch_a(config-if)#
2. Usage:
Use ip igmp version command to set the current IGMP protocol version on an interface.
To return to the default version, use the no ip igmp version
command. ip igmp version VERSION no ip igmp version
VERSION IGMP protocol version number.
4. Example:
The following example sets the IGMP protocol version 3 on vlan1.1
: switch_a(config)#interface vlan1.1 switch_a(config-if)#ip igmp version 3 switch_a(config-if)#
Fast-leave:
1. Command Mode: Interface mode
Logon to Configure Mode (Configure Terminal Mode).
Then logon to Interface mode. vlan1.1 means vlan 1.
The switch_a(config-if)# prompt will show on the screen. switch_a(config)#interface vlan1.1 switch_a(config-if)#
2. Usage:
Use ip igmp snooping fast-leave command to enable IGMP Snooping fast-leave processing. Fast-leave processing is analogous to immediate leave processing; the IGMP group-membership is removed, as soon as an
IGMP leave group message is received without sending out a group-specific query.
Use the no ip igmp snooping fast-leave
command to disable fast-leave processing.
Syntax:
(no) ip igmp snooping fast-leave
4. Example:
The following example enables IGMP snooping fast-leave on vlan1.1
: switch_a(config)#interface vlan1.1 switch_a(config-if)#ip igmp snooping fast-leave switch_a(config-if)#
182
XSNet S4104SW/S4108SW
IGMP querier:
Query-interval:
1. Command Mode: Interface mode
Logon to Configure Mode (Configure Terminal Mode).
Then logon to Interface mode. vlan1.1 means vlan 1.
The switch_a(config-if)#
prompt will show on the screen. switch_a(config)#interface vlan1.1 switch_a(config-if)#
2. Usage:
Use ip igmp query-interval command to configure the frequency of sending
IGMP host query messages.
To return to the default frequency, use the no ip igmp query-interval command. ip igmp query-interval INTERVAL no ip igmp query-interval
INTERVAL <1-18000> Frequency (in seconds) at which IGMP host query messages are sent. Default: 125 seconds.
4. Example:
The following example changes the frequency of sending IGMP host-query messages to 2 minutes on vlan1.1
: switch_a(config)#interface vlan1.1 switch_a(config-if)#ip igmp query-interval 120 switch_a(config-if)#
IGMP querier:
Max-response-time:
1. Command Mode: Interface mode
Logon to Configure Mode (Configure Terminal Mode).
Then logon to Interface mode. vlan1.1 means vlan 1.
The switch_a(config-if)# prompt will show on the screen. switch_a(config)#interface vlan1.1 switch_a(config-if)#
2. Usage:
Use ip igmp query-max-response-time command to configure the maximum response time advertised in IGMP queries.
183
XSNet S4104SW/S4108SW
To restore to the default value, use the no ip igmp query-max-response-time command.
Syntax: ip igmp query-max-response-time RESPONSETIME no ip igmp query-max-response-time
RESPONSETIME <1-240> Maximum response time (in seconds) advertised in IGMP queries. Default: 10 seconds.
4. Example:
The following example configures a maximum response time of 8 seconds on vlan1.1
: switch_a(config)#interface vlan1.1 switch_a(config-if)#ip igmp query-max-response-time 8 switch_a(config-if)#
IGMP passive snooping:
Static mc router port:
1. Command Mode: Interface mode
Logon to Configure Mode (Configure Terminal Mode).
Then logon to Interface mode. vlan1.1 means vlan 1.
The switch_a(config-if)# prompt will show on the screen. switch_a(config)#interface vlan1.1 switch_a(config-if)#
2. Usage:
Use ip igmp snooping mrouter interface
command to statically configure the specified VLAN constituent interface as a multicast router interface for
IGMP Snooping in that VLAN.
Use the no ip igmp snooping mrouter interface command to remove the static configuration of the interface as a multicast router interface.
(no) ip igmp snooping mrouter interface IFNAME
IFNAME Specify the name of the interface
4. Example:
The following example shows interface fe1 (port 1) statically configured to be a multicast router interface on vlan1.1
: switch_a(config)#interface vlan1.1 switch_a(config-if)#ip igmp snooping mrouter interface fe1 switch_a(config-if)#
184
XSNet S4104SW/S4108SW
IGMP passive snooping:
Report suppression:
1. Command Mode: Interface mode
Logon to Configure Mode (Configure Terminal Mode).
Then logon to Interface mode. vlan1.1 means vlan 1.
The switch_a(config-if)# prompt will show on the screen. switch_a(config)#interface vlan1.1 switch_a(config-if)#
2. Usage:
Use ip igmp snooping report-suppression
command to enable report suppression for IGMP versions 1 and 2.
Use the no ip igmp snooping report-suppression command to disable report suppression.
Syntax:
(no) ip igmp snooping report-suppression
4. Example:
The following example enables report suppression for IGMPv2 reports on vlan1.1
: switch_a(config)#interface vlan1.1 switch_a(config-if)#ip igmp version 2 switch_a(config-if)#ip igmp snooping report-suppression switch_a(config-if)#
Passive Mode Forwarding Port:
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)# prompt will show on the screen. switch_a(config)#
2. Usage:
Use this command to forward multicast packet to interface before the interface receiving IGMP query in passive mode. ip igmp snooping passive-forward LINE | none | all
LINE Interface name list, ex: fe1-fe3, fe5. none Not forward multicast packet to any interface. all Forward multicast packet to all interfaces.
4. Example:
The following example forwards multicast packet to interfaces fe1-fe3 and
185
XSNet S4104SW/S4108SW fe5: switch_a(config)# ip igmp snooping passive-forward fe1-fe3, fe5 switch_a(config)#
NTP
NTP Status:
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)# prompt will show on the screen. switch_a(config)#
2. Usage:
Use ntp enable
command to enable NTP for the Switch.
Use no ntp enable command to disable NTP for the Switch.
(no) ntp enable
4. Example:
The following example enables NTP for the Switch: switch_a(config)#ntp enable switch_a(config)#
NTP Server:
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)# prompt will show on the screen. switch_a(config)#
2. Usage:
Use this command to specify the IP address or Domain name of NTP server. ntp server IP-ADDRESS | DOMAIN-NAME
IP-ADDRESS A.B.C.D specifies the IP address of NTP server.
DOMAIN-NAME Specifies the Domain name of NTP server.
4. Example:
The following example specifies the IP address ( 192.168.1.100
) of NTP server: switch_a(config)#ntp server 192.168.1.100 switch_a(config)#
186
XSNet S4104SW/S4108SW
Sync Time:
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)#
prompt will show on the screen. switch_a(config)#
2. Usage:
Use ntp sync-time command to synchronize time with NTP server.
3. Command ntp sync-time
4. Example:
The following example synchronizes time with NTP server: switch_a(config)#ntp sync-time switch_a(config)#
Time Zone:
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)# prompt will show on the screen. switch_a(config)#
2. Usage:
Use this command to to set time zone. clock timezone TIMEZONE
TIMEZONE Specifies the time zone. (Please refer the Appendix B)
4. Example:
The following example sets time zone (Canada/Yukon): switch_a(config)#clock timezone YST9YDT switch_a(config)#
Polling Interval:
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)# prompt will show on the screen. switch_a(config)#
2. Usage:
Use this command to specify the polling interval.
187
XSNet S4104SW/S4108SW ntp polling-interval MINUTE
MINUTE <1-10080> The polling interval. Enter a value in the range 1 to
10080 minutes.
4. Example:
The following example specifies the polling interval 60 minutes: switch_a(config)#ntp polling interval 60 switch_a(config)#
Daylight Saving Mode:
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)# prompt will show on the screen. switch_a(config)#
2. Usage:
Use this command to enable daylight saving.
Use no clock summer-time
command to disable daylight saving. clock summer-time TIMEZONE weekday WEEK DAY MONTH HOUR
MINUTE WEEK DAY MONTH HOUR MINUTE OFFSET
TIMEZONE Specifies the daylight saving timezone.
WEEK <1-5> Specifies starting/ending week of daylight savings time.
DAY <0-6> Specifies from Sunday to Saturday.
MONTH <1-12> Specifies from January to December.
HOUR <0-23> Specifies from 0 to 23.
MINUTE <0-59> Specifies from 0 to 59.
OFFSET <1-1440> Specifies from 1 to 1440 minutes. clock summer-time TIMEZONE date DAY MONTH HOUR MINUTE DAY
MONTH HOUR MINUTE OFFSET
TIMEZONE Specifies the daylight saving timezone.
DAY <1-31> Specifies from 1 to 31.
MONTH <1-12> Specifies from January to December.
HOUR <0-23> Specifies from 0 to 23.
MINUTE <0-59> Specifies from 0 to 59.
OFFSET <1-1440> Specifies from 1 to 1440 minutes. no clock summer-time
4. Example:
The following example sets clock summer-time TIMEZONE ( onehour ) as daylight saving offset 60 minutes from 4 April AM0:00 to 31 October AM0:00: switch_a(config)#clock summer-time onehour date 4 4 0 0 31 10 0 0 60 switch_a(config)#
188
XSNet S4104SW/S4108SW
GMRP
Clear GMRP Statistics:
1. Command Mode: Privileged Exec mode
Logon to Privileged Exec Mode (Enable Mode).
The switch_a# prompt will show on the screen. switch_a#
2. Usage:
Use this command to clear GMRP statistics for a given VLAN or all the
VLANs configured on the Layer-2 switch. This default clearing is for all the configured VLANs. clear gmrp statistics [all ∣ vlanid VLANID] bridge BRIDGE_NAME all Clear GMRP statistics for all the VLANs.
VLANID vlanid <1 to 4094> Clear GMRP statistics for the particular VLAN
ID .
BRIDGE_NAME Bridge instance name.
4. Example:
The following example clears the GMRP statistics for VLAN 12 on bridge 1: switch_a#clear gmrp statistics vlan 12 bridge 1 switch_a#
The following example clears the GMRP statistics for all the configured
VLANs on bridge 1: switch_a#clear gmrp statistics all bridge 1 switch_a#
Set GMRP:
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)# prompt will show on the screen. switch_a(config)#
2. Usage:
Use this command to enable/disable GMRP globally on a particular bridge.
This command does not enable/disable GMRP in all ports of the bridge. After enabling GMRP globally, use the set port gmrp
command to enable GMRP on individual ports of the bridge. GMRP cannot be enabled if IGMP Snooping is enabled, or if GMRP has already been configured for a particular VLAN.
189
XSNet S4104SW/S4108SW set gmrp enable ∣ disable bridge BRIDGE_NAME enable Enable GMRP on Layer-2 switch. disable Disable GMRP on Layer-2 switch
BRIDGE_NAME The text string to use for the name of the bridge.
4. Example:
The following example enables GMRP on a Layer-2 switch for bridge 1: switch_a(config)#set gmrp enable bridge 1 switch_a(config)#
Set Port GMRP:
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)#
prompt will show on the screen. switch_a(config)#
2. Usage:
Use this command to enable/disable GMRP on a particular port in all VLANs or all ports in a bridge. GMRP on a port cannot be enabled for all VLANs if
GMRP has already been configured for a particular VLAN for the port.
Syntax: set port gmrp enable ∣ disable all ∣ IF_NAME enable Enable GMRP on Layer-2 switch port disable Disable GMRP on Layer-2 switch port all All ports added to recently configured bridge
IF_NAME Specify the name of the interface.
4. Example:
The following example enables GMRP on interface fe1 (port 1): switch_a(config)#set port gmrp enable fe1 switch_a(config)#
The following example enables GMRP on all ports: switch_a(config)#set port gmrp enable all switch_a(config)#
GMRP Registration:
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)# prompt will show on the screen. switch_a(config)#
2. Usage:
190
XSNet S4104SW/S4108SW
Use this command to set GMRP registration type for all ports for a given bridge.
set gmrp registration normal ∣ fixed ∣ forbidden IF_NAME normal Specify dynamic GMRP multicast registration and deregistration on the port. fixed Specify the multicast groups currently registered on the switch are applied to the port, but any subsequent registrations or deregistrations do not affect the port. Any registered multicast groups on the port are not deregistered based on the GARP timers. forbidden Specify that all GMRP multicasts are deregistered, and prevent any further GMRP multicast registration on the port.
IF_NAME Defines a text string used as the name of the interface; ASCII string from 1 to 16 characters.
4. Example:
The following example sets interface fe1 (port 1) to normal registration: switch_a(config)#set gmrp registration normal fe1 switch_a(config)#
GMRP Forward All:
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)#
prompt will show on the screen. switch_a(config)#
2. Usage:
Use this command to set the GMRP forward all option for an interface.
set gmrp fwdall enable ∣ disable IF_NAME
IF_NAME Interface name.
4. Example:
The following example enables GMRP forwarding on a Layer-2 switch for interface fe1 (port 1): switch_a(config)#set gmrp fwdall enable fe1 switch_a(config)#
Set GMRP Timer:
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)# prompt will show on the screen.
191
XSNet S4104SW/S4108SW switch_a(config)#
2. Usage:
Use this command to set the values for the GMRP Join, Leave, and Leaveall timers for a specified bridge. The default is the join timer (200 milliseconds); the leave timer is 600 milliseconds (ms); and the leaveall timer is 10000 milliseconds (ms). set gmrp timer [join ∣ leave ∣ leaveall] TIMER_VALUE IF_NAME join Type of timer leave Type of timer leaveall Type of timer
TIMER_VALUE Timervalue in centiseconds.
IF_NAME Specify the name of the interface.
4. Example:
The following example sets the join timers 100 centiseconds for interface fe1
(port 1): switch_a(config)#set gmrp join timer 100 fe1 switch_a(config)#
DHCP Server
DHCP Binding Table:
1. Command Mode: Privileged Exec mode
Logon to Privileged Exec Mode (Enable Mode).
The switch_a#
prompt will show on the screen. switch_a#
2. Usage:
Use show dhcp-server binding command to display DHCP Server information.
Syntax: show dhcp-server binding
4. Example:
The following example displays DHCP Server information: switch_a#show dhcp-server binding
DHCP Server Status:
1. Command Mode: Interface mode
Logon to Configure Mode (Configure Terminal Mode).
Then logon to Interface mode.
192
XSNet S4104SW/S4108SW vlan1.1 means vlan 1.
The switch_a(config-if)# prompt will show on the screen. switch_a(config)#interface vlan1.1 switch_a(config-if)#
2. Usage:
Use dhcp-server enable
command to start the DHCP Server.
Use no dhcp-server enable
command to disable DHCP Server.
(no) dhcp-server enable
4. Example:
The following example starts the DHCP Server: switch_a(config)#interface vlan1.1 switch_a(config-if)#dhcp-server enable switch_a(config-if)#
DHCP Server Range:
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)# prompt will show on the screen. switch_a(config)#
2. Usage:
Use this command to set the default IP lease block for the DHCP Server. dhcp-server range A.B.C.D A.B.C.D
A.B.C.D The default Start IP for the DHCP Server.
A.B.C.D The default End IP for the DHCP Server.
4. Example:
The following example sets the default IP lease block for the DHCP Server: switch_a(config)#dhcp-server range 192.168.1.100 192.168.1.250 switch_a(config)#
DHCP Server Subnet-mask:
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)# prompt will show on the screen. switch_a(config)#
2. Usage:
193
XSNet S4104SW/S4108SW
Use this command to set the default subnet mask for the DHCP Server.
Use the no form of this command to remove this setting.
Syntax: dhcp-server subnet-mask A.B.C.D no dhcp-server subnet-mask
A.B.C.D The default subnet mask for the DHCP Server.
4. Example:
The following example sets the default subnet mask for the DHCP Server: switch_a(config)#dhcp-server subnet-mask 255.255.255.0 switch_a(config)#
DHCP Server Gateway:
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)# prompt will show on the screen. switch_a(config)#
2. Usage:
Use this command to set the default gateway for the DHCP Server.
Use the no form of this command to remove this setting. dhcp-server gateway A.B.C.D no dhcp-server gateway
A.B.C.D The default gateway for the DHCP Server.
4. Example:
The following example sets the default gateway for the DHCP Server: switch_a(config)#dhcp-server gateway 192.168.1.254 switch_a(config)#
DHCP Server DNS:
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)# prompt will show on the screen. switch_a(config)#
2. Usage:
Use this command to set the default DNS for the DHCP Server.
Use the no form of this command to remove this setting.
194
XSNet S4104SW/S4108SW dhcp-server dns 1 | 2 A.B.C.D no dhcp-server dns 1 | 2
A.B.C.D The default DNS for the DHCP Server.
4. Example:
The following example sets the default DNS for the DHCP Server: switch_a(config)#dhcp-server dns 1 192.168.1.20 switch_a(config)#
DHCP Server Lease Time:
1. Command Mode: Configure mode
Logon to Configure Mode (Configure Terminal Mode).
The switch_a(config)#
prompt will show on the screen. switch_a(config)#
2. Usage:
Use this command to set the default lease time for the DHCP Server. Use the value 0 to reset this setting.
Syntax: dhcp-server lease-time <0-86400>
<0-86400> The default lease time for the DHCP Server (default: 86400).
4. Example:
The following example sets the default lease time for the DHCP Server: switch_a(config)#dhcp-server lease-time 86400 switch_a(config)#
195
advertisement
Related manuals
advertisement
Table of contents
- 1 Manual
- 1 Quick Start Guide
- 1 Physical Description
- 1 The Port Status LEDs and Power Inputs
- 2 Functional Description
- 3 Console Configuration
- 5 Web Configuration
- 7 Preface
- 8 Table of Contents
- 10 Product Overview
- 10 Industrial Managed Ethernet Switch
- 10 Package Contents
- 11 Product Highlights
- 11 Basic Features
- 11 Management Support
- 11 VLAN
- 11 TRUNKING
- 11 PORT-SECURITY
- 11 PORT-MIRRORING
- 12 QOS (IEEE802.1p Quality of Service)
- 12 INTERNETWORKING PROTOCOLS
- 12 NETWORK MANAGEMENT METHODS
- 13 Front Panel Display
- 13 This LED comes on when the switch is properly connected to power and turned on.
- 13 The LEDs are located on the front panel, displaying status for each respective port. Please refer to the following table for more details.
- 14 Physical Ports
- 14 CONNECTIVITY
- 14 MODE SELECTION
- 15 Switch Management
- 15 Web-based browser interface
- 15 Administration console via RS-232 serial port (CLI)
- 15 External SNMP-based network management application
- 16 Installation
- 16 Selecting a Site for the Switch
- 17 Connecting to Power
- 17 12VDC DC Jack
- 17 Redundant DC Terminal Block Power Inputs
- 17 Alarms for Power Failure
- 18 Connecting to Your Network
- 18 Cable Type & Length
- 20 Cabling
- 21 Switch Management
- 21 Management Access Overview
- 22 Administration Console (CLI)
- 22 Direct Access
- 22 [DEFAULT PARAMETERS]
- 23 Web Management
- 23 SNMP-Based Network Management
- 24 Protocols
- 24 VIRTUAL TERMINAL PROTOCOLS, SUCH AS TELNET
- 24 A virtual terminal protocol is a software program, such as Telnet, that allows you to establish a management session from a Macintosh, a PC, or a UNIX workstation. Because Telnet runs over TCP/IP, you must have at least one IP address configured on the switch before you can establish access to it with a virtual terminal protocol.
- 24 SIMPLE NETWORK MANAGEMENT PROTOCOL (SNMP)
- 24 SNMP is the standard management protocol for multivendor IP networks. SNMP supports transaction-based queries that allow the protocol to format messages and to transmit information between reporting devices and data-collection programs. SNMP runs on top of the User Datagram Protocol (UDP), offering a connectionless-mode service.
- 24 Management Architecture
- 25 SNMP & RMON Management
- 25 Overview
- 25 - The RMON probe is an intelligent device or software agent that continually collects statistics about a LAN segment or VLAN. The RMON probe transfers the collected data to a management workstation on request or when a pre-defined threshold is reached.
- 25 - The management workstation collects the statistics that the RMON probe gathers. The workstation can reside on the same network as the probe, or it can have an in-band or out-of-band connection to the probe.
- 26 SNMP Agent and MIB-2 (RFC 1213)
- 26 - Retrieving MIB counters from various layers of software modules according to the SNMP GET/GET NEXT frame messages.
- 26 - Setting MIB variables according to the SNMP SET frame message.
- 26 - Generating an SNMP TRAP frame message to the Network Management Station if the threshold of a certain MIB counter is reached or if other trap conditions (such as the following) are met:
- 26 WARM START
- 26 COLD START
- 26 LINK UP
- 26 LINK DOWN
- 26 AUTHENTICATION FAILURE
- 26 RISING ALARM
- 26 FALLING ALARM
- 26 TOPOLOGY ALARM
- 26 RMON MIB (RFC 2819) and Bridge MIB (RFC 1493)
- 27 RMON Groups Supported
- 27 - RMON Statistics Group – maintains utilization and error statistics for the switch port being monitored.
- 27 - RMON History Group – gathers and stores periodic statistical samples from the previous Statistics Group.
- 27 - RMON Alarm Group – allows a network administrator to define alarm thresholds for any MIB variable. An alarm can be associated with Low Threshold, High Threshold, or both. A trigger can trigger an alarm when the value of a specific MIB variable exceeds a threshold, falls below a threshold, or exceeds or falls below a threshold.
- 27 - RMON Event Group – allows a network administrator to define actions based on alarms. SNMP Traps are generated when RMON Alarms are triggered. The action taken in the Network Management Station depends on the specific network management application.
- 27 Bridge Groups Supported
- 27 - The dot1dBase Group – a mandatory group that contains the objects applicable to all types of bridges.
- 27 - The dot1dStp Group – contains objects that denote the bridge’s state with respect to the Spanning Tree Protocol. If a node does not implement the Spanning Tree Protocol, this group will not be implemented. This group is applicable to any transparent only, source route, or SRT bridge that implements the Spanning Tree Protocol.
- 27 - The dot1dTp Group – contains objects that describe the entity’s transparent bridging status. This group is applicable to transparent operation only and SRT bridges.
- 27 - The dot1dStatic Group – contains objects that describe the entity’s destination-address filtering status. This group is applicable to any type of bridge which performs destination-address filtering.
- 28 Web-Based Browser Management
- 28 Logging on to the switch
- 28 SWITCH IP ADDRESS
- 29 LOGIN
- 29 Enter the factory default login ID: root.
- 29 PASSWORD
- 29 Enter the factory default password (no password).
- 30 Understanding the Browser Interface
- 30 SYSTEM
- 30 System Information, System Name/Password, IP Address, ARP Table, Route Table, Save Configuration, Firmware Upgrade, Alarm Setting, Reboot, Logout
- 30 PORT
- 30 Configuration, Port Status, Rate Control, RMON Statistics, Per Port Vlan Activities, Port Security
- 30 SWITCHING
- 30 Bridging, Static MAC Entry, Port Mirroring
- 31 TRUNKING
- 31 Port Trunking, LACP Trunking
- 31 STP / RING
- 31 VLAN
- 31 VLAN Mode Setting, 802.1Q VLAN Setting, 802.1Q Port Setting, Port Based VLAN
- 31 QOS
- 31 Global Configuration, 802.1p Priority, DSCP
- 31 SNMP
- 31 802.1X
- 31 OTHER PROTOCOLS
- 32 System
- 32 System Information
- 36 ARP Table
- 37 Route Table
- 44 Alarm Setting
- 47 Port
- 53 Switching
- 56 Trunking
- 58 STP / Ring
- 68 Chain Setting
- 69 VLAN
- 76 QoS
- 79 SNMP
- 84 802.1x
- 87 Port Authentication
- 88 Other Protocols
- 97 Command Line Console Management
- 97 Administration Console
- 98 Exec Mode (View Mode)
- 102 Privileged Exec Mode (Enable Mode)
- 107 Configure Mode (Configure Terminal Mode)
- 111 User Interface Configuration
- 111 Http Server, Http Secure-Server, Telnet, SSH
- 113 System
- 113 System Information, System Name/Password, IP Address, ARP Table, Route Table, Save Configuration, Firmware Upgrade, Alarm Setting, Reboot, Logout
- 124 Port
- 124 Configuration, Port Status, Rate Control, RMON Statistics, Per Port Vlan Activities, Port Security
- 131 Switching
- 131 Bridging, Static MAC Entry, Port Mirroring
- 136 Trunking
- 136 Port Trunking, LACP Trunking
- 141 STP / Ring
- 141 Global Configuration, RSTP Port Setting, MSTP Properties, MSTP Instance Setting, MSTP Port Setting, Ring Setting, Chain Setting
- 155 Chain Setting
- 157 VLAN
- 157 VLAN Mode Setting, 802.1Q VLAN Setting, 802.1Q Port Setting, Port Based VLAN
- 163 QoS
- 166 SNMP
- 173 802.1x
- 178 Other Protocols
- 196 Specifications
- 196 LED Indicators
- 196 Operating
- 196 Temperature
- 198 Appendix A
- 199 Appendix B