183

xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual

Usage Example:

To display SSH algorithms currently set on the Switch:

DES-6500:4#show ssh algorithm

Command: show ssh algorithm

Encryption Algorithm

3DES :Enable

AES128 :Enable

AES192 :Enable

AES256 :Enable

ARC4 :Enable

Blowfish :Enable

Cast128 :Enable Twofish128 :Enable Twofish192 :Enable Twofish256 :Enable

Data Integrity Algorithm

MD5 :Enable

SHA1 :Enable

Public Key Algorithm

RSA :Enable

DSA :Enable

DES-6500:4#

Page 186

Image 186

Contents

CLI Manual Table of Contents Page Introduction Initial CLI screen Setting the Switch’s IP Address Assigning an IP Address Using the Console CLI Connecting to the Switch Initial Console Screen Example Command Parameter Help Available Commands Prompt Square brackets Command SyntaxAngle brackets Vertical bar Reset config system Reset configBraces Basic Switch Commands Command Parameters Config account username Config accountCreate admin user username Create account Show account Show accountDelete account Delete account username Show config Show config currentconfig configinNVRAM Show session Show session Show switch Show devicestatus Show serialportShow serialport Show devicestatus Config serialport autologout never 2minutes Config serialportEnable clipaging Enable clipaging Disable clipaging Enable telnet Disable telnet Enable web DES-65004#disable web Command disable web Success Disable webDisable web Save Reboot RebootReset DES-65004#reset config Command reset config Success Login Config commandpromptLogout Config greetingmessage Config greetingmessage default Show greetingmessage Success DES-65004#Show greetingmessage Switch Port Commands Config ports Show ports Flowcontrol enabled disabled Enable or disable flow controlLearning enabled disabled − Enables or disables the MAC Show ports portlist description Example usage To display port descriptions Port Security Commands Config portsecurity ports Show portsecurity Show portsecurity ports portlist Delete portsecurityentryvlanname Delete portsecurityentryvlanname vlanname 32 portPort macaddress macaddr Network Management Snmp Commands MD5 DES or SHA DES Create snmp user Sha − Specifies that the HMAC-SHA-96 authentication Level will be used Delete snmp user Show snmp userDelete snmp user SNMPname Create snmp view viewname 32 oid viewtype included Create snmp viewShow snmp user Excluded Delete snmp view viewname 32 all oid Delete snmp viewShow snmp view Show snmp view viewname Create snmp community Create snmp community communitystring 32 view viewnameReadonly readwrite Delete snmp community communitystring Delete snmp communityShow snmp community Show snmp community communitystring Show snmp engineID Config snmp engineIDConfig snmp engineID snmpengineID Show snmp engineID Noauthnopriv authnopriv authpriv readview Create snmp groupCreate snmp group groupname 32 v1 v2c Viewname Delete snmp group Delete snmp group groupname Show snmp groups Show snmp groups Create snmp host Create snmp host ipaddr v1 v2c v3 noauthnoprivAuthnopriv authpriv authstring Delete snmp host Delete snmp host ipaddr authstring Show snmp host ipaddr Show snmp hostCreate trustedhost Create trustedhost ipaddr Delete trustedhost Create trustedhost command aboveShow trustedhost Show trustedhost Enable snmp traps Enable snmp trapsEnable snmp authenticatetraps Enable snmp authenticatetraps Disable snmp traps Disable snmp authenticatetrapsShow snmp traps Config snmp systemcontact swcontact Config snmp systemcontactConfig snmp systemlocation Config snmp systemlocation swlocation Config snmp systemname swname Config snmp systemnameEnable rmon Enable rmon Disable rmon Disable rmonDES-65004#enable rmon Command enable rmon Success DES-65004#disable rmon Command disable rmon Success FirmwarefromTFTP ipaddr pathfilename 64 unit Switch Utility CommandsDownload Alllinecard cpu unitid 1-8 cfgfromTFTP ipaddr Done Download configuration Done DES-65004#Upload Upload cfgtoTFTP logtoTFTP ipaddr pathfilename Ping ipaddr times value 1-255 timeout sec PingTraceroute Enable autoconfig Enable autoconfig Download configuration Disable autoconfig Disable autoconfigShow autoconfig Show autoconfig Network Monitoring Commands Show packet portsShow packet ports portlist Show error ports Show error ports portlist Show utilization Show utilization ports cpu Show stackinformation Show stackinformation Current state Clear countersTopology Box Count DES-65004# Show log DES-65004#clear log Command clear log SuccessClear log Clear log Enable syslog Disable syslog Show syslog Show syslogCreate syslog host Informational informational messages Create syslog host Config syslog host Config syslog host Local7 udpport udpportnumber state enabled Config syslog host allConfig syslog host all severity informational warning all Facility local0 local1 local2 local3 local4 local5 local6 Informational informational messages Disabled State enabled disabled − Allows the sending of syslogMessages to the remote host, specified above, to be enabled Udpport udpportnumber − Specifies the UDP port number Delete syslog host index 1-4 all Delete syslog hostShow syslog host Show syslog host index Config systemseverity Config systemseverity trap log all critical warningInformation Show systemseverity Show systemseverity Multiple Spanning Tree Protocol Mstp Commands Enable stp Enable stpDisable stp DES-65004#enable stp Command enable stp Success Config stp version Config stp Lbdrecovertimer 0 value 60-1000000 This field will set True false p2p true false auto state enable disable Config stp portsConfig stp ports portlist externalCost auto value Lbd enable disable Create stp instanceid Create stp instanceid value Vidlist Config stp instanceidConfig stp instanceid value 1-15 addvlan removevlan Instanceid Delete stp instanceid Config stp priorityConfig stp priority value 0-61440 instanceid value Delete stp instanceid value Config stp mstconfigid Config stp mstports Config stp mstports Max Age Forward Delay Show stpShow stp Show stp ports portlist Show stp portsShow stp instanceid Show stp instanceid value Show stp mstconfigid Show stp mstconfigid Vid list 4094 DES-65004# Forwarding Database Commands Create fdbCreate fdb vlanname 32 macaddr port port Create multicastfdb Config multicastfdbConfig multicastfdb vlanname 32 macaddr add Create multicastfdb vlanname 32 macaddr Delete multicastfdb Delete multicastfdb vlanname 32 macaddr Delete fdb Config fdb agingtimeConfig fdb agingtime sec Delete fdb vlanname 32 macaddr DES-65004#clear fdb all Command clear fdb all Success Clear fdbClear fdb vlan vlanname 32 port port all Show multicastfdb Show fdb Show ipfdb SelfShow ipfdb ipaddr Page Broadcast Storm Control Commands Config traffic control Broadcast enabled disabled − Enables or disables broadcast Multicast enabled disabled − Enables or disables multicast Seconds with the default setting of 5 seconds Config traffic controlrecoverDeciding when incoming packets exceed the Threshold value Config traffic controlrecover portlist all Config traffic controltrap Show traffic control DLF QOS Commands Config bandwidthcontrol Config bandwidthcontrol portlist all rxrate nolimitValue 1-9999 txrate nolimit value Above ports will be allowed to transmit Show bandwidthcontrolValue 1-9999 − Specifies the packet limit, in Mbps, that Show bandwidthcontrol portlist Config scheduling Config scheduling classid 0-6 maxpacket value Weighted round-robin WRR method of forwarding packets as Show scheduling Config 802.1p userpriorityConfig 802.1p userpriority priority 0-7 classid Show scheduling Show 802.1p userpriority Show 802.1p userpriority Config 802.1p defaultpriority portlist all priority Config 802.1p defaultpriorityShow 802.1 defaultpriority Show 802.1p defaultpriority portlist Config schedulingmechanism Config scheduling mechanism strict weightfair Show schedulingmechanism Show schedulingmechanism Enable holprevention Enable holpreventionDisable holprevention Disable holprevention Show holprevention Show holprevention Config mirror port port add source ports portlist rx tx Port Mirroring CommandsConfig mirror port add Both Config mirror port delete Config mirror port port delete source port portlist rx tx Enable mirror Disable mirror Show mirror Show mirror Vlan Commands Create vlan 119 Encap ethernet llc snap all Specifies that the Switch will Delete vlan Config vlan addDES-65004#delete vlan Command delete vlan Success Delete vlan vlanname Config vlan delete Advertisement enabled disabled − Enables or disables GvrpConfig vlan vlanname 32 delete portlist Ingresschecking enabled disabled acceptableframe Config gvrpConfig gvrp portlist all state enabled disabled Taggedonly admitall pvid vlanid Enable gvrp Disable gvrp Show vlan DES-65004#show vlan Command show vlanVlan Name Default Show vlan vlanname Show gvrp Show gvrp portlistIngress Checking Acceptable Frame Type Link Aggregation Commands Create linkaggregationCreate linkaggregation groupid value 1-32 type lacp Port ports portlist state enabled disabled Config linkaggregationConfig linkaggregation groupid value 1-32 masterport Delete linkaggregation groupid 129 Macdestination macsourcedest ipsource Config linkaggregation algorithmConfig linkaggregation algorithm macsource Ipdestination ipsourcedest Show linkaggregation Show linkaggregation groupid value 1-32 algorithm Config lacpport Config lacpport portlist mode active passive Show lacpport Show lacpport portlist IP Commands Including Multiple IP Interfaces PER Create ipifCreate ipif ipifname 12 networkaddress vlanname Vlan vlanname 32 state enabled disabled bootp Config ipifConfig ipif ipifname 12 ipaddress networkaddress Dhcp Enable ipif Enable ipif ipifname 12 allDES-65004#enable ipif s2 Command enable ipif s2 Success Disable ipif Delete ipif Show ipif Show ipif ipifname Igmp Commands Including Igmp Config igmp Lastmemberqueryinterval value 1-25 state enabled Show igmpShow igmp ipif ipifname Show igmp group Show igmp group group group ipif ipifname 142 Config igmpsnooping vlanname 32 all hosttimeout Igmp Snooping CommandsConfig igmpsnooping Sec 1-16711450 routertimeout sec Lastmemberqueryinterval sec 1-25 state enabled Config igmpsnooping querierConfig igmpsnooping querier vlanname 32 all Queryinterval sec 1-65535 maxresponsetime sec Enable igmpsnooping Enable igmpsnooping forwardmcrouteronlyLastmemberqueryinterval sec 1-25 − The maximum amount Disable igmpsnooping forwardmcrouteronly Disable igmpsnoopingConfig routerports Config routerports vlanname 32 add delete portlist Config routerportsforbidden Config routerportsforbidden vlanname 32 add deletePortlist Show routerports vlan vlanname 32 static dynamic Show routerportsShow igmpsnooping Forbidden Show igmpsnooping group Show igmpsnooping forwarding Show igmpsnooping forwarding vlan vlanname 151 Access Authentication Control Commands 153 Enable authenpolicy Enable authenpolicyDisable authenpolicy Disable authenpolicy Show authenpolicy Create authenlogin methodlistnameCreate authenlogin methodlistname string Show authenpolicy Concerning the enable admin command Config authenloginConfig authenlogin default methodlistname string Method tacacs xtacacs tacacs+ radius servergroup Authenticated using the Radius protocol from a previously Authenticated using the Tacacs protocol from a remoteAuthenticated using the Xtacacs protocol from a remote Configured Radius server Delete authenlogin methodlistname string Delete authenlogin methodlistnameShow authenlogin Show authenlogin default methodlistname string 15 all Create authenenable methodlistname Create authenenable methodlistname string Config authenenable Config authenenable default methodlistname stringString 15 localenable none Radius server previously implemented on the Switch Authenticated using the TACACS+ protocol from a remoteAuthenticated using the Radius protocol from a remote Require the user to be authenticated using a user-defined Delete authenenable methodlistname string Delete authenenable methodlistnameShow authenenable Show authenenable default methodlistname string 15 all Config authen application Config authen application console telnet ssh http allLogin enable default methodlistname string Show authen application Show authen application Create authen serverhost Default DES-65004#None timeout int 1-255 retransmit Create authen serverhost ipaddr protocol tacacs xtacacs Config authen serverhost Config authen serverhost ipaddr protocol tacacs xtacacs Delete authen serverhost Delete authen serverhost ipaddr protocol tacacs xtacacsTacacs+ radius Show authen serverhost Show authen serverhost Config authen servergroup Create authen servergroup Server host is using the TACACS+ authentication protocol Server host is using the Tacacs authentication protocolServer host is using the Xtacacs authentication protocol Server host is using the Radius authentication protocol Delete authen servergroup string Delete authen servergroupShow authen servergroup Show authen servergroup string Darren 10.53.13.2 Config authen parameter responsetimeoutConfig authen parameter responsetimeout int Tacacs 10.53.13.94 Show authen parameter Config authen parameter attemptConfig authen parameter attempt int Parameter attempt int 1-255 Set the maximum number Enable admin Enable adminConfig admin localenable DES-65004#enable admin Password 175 SSH Commands Enable ssh Disable sshConfig ssh authmode Show ssh authmode Show ssh authmode Config ssh server Show ssh server Password Publickey None Config ssh userConfig ssh user username 15 authmode Hostbased Hostname string hostnameIP string ipaddr Config ssh algorithm Show ssh user authmode Show ssh algorithm Show ssh algorithm 183 SSL Commands Enable ssl Disable ssl Disable ssl ciphersuite RSAwithRC4128MD5DES-65004#disable ssl Command disable ssl Success Config ssl cachetimeout timeout value Config ssl cachetimeoutShow ssl cachetimeout Show ssl cachetimeout Show ssl Download certificate 189 802.1X Commands Enable Disable Create 802.1x user username Create 802.1x userShow 802.1x user Show 802.1x user Delete 802.1x user Show 802.1x authconfigurationShow 802.1x authconfiguration ports portlist all Delete 802.1x user username Forces the Authenticator of the port to become Authorized Show 802.1x authstate Show 802.1x authstate ports portlist all Quit Config 802.1x authmodeConfig 802.1x authmode portbased macbased Next Config 802.1x capability ports Config 802.1x capability ports portlist all authenticator Config 802.1x authparameter Enablereauth enable disable − Determines whether or not Config 802.1x authprotocolReauthperiod sec 1-65535 − Configures the time interval Config 802.1x authprotocol local radiuseap Config 802.1x init Config 802.1x init portbased ports portlist allMacbased ports portlist all macaddress macaddr Config 802.1x reauth ports Config 802.1x reauth portbased ports portlist all Config radius add Config radius delete Show radius Config radiusConfig radius serverindex 1-3 ipaddress serverip key Passwd 32 authport udpportnumber Show acctclient Show authdiagnostics Show authclientShow authclient Show authsessionstatistics Show authstatistics Show authstatistics ports portlist all 208 Access Control List ACL Commands Including CPU Create accessprofile profileid 1 ip sourceipmask 211 Command Parameters Create accessprofile profileid value 1-8 ethernet vlan Create accessprofile for EthernetAccessprofile command, below Sourcemac macmask destinationmac macmask Config accessprofile profileid for Ethernet Create accessprofile IP Delete accessid value 1-65535 − Use this command to delete a 0x0-0xffff dstportmask hex 0x0-xffff protocolid user Mask hex 0x0-0xffffffff Config accessprofile profileid IP Userdefine hex 0x0-0xfffffff − Enter a hexidecimal value 218 Their header Create accessprofile packet content mask Config accessprofile profileid packet content mask May be specified for the Packet Content access profile Written to the Dscp field of an incoming packet that meetsOver-write the value in the Dscp field of the packet Create accessprofile ipv6 profileid value 1-8 class Create accessprofile ipv6Config accessprofile command, below Flowlabel sourceipv6mask ipv6mask 0xfffff sourceipv6 ipv6addr destionationipv6 Config accessprofile profileid ipv6Value 1-65535 ipv6 class value 0-255 flowlabel hex Ipv6addr port port permit priority value Delete accessprofile Specified for the IPv6 access profileDelete accessprofile profileid value Show accessprofile Show accessprofile profileid value Create cpu accessprofile 228 Delete cpu accessprofile Delete cpu accessprofile profileid value Config cpu accessprofile 231 Userdefinemask hex 0x0-0xffffffff − Specifies that the rule Enable cpuinterfacefiltering Disable cpuinterfacefilteringShow cpuinterfacefiltering Show cpuaccessprofile Show cpuaccessprofile profileid value Safeguard Engine Commands Enable disable mode strict fuzzy Config safeguardengineConfig safeguardengine state enable disable utilization Rising value 20-100 falling value 20-100 traplog Show safeguardengine Show safeguardengine Config trafficsegmentation portlist all forwardlist null Traffic Segmentation CommandsConfig trafficsegmentation All portlist Show trafficsegmentation Show trafficsegmentation portlist Link Single IP Management Commands Command Parameters Enable sim Disable simShow sim Group commandermac macaddr Entering this parameter will Candidates candidateid 1-100 Entering this parameter will 244 Example usage To view SIM neighbors Reconfig Config simgroup Config sim Config sim commander groupname groupnameCandidate dpinterval 30-90 holdtime sec To change the hold time of the discovery protocol Download simms firmware configuration ipaddr Download simmsPathfilename members mslist 1-32 all Upload simms configuration Upload simms configuration ipaddr pathfilenameMemberid Config sntp primary ipaddr secondary ipaddr poll Time and Sntp CommandsConfig sntp Interval int Show sntp Enable sntpEnable sntp Show sntp Disable sntp Config time Config dst Config timezone operator + hour gmthourMin minute DST Show time Show time Delete arpentry ARP CommandsCreate arpentry Create arpentry ipaddr macaddr Config arpaging time value Config arpaging timeDES-65004#delete arpentry Command delete arpentry Success Show arpentry Show arpentry ipaddress Show arpentry ipaddress ipaddr DES-65004#clear arptable Command clear arptable Success Clear arptableClear arptable Vrrp Commands Enable vrrpEnable vrrp ping DES-65004#enable vrrp ping Command enable vrrp ping Success Disable vrrpDES-65004#enable vrrp Command enable vrrp Success Disable vrrp ping Create vrrp vrid Enable disable priority int 1-254 advertisementintervalCriticalipstate enable disable Vrid vrid 1-255 ipif ipifname 12 ipaddress ipaddr state Disable priority int 1-254 ipaddress ipaddr Config vrrp vridConfig vrrp vrid vrid 1-255 ipif ipifname 12 state enable Criticalip ipaddr criticalipstate enable disable Config vrrp ipif Disable Show vrrp Show vrrp ipif ipifname 12 vrid vrid Delete vrrp Vrid Create iproute Routing Table CommandsPrimary backup Create iproute networkaddress ipaddr metric Delete iproute networkaddress ipaddr primary backup Create iproute defaultCreate iproute default ipaddr metric Delete iproute Show iproute Delete iproute defaultDelete iproute default ipaddr Show iproute networkaddress static rip ospf Create route redistribute dst ospf src static rip local Route Redistribution CommandsCreate route redistribute dst ospf src Mettype 1 2 metric value Type1 type2 inter+e1 inter+e2 metric value Create route redistribute dst rip srcCreate route redistribute dst rip src all internal external Src all internal external type1 type2 inter+e1 inter+e2 − Config route redistribute dst ospf src Static Not applicable Internal external type1 type2 inter+e1 inter+e2 Config route redistribute dst rip srcConfig route redistribute dst rip src local static ospf all Metric value Delete route redistribute Delete route redistribute dst rip ospf src rip static localOspf Show route redistribute Show route redistribute dst rip ospf src rip static localType-2 Total Entries DES-65004# Dhcp Relay Commands Config dhcprelayConfig dhcprelay hops value 1-16 time sec Config dhcprelay add ipif ipifname 12 ipaddr Config dhcprelay add ipifConfig dhcprelay delete ipif Config dhcprelay delete ipif ipifname 12 ipaddr Config dhcprelay option82 state enable disable Config dhcprelay option82 stateConfig dhcprelay option82 check Config dhcprelay option82 check enable disable Show dhcprelay Config dhcprelay option82 policyConfig dhcprelay option82 policy replace drop keep Show dhcprelay ipif ipifname Enable dhcprelay Enable dhcprelayDES-65004#enable dhcprelay Command enable dhcprelay Success Disable dhcprelay Disable dhcprelay Config dnsr primary secondary nameserver ipaddr DNS Relay CommandsConfig dnsr Add delete static domainname 32 ipaddr Enable dnsr Enable dnsr cache staticDES-65004#enable dnsr Command enable dnsr Success Disable dnsr Disable dnsr cache staticDES-65004#disable dnsr Command disable dnsr Success Show dnsr RIP Commands Config rip Enable rip Enable ripDisable rip DES-65004#enable rip Command enable rip Success DES-65004#disable rip Command disable rip Success Show ripShow rip ipif ipifname Probe sec 1-65535 neighbortimeout sec Config dvmrpConfig dvmrp ipif ipifname 12 all metric value Neighbortimeout second 1-65535 − The time period for Enable dvmrp Enable dvmrpDisable dvmrp DES-65004#enable dvmrp Command enable dvmrp Success Show dvmrp routingtable Show dvmrp neighbor Show dvmrp nexthop ipaddress networkaddress ipif Show dvmrp nexthopSystem 10.2.1.123 250 Total Entries DES-65004# Ipifname 20.0.0.0/8 System Leaf Ip3 Show dvmrp10.0.0.0/8 Ip3 30.0.0.0/8 System Leaf Ip2 Config pim ipif ipifname 12 all hello sec PIM CommandsConfig pim Jpinterval sec 1-18724 state enabled disabled Enable pim Disable pim Show pim neighbor ipif ipifname 12 ipaddress Show pim neighborShow pim Show pim ipif ipifname 298 IP Multicasting Commands Show ipmc cacheShow ipmc cache group group ipaddress Show ipmc Show ipmc ipif ipifname 12 protocol inactive dvmrpPim Create md5 key keyid 1-255 password MD5 Configuration CommandsConfig md5 key Config md5 key keyid 1-255 password Show md5 DES-65004# delete md5 key Command delete md5 key SuccessDelete md5 key Delete md5 key keyid Ospf Configuration Commands Config ospf routerid ipaddr Config ospf routeridEnable ospf Enable ospf Disable ospf Show ospf 10.1.1.1 20.1.1.1 None Advertise Create ospf area Delete ospf area Stubsummary enabled disabled − Allows the Ospf area Config ospf areaConfig ospf area areaid type normal stub Show ospf area Create ospf hostroute ipaddr area areaid metric Create ospf hostrouteDelete ospf hostroute Delete ospf hostroute ipaddr Show ospf hostroute Config ospf hostrouteConfig ospf hostroute ipaddr area areaid metric Show ospf hostroute ipaddr Create ospf aggregation Delete ospf aggregation Advertise enabled disabled − Allows for the advertisement Config ospf aggregationConfig ospf aggregation areaid networkaddress Show ospf aggregation Ipaddr type rtrlink netlink summary assummary Show ospf lsdbShow ospf lsdb areaid areaid advertiserouter Asextlink Show ospf virtualneighbor DES-65004#show ospf lsdb Command show ospf lsdb AreaShow ospf neighbor Show ospf neighbor ipaddr Authentication none simple password 8 md5 Config ospf ipifConfig ospf ipif ipifname 12 area areaid priority Keyid 1-255 metric value 1-65535 state enabled Authentication none simple password 8 md5 keyid Config ospf allConfig ospf all area areaid priority value Metric value 1-65535 state enabled disabled Show ospf ipif Show ospf ipif ipifname Show ospf all Show ospf all Create ospf virtuallink Create ospf virtuallink areaid neighborid Config ospf virtuallink Config ospf virtuallink areaid neighborid Delete ospf virtuallink areaid neighborid Delete ospf virtuallinkShow ospf virtuallink Show ospf virtuallink areaid neighborid 322 Disable jumboframe Jumbo Frame CommandsEnable jumboframe Enable jumboframe DES-65004#show jumboframe Command show jumboframe Off Show jumboframeShow jumboframe Command History List Show commandhistory Config commandhistory Config commandhistory value Technical Specifications Filtering Address Table Transmission MethodRAM Buffer Packet Filtering Data Transfer Rates StandardProtocols Ethernet 331

D-Link TM DES-6500 manual 183

Models: TM DES-6500

183