Manuals / D-Link / Computer Equipment / Switch

D-Link TM DES-6500 manual 183

Models: TM DES-6500

1 334

Download 334 pages 1.5 Kb

Page 186

Image 186

xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual

Usage Example:

To display SSH algorithms currently set on the Switch:

DES-6500:4#show ssh algorithm

Command: show ssh algorithm

Encryption Algorithm

3DES :Enable

AES128 :Enable

AES192 :Enable

AES256 :Enable

ARC4 :Enable

Blowfish :Enable

Cast128 :Enable Twofish128 :Enable Twofish192 :Enable Twofish256 :Enable

Data Integrity Algorithm

MD5 :Enable

SHA1 :Enable

Public Key Algorithm

RSA :Enable

DSA :Enable

DES-6500:4#

183

Page 186

Image 186

Contents

CLI Manual Table of Contents Page Introduction Initial CLI screenSetting the Switch’s IP Address Assigning an IP Address Using the Console CLI Connecting to the SwitchInitial Console Screen Example Command Parameter Help Available Commands Prompt Square brackets Command SyntaxAngle brackets Vertical barReset config system Reset configBraces Basic Switch Commands Command ParametersConfig account username Config accountCreate admin user username Create accountShow account Show accountDelete account Delete account usernameShow config Show config currentconfig configinNVRAMShow session Show sessionShow switch Show devicestatus Show serialportShow serialport Show devicestatusConfig serialport autologout never 2minutes Config serialportEnable clipaging Enable clipagingDisable clipaging Enable telnetDisable telnet Enable webDES-65004#disable web Command disable web Success Disable webDisable web SaveReboot RebootReset DES-65004#reset config Command reset config SuccessLogin Config commandpromptLogout Config greetingmessage Config greetingmessage defaultShow greetingmessage Success DES-65004#Show greetingmessage Switch Port Commands Config portsShow ports Flowcontrol enabled disabled Enable or disable flow controlLearning enabled disabled − Enables or disables the MAC Show ports portlist descriptionExample usage To display port descriptions Port Security Commands Config portsecurity portsShow portsecurity Show portsecurity ports portlistDelete portsecurityentryvlanname Delete portsecurityentryvlanname vlanname 32 portPort macaddress macaddr Network Management Snmp Commands MD5 DES or SHA DESCreate snmp user Sha − Specifies that the HMAC-SHA-96 authentication Level will be usedDelete snmp user Show snmp userDelete snmp user SNMPname Create snmp view viewname 32 oid viewtype included Create snmp viewShow snmp user ExcludedDelete snmp view viewname 32 all oid Delete snmp viewShow snmp view Show snmp view viewnameCreate snmp community Create snmp community communitystring 32 view viewnameReadonly readwrite Delete snmp community communitystring Delete snmp communityShow snmp community Show snmp community communitystringShow snmp engineID Config snmp engineIDConfig snmp engineID snmpengineID Show snmp engineIDNoauthnopriv authnopriv authpriv readview Create snmp groupCreate snmp group groupname 32 v1 v2c ViewnameDelete snmp group Delete snmp group groupnameShow snmp groups Show snmp groupsCreate snmp host Create snmp host ipaddr v1 v2c v3 noauthnoprivAuthnopriv authpriv authstring Delete snmp host Delete snmp host ipaddr authstringShow snmp host ipaddr Show snmp hostCreate trustedhost Create trustedhost ipaddrDelete trustedhost Create trustedhost command aboveShow trustedhost Show trustedhostEnable snmp traps Enable snmp trapsEnable snmp authenticatetraps Enable snmp authenticatetrapsDisable snmp traps Disable snmp authenticatetrapsShow snmp traps Config snmp systemcontact swcontact Config snmp systemcontactConfig snmp systemlocation Config snmp systemlocation swlocationConfig snmp systemname swname Config snmp systemnameEnable rmon Enable rmonDisable rmon Disable rmonDES-65004#enable rmon Command enable rmon Success DES-65004#disable rmon Command disable rmon SuccessFirmwarefromTFTP ipaddr pathfilename 64 unit Switch Utility CommandsDownload Alllinecard cpu unitid 1-8 cfgfromTFTP ipaddrDone Download configuration Done DES-65004#Upload Upload cfgtoTFTP logtoTFTP ipaddr pathfilenamePing ipaddr times value 1-255 timeout sec PingTraceroute Enable autoconfig Enable autoconfigDownload configuration Disable autoconfig Disable autoconfigShow autoconfig Show autoconfigNetwork Monitoring Commands Show packet portsShow packet ports portlist Show error ports Show error ports portlistShow utilization Show utilization ports cpuShow stackinformation Show stackinformationCurrent state Clear countersTopology Box Count DES-65004#Show log DES-65004#clear log Command clear log SuccessClear log Clear logEnable syslog Disable syslogShow syslog Show syslogCreate syslog host Informational informational messagesCreate syslog host Config syslog host Config syslog host Local7 udpport udpportnumber state enabled Config syslog host allConfig syslog host all severity informational warning all Facility local0 local1 local2 local3 local4 local5 local6Informational informational messages Disabled State enabled disabled − Allows the sending of syslogMessages to the remote host, specified above, to be enabled Udpport udpportnumber − Specifies the UDP port numberDelete syslog host index 1-4 all Delete syslog hostShow syslog host Show syslog host indexConfig systemseverity Config systemseverity trap log all critical warningInformation Show systemseverity Show systemseverityMultiple Spanning Tree Protocol Mstp Commands Enable stp Enable stpDisable stp DES-65004#enable stp Command enable stp SuccessConfig stp version Config stpLbdrecovertimer 0 value 60-1000000 This field will set True false p2p true false auto state enable disable Config stp portsConfig stp ports portlist externalCost auto value Lbd enable disableCreate stp instanceid Create stp instanceid valueVidlist Config stp instanceidConfig stp instanceid value 1-15 addvlan removevlan InstanceidDelete stp instanceid Config stp priorityConfig stp priority value 0-61440 instanceid value Delete stp instanceid valueConfig stp mstconfigid Config stp mstportsConfig stp mstports Max Age Forward Delay Show stpShow stp Show stp ports portlist Show stp portsShow stp instanceid Show stp instanceid valueShow stp mstconfigid Show stp mstconfigidVid list 4094 DES-65004#Forwarding Database Commands Create fdbCreate fdb vlanname 32 macaddr port port Create multicastfdb Config multicastfdbConfig multicastfdb vlanname 32 macaddr add Create multicastfdb vlanname 32 macaddrDelete multicastfdb Delete multicastfdb vlanname 32 macaddrDelete fdb Config fdb agingtimeConfig fdb agingtime sec Delete fdb vlanname 32 macaddrDES-65004#clear fdb all Command clear fdb all Success Clear fdbClear fdb vlan vlanname 32 port port all Show multicastfdb Show fdbShow ipfdb SelfShow ipfdb ipaddr Page Broadcast Storm Control Commands Config traffic controlBroadcast enabled disabled − Enables or disables broadcast Multicast enabled disabled − Enables or disables multicastSeconds with the default setting of 5 seconds Config traffic controlrecoverDeciding when incoming packets exceed the Threshold value Config traffic controlrecover portlist allConfig traffic controltrap Show traffic controlDLF QOS Commands Config bandwidthcontrol Config bandwidthcontrol portlist all rxrate nolimitValue 1-9999 txrate nolimit value Above ports will be allowed to transmit Show bandwidthcontrolValue 1-9999 − Specifies the packet limit, in Mbps, that Show bandwidthcontrol portlistConfig scheduling Config scheduling classid 0-6 maxpacket valueWeighted round-robin WRR method of forwarding packets as Show scheduling Config 802.1p userpriorityConfig 802.1p userpriority priority 0-7 classid Show schedulingShow 802.1p userpriority Show 802.1p userpriorityConfig 802.1p defaultpriority portlist all priority Config 802.1p defaultpriorityShow 802.1 defaultpriority Show 802.1p defaultpriority portlistConfig schedulingmechanism Config scheduling mechanism strict weightfairShow schedulingmechanism Show schedulingmechanismEnable holprevention Enable holpreventionDisable holprevention Disable holpreventionShow holprevention Show holpreventionConfig mirror port port add source ports portlist rx tx Port Mirroring CommandsConfig mirror port add BothConfig mirror port delete Config mirror port port delete source port portlist rx txEnable mirror Disable mirrorShow mirror Show mirrorVlan Commands Create vlan119 Encap ethernet llc snap all Specifies that the Switch will Delete vlan Config vlan addDES-65004#delete vlan Command delete vlan Success Delete vlan vlannameConfig vlan delete Advertisement enabled disabled − Enables or disables GvrpConfig vlan vlanname 32 delete portlist Ingresschecking enabled disabled acceptableframe Config gvrpConfig gvrp portlist all state enabled disabled Taggedonly admitall pvid vlanidEnable gvrp Disable gvrpShow vlan DES-65004#show vlan Command show vlanVlan Name Default Show vlan vlannameShow gvrp Show gvrp portlistIngress Checking Acceptable Frame Type Link Aggregation Commands Create linkaggregationCreate linkaggregation groupid value 1-32 type lacp Port ports portlist state enabled disabled Config linkaggregationConfig linkaggregation groupid value 1-32 masterport Delete linkaggregation groupid129 Macdestination macsourcedest ipsource Config linkaggregation algorithmConfig linkaggregation algorithm macsource Ipdestination ipsourcedestShow linkaggregation Show linkaggregation groupid value 1-32 algorithmConfig lacpport Config lacpport portlist mode active passiveShow lacpport Show lacpport portlistIP Commands Including Multiple IP Interfaces PER Create ipifCreate ipif ipifname 12 networkaddress vlanname Vlan vlanname 32 state enabled disabled bootp Config ipifConfig ipif ipifname 12 ipaddress networkaddress DhcpEnable ipif Enable ipif ipifname 12 allDES-65004#enable ipif s2 Command enable ipif s2 Success Disable ipif Delete ipifShow ipif Show ipif ipifnameIgmp Commands Including Igmp Config igmpLastmemberqueryinterval value 1-25 state enabled Show igmpShow igmp ipif ipifname Show igmp group Show igmp group group group ipif ipifname142 Config igmpsnooping vlanname 32 all hosttimeout Igmp Snooping CommandsConfig igmpsnooping Sec 1-16711450 routertimeout secLastmemberqueryinterval sec 1-25 state enabled Config igmpsnooping querierConfig igmpsnooping querier vlanname 32 all Queryinterval sec 1-65535 maxresponsetime secEnable igmpsnooping Enable igmpsnooping forwardmcrouteronlyLastmemberqueryinterval sec 1-25 − The maximum amount Disable igmpsnooping forwardmcrouteronly Disable igmpsnoopingConfig routerports Config routerports vlanname 32 add delete portlistConfig routerportsforbidden Config routerportsforbidden vlanname 32 add deletePortlist Show routerports vlan vlanname 32 static dynamic Show routerportsShow igmpsnooping ForbiddenShow igmpsnooping group Show igmpsnooping forwarding Show igmpsnooping forwarding vlan vlanname151 Access Authentication Control Commands 153 Enable authenpolicy Enable authenpolicyDisable authenpolicy Disable authenpolicyShow authenpolicy Create authenlogin methodlistnameCreate authenlogin methodlistname string Show authenpolicyConcerning the enable admin command Config authenloginConfig authenlogin default methodlistname string Method tacacs xtacacs tacacs+ radius servergroupAuthenticated using the Radius protocol from a previously Authenticated using the Tacacs protocol from a remoteAuthenticated using the Xtacacs protocol from a remote Configured Radius serverDelete authenlogin methodlistname string Delete authenlogin methodlistnameShow authenlogin Show authenlogin default methodlistname string 15 allCreate authenenable methodlistname Create authenenable methodlistname stringConfig authenenable Config authenenable default methodlistname stringString 15 localenable none Radius server previously implemented on the Switch Authenticated using the TACACS+ protocol from a remoteAuthenticated using the Radius protocol from a remote Require the user to be authenticated using a user-definedDelete authenenable methodlistname string Delete authenenable methodlistnameShow authenenable Show authenenable default methodlistname string 15 allConfig authen application Config authen application console telnet ssh http allLogin enable default methodlistname string Show authen application Show authen applicationCreate authen serverhost Default DES-65004#None timeout int 1-255 retransmit Create authen serverhost ipaddr protocol tacacs xtacacsConfig authen serverhost Config authen serverhost ipaddr protocol tacacs xtacacsDelete authen serverhost Delete authen serverhost ipaddr protocol tacacs xtacacsTacacs+ radius Show authen serverhost Show authen serverhostConfig authen servergroup Create authen servergroupServer host is using the TACACS+ authentication protocol Server host is using the Tacacs authentication protocolServer host is using the Xtacacs authentication protocol Server host is using the Radius authentication protocolDelete authen servergroup string Delete authen servergroupShow authen servergroup Show authen servergroup stringDarren 10.53.13.2 Config authen parameter responsetimeoutConfig authen parameter responsetimeout int Tacacs 10.53.13.94Show authen parameter Config authen parameter attemptConfig authen parameter attempt int Parameter attempt int 1-255 Set the maximum numberEnable admin Enable adminConfig admin localenable DES-65004#enable admin Password175 SSH Commands Enable ssh Disable sshConfig ssh authmode Show ssh authmode Show ssh authmodeConfig ssh server Show ssh serverPassword Publickey None Config ssh userConfig ssh user username 15 authmode Hostbased Hostname string hostnameIP string ipaddrConfig ssh algorithm Show ssh user authmodeShow ssh algorithm Show ssh algorithm183 SSL Commands Enable ssl Disable ssl Disable ssl ciphersuite RSAwithRC4128MD5DES-65004#disable ssl Command disable ssl Success Config ssl cachetimeout timeout value Config ssl cachetimeoutShow ssl cachetimeout Show ssl cachetimeoutShow ssl Download certificate189 802.1X Commands Enable DisableCreate 802.1x user username Create 802.1x userShow 802.1x user Show 802.1x userDelete 802.1x user Show 802.1x authconfigurationShow 802.1x authconfiguration ports portlist all Delete 802.1x user usernameForces the Authenticator of the port to become Authorized Show 802.1x authstate Show 802.1x authstate ports portlist allQuit Config 802.1x authmodeConfig 802.1x authmode portbased macbased NextConfig 802.1x capability ports Config 802.1x capability ports portlist all authenticatorConfig 802.1x authparameter Enablereauth enable disable − Determines whether or not Config 802.1x authprotocolReauthperiod sec 1-65535 − Configures the time interval Config 802.1x authprotocol local radiuseapConfig 802.1x init Config 802.1x init portbased ports portlist allMacbased ports portlist all macaddress macaddr Config 802.1x reauth ports Config 802.1x reauth portbased ports portlist allConfig radius add Config radius deleteShow radius Config radiusConfig radius serverindex 1-3 ipaddress serverip key Passwd 32 authport udpportnumberShow acctclient Show authdiagnostics Show authclientShow authclient Show authsessionstatistics Show authstatistics Show authstatistics ports portlist all208 Access Control List ACL Commands Including CPU Create accessprofile profileid 1 ip sourceipmask 211 Command Parameters Create accessprofile profileid value 1-8 ethernet vlan Create accessprofile for EthernetAccessprofile command, below Sourcemac macmask destinationmac macmaskConfig accessprofile profileid for Ethernet Create accessprofile IP Delete accessid value 1-65535 − Use this command to delete a0x0-0xffff dstportmask hex 0x0-xffff protocolid user Mask hex 0x0-0xffffffffConfig accessprofile profileid IP Userdefine hex 0x0-0xfffffff − Enter a hexidecimal value218 Their header Create accessprofile packet content mask Config accessprofile profileid packet content mask May be specified for the Packet Content access profile Written to the Dscp field of an incoming packet that meetsOver-write the value in the Dscp field of the packet Create accessprofile ipv6 profileid value 1-8 class Create accessprofile ipv6Config accessprofile command, below Flowlabel sourceipv6mask ipv6mask0xfffff sourceipv6 ipv6addr destionationipv6 Config accessprofile profileid ipv6Value 1-65535 ipv6 class value 0-255 flowlabel hex Ipv6addr port port permit priority valueDelete accessprofile Specified for the IPv6 access profileDelete accessprofile profileid value Show accessprofile Show accessprofile profileid valueCreate cpu accessprofile 228 Delete cpu accessprofile Delete cpu accessprofile profileid valueConfig cpu accessprofile 231 Userdefinemask hex 0x0-0xffffffff − Specifies that the rule Enable cpuinterfacefiltering Disable cpuinterfacefilteringShow cpuinterfacefiltering Show cpuaccessprofile Show cpuaccessprofile profileid valueSafeguard Engine Commands Enable disable mode strict fuzzy Config safeguardengineConfig safeguardengine state enable disable utilization Rising value 20-100 falling value 20-100 traplogShow safeguardengine Show safeguardengineConfig trafficsegmentation portlist all forwardlist null Traffic Segmentation CommandsConfig trafficsegmentation All portlistShow trafficsegmentation Show trafficsegmentation portlistLink Single IP Management Commands Command Parameters Enable sim Disable simShow sim Group commandermac macaddr Entering this parameter will Candidates candidateid 1-100 Entering this parameter will244 Example usage To view SIM neighbors Reconfig Config simgroupConfig sim Config sim commander groupname groupnameCandidate dpinterval 30-90 holdtime sec To change the hold time of the discovery protocol Download simms firmware configuration ipaddr Download simmsPathfilename members mslist 1-32 all Upload simms configuration Upload simms configuration ipaddr pathfilenameMemberid Config sntp primary ipaddr secondary ipaddr poll Time and Sntp CommandsConfig sntp Interval intShow sntp Enable sntpEnable sntp Show sntpDisable sntp Config timeConfig dst Config timezone operator + hour gmthourMin minute DST Show time Show timeDelete arpentry ARP CommandsCreate arpentry Create arpentry ipaddr macaddrConfig arpaging time value Config arpaging timeDES-65004#delete arpentry Command delete arpentry Success Show arpentryShow arpentry ipaddress Show arpentry ipaddress ipaddrDES-65004#clear arptable Command clear arptable Success Clear arptableClear arptable Vrrp Commands Enable vrrpEnable vrrp ping DES-65004#enable vrrp ping Command enable vrrp ping Success Disable vrrpDES-65004#enable vrrp Command enable vrrp Success Disable vrrp pingCreate vrrp vrid Enable disable priority int 1-254 advertisementintervalCriticalipstate enable disable Vrid vrid 1-255 ipif ipifname 12 ipaddress ipaddr stateDisable priority int 1-254 ipaddress ipaddr Config vrrp vridConfig vrrp vrid vrid 1-255 ipif ipifname 12 state enable Criticalip ipaddr criticalipstate enable disableConfig vrrp ipif DisableShow vrrp Show vrrp ipif ipifname 12 vrid vridDelete vrrp VridCreate iproute Routing Table CommandsPrimary backup Create iproute networkaddress ipaddr metricDelete iproute networkaddress ipaddr primary backup Create iproute defaultCreate iproute default ipaddr metric Delete iprouteShow iproute Delete iproute defaultDelete iproute default ipaddr Show iproute networkaddress static rip ospfCreate route redistribute dst ospf src static rip local Route Redistribution CommandsCreate route redistribute dst ospf src Mettype 1 2 metric valueType1 type2 inter+e1 inter+e2 metric value Create route redistribute dst rip srcCreate route redistribute dst rip src all internal external Src all internal external type1 type2 inter+e1 inter+e2 −Config route redistribute dst ospf src Static Not applicableInternal external type1 type2 inter+e1 inter+e2 Config route redistribute dst rip srcConfig route redistribute dst rip src local static ospf all Metric valueDelete route redistribute Delete route redistribute dst rip ospf src rip static localOspf Show route redistribute Show route redistribute dst rip ospf src rip static localType-2 Total Entries DES-65004# Dhcp Relay Commands Config dhcprelayConfig dhcprelay hops value 1-16 time sec Config dhcprelay add ipif ipifname 12 ipaddr Config dhcprelay add ipifConfig dhcprelay delete ipif Config dhcprelay delete ipif ipifname 12 ipaddrConfig dhcprelay option82 state enable disable Config dhcprelay option82 stateConfig dhcprelay option82 check Config dhcprelay option82 check enable disableShow dhcprelay Config dhcprelay option82 policyConfig dhcprelay option82 policy replace drop keep Show dhcprelay ipif ipifnameEnable dhcprelay Enable dhcprelayDES-65004#enable dhcprelay Command enable dhcprelay Success Disable dhcprelay Disable dhcprelayConfig dnsr primary secondary nameserver ipaddr DNS Relay CommandsConfig dnsr Add delete static domainname 32 ipaddrEnable dnsr Enable dnsr cache staticDES-65004#enable dnsr Command enable dnsr Success Disable dnsr Disable dnsr cache staticDES-65004#disable dnsr Command disable dnsr Success Show dnsr RIP Commands Config ripEnable rip Enable ripDisable rip DES-65004#enable rip Command enable rip SuccessDES-65004#disable rip Command disable rip Success Show ripShow rip ipif ipifname Probe sec 1-65535 neighbortimeout sec Config dvmrpConfig dvmrp ipif ipifname 12 all metric value Neighbortimeout second 1-65535 − The time period forEnable dvmrp Enable dvmrpDisable dvmrp DES-65004#enable dvmrp Command enable dvmrp SuccessShow dvmrp routingtable Show dvmrp neighborShow dvmrp nexthop ipaddress networkaddress ipif Show dvmrp nexthopSystem 10.2.1.123 250 Total Entries DES-65004# Ipifname20.0.0.0/8 System Leaf Ip3 Show dvmrp10.0.0.0/8 Ip3 30.0.0.0/8 System Leaf Ip2Config pim ipif ipifname 12 all hello sec PIM CommandsConfig pim Jpinterval sec 1-18724 state enabled disabledEnable pim Disable pimShow pim neighbor ipif ipifname 12 ipaddress Show pim neighborShow pim Show pim ipif ipifname298 IP Multicasting Commands Show ipmc cacheShow ipmc cache group group ipaddress Show ipmc Show ipmc ipif ipifname 12 protocol inactive dvmrpPim Create md5 key keyid 1-255 password MD5 Configuration CommandsConfig md5 key Config md5 key keyid 1-255 passwordShow md5 DES-65004# delete md5 key Command delete md5 key SuccessDelete md5 key Delete md5 key keyidOspf Configuration Commands Config ospf routerid ipaddr Config ospf routeridEnable ospf Enable ospfDisable ospf Show ospf10.1.1.1 20.1.1.1 None AdvertiseCreate ospf area Delete ospf areaStubsummary enabled disabled − Allows the Ospf area Config ospf areaConfig ospf area areaid type normal stub Show ospf areaCreate ospf hostroute ipaddr area areaid metric Create ospf hostrouteDelete ospf hostroute Delete ospf hostroute ipaddrShow ospf hostroute Config ospf hostrouteConfig ospf hostroute ipaddr area areaid metric Show ospf hostroute ipaddrCreate ospf aggregation Delete ospf aggregationAdvertise enabled disabled − Allows for the advertisement Config ospf aggregationConfig ospf aggregation areaid networkaddress Show ospf aggregationIpaddr type rtrlink netlink summary assummary Show ospf lsdbShow ospf lsdb areaid areaid advertiserouter AsextlinkShow ospf virtualneighbor DES-65004#show ospf lsdb Command show ospf lsdb AreaShow ospf neighbor Show ospf neighbor ipaddrAuthentication none simple password 8 md5 Config ospf ipifConfig ospf ipif ipifname 12 area areaid priority Keyid 1-255 metric value 1-65535 state enabledAuthentication none simple password 8 md5 keyid Config ospf allConfig ospf all area areaid priority value Metric value 1-65535 state enabled disabledShow ospf ipif Show ospf ipif ipifnameShow ospf all Show ospf allCreate ospf virtuallink Create ospf virtuallink areaid neighboridConfig ospf virtuallink Config ospf virtuallink areaid neighboridDelete ospf virtuallink areaid neighborid Delete ospf virtuallinkShow ospf virtuallink Show ospf virtuallink areaid neighborid322 Disable jumboframe Jumbo Frame CommandsEnable jumboframe Enable jumboframeDES-65004#show jumboframe Command show jumboframe Off Show jumboframeShow jumboframe Command History List Show commandhistory Config commandhistory Config commandhistory valueTechnical Specifications Filtering Address Table Transmission MethodRAM Buffer Packet FilteringData Transfer Rates StandardProtocols Ethernet331