189

xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual

download certificate

Parameters	<ipaddr> - Enter the IP address of the TFTP server.
	certfilename <path_filename 64> - Enter the path and the filename
	of the certificate file to download.
	keyfilename <path_filename 64> - Enter the path and the filename of
	the key exchange file to download.
Restrictions	Only administrator-level users can issue this command.

Example usage:

To download a certificate file and key file to the Switch:

DES-6500:4# download certificate_fromTFTP 10.53.13.94 certfilename c:/cert.der keyfilename c:/pkey.der

Command: download certificate_fromTFTP 10.53.13.94 certfilename c:/cert.der keyfilename c:/pkey.der

Success!

DES-6500:4#

Page 192

Image 192

Contents

CLI Manual Table of Contents Page Introduction Initial CLI screen Setting the Switch’s IP Address Assigning an IP Address Using the Console CLI Connecting to the Switch Initial Console Screen Example Command Parameter Help Available Commands Prompt Command Syntax Angle bracketsSquare brackets Vertical bar Reset config system Reset configBraces Basic Switch Commands Command Parameters Config account Create admin user usernameConfig account username Create account Show account Delete accountShow account Delete account username Show config Show config currentconfig configinNVRAM Show session Show session Show switch Show serialport Show serialportShow devicestatus Show devicestatus Config serialport Enable clipagingConfig serialport autologout never 2minutes Enable clipaging Disable clipaging Enable telnet Disable telnet Enable web Disable web Disable webDES-65004#disable web Command disable web Success Save Reboot ResetReboot DES-65004#reset config Command reset config Success Login Config commandpromptLogout Config greetingmessage Config greetingmessage default Show greetingmessage Success DES-65004#Show greetingmessage Switch Port Commands Config ports Flowcontrol enabled disabled Enable or disable flow control Learning enabled disabled − Enables or disables the MACShow ports Show ports portlist description Example usage To display port descriptions Port Security Commands Config portsecurity ports Show portsecurity Show portsecurity ports portlist Delete portsecurityentryvlanname Delete portsecurityentryvlanname vlanname 32 portPort macaddress macaddr Network Management Snmp Commands MD5 DES or SHA DES Create snmp user Sha − Specifies that the HMAC-SHA-96 authentication Level will be used Delete snmp user Show snmp userDelete snmp user SNMPname Create snmp view Show snmp userCreate snmp view viewname 32 oid viewtype included Excluded Delete snmp view Show snmp viewDelete snmp view viewname 32 all oid Show snmp view viewname Create snmp community Create snmp community communitystring 32 view viewnameReadonly readwrite Delete snmp community Show snmp communityDelete snmp community communitystring Show snmp community communitystring Config snmp engineID Config snmp engineID snmpengineIDShow snmp engineID Show snmp engineID Create snmp group Create snmp group groupname 32 v1 v2cNoauthnopriv authnopriv authpriv readview Viewname Delete snmp group Delete snmp group groupname Show snmp groups Show snmp groups Create snmp host Create snmp host ipaddr v1 v2c v3 noauthnoprivAuthnopriv authpriv authstring Delete snmp host Delete snmp host ipaddr authstring Show snmp host Create trustedhostShow snmp host ipaddr Create trustedhost ipaddr Create trustedhost command above Show trustedhostDelete trustedhost Show trustedhost Enable snmp traps Enable snmp authenticatetrapsEnable snmp traps Enable snmp authenticatetraps Disable snmp traps Disable snmp authenticatetrapsShow snmp traps Config snmp systemcontact Config snmp systemlocationConfig snmp systemcontact swcontact Config snmp systemlocation swlocation Config snmp systemname Enable rmonConfig snmp systemname swname Enable rmon Disable rmon DES-65004#enable rmon Command enable rmon SuccessDisable rmon DES-65004#disable rmon Command disable rmon Success Switch Utility Commands DownloadFirmwarefromTFTP ipaddr pathfilename 64 unit Alllinecard cpu unitid 1-8 cfgfromTFTP ipaddr Download configuration Done DES-65004# UploadDone Upload cfgtoTFTP logtoTFTP ipaddr pathfilename Ping ipaddr times value 1-255 timeout sec PingTraceroute Enable autoconfig Enable autoconfig Download configuration Disable autoconfig Show autoconfigDisable autoconfig Show autoconfig Network Monitoring Commands Show packet portsShow packet ports portlist Show error ports Show error ports portlist Show utilization Show utilization ports cpu Show stackinformation Show stackinformation Clear counters TopologyCurrent state Box Count DES-65004# DES-65004#clear log Command clear log Success Clear logShow log Clear log Enable syslog Disable syslog Show syslog Create syslog hostShow syslog Informational informational messages Create syslog host Config syslog host Config syslog host Config syslog host all Config syslog host all severity informational warning allLocal7 udpport udpportnumber state enabled Facility local0 local1 local2 local3 local4 local5 local6 Informational informational messages State enabled disabled − Allows the sending of syslog Messages to the remote host, specified above, to be enabledDisabled Udpport udpportnumber − Specifies the UDP port number Delete syslog host Show syslog hostDelete syslog host index 1-4 all Show syslog host index Config systemseverity Config systemseverity trap log all critical warningInformation Show systemseverity Show systemseverity Multiple Spanning Tree Protocol Mstp Commands Enable stp Disable stpEnable stp DES-65004#enable stp Command enable stp Success Config stp version Config stp Lbdrecovertimer 0 value 60-1000000 This field will set Config stp ports Config stp ports portlist externalCost auto valueTrue false p2p true false auto state enable disable Lbd enable disable Create stp instanceid Create stp instanceid value Config stp instanceid Config stp instanceid value 1-15 addvlan removevlanVidlist Instanceid Config stp priority Config stp priority value 0-61440 instanceid valueDelete stp instanceid Delete stp instanceid value Config stp mstconfigid Config stp mstports Config stp mstports Max Age Forward Delay Show stpShow stp Show stp ports Show stp instanceidShow stp ports portlist Show stp instanceid value Show stp mstconfigid Show stp mstconfigid Vid list 4094 DES-65004# Forwarding Database Commands Create fdbCreate fdb vlanname 32 macaddr port port Config multicastfdb Config multicastfdb vlanname 32 macaddr addCreate multicastfdb Create multicastfdb vlanname 32 macaddr Delete multicastfdb Delete multicastfdb vlanname 32 macaddr Config fdb agingtime Config fdb agingtime secDelete fdb Delete fdb vlanname 32 macaddr DES-65004#clear fdb all Command clear fdb all Success Clear fdbClear fdb vlan vlanname 32 port port all Show multicastfdb Show fdb Show ipfdb SelfShow ipfdb ipaddr Page Broadcast Storm Control Commands Config traffic control Broadcast enabled disabled − Enables or disables broadcast Multicast enabled disabled − Enables or disables multicast Config traffic controlrecover Deciding when incoming packets exceed the Threshold valueSeconds with the default setting of 5 seconds Config traffic controlrecover portlist all Config traffic controltrap Show traffic control DLF QOS Commands Config bandwidthcontrol Config bandwidthcontrol portlist all rxrate nolimitValue 1-9999 txrate nolimit value Show bandwidthcontrol Value 1-9999 − Specifies the packet limit, in Mbps, thatAbove ports will be allowed to transmit Show bandwidthcontrol portlist Config scheduling Config scheduling classid 0-6 maxpacket value Weighted round-robin WRR method of forwarding packets as Config 802.1p userpriority Config 802.1p userpriority priority 0-7 classidShow scheduling Show scheduling Show 802.1p userpriority Show 802.1p userpriority Config 802.1p defaultpriority Show 802.1 defaultpriorityConfig 802.1p defaultpriority portlist all priority Show 802.1p defaultpriority portlist Config schedulingmechanism Config scheduling mechanism strict weightfair Show schedulingmechanism Show schedulingmechanism Enable holprevention Disable holpreventionEnable holprevention Disable holprevention Show holprevention Show holprevention Port Mirroring Commands Config mirror port addConfig mirror port port add source ports portlist rx tx Both Config mirror port delete Config mirror port port delete source port portlist rx tx Enable mirror Disable mirror Show mirror Show mirror Vlan Commands Create vlan 119 Encap ethernet llc snap all Specifies that the Switch will Config vlan add DES-65004#delete vlan Command delete vlan SuccessDelete vlan Delete vlan vlanname Config vlan delete Advertisement enabled disabled − Enables or disables GvrpConfig vlan vlanname 32 delete portlist Config gvrp Config gvrp portlist all state enabled disabledIngresschecking enabled disabled acceptableframe Taggedonly admitall pvid vlanid Enable gvrp Disable gvrp DES-65004#show vlan Command show vlan Vlan Name DefaultShow vlan Show vlan vlanname Show gvrp Show gvrp portlistIngress Checking Acceptable Frame Type Link Aggregation Commands Create linkaggregationCreate linkaggregation groupid value 1-32 type lacp Config linkaggregation Config linkaggregation groupid value 1-32 masterportPort ports portlist state enabled disabled Delete linkaggregation groupid 129 Config linkaggregation algorithm Config linkaggregation algorithm macsourceMacdestination macsourcedest ipsource Ipdestination ipsourcedest Show linkaggregation Show linkaggregation groupid value 1-32 algorithm Config lacpport Config lacpport portlist mode active passive Show lacpport Show lacpport portlist IP Commands Including Multiple IP Interfaces PER Create ipifCreate ipif ipifname 12 networkaddress vlanname Config ipif Config ipif ipifname 12 ipaddress networkaddressVlan vlanname 32 state enabled disabled bootp Dhcp Enable ipif Enable ipif ipifname 12 allDES-65004#enable ipif s2 Command enable ipif s2 Success Disable ipif Delete ipif Show ipif Show ipif ipifname Igmp Commands Including Igmp Config igmp Lastmemberqueryinterval value 1-25 state enabled Show igmpShow igmp ipif ipifname Show igmp group Show igmp group group group ipif ipifname 142 Igmp Snooping Commands Config igmpsnoopingConfig igmpsnooping vlanname 32 all hosttimeout Sec 1-16711450 routertimeout sec Config igmpsnooping querier Config igmpsnooping querier vlanname 32 allLastmemberqueryinterval sec 1-25 state enabled Queryinterval sec 1-65535 maxresponsetime sec Enable igmpsnooping Enable igmpsnooping forwardmcrouteronlyLastmemberqueryinterval sec 1-25 − The maximum amount Disable igmpsnooping Config routerportsDisable igmpsnooping forwardmcrouteronly Config routerports vlanname 32 add delete portlist Config routerportsforbidden Config routerportsforbidden vlanname 32 add deletePortlist Show routerports Show igmpsnoopingShow routerports vlan vlanname 32 static dynamic Forbidden Show igmpsnooping group Show igmpsnooping forwarding Show igmpsnooping forwarding vlan vlanname 151 Access Authentication Control Commands 153 Enable authenpolicy Disable authenpolicyEnable authenpolicy Disable authenpolicy Create authenlogin methodlistname Create authenlogin methodlistname stringShow authenpolicy Show authenpolicy Config authenlogin Config authenlogin default methodlistname stringConcerning the enable admin command Method tacacs xtacacs tacacs+ radius servergroup Authenticated using the Tacacs protocol from a remote Authenticated using the Xtacacs protocol from a remoteAuthenticated using the Radius protocol from a previously Configured Radius server Delete authenlogin methodlistname Show authenloginDelete authenlogin methodlistname string Show authenlogin default methodlistname string 15 all Create authenenable methodlistname Create authenenable methodlistname string Config authenenable Config authenenable default methodlistname stringString 15 localenable none Authenticated using the TACACS+ protocol from a remote Authenticated using the Radius protocol from a remoteRadius server previously implemented on the Switch Require the user to be authenticated using a user-defined Delete authenenable methodlistname Show authenenableDelete authenenable methodlistname string Show authenenable default methodlistname string 15 all Config authen application Config authen application console telnet ssh http allLogin enable default methodlistname string Show authen application Show authen application Default DES-65004# None timeout int 1-255 retransmitCreate authen serverhost Create authen serverhost ipaddr protocol tacacs xtacacs Config authen serverhost Config authen serverhost ipaddr protocol tacacs xtacacs Delete authen serverhost Delete authen serverhost ipaddr protocol tacacs xtacacsTacacs+ radius Show authen serverhost Show authen serverhost Config authen servergroup Create authen servergroup Server host is using the Tacacs authentication protocol Server host is using the Xtacacs authentication protocolServer host is using the TACACS+ authentication protocol Server host is using the Radius authentication protocol Delete authen servergroup Show authen servergroupDelete authen servergroup string Show authen servergroup string Config authen parameter responsetimeout Config authen parameter responsetimeout intDarren 10.53.13.2 Tacacs 10.53.13.94 Config authen parameter attempt Config authen parameter attempt intShow authen parameter Parameter attempt int 1-255 Set the maximum number Enable admin Config admin localenableEnable admin DES-65004#enable admin Password 175 SSH Commands Enable ssh Disable sshConfig ssh authmode Show ssh authmode Show ssh authmode Config ssh server Show ssh server Config ssh user Config ssh user username 15 authmode HostbasedPassword Publickey None Hostname string hostnameIP string ipaddr Config ssh algorithm Show ssh user authmode Show ssh algorithm Show ssh algorithm 183 SSL Commands Enable ssl Disable ssl Disable ssl ciphersuite RSAwithRC4128MD5DES-65004#disable ssl Command disable ssl Success Config ssl cachetimeout Show ssl cachetimeoutConfig ssl cachetimeout timeout value Show ssl cachetimeout Show ssl Download certificate 189 802.1X Commands Enable Disable Create 802.1x user Show 802.1x userCreate 802.1x user username Show 802.1x user Show 802.1x authconfiguration Show 802.1x authconfiguration ports portlist allDelete 802.1x user Delete 802.1x user username Forces the Authenticator of the port to become Authorized Show 802.1x authstate Show 802.1x authstate ports portlist all Config 802.1x authmode Config 802.1x authmode portbased macbasedQuit Next Config 802.1x capability ports Config 802.1x capability ports portlist all authenticator Config 802.1x authparameter Config 802.1x authprotocol Reauthperiod sec 1-65535 − Configures the time intervalEnablereauth enable disable − Determines whether or not Config 802.1x authprotocol local radiuseap Config 802.1x init Config 802.1x init portbased ports portlist allMacbased ports portlist all macaddress macaddr Config 802.1x reauth ports Config 802.1x reauth portbased ports portlist all Config radius add Config radius delete Config radius Config radius serverindex 1-3 ipaddress serverip keyShow radius Passwd 32 authport udpportnumber Show acctclient Show authdiagnostics Show authclientShow authclient Show authsessionstatistics Show authstatistics Show authstatistics ports portlist all 208 Access Control List ACL Commands Including CPU Create accessprofile profileid 1 ip sourceipmask 211 Command Parameters Create accessprofile for Ethernet Accessprofile command, belowCreate accessprofile profileid value 1-8 ethernet vlan Sourcemac macmask destinationmac macmask Config accessprofile profileid for Ethernet Create accessprofile IP Delete accessid value 1-65535 − Use this command to delete a 0x0-0xffff dstportmask hex 0x0-xffff protocolid user Mask hex 0x0-0xffffffff Config accessprofile profileid IP Userdefine hex 0x0-0xfffffff − Enter a hexidecimal value 218 Their header Create accessprofile packet content mask Config accessprofile profileid packet content mask May be specified for the Packet Content access profile Written to the Dscp field of an incoming packet that meetsOver-write the value in the Dscp field of the packet Create accessprofile ipv6 Config accessprofile command, belowCreate accessprofile ipv6 profileid value 1-8 class Flowlabel sourceipv6mask ipv6mask Config accessprofile profileid ipv6 Value 1-65535 ipv6 class value 0-255 flowlabel hex0xfffff sourceipv6 ipv6addr destionationipv6 Ipv6addr port port permit priority value Delete accessprofile Specified for the IPv6 access profileDelete accessprofile profileid value Show accessprofile Show accessprofile profileid value Create cpu accessprofile 228 Delete cpu accessprofile Delete cpu accessprofile profileid value Config cpu accessprofile 231 Userdefinemask hex 0x0-0xffffffff − Specifies that the rule Enable cpuinterfacefiltering Disable cpuinterfacefilteringShow cpuinterfacefiltering Show cpuaccessprofile Show cpuaccessprofile profileid value Safeguard Engine Commands Config safeguardengine Config safeguardengine state enable disable utilizationEnable disable mode strict fuzzy Rising value 20-100 falling value 20-100 traplog Show safeguardengine Show safeguardengine Traffic Segmentation Commands Config trafficsegmentationConfig trafficsegmentation portlist all forwardlist null All portlist Show trafficsegmentation Show trafficsegmentation portlist Link Single IP Management Commands Command Parameters Enable sim Disable simShow sim Group commandermac macaddr Entering this parameter will Candidates candidateid 1-100 Entering this parameter will 244 Example usage To view SIM neighbors Reconfig Config simgroup Config sim Config sim commander groupname groupnameCandidate dpinterval 30-90 holdtime sec To change the hold time of the discovery protocol Download simms firmware configuration ipaddr Download simmsPathfilename members mslist 1-32 all Upload simms configuration Upload simms configuration ipaddr pathfilenameMemberid Time and Sntp Commands Config sntpConfig sntp primary ipaddr secondary ipaddr poll Interval int Enable sntp Enable sntpShow sntp Show sntp Disable sntp Config time Config dst Config timezone operator + hour gmthourMin minute DST Show time Show time ARP Commands Create arpentryDelete arpentry Create arpentry ipaddr macaddr Config arpaging time DES-65004#delete arpentry Command delete arpentry SuccessConfig arpaging time value Show arpentry Show arpentry ipaddress Show arpentry ipaddress ipaddr DES-65004#clear arptable Command clear arptable Success Clear arptableClear arptable Vrrp Commands Enable vrrpEnable vrrp ping Disable vrrp DES-65004#enable vrrp Command enable vrrp SuccessDES-65004#enable vrrp ping Command enable vrrp ping Success Disable vrrp ping Enable disable priority int 1-254 advertisementinterval Criticalipstate enable disableCreate vrrp vrid Vrid vrid 1-255 ipif ipifname 12 ipaddress ipaddr state Config vrrp vrid Config vrrp vrid vrid 1-255 ipif ipifname 12 state enableDisable priority int 1-254 ipaddress ipaddr Criticalip ipaddr criticalipstate enable disable Config vrrp ipif Disable Show vrrp Show vrrp ipif ipifname 12 vrid vrid Delete vrrp Vrid Routing Table Commands Primary backupCreate iproute Create iproute networkaddress ipaddr metric Create iproute default Create iproute default ipaddr metricDelete iproute networkaddress ipaddr primary backup Delete iproute Delete iproute default Delete iproute default ipaddrShow iproute Show iproute networkaddress static rip ospf Route Redistribution Commands Create route redistribute dst ospf srcCreate route redistribute dst ospf src static rip local Mettype 1 2 metric value Create route redistribute dst rip src Create route redistribute dst rip src all internal externalType1 type2 inter+e1 inter+e2 metric value Src all internal external type1 type2 inter+e1 inter+e2 − Config route redistribute dst ospf src Static Not applicable Config route redistribute dst rip src Config route redistribute dst rip src local static ospf allInternal external type1 type2 inter+e1 inter+e2 Metric value Delete route redistribute Delete route redistribute dst rip ospf src rip static localOspf Show route redistribute Show route redistribute dst rip ospf src rip static localType-2 Total Entries DES-65004# Dhcp Relay Commands Config dhcprelayConfig dhcprelay hops value 1-16 time sec Config dhcprelay add ipif Config dhcprelay delete ipifConfig dhcprelay add ipif ipifname 12 ipaddr Config dhcprelay delete ipif ipifname 12 ipaddr Config dhcprelay option82 state Config dhcprelay option82 checkConfig dhcprelay option82 state enable disable Config dhcprelay option82 check enable disable Config dhcprelay option82 policy Config dhcprelay option82 policy replace drop keepShow dhcprelay Show dhcprelay ipif ipifname Enable dhcprelay Enable dhcprelayDES-65004#enable dhcprelay Command enable dhcprelay Success Disable dhcprelay Disable dhcprelay DNS Relay Commands Config dnsrConfig dnsr primary secondary nameserver ipaddr Add delete static domainname 32 ipaddr Enable dnsr Enable dnsr cache staticDES-65004#enable dnsr Command enable dnsr Success Disable dnsr Disable dnsr cache staticDES-65004#disable dnsr Command disable dnsr Success Show dnsr RIP Commands Config rip Enable rip Disable ripEnable rip DES-65004#enable rip Command enable rip Success DES-65004#disable rip Command disable rip Success Show ripShow rip ipif ipifname Config dvmrp Config dvmrp ipif ipifname 12 all metric valueProbe sec 1-65535 neighbortimeout sec Neighbortimeout second 1-65535 − The time period for Enable dvmrp Disable dvmrpEnable dvmrp DES-65004#enable dvmrp Command enable dvmrp Success Show dvmrp routingtable Show dvmrp neighbor Show dvmrp nexthop System 10.2.1.123 250 Total Entries DES-65004#Show dvmrp nexthop ipaddress networkaddress ipif Ipifname Show dvmrp 10.0.0.0/8 Ip320.0.0.0/8 System Leaf Ip3 30.0.0.0/8 System Leaf Ip2 PIM Commands Config pimConfig pim ipif ipifname 12 all hello sec Jpinterval sec 1-18724 state enabled disabled Enable pim Disable pim Show pim neighbor Show pimShow pim neighbor ipif ipifname 12 ipaddress Show pim ipif ipifname 298 IP Multicasting Commands Show ipmc cacheShow ipmc cache group group ipaddress Show ipmc Show ipmc ipif ipifname 12 protocol inactive dvmrpPim MD5 Configuration Commands Config md5 keyCreate md5 key keyid 1-255 password Config md5 key keyid 1-255 password DES-65004# delete md5 key Command delete md5 key Success Delete md5 keyShow md5 Delete md5 key keyid Ospf Configuration Commands Config ospf routerid Enable ospfConfig ospf routerid ipaddr Enable ospf Disable ospf Show ospf 10.1.1.1 20.1.1.1 None Advertise Create ospf area Delete ospf area Config ospf area Config ospf area areaid type normal stubStubsummary enabled disabled − Allows the Ospf area Show ospf area Create ospf hostroute Delete ospf hostrouteCreate ospf hostroute ipaddr area areaid metric Delete ospf hostroute ipaddr Config ospf hostroute Config ospf hostroute ipaddr area areaid metricShow ospf hostroute Show ospf hostroute ipaddr Create ospf aggregation Delete ospf aggregation Config ospf aggregation Config ospf aggregation areaid networkaddressAdvertise enabled disabled − Allows for the advertisement Show ospf aggregation Show ospf lsdb Show ospf lsdb areaid areaid advertiserouterIpaddr type rtrlink netlink summary assummary Asextlink DES-65004#show ospf lsdb Command show ospf lsdb Area Show ospf neighborShow ospf virtualneighbor Show ospf neighbor ipaddr Config ospf ipif Config ospf ipif ipifname 12 area areaid priorityAuthentication none simple password 8 md5 Keyid 1-255 metric value 1-65535 state enabled Config ospf all Config ospf all area areaid priority valueAuthentication none simple password 8 md5 keyid Metric value 1-65535 state enabled disabled Show ospf ipif Show ospf ipif ipifname Show ospf all Show ospf all Create ospf virtuallink Create ospf virtuallink areaid neighborid Config ospf virtuallink Config ospf virtuallink areaid neighborid Delete ospf virtuallink Show ospf virtuallinkDelete ospf virtuallink areaid neighborid Show ospf virtuallink areaid neighborid 322 Jumbo Frame Commands Enable jumboframeDisable jumboframe Enable jumboframe DES-65004#show jumboframe Command show jumboframe Off Show jumboframeShow jumboframe Command History List Show commandhistory Config commandhistory Config commandhistory value Technical Specifications Transmission Method RAM BufferFiltering Address Table Packet Filtering Standard ProtocolsData Transfer Rates Ethernet 331

D-Link TM DES-6500 manual 189

Models: TM DES-6500

download certificate

189