Professional Documents
Culture Documents
Manuals and software are protected by copyright. All rights reserved. The copying, reproduction,
translation, conversion into any electronic medium or machine scannable form is not permitted,
either in whole or in part. An exception is the preparation of a backup copy of the software for
your own use. For devices with embedded software, the end-user license agreement on the enc-
losed CD applies
The performance features described here are binding only if they have been expressly
guaranteed in the contract. This publication has been created by Hirschmann Automation and
Control GmbH according to the best of our knowledge. Hirschmann reserves the right to change
the contents of this manual without prior notice. Hirschmann can give no guarantee in respect
of the correctness or accuracy of the details in this publication.
Hirschmann can accept no responsibility for damages, resulting from the use of the network
components or the associated operating software. In addition, we refer to the conditions of use
specified in the license contract.
Content
1 Command Structure 23
1.1 Format 24
1.1.1 Command 25
1.1.2 Parameters 25
1.1.3 Values 25
1.1.4 Conventions 27
1.1.5 Annotations 28
1.1.6 Special keys 29
1.1.7 Special characters in scripts 30
1.1.8 Secrets in scripts 32
2 Quick Start up 35
2.1 Quick Starting the Switch 36
2.2 System Info and System Setup 37
3 Mode-based CLI 43
3.1 Mode-based Topology 44
3.2 Mode-based Command Hierarchy 45
3.3 Flow of Operation 47
3.4 “No” Form of a Command 49
3.4.1 Support for “No” Form 49
3.4.2 Behavior of Command Help ("?") 49
CLI L2P
Release 8.0 05/2013 3
Content
CLI L2P
4 Release 8.0 05/2013
Content
CLI L2P
Release 8.0 05/2013 5
Content
CLI L2P
6 Release 8.0 05/2013
Content
CLI L2P
Release 8.0 05/2013 7
Content
CLI L2P
8 Release 8.0 05/2013
Content
CLI L2P
Release 8.0 05/2013 9
Content
CLI L2P
10 Release 8.0 05/2013
Content
CLI L2P
Release 8.0 05/2013 11
Content
CLI L2P
12 Release 8.0 05/2013
Content
CLI L2P
Release 8.0 05/2013 13
Content
CLI L2P
14 Release 8.0 05/2013
Content
CLI L2P
Release 8.0 05/2013 15
Content
CLI L2P
16 Release 8.0 05/2013
Content
CLI L2P
Release 8.0 05/2013 17
Content
CLI L2P
18 Release 8.0 05/2013
Content
8 Glossary 567
9 Index 583
CLI L2P
Release 8.0 05/2013 19
Content
CLI L2P
20 Release 8.0 05/2013
About this Manual
The "Basic Configuration" user manual contains the information you need to
start operating the device. It takes you step by step from the first startup op-
eration through to the basic settings for operation in your environment.
The "Industry Protocols" user manual describes how the device is connected
by means of a communication protocol commonly used in the industry, such
as EtherNet/IP or PROFINET IO.
CLI L2P
Release 8.0 05/2013 21
About this Manual
Maintenace
Hirschmann are continually working on improving and developing their soft-
ware. You should regularly check whether there is a new version of the soft-
ware that provides you with additional benefits. You will find software
information and downloads on the product pages of the Hirschmann website.
CLI L2P
22 Release 8.0 05/2013
Command Structure
1 Command Structure
The Command Line Interface (CLI) syntax, conventions and terminology are
described in this section. Each CLI command is illustrated using the structure
outlined below.
CLI L2P
Release 8.0 05/2013 23
Command Structure 1.1 Format
1.1 Format
U Example 1
network parms <ipaddr> <netmask> [gateway]
D network parms
is the command name.
D <ipaddr> <netmask>
are the required values for the command.
D [gateway]
is the optional value for the command.
U Example 2
snmp-server location <loc>
D snmp-server location
is the command name.
D <loc>
is the required parameter for the command.
U Example 3
clear vlan
D clear vlan
is the command name.
CLI L2P
24 Release 8.0 05/2013
Command Structure 1.1 Format
1.1.1 Command
The text in courier font is to be typed exactly as shown.
1.1.2 Parameters
Parameters are order dependent.
1.1.3 Values
macaddr The MAC address format is six hexadeci-
mal numbers separated by colons, for
example 00:06:29:32:81:40.
areaid Area IDs may be entered in dotted-decimal
notation (for example, 0.0.0.1). An area ID
of 0.0.0.0 is reserved for the backbone.
Area IDs have the same form as IP
addresses, but are distinct from IP
addresses. The IP network address of the
CLI L2P
Release 8.0 05/2013 25
Command Structure 1.1 Format
CLI L2P
26 Release 8.0 05/2013
Command Structure 1.1 Format
1.1.4 Conventions
Network addresses are used to define a link to a remote host, workstation or
network. Network addresses are shown using the following syntax:
Double quotation marks such as "System Name with Spaces" set off user de-
fined strings. If the operator wishes to use spaces as part of a name param-
eter then it must be enclosed in double quotation marks.
The value 'Err' designates that the requested value was not internally acces-
sible.
CLI L2P
Release 8.0 05/2013 27
Command Structure 1.1 Format
1.1.5 Annotations
The CLI allows the user to type single-line annotations at the command
prompt for use when writing test or configuration scripts and for better read-
ability. The exclamation point (‘!’) character flags the beginning of a com-
ment. The comment flag character can begin a word anywhere on the
command line and all input following this character is ignored. Any command
line that begins with the character ‘!’ is recognized as a comment line and ig-
nored by the parser.
CLI L2P
28 Release 8.0 05/2013
Command Structure 1.1 Format
CLI L2P
Release 8.0 05/2013 29
Command Structure 1.1 Format
CLI L2P
30 Release 8.0 05/2013
Command Structure 1.1 Format
The commands with strings that may contain these special characters are
listed below.
Note: Not every string is allowed to contain special characters. The string
that is output with the escape characters (if necessary) is shown as "...".
Command Note
!System Description "..." "At the beginning of the script
!System Version "..." "At the beginning of the script
Command Note
snmp-server location "..."
snmp-server contact "..."
snmp-server community "..."
snmp-server community ipaddr <ip> "..."
snmp-server community ipmask <ip> "..."
snmp-server community ro "..."
snmp-server community rw "..."
no snmp-server community mode "..."
no snmp-server community "..."
link-aggregation "..."
spanning-tree configuration name "..."
ptp subdomain-name "..."
Command Note
name "..."
CLI L2P
Release 8.0 05/2013 31
Command Structure 1.1 Format
Command Note
vlan name <n> "..."
Command Note
radius server key acct <ip> <password>
radius server key auth <ip> <password>
users passwd <username> <password>
users snmpv3 encryption <username> des <password>
CLI L2P
32 Release 8.0 05/2013
Command Structure 1.1 Format
CLI L2P
Release 8.0 05/2013 33
Command Structure 1.1 Format
CLI L2P
34 Release 8.0 05/2013
Quick Start up
2 Quick Start up
The CLI Quick Start up details procedures to quickly become acquainted with
the software.
CLI L2P
Release 8.0 05/2013 35
Quick Start up 2.1 Quick Starting the Switch
D Read the device Installation Guide for the connectivity procedure. In-band
connectivity allows access to the software locally or from a remote work-
station. The device must be configured with IP information (IP address,
subnet mask, and default gateway).
D Turn the Power on.
D Allow the device to load the software until the login prompt appears. The
device‘s initial state is called the default mode.
D When the prompt asks for operator login, execute the following steps:
D Type the word admin in the login area. Since a number of the Quick
Setup commands require administrator account rights, we recom-
mend logging into an administrator account. Press the enter key.
D Enter the state on delivery password private.
D Press the enter key
D The CLI User EXEC prompt will be displayed.
User EXEC prompt:
(Hirschmann Product) >
D Use “enable” to switch to the Privileged EXEC mode from User EXEC.
Privileged EXEC prompt:
(Hirschmann Product) #
D Use “configure” to switch to the Global Config mode from Privileged
EXEC.
Global Config prompt:
(Hirschmann Product) (Config)#
D Use “exit” to return to the previous mode.
CLI L2P
36 Release 8.0 05/2013
Quick Start up 2.2 System Info and System Setup
CLI L2P
Release 8.0 05/2013 37
Quick Start up 2.2 System Info and System Setup
Command Details
show port all Displays the Ports
(in Privileged EXEC)
slot/port
Type - Indicates if the port is a special type of port
Admin Mode - Selects the Port Control Administration State
Physical Mode - Selects the desired port speed and duplex mode
Physical Status - Indicates the port speed and duplex mode
Link Status - Indicates whether the link is up or down
Link Trap - Determines whether or not to send a trap when link status
changes
LACP Mode - Displays whether LACP is enabled or disabled on this
port.
Command Details
show users Displays all of the users that are allowed to access the
(in Privileged EXEC) switch
Access Mode - Shows whether the user is able to change
parameters on the switch(Read/Write) or is only able to
view them (Read Only).
As a factory default, the ‘admin’ user has Read/Write
access and the ‘user’ user has Read Only access. There
can only be one Read/Write user and up to five Read Only
users.
CLI L2P
38 Release 8.0 05/2013
Quick Start up 2.2 System Info and System Setup
Command Details
users passwd <user- Allows the user to set passwords or change passwords
name> needed to login
(in Global Config) A prompt will appear after the command is entered
requesting the users old password. In the absence of an
old password leave the area blank. The operator must
press enter to execute the command.
The system then prompts the user for a new password
then a prompt to confirm the new password. If the new
password and the confirmed password match a message
will be displayed.
User password should not be more than eight characters in
length.
Make sure, that the passwords of the users differ from
each other. If two or more users try to choose the same
password, the CLI will display an error message.
copy system:running- This will save passwords and all other changes to the
config device.
nvram:startup-config If you do not save the configuration by doing this com-
(in Privileged EXEC) mand, all configurations will be lost when a power cycle is
performed on the switch or when the switch is reset.
CLI L2P
Release 8.0 05/2013 39
Quick Start up 2.2 System Info and System Setup
Command Details
show network Displays the Network Configurations
(in User EXEC)
IP Address - IP Address of the switch
Default IP is 0.0.0.0
Subnet Mask - IP Subnet Mask for the switch
Default is 0.0.0.0
Default Gateway - The default Gateway for this switch
Default value is 0.0.0.0
Burned in MAC Address - The Burned in MAC Address used for in-
band connectivity
Network Configurations Protocol (BOOTP/DHCP) - Indicates which
network protocol is being used
Default is DHCP
Network Configurations Protocol HiDiscovery - Indicates the status of
the HiDiscovery protocol.
Default is read-write
Management VLAN Id - Specifies VLAN id
Web Mode - Indicates whether HTTP/Web is enabled.
JavaScript Mode - Indicates whether java mode is enabled.
When the user accesses the switch’s graphical user interface (web
interface) and JavaScript Mode is enabled, the switch’s web server
will deliver a HTML page that contains JavaScript. Some browsers do
not support JavaScript. In this case, a HTML page without JavaScript
is necessary. In this case, set JavaScript Mode to disabled.
Default: enabled.
network parms Sets the IP Address, subnet mask and gateway of the router. The IP
<ipaddr> <net- Address and the gateway must be on the same subnet.
mask> [gateway]
(in Privileged EXEC)
IP Address range from 0.0.0.0 to 255.255.255.255
CLI L2P
40 Release 8.0 05/2013
Quick Start up 2.2 System Info and System Setup
Command Details
Subnet Mask range from 0.0.0.0 to 255.255.255.255
Gateway Address range from 0.0.0.0 to 255.255.255.255
Command Details
copy <url> {nvram:startup- Sets the destination (download) datatype to be an
config | system:image} image (system:image) or a configuration file
(nvram:startup-config).
The URL must be specified as:
tftp://ipAddr/filepath/fileName.
The nvram:startup-config option downloads the
configuration file using tftp and system:image
option downloads the code file.
Command Details
clear config Enter yes when the prompt pops up to clear all the confi-
(in Privileged EXEC Mode) gurations made to the switch.
copy system:running- Enter yes when the prompt pops up that asks if you want
config nvram:startup- to save the configurations made to the switch.
config
reboot (or cold boot the switch) Enter yes when the prompt pops up that asks if you want
(in Privileged EXEC Mode) to reset the system.
This is the users choice either reset the switch or cold
boot the switch, both work effectively.
CLI L2P
Release 8.0 05/2013 41
Quick Start up 2.2 System Info and System Setup
CLI L2P
42 Release 8.0 05/2013
Mode-based CLI
3 Mode-based CLI
The CLI groups all the commands in appropriate modes according to the na-
ture of the command. A sample of the CLI command modes are described
below. Each of the command modes support specific software commands.
D User Exec Mode
D Privileged Exec Mode
D Global Config Mode
D Vlan Mode
D Interface Config Mode
D Line Config Mode
The Command Mode table captures the command modes, the prompts visi-
ble in that mode and the exit method from that mode.
CLI L2P
Release 8.0 05/2013 43
Mode-based CLI 3.1 Mode-based Topology
The CLI tree is built on a mode concept where the commands are available
according to the interface. Some of the modes are depicted in the following
figure.
ROOT
Enable
Privileged Exec
Interface Config
Line Config
CLI L2P
44 Release 8.0 05/2013
Mode-based CLI 3.2 Mode-based Command Hierarchy
The CLI is divided into various modes. The Commands in one mode are not
available until the operator switches to that particular mode, with the excep-
tion of the User Exec mode commands. The User Exec mode commands
may also be executed in the Privileged Exec mode.
The commands available to the operator at any point in time depend upon
the mode. Entering a question mark (?) at the CLI prompt, displays a list of
the available commands and descriptions of the commands.
The CLI provides the following modes:
User Exec Mode
When the operator logs into the CLI, the User Exec mode is the initial
mode. The User Exec mode contains a limited set of commands. The
command prompt shown at this level is:
Command Prompt: (Hirschmann Product)>
Privileged Exec Mode
To have access to the full suite of commands, the operator must enter
the Privileged Exec mode. Privileged users authenticated by login are
able to enter the Privileged EXEC mode. From Privileged Exec mode,
the operator can issue any Exec command, enter the VLAN mode or
enter the Global Configuration mode . The command prompt shown
at this level is:
Command Prompt: (Hirschmann Product)#
VLAN Mode
This mode groups all the commands pertaining to VLANs. The com-
mand prompt shown at this level is:
Command Prompt: (Hirschmann Product)(VLAN)#
Global Config Mode
This mode permits the operator to make modifications to the running
configuration. General setup commands are grouped in this mode.
From the Global Configuration mode, the operator can enter the Sys-
tem Configuration mode, the Physical Port Configuration mode, the
CLI L2P
Release 8.0 05/2013 45
Mode-based CLI 3.2 Mode-based Command Hierarchy
CLI L2P
46 Release 8.0 05/2013
Mode-based CLI 3.3 Flow of Operation
The parsing process is initiated whenever the operator types a command and
presses <ENTER>. The command tree is searched for the command of in-
terest. If the command is not found, the output message indicates where the
offending entry begins. For instance, command node A has the command
"show spanning-tree" but the operator attempts to execute the com-
mand "show arpp brief" then the output message would be
(Hirschmann Product)(exec)> show sspanning-tree^.
(Hirschmann Product)%Invalid input detected at '^' mark-
er. If the operator has given an invalid input parameter in the command, then
the message conveys to the operator an invalid input was detected. The lay-
out of the output is depicted below:
After all the mandatory parameters are entered, any additional parameters
entered are treated as optional parameters. If any of the parameters are not
recognized a syntax error message will be displayed.
D After the command is successfully parsed and validated, the control of
execution goes to the corresponding CLI callback function.
CLI L2P
Release 8.0 05/2013 47
Mode-based CLI 3.3 Flow of Operation
D For mandatory parameters, the command tree extends till the mandatory
parameters make the leaf of the branch. The callback function is only in-
voked when all the mandatory parameters are provided. For optional pa-
rameters, the command tree extends till the mandatory parameters and
the optional parameters make the leaf of the branch. However, the call
back function is associated with the node where the mandatory parame-
ters are fetched. The call back function then takes care of the optional pa-
rameters.
D Once the control has reached the callback function, the callback function
has complete information about the parameters entered by the operator.
CLI L2P
48 Release 8.0 05/2013
Mode-based CLI 3.4 “No” Form of a Command
“No” is a specific form of an existing command and does not represent a new
or distinct command. Only the configuration commands are available in the
“no” form. The behavior and the support details of the “no” form is captured
as part of the mapping sheets.
CLI L2P
Release 8.0 05/2013 49
Mode-based CLI 3.4 “No” Form of a Command
CLI L2P
50 Release 8.0 05/2013
CLI Commands: Base
CLI L2P
Release 8.0 05/2013 51
CLI Commands: Base 4.1 System Information and Statistics
4.1.1 show
This command displays the interface's configuration.
Format
show [all]
Mode
Interface Config
all
Show all the running configuration parameters on this interface.
The configuration parameters will be displayed even if their value is
the default value.
CLI L2P
52 Release 8.0 05/2013
CLI Commands: Base 4.1 System Information and Statistics
CLI L2P
Release 8.0 05/2013 53
CLI Commands: Base 4.1 System Information and Statistics
CLI L2P
54 Release 8.0 05/2013
CLI Commands: Base 4.1 System Information and Statistics
CLI L2P
Release 8.0 05/2013 55
CLI Commands: Base 4.1 System Information and Statistics
CLI L2P
56 Release 8.0 05/2013
CLI Commands: Base 4.1 System Information and Statistics
CLI L2P
Release 8.0 05/2013 57
CLI Commands: Base 4.1 System Information and Statistics
CLI L2P
58 Release 8.0 05/2013
CLI Commands: Base 4.1 System Information and Statistics
CLI L2P
Release 8.0 05/2013 59
CLI Commands: Base 4.1 System Information and Statistics
CLI L2P
60 Release 8.0 05/2013
CLI Commands: Base 4.1 System Information and Statistics
CLI L2P
Release 8.0 05/2013 61
CLI Commands: Base 4.1 System Information and Statistics
CLI L2P
62 Release 8.0 05/2013
CLI Commands: Base 4.1 System Information and Statistics
CLI L2P
Release 8.0 05/2013 63
CLI Commands: Base 4.1 System Information and Statistics
CLI L2P
64 Release 8.0 05/2013
CLI Commands: Base 4.1 System Information and Statistics
CLI L2P
Release 8.0 05/2013 65
CLI Commands: Base 4.1 System Information and Statistics
CLI L2P
66 Release 8.0 05/2013
CLI Commands: Base 4.1 System Information and Statistics
Protocol Statistics
BPDUs received - The count of BPDUs (Bridge Protocol Data Units)
received in the spanning tree layer.
BPDUs Transmitted - The count of BPDUs (Bridge Protocol Data
Units) transmitted from the spanning tree layer.
802.3x Pause Frames Received - A count of MAC Control frames
received on this interface with an opcode indicating the PAUSE oper-
ation. This counter does not increment when the interface is operating
in half-duplex mode.
GVRP PDU's Received - The count of GVRP PDU's received in the
GARP layer.
GMRP PDU's received - The count of GMRP PDU's received in the
GARP layer.
GMRP PDU's Transmitted - The count of GMRP PDU's transmitted
from the GARP layer.
GMRP Failed Registrations - The number of times attempted
GMRP registrations could not be completed.
STP BPDUs Transmitted - Spanning Tree Protocol Bridge Protocol
Data Units sent
STP BPDUs Received - Spanning Tree Protocol Bridge Protocol
Data Units received
RST BPDUs Transmitted - Rapid Spanning Tree Protocol Bridge
Protocol Data Units sent
RSTP BPDUs Received - Rapid Spanning Tree Protocol Bridge Pro-
tocol Data Units received
MSTP BPDUs Transmitted - Multiple Spanning Tree Protocol Bridge
Protocol Data Units sent
MSTP BPDUs Received - Multiple Spanning Tree Protocol Bridge
Protocol Data Units received
Dot1x Statistics
EAPOL Frames Received- The number of valid EAPOL frames of
any type that have been received by this authenticator.
EAPOL Frames Transmitted - The number of EAPOL frames of any
type that have been transmitted by this authenticator.
Time Since Counters Last Cleared
The elapsed time, in days, hours, minutes, and seconds since the sta-
tistics for this port were last cleared.
CLI L2P
Release 8.0 05/2013 67
CLI Commands: Base 4.1 System Information and Statistics
CLI L2P
68 Release 8.0 05/2013
CLI Commands: Base 4.1 System Information and Statistics
CLI L2P
Release 8.0 05/2013 69
CLI Commands: Base 4.1 System Information and Statistics
CLI L2P
70 Release 8.0 05/2013
CLI Commands: Base 4.1 System Information and Statistics
CLI L2P
Release 8.0 05/2013 71
CLI Commands: Base 4.1 System Information and Statistics
Note: This command displays only learned unicast addresses. For other
addresses use the command show mac-filter-table.
See “show mac-filter-table gmrp” on page 235.
Format
show mac-addr-table [<macaddr> <1-4042> | all]
Mode
Privileged EXEC and User EXEC
Mac Address
A unicast MAC address for which the switch has forwarding and or filtering
information. The format is 6 or 8 two-digit hexadecimal numbers that are
separated by colons, for example 01:23:45:67:89:AB.
Slot/Port
The port which this address was learned.
if Index
This object indicates the ifIndex of the interface table entry associated
with this port.
Status
The status of this entry. The meanings of the values are:
Learned The value of the corresponding instance was learned by
observing the source MAC addresses of incoming traffic, and is cur-
rently in use.
Management The value of the corresponding instance (system MAC
address) is also the value of an existing instance of
dot1dStaticAddress.
CLI L2P
72 Release 8.0 05/2013
CLI Commands: Base 4.1 System Information and Statistics
CLI L2P
Release 8.0 05/2013 73
CLI Commands: Base 4.1 System Information and Statistics
Note: To show the signal contact´s port related settings, use the command
show port {<slot/port> | all} (see “show port” on page 243).
CLI L2P
74 Release 8.0 05/2013
CLI Commands: Base 4.1 System Information and Statistics
CLI L2P
Release 8.0 05/2013 75
CLI Commands: Base 4.1 System Information and Statistics
CLI L2P
76 Release 8.0 05/2013
CLI Commands: Base 4.1 System Information and Statistics
CLI L2P
Release 8.0 05/2013 77
CLI Commands: Base 4.1 System Information and Statistics
CLI L2P
78 Release 8.0 05/2013
CLI Commands: Base 4.1 System Information and Statistics
Fan Status
The status of the MACH4000 fan.
Power Supply Information
The status of the power supplies.
Media Module Information
The description of each media module
– Description: media module type,
– Serial Number of the media modul (if available),
SFP Information:
– SFP Part ID: SFP type (if available),
– SFP Serial No. of the SFP module (if available),
– SFP Supported: yes/no,
– SFP Temperature (°C, F),
– SFP Tx Pwr, SFP transmit power (dBm / mW),
– SFP Rx Pwr, SFP receive power (dBm / mW),
– SFP Rx Pwr State: ok/warning/alarm.
CPU Utilization
The utilization of the central processing unit.
Average CPU Utilization
The average utilization of the central processing unit.
Flashdisk
Free memory on flashdisk (in Kbytes).
CLI L2P
Release 8.0 05/2013 79
CLI Commands: Base 4.1 System Information and Statistics
CLI L2P
80 Release 8.0 05/2013
CLI Commands: Base 4.2 Debug Commands
CLI L2P
Release 8.0 05/2013 81
CLI Commands: Base 4.2 Debug Commands
CLI L2P
82 Release 8.0 05/2013
CLI Commands: Base 4.2 Debug Commands
CLI L2P
Release 8.0 05/2013 83
CLI Commands: Base 4.2 Debug Commands
CLI L2P
84 Release 8.0 05/2013
CLI Commands: Base 4.3 Management VLAN Commands
CLI L2P
Release 8.0 05/2013 85
CLI Commands: Base 4.4 Class of Service (CoS) Commands
Note: The 'Interface Config' mode only affects a single interface, whereas the
'Global Config' mode is applied to all interfaces.
CLI L2P
86 Release 8.0 05/2013
CLI Commands: Base 4.4 Class of Service (CoS) Commands
U no classofservice dot1p-mapping
This command restores the default mapping of the 802.1p priority to an
internal traffic class.
Format
no classofservice dot1p-mapping
Modes
Global Config or Interface Config
CLI L2P
Release 8.0 05/2013 87
CLI Commands: Base 4.4 Class of Service (CoS) Commands
U no classofservice ip-dscp-mapping
This command restores the default mapping of the IP DSCP value to an
internal traffic class.
Format
no classofservice dot1p-mapping
Modes
Global Config
CLI L2P
88 Release 8.0 05/2013
CLI Commands: Base 4.4 Class of Service (CoS) Commands
Note: In trust ip-dscp mode the switch modifies the vlan priority for out-
going frames according to
– the DSCP mapping and VLAN mapping table
(PowerMICE, MACH1000, MACH4000)
– the a fix mapping table
(see Reference Manual „GUI Graphical User Interface“ (Web-based
Interface) for further details).
Format
classofservice trust dot1p | ip-dscp
Mode
Global Config or
Interface Config (PowerMICE, MACH1000, MACH4000)
U no classofservice trust
This command sets the interface mode to untrusted, i.e. the packet prior-
ity marking is ignored and the default port priority is used instead.
Format
no classofservice trust
Modes
Global Config or
Interface Config (PowerMICE, MACH1000, MACH4000)
CLI L2P
Release 8.0 05/2013 89
CLI Commands: Base 4.4 Class of Service (CoS) Commands
CLI L2P
90 Release 8.0 05/2013
CLI Commands: Base 4.4 Class of Service (CoS) Commands
CLI L2P
Release 8.0 05/2013 91
CLI Commands: Base 4.4 Class of Service (CoS) Commands
CLI L2P
92 Release 8.0 05/2013
CLI Commands: Base 4.4 Class of Service (CoS) Commands
CLI L2P
Release 8.0 05/2013 93
CLI Commands: Base 4.4 Class of Service (CoS) Commands
CLI L2P
94 Release 8.0 05/2013
CLI Commands: Base 4.4 Class of Service (CoS) Commands
U no mode dvlan-tunnel
Use this command to configure the port as normal switch port and to
disable the DVLAN tunneling.
Default
Disabled
Format
no mode dvlan-tunnel
Mode
Interface Config
CLI L2P
Release 8.0 05/2013 95
CLI Commands: Base 4.4 Class of Service (CoS) Commands
CLI L2P
96 Release 8.0 05/2013
CLI Commands: Base 4.5 Link Aggregation(802.3ad) Commands
U no link-aggregation staticcapability
This command disables the support of static link-aggregations (LAGs) on
the device.
Default
disabled
Format
no link-aggregation staticcapability
Mode
Global Config
CLI L2P
Release 8.0 05/2013 97
CLI Commands: Base 4.5 Link Aggregation(802.3ad) Commands
CLI L2P
98 Release 8.0 05/2013
CLI Commands: Base 4.6 Management Commands
4.6.1 telnet
This command establishes a new outbound telnet connection to a remote
host. The host value must be a valid IP address. Valid values for port should
be a valid decimal integer in the range of 0 to 65535, where the default value
is 23. If [debug] is used, the current telnet options enabled is displayed. The
optional line parameter sets the outbound telnet operational mode as
‘linemode’, where by default, the operational mode is ‘character mode’. The
echo option enables local echo and only takes effect when the local switch is
accessed via the serial connection (V.24).
Format
telnet <host> <port> [debug] [line] [echo]
Mode
Privileged EXEC and User EXEC
CLI L2P
Release 8.0 05/2013 99
CLI Commands: Base 4.6 Management Commands
CLI L2P
100 Release 8.0 05/2013
CLI Commands: Base 4.6 Management Commands
CLI L2P
Release 8.0 05/2013 101
CLI Commands: Base 4.6 Management Commands
4.6.4 session-limit
This command specifies the maximum number of simultaneous outbound
telnet sessions. A value of 0 indicates that no outbound telnet session can be
established.
Default
4
Format
session-limit <0-5>
Mode
Line Config
U no session-limit
This command sets the maximum number of simultaneous outbound tel-
net sessions to the default value.
Format
no session-limit
Mode
Line Config
CLI L2P
102 Release 8.0 05/2013
CLI Commands: Base 4.6 Management Commands
4.6.5 session-timeout
This command sets the telnet session timeout value.The timeout value unit
of time is minutes.
Default
5
Format
session-timeout <1-160>
Mode
Line Config
U no session-timeout
This command sets the telnet session timeout value to the default. The
timeout value unit of time is minutes.
Format
no session-timeout
Mode
Line Config
CLI L2P
Release 8.0 05/2013 103
CLI Commands: Base 4.6 Management Commands
CLI L2P
104 Release 8.0 05/2013
CLI Commands: Base 4.6 Management Commands
U no bridge aging-time
This command sets the forwarding database address aging timeout to
30 seconds.
Format
no bridge aging-time
Mode
Global Config
CLI L2P
Release 8.0 05/2013 105
CLI Commands: Base 4.6 Management Commands
CLI L2P
106 Release 8.0 05/2013
CLI Commands: Base 4.6 Management Commands
4.6.13 digital-input
This command configures the MICE IO-Module digital inputs.
Format
digital-input
admin-state {enable | disable}
refresh-interval <refresh-interval>
log-event {all | <slot/input>} {enable|disable}
snmp-trap {all | <slot/input>} {enable|disable}
Mode
Global Config
admin-state
This command enables or disables the polling task for digital inputs of
the MICE IO-Module. When disabled, no event logging or SNMP
traps will work. Default: disable.
disable Disable the IO-Module digital inputs admin state.
enable Enable the IO-Module digital inputs admin state.
CLI L2P
Release 8.0 05/2013 107
CLI Commands: Base 4.6 Management Commands
refresh-interval
This command configures the digital inputs refresh interval. Each
input configured for event logging or SNMP traps is polled with this
interval.
<refresh-interval> The refresh interval is in the range of 1..10
seconds. Default: 1.
log-event
This command enables or disables the event logging of input status
changes for one or all digital inputs. Default: disable.
The input state will be checked according to the interval set with IO-
<refresh-interval>.
all Configure the IO-Module event logging for all digital inputs.
<slot/input> Configure the IO-Module event logging for a single
digital input.
disable Disable event logging for digital input status changes.
enable Enable event logging for digital input status changes.
snmp-trap
This command enables or disables the sending of SNMP traps in
case of input status changes for one or all digital inputs. Default:
disable.
The trap will be sent to all SNMP trap receivers configured with
snmptrap.
The input state will be checked according to the interval set with IO-
<refresh-interval>.
all Configure the IO-Module SNMP trap for all digital inputs.
<slot/input> Configure the IO-Module SNMP trap for a single
digital input.
disable Disable SNMP traps for digital input status changes.
enable Enable SNMP traps for digital input status changes.
CLI L2P
108 Release 8.0 05/2013
CLI Commands: Base 4.6 Management Commands
4.6.14 digital-output
This command configures the IO-Module digital outputs.
Format
digital-output
admin-state {enable | disable}
refresh-interval <refresh-interval>
retry-count <refresh-interval>
log-event {all | <slot/output>} {enable|disable}
snmp-trap {all | <slot/output>} {enable|disable}
mirror all | <slot>/<output> {disable |
from <IPaddress> <slot>/<input>}
Mode
Global Config
admin-state
This command enables or disables the polling task for digital outputs
of the MICE IO-Module. When disabled, no event logging or SNMP
traps will work. Default: disable.
disable Disable the IO-Module digital outputs admin state.
enable Enable the IO-Module digital outputs admin state.
refresh-interval
This command configures the IO-Module digital outputs refresh
interval. Each output configured for input mirroring is refreshed (input
is polled) with this interval.
<refresh-interval> The refresh interval is in the range of 1..10
seconds. Default: 1.
retry-count
This command configures the number of retry counts for setting digi-
tal outputs of the MICE IO-Module. Each output configured for input
mirroring is set to the default value (low) when after the number of
configured retries no SNMP get request was answered.
<refresh-interval> The refresh interval is in the range of 1..10
seconds. Default: 1.
log-event
This command enables or disables the event logging of output status
changes for one or all digital outputs. Default: disable.
The output state will be checked according to the interval set with IO-
CLI L2P
Release 8.0 05/2013 109
CLI Commands: Base 4.6 Management Commands
<refresh-interval>.
Configure the IO-Module event logging for one or all digital outputs.
all Configure the IO-Module event logging for all digital outputs.
<slot/output> Configure the IO-Module event logging for a
single digital output.
disable Disable event logging for digital output status changes.
enable Enable event logging for digital output status changes.
snmp-trap
This command enables or disables the sending of SNMP traps in
case of output status changes for one or all digital outputs. Default:
disable.
The trap will be sent to all SNMP trap receivers configured with
snmptrap.
The output state will be checked according to the interval set with IO-
<refresh-interval>.
all Configure the IO-Module SNMP trap for all digital outputs.
<slot/output> Configure the IO-Module SNMP trap for a single
digital output.
disable Disable SNMP traps for digital output status changes.
enable Enable SNMP traps for digital output status changes.
CLI L2P
110 Release 8.0 05/2013
CLI Commands: Base 4.6 Management Commands
mirror
Configure the IO-Module mirroring for one or all digital outputs.
This command determines the input mirrored to the currently selected
output.
To disable mirroring, the following commands are equivalent:
digital-output mirror 1/2 disable
digital-output mirror 1/2 from 0.0.0.0 1/1
<all>: Configure the IO-Module mirroring for all digital outputs.
<slot/output>: Configure the IO-Module mirroring for a single
digital output. The <slot> value determines the IO-module slot
number on the device with the selected IP address.
disable: Disable the IO-Module mirroring for a single digital
output.
from: Enable the IO-Module mirroring for a single digital output from
<IP-address> <slot/input>
<IPaddress>: The IP address value detemines the IP address
used for reading the input value. Use IP address 127.0.0.1 or the sys-
tem IP address to mirror inputs from a local IO module. When IP
address is 0.0.0.0 no input is mirrored to the output (the output value
is set to 'low'). Default: 0.0.0.0.
<slot/input>: The <input> value determines the input number on
this device. Default: 1/1.
CLI L2P
Release 8.0 05/2013 111
CLI Commands: Base 4.6 Management Commands
CLI L2P
112 Release 8.0 05/2013
CLI Commands: Base 4.6 Management Commands
CLI L2P
Release 8.0 05/2013 113
CLI Commands: Base 4.6 Management Commands
CLI L2P
114 Release 8.0 05/2013
CLI Commands: Base 4.6 Management Commands
CLI L2P
Release 8.0 05/2013 115
CLI Commands: Base 4.6 Management Commands
CLI L2P
116 Release 8.0 05/2013
CLI Commands: Base 4.6 Management Commands
Mirror from IP
Show the IP address used for reading the input value.
Possible values: None, a.b.c.d (valid IP address).
Input
Show the input number of the device used for reading the input value.
Possible values (example): 1/1, 1/2, 1/3, 1/4,
3/1, 3/2, 3/3, 3/4
CLI L2P
Release 8.0 05/2013 117
CLI Commands: Base 4.6 Management Commands
CLI L2P
118 Release 8.0 05/2013
CLI Commands: Base 4.6 Management Commands
CLI L2P
Release 8.0 05/2013 119
CLI Commands: Base 4.6 Management Commands
4.6.23 ethernet-ip
This command controls the EtherNet/IP function on the switch.
Detailed information you can find in the User Manual Industrial Protocols.
Default
depends on the order code (standard = disable)
Format
ethernet-ip admin-state {enable | disable}
Mode
Global Config
Admin-state
disable: Disables the EtherNet/IP function on this device.
Note: The relevant MIB objects are still accessible.
enable: Enables the EtherNet/IP function on this device.
CLI L2P
120 Release 8.0 05/2013
CLI Commands: Base 4.6 Management Commands
4.6.24 iec61850-mms
CLI L2P
Release 8.0 05/2013 121
CLI Commands: Base 4.6 Management Commands
CLI L2P
122 Release 8.0 05/2013
CLI Commands: Base 4.6 Management Commands
U no network javascriptmode
When the user accesses the switch’s graphical user interface (web-
based interface), the switch’s web server will deliver a HTML page that
contains no JavaScript.
Format
no network javascriptmode
Mode
Privileged EXEC
CLI L2P
Release 8.0 05/2013 123
CLI Commands: Base 4.6 Management Commands
CLI L2P
124 Release 8.0 05/2013
CLI Commands: Base 4.6 Management Commands
CLI L2P
Release 8.0 05/2013 125
CLI Commands: Base 4.6 Management Commands
CLI L2P
126 Release 8.0 05/2013
CLI Commands: Base 4.6 Management Commands
CLI L2P
Release 8.0 05/2013 127
CLI Commands: Base 4.6 Management Commands
U no network priority
This command sets the VLAN priority or the IP DSCP value for outgoing
management packets to default which means VLAN priority 0 or
IP DSCP value 0 (Best effort).
Format
no network priority {dot1p-vlan | ip-dscp }
Mode
Privileged EXEC
CLI L2P
128 Release 8.0 05/2013
CLI Commands: Base 4.6 Management Commands
4.6.35 profinetio
This command controls the PROFINET IO function on the switch.
Detailed information you can find in the User Manual Industrial Protocols.
Default
depends on the order code (standard = disable)
Format
profinetio admin-state {enable | disable}
Mode
Global Config
Admin-state
disable Disables the PROFINET IO function on this device.
Note: The relevant MIB objects are still accessible.
enable Enables the PROFINET IO function on this device.
CLI L2P
Release 8.0 05/2013 129
CLI Commands: Base 4.6 Management Commands
U no serial timeout
This command sets the maximum connect time without console activity
(in minutes) back to the default value.
Format
no serial timeout
Mode
Line Config
CLI L2P
130 Release 8.0 05/2013
CLI Commands: Base 4.6 Management Commands
CLI L2P
Release 8.0 05/2013 131
CLI Commands: Base 4.6 Management Commands
CLI L2P
132 Release 8.0 05/2013
CLI Commands: Base 4.6 Management Commands
CLI L2P
Release 8.0 05/2013 133
CLI Commands: Base 4.6 Management Commands
CLI L2P
134 Release 8.0 05/2013
CLI Commands: Base 4.6 Management Commands
CLI L2P
Release 8.0 05/2013 135
CLI Commands: Base 4.6 Management Commands
CLI L2P
136 Release 8.0 05/2013
CLI Commands: Base 4.6 Management Commands
CLI L2P
Release 8.0 05/2013 137
CLI Commands: Base 4.6 Management Commands
CLI L2P
138 Release 8.0 05/2013
CLI Commands: Base 4.6 Management Commands
CLI L2P
Release 8.0 05/2013 139
CLI Commands: Base 4.6 Management Commands
CLI L2P
140 Release 8.0 05/2013
CLI Commands: Base 4.6 Management Commands
CLI L2P
Release 8.0 05/2013 141
CLI Commands: Base 4.6 Management Commands
CLI L2P
142 Release 8.0 05/2013
CLI Commands: Base 4.6 Management Commands
CLI L2P
Release 8.0 05/2013 143
CLI Commands: Base 4.6 Management Commands
4.6.52 snmp-server
This command sets the name and the physical location of the switch, and the
organization responsible for the network.The range for name, location and
contact is from 0 to 64 alphanumeric characters.
Default
None
Format
snmp-server
{community <name> |
ipaddr <ipaddr> <name> |
ipmask <ipmask> <name> |
mode <name> |
ro <name> |
rw <name> |
contact <con> |
enable traps { chassis | l2redundancy |
linkmode | multiusers | port-sec | stpmode }
location <loc> |
sysname <name> }
Mode
Global Config
CLI L2P
144 Release 8.0 05/2013
CLI Commands: Base 4.6 Management Commands
Default
Two default community names: Public and Private. You can replace
these default community names with unique identifiers for each com-
munity. The default values for the remaining four community names
are blank.
Format
snmp-server community <name>
Mode
Global Config
U no snmp-server community
This command removes this community name from the table. The name
is the community name to be deleted.
Format
no snmp-server community <name>
Mode
Global Config
CLI L2P
Release 8.0 05/2013 145
CLI Commands: Base 4.6 Management Commands
U no snmp-server contact
This command removes this SNMP server contact from the table.
<con> is the SNMP server contact to be deleted.
Format
no snmp-server contact <con>
Mode
Global Config
CLI L2P
146 Release 8.0 05/2013
CLI Commands: Base 4.6 Management Commands
CLI L2P
Release 8.0 05/2013 147
CLI Commands: Base 4.6 Management Commands
CLI L2P
148 Release 8.0 05/2013
CLI Commands: Base 4.6 Management Commands
CLI L2P
Release 8.0 05/2013 149
CLI Commands: Base 4.6 Management Commands
CLI L2P
150 Release 8.0 05/2013
CLI Commands: Base 4.6 Management Commands
CLI L2P
Release 8.0 05/2013 151
CLI Commands: Base 4.6 Management Commands
CLI L2P
152 Release 8.0 05/2013
CLI Commands: Base 4.6 Management Commands
CLI L2P
Release 8.0 05/2013 153
CLI Commands: Base 4.6 Management Commands
CLI L2P
154 Release 8.0 05/2013
CLI Commands: Base 4.6 Management Commands
CLI L2P
Release 8.0 05/2013 155
CLI Commands: Base 4.6 Management Commands
CLI L2P
156 Release 8.0 05/2013
CLI Commands: Base 4.6 Management Commands
CLI L2P
Release 8.0 05/2013 157
CLI Commands: Base 4.6 Management Commands
4.6.69 snmptrap
This command adds an SNMP trap name. The maximum length of name is
32 case-sensitive alphanumeric characters.
Default
The default name for the six undefined community names is Delete.
Format
snmptrap <name> <ipaddr> [snmpversion snmpv1]
Mode
Global Config
U no snmptrap
This command deletes trap receivers for a community.
Format
no snmptrap <name> <ipaddr>
Mode
Global Config
CLI L2P
158 Release 8.0 05/2013
CLI Commands: Base 4.6 Management Commands
Note: IP addresses in the SNMP trap receiver table must be unique. If you
make multiple entries using the same IP address, the first entry is retained
and processed. All duplicate entries are ignored.
Format
snmptrap ipaddr <name> <ipaddr> <ipaddrnew>
Mode
Global Config
ipaddr
Enter the old IP Address.
ipaddrnew
Enter the new IP Address.
CLI L2P
Release 8.0 05/2013 159
CLI Commands: Base 4.6 Management Commands
U no snmptrap mode
This command deactivates an SNMP trap. Disabled trap receivers are
inactive (not able to receive traps).
Format
no snmptrap mode <name> <ipaddr>
Mode
Global Config
CLI L2P
160 Release 8.0 05/2013
CLI Commands: Base 4.6 Management Commands
CLI L2P
Release 8.0 05/2013 161
CLI Commands: Base 4.6 Management Commands
U no telnetcon maxsessions
This command sets the maximum number of telnet connection sessions
that can be established to the default value.
Format
no telnetcon maxsessions
Mode
Privileged EXEC
CLI L2P
162 Release 8.0 05/2013
CLI Commands: Base 4.6 Management Commands
U no telnetcon timeout
This command sets the telnet connection session timeout value to the
default.
Changing the timeout value for active sessions does not become effec-
tive until the session is reaccessed. Also, any keystroke activates the
new timeout duration.
Format
no telnetcon timeout
Mode
Privileged EXEC
CLI L2P
Release 8.0 05/2013 163
CLI Commands: Base 4.7 Syslog Commands
U no logging buffered
This command disables logging to in-memory log.
Format
no logging buffered
CLI L2P
164 Release 8.0 05/2013
CLI Commands: Base 4.7 Syslog Commands
CLI L2P
Release 8.0 05/2013 165
CLI Commands: Base 4.7 Syslog Commands
U no logging cli-command
This command disables the CLI command Logging feature.
Format
no logging cli-command
CLI L2P
166 Release 8.0 05/2013
CLI Commands: Base 4.7 Syslog Commands
U no logging console
This command disables logging to the console.
Format
no logging console
CLI L2P
Release 8.0 05/2013 167
CLI Commands: Base 4.7 Syslog Commands
CLI L2P
168 Release 8.0 05/2013
CLI Commands: Base 4.7 Syslog Commands
CLI L2P
Release 8.0 05/2013 169
CLI Commands: Base 4.7 Syslog Commands
CLI L2P
170 Release 8.0 05/2013
CLI Commands: Base 4.7 Syslog Commands
U no logging syslog
This command disables syslog logging.
Format
no logging syslog
CLI L2P
Release 8.0 05/2013 171
CLI Commands: Base 4.7 Syslog Commands
CLI L2P
172 Release 8.0 05/2013
CLI Commands: Base 4.8 Scripting Commands
Note:
D The file extension must be “.cli”.
D A maximum of ten scripts are allowed on the switch.
D The combined size of all script files on the switch shall not exceed
1024 KB.
CLI L2P
Release 8.0 05/2013 173
CLI Commands: Base 4.8 Scripting Commands
CLI L2P
174 Release 8.0 05/2013
CLI Commands: Base 4.8 Scripting Commands
CLI L2P
Release 8.0 05/2013 175
CLI Commands: Base 4.8 Scripting Commands
CLI L2P
176 Release 8.0 05/2013
4.9 Device Configuration Commands
4.9.1 addport
This command adds one port to the Link Aggregation (LAG). The given inter-
face is a logical slot and port number of a configured Link Aggregation.
Note: Before adding a port to a Link Aggregation, set the physical mode of
the port. See ‘speed’ command.
Format
addport <logical slot/port>
Mode
Interface Config
CLI L2P
Release 8.0 05/2013 177
4.9 Device Configuration Commands
4.9.2 adminmode
This command enables the whole Link Aggregation as one single port.
Note: Before adding a port to a Link Aggregation, set the physical mode of
the port. See ‘speed’ command.
Format
adminmode
Mode
Interface Config
U no adminmode
This command disables the whole Link Aggregation as one single port.
Format
no adminmode
Mode
Interface Config
CLI L2P
178 Release 8.0 05/2013
4.9 Device Configuration Commands
U no auto-disable reason
This command disables the port disabling on this device by reason.
Default
Disabled
Format
no auto-disable reason
{link-flap | crc-error | overload-detection}
Mode
Global Config
link-flap
Disable the port disabling on this device by link flap.
crc-error
Disable the port disabling on this device by CRC error.
overload-detection
Disable the port disabling on this device by overload detection.
CLI L2P
Release 8.0 05/2013 179
4.9 Device Configuration Commands
CLI L2P
180 Release 8.0 05/2013
4.9 Device Configuration Commands
4.9.5 auto-negotiate
This command enables automatic negotiation on a port. The default value is
enable.
Format
auto-negotiate
Mode
Interface Config
U no auto-negotiate
This command disables automatic negotiation on a port.
Format
no auto-negotiate
Mode
Interface Config
CLI L2P
Release 8.0 05/2013 181
4.9 Device Configuration Commands
U no auto-negotiate all
This command disables automatic negotiation on all ports.
Format
no auto-negotiate all
Mode
Global Config
CLI L2P
182 Release 8.0 05/2013
4.9 Device Configuration Commands
4.9.7 cable-crossing
CLI L2P
Release 8.0 05/2013 183
4.9 Device Configuration Commands
4.9.8 media-module
Use this command to logically configure media modules.
Default
media-module enable all
Format
media-module { remove <1-7> |
enable { <1-7> | all } |
disable { <1-7> | all } }
Mode
Global Config
remove
Logically remove a media-module that has already been physically
removed.
<1-7>
Enter the number of a media module that has already been physically
removed but is logically still present in the configuration.
enable
Enable a media-module slot.
<1-7>
Enter the number of the media module to be enabled.
all
Enable all media modules on the device.
disable
Disable a media-module slot.
<1-7>
Enter the number of the media module to be disabled.
all
Disable all media modules on the device.
CLI L2P
184 Release 8.0 05/2013
4.9 Device Configuration Commands
4.9.9 deleteport
This command deletes the port from the link-aggregation (LAG). The inter-
face is a logical slot and port number of a configured link aggregation.
Note: This command has to be issued in the member port's interface config
mode.
Format
deleteport <logical slot/port>
Mode
Interface Config
CLI L2P
Release 8.0 05/2013 185
4.9 Device Configuration Commands
Note: This command is available for the MICE, PowerMICE and RS20/
RS30/RS40 devices.
CLI L2P
186 Release 8.0 05/2013
4.9 Device Configuration Commands
4.9.12 macfilter
This command adds a static MAC filter entry for the MAC address <macad-
dr> on the VLAN <vlanid>. The <macaddr> parameter must be specified as
a 6-byte hexadecimal number in the format of b1:b2:b3:b4:b5:b6.
U no macfilter
This command removes all filtering restrictions and the static MAC filter
entry for the MAC address <macaddr> on the VLAN <vlanid>. The
<macaddr> parameter must be specified as a 6-byte hexadecimal num-
ber in the format of b1:b2:b3:b4:b5:b6.
CLI L2P
Release 8.0 05/2013 187
4.9 Device Configuration Commands
U no macfilter adddest
This command removes a port from the destination filter set for the MAC
filter with the given <macaddr> and VLAN of <vlanid>. The <macaddr>
parameter must be specified as a 6-byte hexadecimal number in the for-
mat of b1:b2:b3:b4:b5:b6.
CLI L2P
188 Release 8.0 05/2013
4.9 Device Configuration Commands
CLI L2P
Release 8.0 05/2013 189
4.9 Device Configuration Commands
CLI L2P
190 Release 8.0 05/2013
4.9 Device Configuration Commands
CLI L2P
Release 8.0 05/2013 191
4.9 Device Configuration Commands
CLI L2P
192 Release 8.0 05/2013
4.9 Device Configuration Commands
CLI L2P
Release 8.0 05/2013 193
4.9 Device Configuration Commands
CLI L2P
194 Release 8.0 05/2013
4.9 Device Configuration Commands
Note:
- The device supports a maximum of one session.
- The maximum number of source ports is 8.
- Ports configured as mirror source or destination ports have to be physical
ports.
Note: In active port mirroring, the specified destination port is used solely for
observation purposes.
Default
none
Format
monitor session <session-id> {source | destination}
interface <slot/port>
Mode
Global Config
session-id
Session number (currently, session number 1 is supported).
CLI L2P
Release 8.0 05/2013 195
4.9 Device Configuration Commands
4.9.20 link-aggregation
This command configures a new Link Aggregation (LAG) and generates a
logical slot/port number for the Link Aggregation. Display this number using
the “show link-aggregation”.
Note: Before including a port in a Link Aggregation, set the port physical
mode. See ‘speed’ command.
Format
link-aggregation <name>
Mode
Global Config
CLI L2P
196 Release 8.0 05/2013
4.9 Device Configuration Commands
U no link-aggregation adminmode
This command disables a Link Aggregation (LAG). The interface is a log-
ical slot/port for a configured Link Aggregation. The option all sets
every configured Link Aggregation with the same administrative mode
setting.
Format
no link-aggregation adminmode all
Mode
Global Config
CLI L2P
Release 8.0 05/2013 197
4.9 Device Configuration Commands
U no link-aggregation linktrap
This command disables link trap notifications for the link-aggregation
(LAG). The interface is a logical unit, slot and port slot and port for a con-
figured link-aggregation. The option all sets every configured link-
aggregation with the same administrative mode setting.
Format
no link-aggregation linktrap {<logical slot/port> |
all]
Mode
GlobalConfig
CLI L2P
198 Release 8.0 05/2013
4.9 Device Configuration Commands
CLI L2P
Release 8.0 05/2013 199
4.9 Device Configuration Commands
CLI L2P
200 Release 8.0 05/2013
4.9 Device Configuration Commands
CLI L2P
Release 8.0 05/2013 201
4.9 Device Configuration Commands
CLI L2P
202 Release 8.0 05/2013
4.9 Device Configuration Commands
CLI L2P
Release 8.0 05/2013 203
4.9 Device Configuration Commands
CLI L2P
204 Release 8.0 05/2013
4.9 Device Configuration Commands
CLI L2P
Release 8.0 05/2013 205
4.9 Device Configuration Commands
Default
60
Format
set garp timer leave <20-600>
Mode
Global Config
Interface Config
CLI L2P
206 Release 8.0 05/2013
4.9 Device Configuration Commands
Default
1000
Format
set garp timer leaveall <200-6000>
Mode
Global Config
Interface Config
CLI L2P
Release 8.0 05/2013 207
4.9 Device Configuration Commands
CLI L2P
208 Release 8.0 05/2013
4.9 Device Configuration Commands
CLI L2P
Release 8.0 05/2013 209
4.9 Device Configuration Commands
CLI L2P
210 Release 8.0 05/2013
4.9 Device Configuration Commands
CLI L2P
Release 8.0 05/2013 211
4.9 Device Configuration Commands
Note: This command is available for the devices of the MS20/MS30, RS20/
RS30/RS40, MACH102, MACH104, MACH1000, MACH1040, OCTOPUS,
RSR20/RSR30 family.
Use this command to configure if the device should forward unknown GMRP
multicast packets. The setting can be discard or flood. The default is flood.
Default
flood
Format
set gmrp forward-unknown {discard | flood}
Mode
Global Config
discard
The device discards unknown GMRP multicast packets.
flood
The device floods unknown GMRP multicast packets.
CLI L2P
212 Release 8.0 05/2013
4.9 Device Configuration Commands
Format
set igmp
Mode
Global Config
U no set igmp
This command disables IGMP Snooping on the system.
Format
no set igmp
Mode
Global Config
CLI L2P
Release 8.0 05/2013 213
4.9 Device Configuration Commands
U no set igmp
This command disables IGMP Snooping on a selected interface.
Format
no set igmp
Mode
Interface Config
CLI L2P
214 Release 8.0 05/2013
4.9 Device Configuration Commands
CLI L2P
Release 8.0 05/2013 215
4.9 Device Configuration Commands
CLI L2P
216 Release 8.0 05/2013
4.9 Device Configuration Commands
CLI L2P
Release 8.0 05/2013 217
4.9 Device Configuration Commands
U no set igmp
This command disables the unconditional forwarding of IGMP member-
ship report frames to this interface.
Format
no set igmp static-query-port
Mode
Interface Config
CLI L2P
218 Release 8.0 05/2013
4.9 Device Configuration Commands
CLI L2P
Release 8.0 05/2013 219
4.9 Device Configuration Commands
CLI L2P
220 Release 8.0 05/2013
4.9 Device Configuration Commands
CLI L2P
Release 8.0 05/2013 221
4.9 Device Configuration Commands
Note: the IGMP Querier's max. response time was also set. It is always the
same value as the IGMP Snooping max. response time.
CLI L2P
222 Release 8.0 05/2013
4.9 Device Configuration Commands
Note: The IGMP Snooping max. response time was also set. It is always the
same value as the IGMP Querier´s max. response time.
CLI L2P
Release 8.0 05/2013 223
4.9 Device Configuration Commands
CLI L2P
224 Release 8.0 05/2013
4.9 Device Configuration Commands
CLI L2P
Release 8.0 05/2013 225
4.9 Device Configuration Commands
CLI L2P
226 Release 8.0 05/2013
4.9 Device Configuration Commands
CLI L2P
Release 8.0 05/2013 227
4.9 Device Configuration Commands
CLI L2P
228 Release 8.0 05/2013
4.9 Device Configuration Commands
CLI L2P
Release 8.0 05/2013 229
4.9 Device Configuration Commands
CLI L2P
230 Release 8.0 05/2013
4.9 Device Configuration Commands
CLI L2P
Release 8.0 05/2013 231
4.9 Device Configuration Commands
CLI L2P
232 Release 8.0 05/2013
4.9 Device Configuration Commands
Leave Timer
Specifies the period of time to wait after receiving an unregister
request for an attribute before deleting the attribute. Current attributes
are a VLAN or multicast group. This may be considered a buffer time
for another station to assert registration for the same attribute in order
to maintain uninterrupted service. There is an instance of this timer on
a per-Port, per-GARP participant basis. Permissible values are 20 to
600 centiseconds (0.2 to 6.0 seconds). The factory default is 60 centi-
seconds (0.6 seconds). The finest granularity of specification is 1 cen-
tisecond (0.01 seconds).
LeaveAll Timer
This Leave All Time controls how frequently LeaveAll PDUs are gen-
erated. A LeaveAll PDU indicates that all registrations will shortly be
deregistered. Participants will need to rejoin in order to maintain reg-
istration. There is an instance of this timer on a per-Port, per-GARP
participant basis. The Leave All Period Timer is set to a random value
in the range of LeaveAllTime to 1.5*LeaveAllTime. Permissible values
are 200 to 6000 centiseconds (2 to 60 seconds). The factory default is
1000 centiseconds (10 seconds). The finest granularity of specifica-
tion is 1 centisecond (0.01 seconds).
Port GMRP Mode
Indicates the GMRP administrative mode for the port. It may be
enabled or disabled. If this parameter is disabled, Join Time, Leave
Time and Leave All Time have no effect. The factory default is dis-
abled.
CLI L2P
Release 8.0 05/2013 233
4.9 Device Configuration Commands
Mode
Privileged EXEC and User EXEC
Admin Mode
This indicates whether or not IGMP Snooping is globally enabled on
the switch.
Forwarding of Unknown Frames
This displays if and how unknown multicasts are forwarded.
The setting can be Discard, Flood or Query Ports.
The default is Query Ports.
Group Membership Interval
This displays the IGMP Group Membership Interval. This is the
amount of time a switch will wait for a report for a particular group on
a particular interface before it sends a query on that interface. This
value may be configured.
Multicast Control Frame Count
This displays the number of multicast control frames that are
processed by the CPU.
Interfaces Enabled for IGMP Snooping
This is the list of interfaces on which IGMP Snooping is enabled.
Additionally, if a port has a special function, it will be shown to the
right of its slot/port number. There are 3 special functions:
Forward All, Static Query Port and Learned Query Port.
Querier Status (the administrative state).
This displays the IGMP Snooping Querier's administrative status.
Querier Mode (the actual state, read only)
This displays the IGMP Snooping Querier's operating status.
Querier Transmit Interval
This displays the IGMP Snooping Querier's transmit interval in
seconds.
Querier Max. Response Time
This displays the IGMP Snooping Querier's maximum response time
in seconds.
Querier Protocol Version
This displays the IGMP Snooping Querier's protocol version number.
CLI L2P
234 Release 8.0 05/2013
4.9 Device Configuration Commands
CLI L2P
Release 8.0 05/2013 235
4.9 Device Configuration Commands
CLI L2P
236 Release 8.0 05/2013
4.9 Device Configuration Commands
CLI L2P
Release 8.0 05/2013 237
4.9 Device Configuration Commands
CLI L2P
238 Release 8.0 05/2013
4.9 Device Configuration Commands
CLI L2P
Release 8.0 05/2013 239
4.9 Device Configuration Commands
CLI L2P
240 Release 8.0 05/2013
4.9 Device Configuration Commands
Interface
This field displays the number of the interface in slot/port format.
MAC notify
This field displays the status of MAC notification traps for this port.
Possible values: enabled, disabled
Mode
This field displays the mode for which action the device sends a MAC
notification trap.
Possible values: add,remove,all
Last MAC address
This field displays the last MAC address added or removed from the
address table for this interface.
Possible values: Valid MAC address in aa:bb:cc:dd:ee:ff
notation.
Last MAC status
This field displays the status of the last MAC address on this inter-
face.
Possible values: added, removed, other.
CLI L2P
Release 8.0 05/2013 241
4.9 Device Configuration Commands
Session ID
Displays the session number of the port monitor session.
Possible values: 1.
Admin Mode
Displays the status of the port monitoring feature.
Possible values: Enable, Disable.
Probe Port
Displays the interface configured as the probe port (in slot/port nota-
tion). If this value has not been configured, 'Not Configured' will be
displayed.
Mirrored Port
Displays the interface configured as the mirrored port (in slot/port
notation). If this value has not been configured, 'Not Configured'
will be displayed.
Direction
Displays the direction which has been configured for the port.
Possible values: rx (receive), tx (transmit), rx/tx (receive and
transmit)
If this value has not been configured, 'Not Configured' will be
displayed.
CLI L2P
242 Release 8.0 05/2013
4.9 Device Configuration Commands
CLI L2P
Release 8.0 05/2013 243
4.9 Device Configuration Commands
Link Trap
This object determines whether or not to send a trap when link status
changes. The factory default is enabled.
Flow
Indicates if enable flow control is enabled on this port.
Device Status
Indicates whether or not the given port's link status is monitored by
the device status.
VLAN Prio
This object displays the port VLAN priority.
CLI L2P
244 Release 8.0 05/2013
4.9 Device Configuration Commands
CLI L2P
Release 8.0 05/2013 245
4.9 Device Configuration Commands
CLI L2P
246 Release 8.0 05/2013
4.9 Device Configuration Commands
CLI L2P
Release 8.0 05/2013 247
4.9 Device Configuration Commands
CLI L2P
248 Release 8.0 05/2013
4.9 Device Configuration Commands
VLAN ID
There is a VLAN Identifier (VID) associated with each VLAN. The
range of the VLAN ID is 1 to 4042.
VLAN Name
A string associated with this VLAN as a convenience. It can be up to
32 alphanumeric characters long, including blanks. The default is
blank. VLAN ID 1 always has a name of `Default`. This field is
optional.
VLAN Type
Type of VLAN, which can be Default, (VLAN ID = 1), a static (one that
is configured and permanently defined), or Dynamic (one that is cre-
ated by GVRP registration).
VLAN Creation Time
Time since VLAN has been created:
d days, hh:mm:ss (System Uptime).
Interface
Valid slot and port number separated by forward slashes. It is possi-
ble to set the parameters for all ports by using the selectors on the top
line.
Current
Determines the degree of participation of this port in this VLAN. The
permissible values are:
Include - This port is always a member of this VLAN. This is
equivalent to registration fixed in the IEEE 802.1Q standard.
Exclude - This port is never a member of this VLAN. This is equiv-
alent to registration forbidden in the IEEE 802.1Q standard.
Autodetect - Specifies to allow the port to be dynamically regis-
tered in this VLAN via GVRP. The port will not participate in this
VLAN unless a join request is received on this port. This is equivalent
to registration normal in the IEEE 802.1Q standard.
Configured
Determines the configured degree of participation of this port in this
VLAN. The permissible values are:
Include - This port is always a member of this VLAN. This is
equivalent to registration fixed in the IEEE 802.1Q standard.
Exclude - This port is never a member of this VLAN. This is equiv-
alent to registration forbidden in the IEEE 802.1Q standard.
CLI L2P
Release 8.0 05/2013 249
4.9 Device Configuration Commands
CLI L2P
250 Release 8.0 05/2013
4.9 Device Configuration Commands
CLI L2P
Release 8.0 05/2013 251
4.9 Device Configuration Commands
Slot/Port
Valid slot and port number separated by forward slashes. It is possi-
ble to set the parameters for all ports by using the selectors on the top
line.
Port VLAN ID
The VLAN ID that this port will assign to untagged frames or priority
tagged frames received on this port. The value must be for an existing
VLAN. The factory default is 1.
Acceptable Frame Types
Specifies the types of frames that may be received on this port. The
options are 'VLAN only' and 'Admit All'. When set to 'VLAN only',
untagged frames or priority tagged frames received on this port are
discarded. When set to 'Admit All', untagged frames or priority tagged
frames received on this port are accepted and assigned the value of
the Port VLAN ID for this port. With either option, VLAN tagged
frames are forwarded in accordance to the 802.1Q VLAN specifica-
tion.
Ingress Filtering
May be enabled or disabled. When enabled, the frame is discarded if
this port is not a member of the VLAN with which this frame is associ-
ated. In a tagged frame, the VLAN is identified by the VLAN ID in the
tag. In an untagged frame, the VLAN is the Port VLAN ID specified for
the port that received this frame. When disabled, all frames are for-
warded in accordance with the 802.1Q VLAN bridge specification.
The factory default is disabled.
GVRP
The protocol for VLAN administration, GVRP (GARP VLAN Registra-
tion Protocol) is particularly used for the adjustment of terminal
devices and VLAN switches. In realtime, it traces users log-in and
log-off and provides updated configuration data to the network man-
agement system. In order to be able to use this protocol, GVRP has
to be supported by every switch.
GVRP may be enabled or disabled. The factory default is disabled.
Default Priority
The 802.1p priority assigned to tagged packets arriving on the port.
CLI L2P
252 Release 8.0 05/2013
4.9 Device Configuration Commands
CLI L2P
Release 8.0 05/2013 253
4.9 Device Configuration Commands
CLI L2P
254 Release 8.0 05/2013
4.9 Device Configuration Commands
4.9.89 shutdown
This command disables a port.
Default
enabled
Format
shutdown
Mode
Interface Config
U no shutdown
This command enables a port.
Format
no shutdown
Mode
Interface Config
CLI L2P
Release 8.0 05/2013 255
4.9 Device Configuration Commands
U no shutdown all
This command enables all ports.
Format
no shutdown all
Mode
Global Config
CLI L2P
256 Release 8.0 05/2013
4.9 Device Configuration Commands
Note: This command is valid only when the Link Up/Down Flag is enabled.
See ‘snmp-server enable traps linkmode’ command.
Format
snmp trap link-status
Mode
Interface Config
Note: This command is valid only when the Link Up/Down Flag is en-
abled. See ‘snmp-server enable traps linkmode’ command).
Format
no snmp trap link-status
Mode
Interface Config
CLI L2P
Release 8.0 05/2013 257
4.9 Device Configuration Commands
Note: This command is valid only when the Link Up/Down Flag is enabled
(see “snmp-server enable traps linkmode” ).
Format
snmp trap link-status all
Mode
Global Config
Note: This command is valid only when the Link Up/Down Flag is enabled
(see “snmp-server enable traps linkmode”).
Format
no snmp trap link-status all
Mode
Global Config
CLI L2P
258 Release 8.0 05/2013
4.9 Device Configuration Commands
U no spanning-tree bpdumigrationcheck
This command disables BPDU migration check on a given interface. The
all option disables BPDU migration check on all interfaces.
Format
no spanning-tree bpdumigrationcheck {<slot/
port>|all}
Mode
Global Config
CLI L2P
Release 8.0 05/2013 259
4.9 Device Configuration Commands
4.9.94 speed
This command sets the speed and duplex setting for the interface.
Format
speed {<100 | 10> <half-duplex | full-duplex> | 1000
full-duplex}
Mode
Interface Config
CLI L2P
260 Release 8.0 05/2013
4.9 Device Configuration Commands
U no storm-control broadcast
This command disables the egress broadcast limiter globally.
Format
no storm-control broadcast
Mode
Global Config
CLI L2P
Release 8.0 05/2013 261
4.9 Device Configuration Commands
This command sets the frame type for the ingress limiter globally to:
BC or BC+MC.
Format
storm-control ingress-mode {bc | mc+bc}
Mode
Global Config
CLI L2P
262 Release 8.0 05/2013
4.9 Device Configuration Commands
4.9.100storm-control egress-limit
Note: This command is available for the RS20/RS30/RS40, MS20/MS30 and
OCTOPUS devices.
CLI L2P
Release 8.0 05/2013 263
4.9 Device Configuration Commands
4.9.101storm-control ingress-limit
Sets the ingress rate limit in kbit/s. "0" means: no limit.
Format
storm-control ingress-limit <max. ingress rate>
Mode
Interface Config
4.9.102storm-control ingress-mode
Note: This command is available for the RS20/RS30/RS40, MS20/MS30,
OCTOPUS devices.
This command sets the frame type for the ingress limiter to:
All, BC, BC+MC, BC+MC+uUC.
Format
storm-control ingress-mode {all | bc | mc+bc |
uuc+mc+bc}
Mode
Interface Config
CLI L2P
264 Release 8.0 05/2013
4.9 Device Configuration Commands
4.9.103storm-control flowcontrol
This command enables 802.3x flow control for the switch.
Default
disabled
Format
storm-control flowcontrol
Mode
Interface Config
Global Config
U no storm-control flowcontrol
This command disables 802.3x flow control for the switch.
CLI L2P
Release 8.0 05/2013 265
4.9 Device Configuration Commands
Default
enabled
Format
storm-control flowcontrol
Mode
Interface Config
CLI L2P
266 Release 8.0 05/2013
4.9 Device Configuration Commands
4.9.105vlan
This command creates a new VLAN and assigns it an ID. The ID is a valid
VLAN identification number (ID 1 is reserved for the default VLAN). VLAN
range is 1-4042.
Format
vlan <1-4042>
Mode
VLAN database
U no vlan
This command deletes an existing VLAN. The ID is a valid VLAN identifi-
cation number (ID 1 is reserved for the default VLAN). VLAN range is
1-4042.
Format
no vlan <1-4042>
Mode
VLAN database
CLI L2P
Release 8.0 05/2013 267
4.9 Device Configuration Commands
4.9.106vlan0-transparent-mode
Activate the “Transparent Mode“ to be able to switch priority tagged frames
without a VLAN affiliation thus with VLAN-ID “0”.
In this mode the VLAN-ID “0” persists in the frame, irrespective of the Port
VLAN ID setting in the “VLAN Port“ dialog.
Note: For PowerMICE, MACH100, MACH1000 and MACH4000:
In transparency mode devices ignore received vlan tags. Set the vlan mem-
bership of the ports to untagged for all vlans.
Note: For RS20/RS30/RS40, MS20/MS30 and OCTOPUS:
In transparency mode devices ignore the configured port vlan id. Set the vlan
membership of the ports from vlan 1 to untagged or member.
Format
vlan0-transparent-mode {disable|enable}
Mode
VLAN database
CLI L2P
268 Release 8.0 05/2013
4.9 Device Configuration Commands
4.9.107vlan acceptframe
This command sets the frame acceptance mode per interface. For VLAN
Only mode, untagged frames or priority frames received on this interface are
discarded. For Admit All mode, untagged frames or priority frames received
on this interface are accepted and assigned the value of the interface VLAN
ID for this port. With either option, VLAN tagged frames are forwarded in ac-
cordance with the IEEE 802.1Q VLAN Specification.
Default
Admit All
Format
vlan acceptframe <vlanonly | all | untaggedonly>
Mode
Interface Config
all
Untagged frames or priority frames received on this interface are
accepted and assigned the value of the interface VLAN ID for this
port.
vlanonly
Only frames received with a VLAN tag will be forwarded. Other
frames will be dropped.
untaggedonly
Only frames received without a VLAN tag will be forwarded. Other
frames will be dropped.
Note: This command is available for devices of the RS20/RS30/
RS40, MS20/MS30, MACH102, RSR20/RSR30, MACH1020/
MACH1030 and OCTOPUS family.
CLI L2P
Release 8.0 05/2013 269
4.9 Device Configuration Commands
U no vlan acceptframe
This command sets the frame acceptance mode per interface to Admit
All. For Admit All mode, untagged frames or priority frames received on
this interface are accepted and assigned the value of the interface VLAN
ID for this port. With either option, VLAN tagged frames are forwarded in
accordance with the IEEE 802.1Q VLAN Specification.
Format
no vlan acceptframe
Mode
Interface Config
4.9.108vlan database
This command switches into the global VLAN mode.
Default
Admit All
Format
vlan database
Mode
Privileged EXEC
CLI L2P
270 Release 8.0 05/2013
4.9 Device Configuration Commands
4.9.109vlan ingressfilter
This command enables ingress filtering. If ingress filtering is disabled, frames
received with VLAN IDs that do not match the VLAN membership of the re-
ceiving interface are admitted and forwarded to ports that are members of
that VLAN.
Default
disabled
Format
vlan ingressfilter
Mode
Interface Config
U no vlan ingressfilter
This command disables ingress filtering. If ingress filtering is disabled,
frames received with VLAN IDs that do not match the VLAN membership
of the receiving interface are admitted and forwarded to ports that are
members of that VLAN.
Format
no vlan ingressfilter
Mode
Interface Config
CLI L2P
Release 8.0 05/2013 271
4.9 Device Configuration Commands
4.9.110vlan name
This command changes the name of a VLAN. The name is an alphanumeric
string of up to 32 characters, and the ID is a valid VLAN identification number.
ID range is 1-4042.
Default
The name for VLAN ID 1 is always Default. The name for other
VLANs is defaulted to a blank string.
Format
vlan name <1-4042> <newname>
Mode
VLAN database
U no vlan name
This command sets the name of a VLAN to a blank string. The VLAN ID
is a valid VLAN identification number. ID range is 1-4042.
Format
no vlan name <1-4042>
Mode
VLAN database
CLI L2P
272 Release 8.0 05/2013
4.9 Device Configuration Commands
4.9.111vlan participation
This command configures the degree of participation for a specific interface
in a VLAN. The ID is a valid VLAN identification number, and the interface is
a valid interface number .
Format
vlan participation
<exclude | include | auto> <1-4042>
Mode
Interface Config
CLI L2P
Release 8.0 05/2013 273
4.9 Device Configuration Commands
CLI L2P
274 Release 8.0 05/2013
4.9 Device Configuration Commands
CLI L2P
Release 8.0 05/2013 275
4.9 Device Configuration Commands
CLI L2P
276 Release 8.0 05/2013
4.9 Device Configuration Commands
CLI L2P
Release 8.0 05/2013 277
4.9 Device Configuration Commands
CLI L2P
278 Release 8.0 05/2013
4.9 Device Configuration Commands
4.9.117vlan pvid
This command changes the VLAN ID per interface.
Default
1
Format
vlan pvid <1-4042>
Mode
Interface Config
U no vlan pvid
This command sets the VLAN ID per interface to 1.
Format
no vlan pvid <1-4042>
Mode
Interface Config
CLI L2P
Release 8.0 05/2013 279
4.9 Device Configuration Commands
4.9.118vlan tagging
This command configures the tagging behavior for a specific interface in a
VLAN to enabled. If tagging is enabled, traffic is transmitted as tagged
frames. If tagging is disabled, traffic is transmitted as untagged frames. The
ID is a valid VLAN identification number.
Format
vlan tagging <1-4042>
Mode
Interface Config
U no vlan tagging
This command configures the tagging behavior for a specific interface in
a VLAN to disabled. If tagging is disabled, traffic is transmitted as
untagged frames. The ID is a valid VLAN identification number.
Format
no vlan tagging <1-4042>
Mode
Interface Config
CLI L2P
280 Release 8.0 05/2013
4.9 Device Configuration Commands
U no voice vlan
This command disables the Voice VLAN feature.
Default
Disabled
Format
no voice vlan
Mode
Global Config
CLI L2P
Release 8.0 05/2013 281
4.9 Device Configuration Commands
U no voice vlan
This command disables the Voice VLAN feature on the interface.
Default
Disabled
Format
no voice vlan
Mode
Interface Config
CLI L2P
282 Release 8.0 05/2013
4.9 Device Configuration Commands
CLI L2P
Release 8.0 05/2013 283
4.9 Device Configuration Commands
CLI L2P
284 Release 8.0 05/2013
4.10 User Account Management Commands
4.10.1 disconnect
This command closes a telnet session.
Format
disconnect {<sessionID> | all}
Mode
Privileged EXEC
Session ID
Enter the session ID (1-11).
CLI L2P
Release 8.0 05/2013 285
4.10 User Account Management Commands
CLI L2P
286 Release 8.0 05/2013
4.10 User Account Management Commands
CLI L2P
Release 8.0 05/2013 287
4.10 User Account Management Commands
CLI L2P
288 Release 8.0 05/2013
4.10 User Account Management Commands
CLI L2P
Release 8.0 05/2013 289
4.10 User Account Management Commands
U no users access
This command deletes access for a user.
Format
no users access <username>
Mode
Global Config
CLI L2P
290 Release 8.0 05/2013
4.10 User Account Management Commands
U no users name
This command removes an operator.
Format
no users name <username>
Mode
Global Config
Note:
The ‘admin’ user account cannot be deleted.
CLI L2P
Release 8.0 05/2013 291
4.10 User Account Management Commands
U no users passwd
This command sets the password of an existing operator to blank. When
a password is changed, a prompt will ask for the operator's former pass-
word. If none, press enter.
Format
no users passwd <username> {<password>}
Mode
Global Config
CLI L2P
292 Release 8.0 05/2013
4.10 User Account Management Commands
CLI L2P
Release 8.0 05/2013 293
4.10 User Account Management Commands
CLI L2P
294 Release 8.0 05/2013
4.10 User Account Management Commands
CLI L2P
Release 8.0 05/2013 295
4.11 System Utilities
4.11.1 address-conflict
This command configures the setting for detection possible address conflicts
of the agent´s IP address with other devices´ IP addresses in the network.
Format
address-conflict
{detection-mode { active-only | disable |
enable | passive-only}|
ongoing-detection { disable | enable } }
Mode
Global Config
detection mode
Configure the device's address conflict detection mode (active-only,
disable, enable or passive-only). Default: enable.
ongoing detection
Disable or enable the ongoing address conflict detection.
Default: enable.
CLI L2P
296 Release 8.0 05/2013
4.11 System Utilities
CLI L2P
Release 8.0 05/2013 297
4.11 System Utilities
4.11.4 cablestatus
This command tests the cable attached to an interface for short or open
circuit. During the test the traffic is interrupted on this port.
Format
cablestatus <slot/port>
Mode
Privileged EXEC
CLI L2P
298 Release 8.0 05/2013
4.11 System Utilities
4.11.6 traceroute
This command is used to discover the routes that packets actually take when
traveling to their destination through the network on a hop-by-hop basis.
<ipaddr> should be a valid IP address.
The optional port parameter is the UDP port used as the destination of pack-
ets sent as part of the traceroute. This port should be an unused port on the
destination system. [port] should be a valid decimal integer in the range of 0
(zero) to 65,535. The default value is 33,434.
Format
traceroute <ipaddr> [port]
Mode
Privileged EXEC
CLI L2P
Release 8.0 05/2013 299
4.11 System Utilities
4.11.10clear counters
This command clears the stats for a specified <slot/port>or for all the ports or
for the entire switch based upon the argument.
Format
clear counters {<slot/port> | all}
Mode
Privileged EXEC
CLI L2P
300 Release 8.0 05/2013
4.11 System Utilities
4.11.11clear hiper-ring
This command clears the HIPER Ring configuration (deletes it).
Format
clear hiper-ring
Mode
Privileged EXEC
4.11.12clear igmpsnooping
This command clears the tables managed by the IGMP Snooping function
and will attempt to delete these entries from the Multicast Forwarding Data-
base.
Format
clear igmpsnooping
Mode
Privileged EXEC
CLI L2P
Release 8.0 05/2013 301
4.11 System Utilities
4.11.13clear mac-addr-table
This command clears the switch's MAC address table (the forwarding data-
base that contains the learned MAC addresses).
Note: this command does not affect the MAC filtering table.
Format
clear mac-addr-table
Mode
Privileged EXEC
4.11.14clear pass
This command resets all user passwords to the factory defaults without pow-
ering off the switch. You are prompted to confirm that the password reset
should proceed.
Format
clear pass
Mode
Privileged EXEC
CLI L2P
302 Release 8.0 05/2013
4.11 System Utilities
4.11.15clear link-aggregation
This command clears all link-aggregations (LAGs).
Format
clear link-aggregation
Mode
Privileged EXEC
4.11.16clear signal-contact
This command clears the signal-contact output configuration.
Switches the signal contact 1´s mode to auto and its manual setting to open.
Switches the signal contact 2´s mode to manual and its manual setting to
closed.
Enables the monitoring of the power supplies for signal contact 1 only.
Disables the sending of signal contact traps.
Format
clear signal-contact
Mode
Privileged EXEC
CLI L2P
Release 8.0 05/2013 303
4.11 System Utilities
4.11.17clear traplog
This command clears the trap log.
Format
clear traplog
Mode
Privileged EXEC
4.11.18clear ring-coupling
This command clears the ring-coupling configuration.
Format
clear ring-coupling
Mode
Privileged EXEC
4.11.19clear vlan
This command resets VLAN configuration parameters to the factory defaults.
Format
clear vlan
Mode
Privileged EXEC
CLI L2P
304 Release 8.0 05/2013
4.11 System Utilities
4.11.20config-watchdog
If the function is enabled and the connection to the switch is interrupted for
longer than the time specified in “timeout [s]”, the switch then loads the last
configuration saved.
Format
config-watchdog {admin-state {disable|enable}|
timeout <10..600>}
Mode
Global Config
admin-state
Enable or disable the Auto Configuration Undo feature
(default: disabled).
timeout
Configure the Auto Configuration Undo timeout (unit: seconds).
4.11.21copy
This command uploads and downloads to/from the switch. Remote URLs
can be specified using tftp.
copy (without parameters) displays a brief explanation of the most important
copy commands. A list of valid commands is provided below.
The command can be used to the save the running configuration to nvram by
specifying the source as system:running-config and the destination as
nvram:startup-config.
Default
none
Format
copy
copy aca:script <sourcefilename> nvram:script
[targetfilename]
copy aca:capturefilter <sourcefilename>
nvram:capturefilter [targetfilename]
CLI L2P
Release 8.0 05/2013 305
4.11 System Utilities
CLI L2P
306 Release 8.0 05/2013
4.11 System Utilities
CLI L2P
Release 8.0 05/2013 307
4.11 System Utilities
CLI L2P
308 Release 8.0 05/2013
4.11 System Utilities
CLI L2P
Release 8.0 05/2013 309
4.11 System Utilities
CLI L2P
310 Release 8.0 05/2013
4.11 System Utilities
CLI L2P
Release 8.0 05/2013 311
4.11 System Utilities
U no clibanner
This command deletes an existing CLI banner file.
CLI L2P
312 Release 8.0 05/2013
4.11 System Utilities
U clear sfp-white-list
Use this command to delete the SFP white list file from the flash
memory.
Note: The clear config factory command deletes the SFP
white list, too.
CLI L2P
Release 8.0 05/2013 313
4.11 System Utilities
4.11.22device-status connection-error
This command configures the device status link error monitoring for this port.
Default
ignore
Format
device-status connection-error {ignore|propagate}
Mode
Interface Config
CLI L2P
314 Release 8.0 05/2013
4.11 System Utilities
4.11.23device-status monitor
This command configures the device-status.
Format
device-status monitor
{aca-removal | all | connection-error |
hiper-ring |
module-removal | power-supply-1 |
power-supply-2 | power-supply-3-1 |
power-supply-3-2 |power-supply-4-1 |
power-supply-4-2 | ring-coupling | temperature }
{error|ignore}
device-status trap {disable|enable}
Mode
Global Config
monitor
Determines the monitoring of the selected event or all events.
– error If the given event signals an error, the device state will also
signal error,
– ignore Ignore the given event - even if it signals an error, the
device state will not signal 'error' because of that.
trap
Configure if a trap is sent when the device status changes its state.
– enable enables sending traps,
– disable disables sending traps.
CLI L2P
Release 8.0 05/2013 315
4.11 System Utilities
4.11.24logout
This command closes the current telnet connection or resets the current se-
rial connection.
4.11.25ping
This command checks if another computer is on the network and listens for
connections. To use this command, configure the switch for network (in-
band) connection. The source and target devices must have the ping utility
enabled and running on top of TCP/IP. The switch can be pinged from any IP
workstation with which the switch is connected through the default VLAN
(VLAN 1), as long as there is a physical path between the switch and the
workstation. The terminal interface sends, three pings to the target station.
Format
ping <ipaddr>
Mode
Privileged EXEC and User EXEC
CLI L2P
316 Release 8.0 05/2013
4.11 System Utilities
4.11.26signal-contact connection-error
This command configures the signal contact link error monitoring for this port.
Format
signal-contact connection-error {disable|enable}
Mode
Interface Config
disable
A link down event on this port will be not monitored by a signal con-
tact (default).
enable
A link down event on this port will be monitored by a signal contact.
4.11.27signal-contact
This command configures the signal contacts.
Format
signal-contact {1|2|all}
{mode {auto|device-status|manual}
|monitor {aca-removal|
all|
connection-error|hiper-ring|module-removal
|power-supply-1| power-supply-2
|power-supply-3-1|power-supply-3-2
|power-supply-4-1|power-supply-4-2
|ring-coupling|temperature} {disable|enable}
|state {closed|open}
|trap {disable|enable} }
Mode
Global Config
CLI L2P
Release 8.0 05/2013 317
4.11 System Utilities
Contact No.
Selection of the signal contact:
– 1 signal contact 1,
– 2 signal contact 2,
– all signal contact 1 and signal contact 2.
mode
Selection of the operational mode:
– auto function monitoring,
– device-status the device-status determines the signal contact´s
status.
– manual manually setting the signal contact.
monitor
Enables or disables the monitoring of the selected event or all events.
– enable monitoring,
– disable no monitoring.
state
Set the manual setting of the signal contact:
– closed ,
– open.
Only takes immediate effect in manual mode.
trap
Configures the sending of traps concerning the signal contact.
– enable enables sending traps,
– disable disables sending traps.
CLI L2P
318 Release 8.0 05/2013
4.11 System Utilities
4.11.28temperature
CLI L2P
Release 8.0 05/2013 319
4.11 System Utilities
4.11.29reboot
This command resets the switch (cold start) after a given time delay, for warm
start See “reload” on page 322. Reset means that all network connections
are terminated and the boot code executes. The switch uses the stored con-
figuration to initialize the switch. You are prompted to confirm that the reset
should proceed. A successful reset is indicated by the LEDs on the switch.
Format
reboot {delay <seconds>}
Mode
Privileged EXEC
<seconds>
The number of seconds after which the switch will reboot.
Value range: None (no reboot sceduled), 0 - 2,147,483 sec (= 596 h +
31 min + 23 sec).
U clear reboot
This command cancels a scheduled reboot.
CLI L2P
320 Release 8.0 05/2013
4.11 System Utilities
4.11.30show reboot
This command displays if a reboot is sceduled for the device. If sceduled, the
command displays the number of seconds after which the switch will reboot.
Format
show reboot
Modes
Privileged EXEC
User Exec
<seconds>
The number of seconds after which the switch will reboot.
Value range: None (no reboot sceduled), 0 - 2,147,483 sec (= 596 h +
31 min + 23 sec) .
CLI L2P
Release 8.0 05/2013 321
4.11 System Utilities
4.11.31reload
This command enables you to reset the switch (warm start) after a given time
delay, for cold start See “reboot” on page 320.
Note: First, the device is checking the software in the flash memory and then
it resets. If a warm start is not possible, the device automatically executes a
cold start.
Reset means that all network connections are terminated and the boot code
executes. The switch uses the stored configuration to initialize the switch.
You are prompted to confirm that the reset should proceed. A successful
reset is indicated by the LEDs on the switch.
Format
reload {delay <seconds>}
Mode
Privileged EXEC
<seconds>
The number of seconds after which the switch will reload.
Value range: 0 - 2,147,483 sec.
U clear reload
This command cancels a scheduled reload.
CLI L2P
322 Release 8.0 05/2013
4.11 System Utilities
4.11.32show reload
This command displays if a reload is sceduled for the device. If sceduled, the
command displays the number of seconds after which the switch will reload.
Format
show reload
Modes
Privileged EXEC
User Exec
<seconds>
The number of seconds after which the switch will reload.
Possible values: None (no reload sceduled), 0 - 2,147,483 sec.
CLI L2P
Release 8.0 05/2013 323
4.12 LLDP - Link Layer Discovery Protocol
CLI L2P
324 Release 8.0 05/2013
4.12 LLDP - Link Layer Discovery Protocol
CLI L2P
Release 8.0 05/2013 325
4.12 LLDP - Link Layer Discovery Protocol
CLI L2P
326 Release 8.0 05/2013
4.12 LLDP - Link Layer Discovery Protocol
CLI L2P
Release 8.0 05/2013 327
4.12 LLDP - Link Layer Discovery Protocol
CLI L2P
328 Release 8.0 05/2013
4.12 LLDP - Link Layer Discovery Protocol
CLI L2P
Release 8.0 05/2013 329
4.12 LLDP - Link Layer Discovery Protocol
sys-cap
Display the port's LLDP TLV inclusion of System Capabilities.
sys-desc
Display the port's LLDP TLV inclusion of System Description.
sys-name
Display the port's LLDP TLV inclusion of System Name.
vlan-name
Display the port's LLDP TLV inclusion of VLAN Name.
CLI L2P
330 Release 8.0 05/2013
4.12 LLDP - Link Layer Discovery Protocol
CLI L2P
Release 8.0 05/2013 331
4.12 LLDP - Link Layer Discovery Protocol
CLI L2P
332 Release 8.0 05/2013
4.12 LLDP - Link Layer Discovery Protocol
CLI L2P
Release 8.0 05/2013 333
4.12 LLDP - Link Layer Discovery Protocol
CLI L2P
334 Release 8.0 05/2013
4.12 LLDP - Link Layer Discovery Protocol
ether-port-info
Display the remote data's port Ethernet properties only (group com-
mand, outputs: Port Autoneg. Supported, Port Autoneg. Enabled,
Port Autoneg. Advertized Capabilities and Port Operational MAU
Type).
inlinepower
Displays the remote port's Power over Ethernet capabilities (PoE,
IEEE 802.3af). Included are if the remote device is a PSE (Power
Source Device) or a PD (Powered Device), if PoE is supported and if
the power pairs are selectable.
link-aggregation-info
Display the remote data's link aggregation information only (group
command, outputs: Link Agg. Status and Link Agg. Port ID).
mgmt-addr
Display the remote data's management address only.
profinetio-port-info
Display the remote data's Port ProfinetIO properties only.
port-desc
Display the port's LLDP TLV inclusion of Port Description.
port-id
Display the remote data's port ID only.
summary
Display remote data in summary format (table with most important
data only, strings will be truncated if necessary, indicated by an
appended '>' character).
sys-desc
Display the remote data's system description only.
sys-name
Display the remote data's system name only.
vlan-info
Display the remote data's VLAN information only (group command,
outputs: Port VLAN ID, Membership VLAN IDs and their respective
names).
CLI L2P
Release 8.0 05/2013 335
4.12 LLDP - Link Layer Discovery Protocol
4.12.18lldp
Enable/disable the LLDP/IEEE802.1AB functionality on this device. If dis-
abled, the LLDP protocol will become inactive, but the LLDP MIBs can still be
accessed. This command is a shorthand notation for lldp config chas-
sis admin-state {off|on} (see “lldp config chassis admin-state” on
page 337).
U no lldp
Disable the LLDP/IEEE802.1AB functionality on this device.
Format
no lldp
Mode
Global Config
CLI L2P
336 Release 8.0 05/2013
4.12 LLDP - Link Layer Discovery Protocol
CLI L2P
Release 8.0 05/2013 337
4.12 LLDP - Link Layer Discovery Protocol
CLI L2P
338 Release 8.0 05/2013
4.12 LLDP - Link Layer Discovery Protocol
CLI L2P
Release 8.0 05/2013 339
4.12 LLDP - Link Layer Discovery Protocol
4.12.26lldp admin-state
Configure the port's LLDP admin state (if LLDP/IEEE802.1AB frames will be
transmitted to and/or received from the standard IEEE multicast address
01:80:c2:00:00:0e).
CLI L2P
340 Release 8.0 05/2013
4.12 LLDP - Link Layer Discovery Protocol
4.12.27lldp fdb-mode
Configure the port's LLDP FDB mode.
4.12.28lldp hm-mode
Configure the port's LLDP Hirschmann mode (if LLDP/IEEE802.1AB frames
will be transmitted to and/or received from the Hirschmann-specific multicast
address 01:80:63:2f:ff:0b).
CLI L2P
Release 8.0 05/2013 341
4.12 LLDP - Link Layer Discovery Protocol
4.12.29lldp max-neighbors
Configure the port's LLDP max. no. of neighbors (min.: 1, max.: 50,
default: 10).
Format
lldp max-neighbors <1..50>
Mode
Interface Config
CLI L2P
342 Release 8.0 05/2013
4.12 LLDP - Link Layer Discovery Protocol
4.12.30lldp med
LLDP for Media Endpoint Devices (LLDP-MED) is an extension to LLDP that
operates between endpoint devices such as IP phones, Voice / Media Gate-
ways, Media Servers, IP Communications Controllers or other VoIP devices
or servers, and network devices such as switches. It specifically provides
support for voice over IP (VoIP) applications. In this purpose, it provides an
additional set of common advertisement messages (TLVs), for capabilities
discovery, network policy, Power over Ethernet, inventory management and
location information.
Use this command to enable MED. By enabling MED, you will be effectively
enabling the transmit and receive function of LLDP.
Default
Enabled
Format
lldp med
Mode
Interface Config
U no lldp med
Use this command to disable MED.
Format
no lldp med
Mode
Interface Config
CLI L2P
Release 8.0 05/2013 343
4.12 LLDP - Link Layer Discovery Protocol
CLI L2P
344 Release 8.0 05/2013
4.12 LLDP - Link Layer Discovery Protocol
CLI L2P
Release 8.0 05/2013 345
4.12 LLDP - Link Layer Discovery Protocol
CLI L2P
346 Release 8.0 05/2013
4.12 LLDP - Link Layer Discovery Protocol
CLI L2P
Release 8.0 05/2013 347
4.12 LLDP - Link Layer Discovery Protocol
CLI L2P
348 Release 8.0 05/2013
4.12 LLDP - Link Layer Discovery Protocol
4.12.37lldp notification
Configure the port's LLDP notification setting (on or off, default: off).
Format
lldp notification <{off|on}>
Mode
Interface Config
CLI L2P
Release 8.0 05/2013 349
4.12 LLDP - Link Layer Discovery Protocol
CLI L2P
350 Release 8.0 05/2013
4.12 LLDP - Link Layer Discovery Protocol
CLI L2P
Release 8.0 05/2013 351
4.12 LLDP - Link Layer Discovery Protocol
CLI L2P
352 Release 8.0 05/2013
4.12 LLDP - Link Layer Discovery Protocol
CLI L2P
Release 8.0 05/2013 353
4.12 LLDP - Link Layer Discovery Protocol
CLI L2P
354 Release 8.0 05/2013
4.12 LLDP - Link Layer Discovery Protocol
4.12.56name
Set or remove a descriptive name for the current interface
(physical ports only).
Format
name <descriptive name>
Mode
Interface Config
<descriptive name>
Enter a descriptive name for the current interface (physical ports
only). Max. length is 20 characters.
Note: If it contains blanks or exclamation marks (!), enclose it in quo-
tation marks ("). The description itself must not contain any quotation
marks (' or "), question marks (?) or backslashes (\).
U no name
Delete the descriptive name for the current interface (physical ports
only).
Format
no name
Mode
Interface Config
CLI L2P
Release 8.0 05/2013 355
4.13 SNTP - Simple Network Time Protocol
CLI L2P
356 Release 8.0 05/2013
4.13 SNTP - Simple Network Time Protocol
CLI L2P
Release 8.0 05/2013 357
4.13 SNTP - Simple Network Time Protocol
CLI L2P
358 Release 8.0 05/2013
4.13 SNTP - Simple Network Time Protocol
disable-after-sync
Show if the SNTP client will be disabled once it is synchronized to the
time server.
offset
Show the local time's offset (in minutes) with respect to UTC (positive
values for locations east of Greenwich).
request-interval
Show the SNTP Client's request interval (unit: seconds).
server
Show the SNTP Client's server IP addresses.
server primary
Show the SNTP Client's primary server IP addresses.
server secondary
Show the SNTP Client's redundant server IP addresses.
server threshold
Show the SNTP Client's threshold in milliseconds.
CLI L2P
Release 8.0 05/2013 359
4.13 SNTP - Simple Network Time Protocol
CLI L2P
360 Release 8.0 05/2013
4.13 SNTP - Simple Network Time Protocol
4.13.8 no sntp
This command disables sntp.
Format
no sntp
Mode
Global Config
CLI L2P
Release 8.0 05/2013 361
4.13 SNTP - Simple Network Time Protocol
CLI L2P
362 Release 8.0 05/2013
4.13 SNTP - Simple Network Time Protocol
U no sntp accept-broadcast
Disable the SNTP Client accepts SNTP broadcasts.
Format
no sntp client accept-broadcast
Mode
Global Config
CLI L2P
Release 8.0 05/2013 363
4.13 SNTP - Simple Network Time Protocol
CLI L2P
364 Release 8.0 05/2013
4.13 SNTP - Simple Network Time Protocol
CLI L2P
Release 8.0 05/2013 365
4.13 SNTP - Simple Network Time Protocol
CLI L2P
366 Release 8.0 05/2013
4.13 SNTP - Simple Network Time Protocol
CLI L2P
Release 8.0 05/2013 367
4.13 SNTP - Simple Network Time Protocol
CLI L2P
368 Release 8.0 05/2013
4.13 SNTP - Simple Network Time Protocol
4.13.20sntp operation
Enable/Disable the SNTP function.
Format
sntp operation <on | off> |
client { on | off } |
server { on | off }
Mode
Global Config
client
Enable or disable SNTP Client.
server
Enable or disable SNTP Server.
U no sntp operation
Disable the SNTP Client and Server.
Format
no sntp operation
Mode
Global Config
CLI L2P
Release 8.0 05/2013 369
4.13 SNTP - Simple Network Time Protocol
CLI L2P
370 Release 8.0 05/2013
4.14 PTP - Precision Time Protocol
These commands show and configure the PTP (IEEE 1588) parameters.
CLI L2P
Release 8.0 05/2013 371
4.14 PTP - Precision Time Protocol
CLI L2P
372 Release 8.0 05/2013
4.14 PTP - Precision Time Protocol
CLI L2P
Release 8.0 05/2013 373
4.14 PTP - Precision Time Protocol
CLI L2P
374 Release 8.0 05/2013
4.14 PTP - Precision Time Protocol
CLI L2P
Release 8.0 05/2013 375
4.14 PTP - Precision Time Protocol
CLI L2P
376 Release 8.0 05/2013
4.14 PTP - Precision Time Protocol
CLI L2P
Release 8.0 05/2013 377
4.14 PTP - Precision Time Protocol
v2-transparent-clock
Set the clock mode to 'v2 Transparent Clock'. This specifies the trans-
parent-clock mode (one-step) as described in the IEEE1588-2008
(PTPv2) standard.
CLI L2P
378 Release 8.0 05/2013
4.14 PTP - Precision Time Protocol
4.14.10ptp v1 preferred-master
Configure the PTPv1 (IEEE1588-2002) specific settings.
Specify if the local switch shall be regarded as a preferred master clock (i. e.,
if it will remain master in the presence of disconnection or connection of other
clocks).
Format
ptp v1 preferred-master {true|false}
Mode
Global Config
true
The local switch shall be regarded as a preferred master clock.
false
The local switch shall not be regarded as a preferred master clock.
CLI L2P
Release 8.0 05/2013 379
4.14 PTP - Precision Time Protocol
4.14.11ptp v1 re-initialize
Configure the PTPv1 (IEEE1588-2002) specific settings.
Re-initialize the clocks in the local subdomain with the currently configured
settings. Changes in the subdomain name or the sync interval will only take
effect after this command.
Format
ptp v1 re-initialize
Mode
Global Config
4.14.12ptp v1 subdomain-name
Configure the PTPv1 (IEEE1588-2002) specific settings.
Enter a Precision Time Protocol subdomain name. The default is "_DFLT".
Note: Changes are only applied after the 're-initialize' command or after a re-
boot if the configuration was saved.
Format
ptp v1 subdomain-name <subdomain name>
Mode
Global Config
<subdomain name>
Enter a PTP subdomain name (up to 16 characters). Valid characters
range from hex value 0x21 (!) up to and including hex value 0x7e (~).
Enter special characters (\, !, ', ", ?) by preceding them with the
escape character (\), e. g., as \\, \!, \', \", \?. The subdomain name
must not be empty. The default is "_DFLT".
CLI L2P
380 Release 8.0 05/2013
4.14 PTP - Precision Time Protocol
4.14.13ptp v1 sync-interval
Configure the PTPv1 (IEEE1588-2002) specific settings.
Configure the Precision Time Protocol sync interval. The sync interval is the
interval (in seconds) between successive sync messages issued by a master
clock.
Valid values are: sec-1, sec-2, sec-8, sec-16, and sec-64. Default is sec-2.
Note: Changes are only applied after the 're-initialize' command or after a
reboot if the configuration was saved.
Format
ptp v1 sync-interval {sec-1|sec-2|sec-8|sec-16|
sec-64}
Mode
Global Config
sec-1
Set the PTP sync interval to sec-1 (1 sec).
sec-2
Set the PTP sync interval to sec-2 (2 sec).
sec-8
Set the PTP sync interval to sec-8 (8 sec).
sec-16
Set the PTP sync interval to sec-16 (16 sec).
sec-64
Set the PTP sync interval to sec-64 (64 sec).
CLI L2P
Release 8.0 05/2013 381
4.14 PTP - Precision Time Protocol
CLI L2P
382 Release 8.0 05/2013
4.14 PTP - Precision Time Protocol
CLI L2P
Release 8.0 05/2013 383
4.14 PTP - Precision Time Protocol
CLI L2P
384 Release 8.0 05/2013
4.14 PTP - Precision Time Protocol
4.14.21ptp v1 burst
Enable or disable the burst feature for synchronization runs during a
synchronization interval. Default is disable.
Format
ptp v1 burst {enable|disable}
Mode
Interface Config
enable
During a synchronization interval, there are 2 to 8 synchronization
runs. This permits faster synchronization when the network load is
high.
disable
During a synchronization interval, there is only one synchronization
run.
4.14.22ptp v1 operation
Enable or disable the sending and receiving / processing of PTP
synchronization messages. Default is enable.
Format
ptp v1 operation {enable|disable}
Mode
Interface Config
enable
Port sends and receives/ processes PTP synchronization messages.
disable
Port blocks PTP synchronization messages.
CLI L2P
Release 8.0 05/2013 385
4.14 PTP - Precision Time Protocol
CLI L2P
386 Release 8.0 05/2013
4.14 PTP - Precision Time Protocol
CLI L2P
Release 8.0 05/2013 387
4.14 PTP - Precision Time Protocol
CLI L2P
388 Release 8.0 05/2013
4.14 PTP - Precision Time Protocol
CLI L2P
Release 8.0 05/2013 389
4.14 PTP - Precision Time Protocol
CLI L2P
390 Release 8.0 05/2013
4.14 PTP - Precision Time Protocol
CLI L2P
Release 8.0 05/2013 391
4.14 PTP - Precision Time Protocol
CLI L2P
392 Release 8.0 05/2013
4.14 PTP - Precision Time Protocol
CLI L2P
Release 8.0 05/2013 393
4.14 PTP - Precision Time Protocol
CLI L2P
394 Release 8.0 05/2013
4.14 PTP - Precision Time Protocol
CLI L2P
Release 8.0 05/2013 395
4.15 PoE - Power over Ethernet
These commands show and configure the Power over Ethernet (IEEE
802.3af) parameters.
CLI L2P
396 Release 8.0 05/2013
4.15 PoE - Power over Ethernet
CLI L2P
Release 8.0 05/2013 397
4.15 PoE - Power over Ethernet
CLI L2P
398 Release 8.0 05/2013
4.16 PoE+ - Power over Ethernet Plus
CLI L2P
Release 8.0 05/2013 399
4.16 PoE+ - Power over Ethernet Plus
Reserved Power
Shows the maximum power which the device provides for all PoE+
devices together which are connected to the PoE+ module, based on
their classification.
Delivered Power
Shows the current demand for power on all PoE+ ports of the module
(valid range: 0 - 248 W).
Send Traps
Shows, if the function is enabled/disabled. If send traps is enabled,
the device will send a trap if the power threshold exceeds or falls
below the power limit or if the PoE+ power supply is switched on/off
on one or more ports.
Power Threshold
Power threshold in per cent of the nominal power. If the power is
exceeding/falling below this threshold, the device will send a trap.
CLI L2P
400 Release 8.0 05/2013
4.16 PoE+ - Power over Ethernet Plus
CLI L2P
Release 8.0 05/2013 401
4.17 Port monitor
The port monitor feature monitors certain port (or global) states or changes
and performs a certain action, when the specified condition occurs.
Using this commands, you can disable a port and send a trap (see "port ad-
min shutdown").
Disabling a port by condition will not modify the configuration and therefore
not keep the port in disabled state after reload/reboot.
If a port was disabled by the Port-Monitor the port can be enabled again with
a port monitor reset command (see “port-monitor reset”).
CLI L2P
402 Release 8.0 05/2013
4.17 Port monitor
CLI L2P
Release 8.0 05/2013 403
4.17 Port monitor
CLI L2P
404 Release 8.0 05/2013
4.17 Port monitor
CLI L2P
Release 8.0 05/2013 405
4.17 Port monitor
CLI L2P
406 Release 8.0 05/2013
4.17 Port monitor
CLI L2P
Release 8.0 05/2013 407
4.17 Port monitor
CLI L2P
408 Release 8.0 05/2013
4.17 Port monitor
Note: This command is available for the MACH104 and MACH1040 devices.
Use this command to configure the polling-interval in seconds for overload-
detection condition.
Default
1
Format
port-monitor condition overload-detection
polling-interval <interval value>
Mode
Global Config
<interval value>
Enter a polling-interval value for overload-detection.
Possible values: 1..20. Default: 1.
Note: This command is available for the MACH104 and MACH1040 devices.
Use this command to configure the Port Monitor overload-detection settings.
Format
port-monitor condition overload-detection
{ [traffic-type bc | bc+mc | all] |
[threshold-type pps | kbps | link-capacity ] |
[lower-threshold <threshold value>] |
CLI L2P
Release 8.0 05/2013 409
4.17 Port monitor
CLI L2P
410 Release 8.0 05/2013
4.17 Port monitor
Note: This command is available for the MACH104 and MACH1040 devices.
Use this command to display information about port-monitor overload-detec-
tion for a specific interface.
Default
1
Format
show port-monitor overload-detection <slot/port>
Mode
User EXEC and Privileged EXEC
<slot/port>
Valid slot and port number separated by forward slashes.
Overload-detection traffic type
Display the traffic type for the port monitor overload detection.
Possible values:
bc (broadcast traffic),
bc+mc (broadcast and multicast),
all (all traffic types).
Overload-detection threshold type
Display the threshold type for the port monitor overload detection.
Possible values:
pps (packets per second),
kbps (kilobits per second),
link-capacity (% of the link capacity).
Overload-detection lower threshold
Display the lower threshold for the port monitor overload detection.
Possible values: 0..10000000
Overload-detection upper threshold
Display the upper threshold for the port monitor overload detection.
Possible values: 0..10000000
CLI L2P
Release 8.0 05/2013 411
4.17 Port monitor
CLI L2P
412 Release 8.0 05/2013
4.17 Port monitor
CLI L2P
Release 8.0 05/2013 413
4.17 Port monitor
CLI L2P
414 Release 8.0 05/2013
CLI Commands: Switching
CLI L2P
Release 8.0 05/2013 415
CLI Commands: Switching
CLI L2P
416 Release 8.0 05/2013
CLI Commands: Switching 5.1 Spanning Tree Commands
CLI L2P
Release 8.0 05/2013 417
CLI Commands: Switching 5.1 Spanning Tree Commands
CLI L2P
418 Release 8.0 05/2013
CLI Commands: Switching 5.1 Spanning Tree Commands
CLI L2P
Release 8.0 05/2013 419
CLI Commands: Switching 5.1 Spanning Tree Commands
CLI L2P
420 Release 8.0 05/2013
CLI Commands: Switching 5.1 Spanning Tree Commands
CLI L2P
Release 8.0 05/2013 421
CLI Commands: Switching 5.1 Spanning Tree Commands
Associated FIDs
List of forwarding database identifiers associated with this instance.
Associated VLANs
List of VLAN IDs associated with this instance.
CLI L2P
422 Release 8.0 05/2013
CLI Commands: Switching 5.1 Spanning Tree Commands
Designated Root
The Identifier of the designated root for this port.
Designated Port Cost
Path Cost offered to the LAN by the Designated Port
Designated Bridge
Bridge Identifier of the bridge with the Designated Port.
Designated Port Identifier
Port on the Designated Bridge that offers the lowest cost to the LAN
If 0 (defined as the default CIST ID) is passed as the <mstid>, then this com-
mand displays the settings and parameters for a specific switch port within
the common and internal spanning tree. The <slot/port> is the desired switch
port. In this case, the following are displayed.
Port Identifier
The port identifier for this port within the CST.
Port Priority
The priority of the port within the CST.
Port Forwarding State
The forwarding state of the port within the CST.
Port Role
The role of the specified interface within the CST.
Port Path Cost
The configured path cost for the specified interface.
Designated Root
Identifier of the designated root for this port within the CST.
Designated Port Cost
Path Cost offered to the LAN by the Designated Port.
Designated Bridge
The bridge containing the designated port
Designated Port Identifier
Port on the Designated Bridge that offers the lowest cost to the LAN
CLI L2P
Release 8.0 05/2013 423
CLI Commands: Switching 5.1 Spanning Tree Commands
CLI L2P
424 Release 8.0 05/2013
CLI Commands: Switching 5.1 Spanning Tree Commands
CLI L2P
Release 8.0 05/2013 425
CLI Commands: Switching 5.1 Spanning Tree Commands
CLI L2P
426 Release 8.0 05/2013
CLI Commands: Switching 5.1 Spanning Tree Commands
CLI L2P
Release 8.0 05/2013 427
CLI Commands: Switching 5.1 Spanning Tree Commands
CLI L2P
428 Release 8.0 05/2013
CLI Commands: Switching 5.1 Spanning Tree Commands
5.1.9 spanning-tree
This command sets the spanning-tree operational mode to enabled.
Default
disabled
Format
spanning-tree
Mode
Global Config
U no spanning-tree
This command sets the spanning-tree operational mode to disabled.
While disabled, the spanning-tree configuration is retained and can be
changed, but is not activated.
Format
no spanning-tree
Mode
Global Config
CLI L2P
Release 8.0 05/2013 429
CLI Commands: Switching 5.1 Spanning Tree Commands
U no spanning-tree auto-edgeport
This command specifies that this port is not an Edge Port within the com-
mon and internal spanning tree.
Format
no spanning-tree auto-edgeport
Mode
Interface Config
CLI L2P
430 Release 8.0 05/2013
CLI Commands: Switching 5.1 Spanning Tree Commands
U no spanning-tree bpduguard
This command sets the BPDU (Bridge Protocol Data Units) Guard to
disabled.
Format
no spanning-tree bpduguard
Mode
Global Config
CLI L2P
Release 8.0 05/2013 431
CLI Commands: Switching 5.1 Spanning Tree Commands
CLI L2P
432 Release 8.0 05/2013
CLI Commands: Switching 5.1 Spanning Tree Commands
CLI L2P
Release 8.0 05/2013 433
CLI Commands: Switching 5.1 Spanning Tree Commands
U no spanning-tree edgeport
This command specifies that this port is not an Edge Port within the com-
mon and internal spanning tree.
Format
no spanning-tree edgeport
Mode
Interface Config
CLI L2P
434 Release 8.0 05/2013
CLI Commands: Switching 5.1 Spanning Tree Commands
U no spanning-tree forceversion
This command sets the Force Protocol Version parameter to the default
value, i.e. 802.1w.
Format
no spanning-tree forceversion
Mode
Global Config
CLI L2P
Release 8.0 05/2013 435
CLI Commands: Switching 5.1 Spanning Tree Commands
U no spanning-tree forward-time
This command sets the Bridge Forward Delay parameter for the com-
mon and internal spanning tree to the default value, i.e. 15.
Format
no spanning-tree forward-time
Mode
Global Config
CLI L2P
436 Release 8.0 05/2013
CLI Commands: Switching 5.1 Spanning Tree Commands
U no spanning-tree guard
This command disables the guard for this port.
Format
no spanning-tree guard
Mode
Interface Config
CLI L2P
Release 8.0 05/2013 437
CLI Commands: Switching 5.1 Spanning Tree Commands
U no spanning-tree guard
This command disables the guard for this port.
Format
no spanning-tree guard
Mode
Interface Config
CLI L2P
438 Release 8.0 05/2013
CLI Commands: Switching 5.1 Spanning Tree Commands
U no spanning-tree guard
This command disables the guard for this port.
Format
no spanning-tree guard
Mode
Interface Config
CLI L2P
Release 8.0 05/2013 439
CLI Commands: Switching 5.1 Spanning Tree Commands
U no spanning-tree hello-time
This command sets the Hello Time parameter for the common and
internal spanning tree to the default value, i.e. 2.
Format
no spanning-tree hello-time
Mode
Interface Config
Global Config
CLI L2P
440 Release 8.0 05/2013
CLI Commands: Switching 5.1 Spanning Tree Commands
U no spanning-tree hold-count
This command sets bridge hold count to disabled.
Format
no spanning-tree hold-count
Mode
Global Config
CLI L2P
Release 8.0 05/2013 441
CLI Commands: Switching 5.1 Spanning Tree Commands
U no spanning-tree max-age
This command sets the Bridge Max Age parameter for the common and
internal spanning tree to the default value, i.e. 20.
Format
no spanning-tree max-age
Mode
Global Config
CLI L2P
442 Release 8.0 05/2013
CLI Commands: Switching 5.1 Spanning Tree Commands
U no spanning-tree max-hops
This command sets the Bridge Max Hops parameter for the common and
internal spanning tree to the default value, i.e. 20.
Format
no spanning-tree max-age
Mode
Global Config
CLI L2P
Release 8.0 05/2013 443
CLI Commands: Switching 5.1 Spanning Tree Commands
CLI L2P
444 Release 8.0 05/2013
CLI Commands: Switching 5.1 Spanning Tree Commands
U no spanning-tree mst
This command sets the Path Cost or Port Priority for this port within the
multiple spanning tree instance or in the common and internal spanning
tree to the respective default values. If the <mstid> parameter corre-
sponds to an existing multiple spanning tree instance, then the configura-
tions are done for that multiple spanning tree instance. If however 0
(defined as the default CIST ID) is passed as the <mstid>, then the con-
figurations are performed for the common and internal spanning tree
instance.
This command accepts the value 0 for the mstid, meaning the common
and internal spanning tree.
If the ‘cost’ token is specified, this command sets the path cost for this
port within a multiple spanning tree instance or the common and internal
spanning tree instance, depending on the <mstid> parameter, to the
default value, i.e. a pathcost value based on the Link Speed.
If the ‘port-priority’ token is specified, this command sets the priority for
this port within a specific multiple spanning tree instance or the common
and internal spanning tree instance, depending on the <mstid> parame-
ter, to the default value, i.e. 128.
Format
no spanning-tree mst <mstid> <cost | port-priority>
Mode
Interface Config
CLI L2P
Release 8.0 05/2013 445
CLI Commands: Switching 5.1 Spanning Tree Commands
CLI L2P
446 Release 8.0 05/2013
CLI Commands: Switching 5.1 Spanning Tree Commands
CLI L2P
Release 8.0 05/2013 447
CLI Commands: Switching 5.1 Spanning Tree Commands
CLI L2P
448 Release 8.0 05/2013
CLI Commands: Switching 5.1 Spanning Tree Commands
CLI L2P
Release 8.0 05/2013 449
CLI Commands: Switching 5.1 Spanning Tree Commands
CLI L2P
450 Release 8.0 05/2013
CLI Commands: Switching 5.1 Spanning Tree Commands
U no spanning-tree stp-mrp-mode
This command sets the spanning tree mrp (Medium Redundancy
Protocol) mode to disabled.
Format
no spanning-tree stp-mrp-mode
Mode
Global Config
CLI L2P
Release 8.0 05/2013 451
CLI Commands: Switching 5.1 Spanning Tree Commands
U no spanning-tree tcnguard
This command disables tcn guard for this port.
Format
no spanning-tree tcnguard
Mode
Interface Config
CLI L2P
452 Release 8.0 05/2013
CLI Commands: Switching 5.2 MRP
5.2 MRP
It is possible to mix the devices that support this function in any combination
within the MRP ring.
CLI L2P
Release 8.0 05/2013 453
CLI Commands: Switching 5.2 MRP
CLI L2P
454 Release 8.0 05/2013
CLI Commands: Switching 5.2 MRP
port
Show the ports for the given MRP domain
port primary
Show the primary port for the given MRP domain.
port secondary
Show the secondary port for the given MRP domain.
summary
Show a summary for the given MRP domain.
vlan
Show the VLAN ID for the given MRP domain.
CLI L2P
Release 8.0 05/2013 455
CLI Commands: Switching 5.2 MRP
manager-priority
Configure the given MRP domain's manager priority (0-65535).
mode
Configure the switch's MRP mode for the given domain (client or
manager).
client: Switch is client for the given MRP domain.
manager: Switch is manager for the given MRP domain.
name
Set a name for the given MRP domain.
recovery-delay
Configure the MRP recovery delay for the given domain.
500ms: Recovery delay is 500 ms for the given MRP domain.
200ms: Recovery delay is 200 ms for the given MRP domain.
operation
Enable or disable the switch for the given MRP domain.
port
Specify the switch's ports for the given MRP domain (in slot/port nota-
tion).
primary: Specify the switch's primary port for the given MRP
domain.
secondary: Specify the switch's secondary port for the given MRP
domain.
vlan
Enter the VLAN for the given MRP domain (0 - 4042, default: 0).
CLI L2P
456 Release 8.0 05/2013
CLI Commands: Switching 5.2 MRP
CLI L2P
Release 8.0 05/2013 457
CLI Commands: Switching 5.2 MRP
5.2.6 arc
Use this command to configure ARC (Automatic Ring Configuration).
ARC supports MRP.
The ARC protocol is a simple protocol that checks a ring configuration and,
if suitable, configures all clients of this ring automatically.
The check cycle includes an analysis of the ARC devices for an already
active ring configuration and wrong ring configuration values. The ARC
devices can detect loop situations and other ARC Managers in the ring.
Errors are reported to the ARC Manager. With this information the ARC Man-
ager can decide whether a configuration of the ring clients is possible or not.
Format
arc { manager {enable | disable} |
client {enable | disable | checkOnly} |
check |
configure}
Mode
Global Config
client
Configure the ARC client.
- enable: Enable the ARC client for configuring and checking.
- disable: Disable the ARC client for configuring and checking.
- checkOnly: The device can only be checked but not configured
by ARC.
manager
Configure the ARC manager.
- enable: Enable the ARC manager for configuring and checking.
- disable: Disable the ARC manager for configuring and
checking.
check
Check the topology. All important values will be taken from the current
ring configuration on the devices.
configure
Configure the topology. All important values will be taken from the
current ring configuration of the ARC manager.
CLI L2P
458 Release 8.0 05/2013
CLI Commands: Switching 5.2 MRP
CLI L2P
Release 8.0 05/2013 459
CLI Commands: Switching 5.2 MRP
CLI L2P
460 Release 8.0 05/2013
CLI Commands: Switching 5.3 HIPER-Ring
5.3 HIPER-Ring
Further information concerning this function you will find in the User Manual
”Redundancy Configuration”.
CLI L2P
Release 8.0 05/2013 461
CLI Commands: Switching 5.3 HIPER-Ring
CLI L2P
462 Release 8.0 05/2013
CLI Commands: Switching 5.3 HIPER-Ring
5.3.2 hiper-ring
Configure the HIPER-Ring.
Press Enter for a list of valid commands and their recommended order.
Format
hiper-ring
Mode
Global Config
U no hiper-ring
Clear the HIPER Ring configuration (delete it).
Format
no hiper-ring
Mode
Global Config
CLI L2P
Release 8.0 05/2013 463
CLI Commands: Switching 5.3 HIPER-Ring
CLI L2P
464 Release 8.0 05/2013
CLI Commands: Switching 5.3 HIPER-Ring
CLI L2P
Release 8.0 05/2013 465
CLI Commands: Switching 5.4 Fast-HIPER-Ring
5.4 Fast-HIPER-Ring
Further information concerning this function you will find in the User Manual
”Redundancy Configuration”.
CLI L2P
466 Release 8.0 05/2013
CLI Commands: Switching 5.4 Fast-HIPER-Ring
CLI L2P
Release 8.0 05/2013 467
CLI Commands: Switching 5.4 Fast-HIPER-Ring
CLI L2P
468 Release 8.0 05/2013
CLI Commands: Switching 5.4 Fast-HIPER-Ring
nodes
Display the number of nodes in the ring for the given Fast HIPER-
Ring ID.
vlan
Display the VLAN ID for the given Fast HIPER-Ring ID.
5.4.3 fast-hiper-ring
Configure the Fast-HIPER-Ring.
Format
fast-hiper-ring {current-id
{mode {ring-manager|ring-switch|rm|rs} |
operation {disable|enable} |
port {primary|secondary} <slot/port> |
ring-name <ring-name> |
nodes <1-n> |
vlan <0-4042>} |
delete-id current-id |
new-id {<id>|default-id}}
Mode
Global Config
current-id
Specify that you want to configure the current Fast-HIPER-Ring ID's
settings.
mode
Configure the switch's Fast HIPER-Ring mode for the given ID (ring-
manager or ring-switch).
rm: Abbreviation for 'ring-manager'.
rs: Abbreviation for 'ring-switch'.
mode ring-manager
Switch is ring-manager for the given Fast HIPER-Ring ID.
CLI L2P
Release 8.0 05/2013 469
CLI Commands: Switching 5.4 Fast-HIPER-Ring
mode ring-switch
Switch is ring-switch for the given Fast HIPER-Ring ID.
mode rm
Abbreviation for 'ring-manager'.
mode rs
Abbreviation for 'ring-switch'.
operation
Enable or disable the switch for the given Fast-HIPER-Ring ID.
port
Specify the switch's ports for the given Fast-HIPER-Ring ID.
ring-name
Set a ring name for the given Fast HIPER-Ring ID.
nodes
Specify the number of nodes in the ring for the given Fast HIPER-
Ring ID.
vlan
Specify the VLAN for the given Fast HIPER-Ring ID.
delete-id
Delete the given Fast HIPER-Ring ID.
new-id
Create a new Fast HIPER-Ring ID. The configuration will consist of
default parameters and its operation will be disabled.
<id>
Enter a new Fast HIPER-Ring ID. Format: a number in the range 1-
2147483647 (2^31 - 1). An ID of 0 is invalid.
default-id
Create a default Fast HIPER-Ring ID (1).
CLI L2P
470 Release 8.0 05/2013
CLI Commands: Switching 5.5 Redundant Coupling
The control intelligence built into the switch allows the redundant coupling of
HIPER-Rings and network segments. Two network segments can be
connected via two separate paths with one of the following switches:
D RS2-16M
D RS20/RS30/RS40
D RSR20/RSR30
D MICE (Rel. 3.0 or higher)
D MS20/MS30
D PowerMICE
D MACH1000
D MACH3000 (Rel. 3.3 or higher)
D MACH4000
The switch in the redundant line and the switch in the main line inform each
other about their operating states by using control frames via the ethernet or
via the control line.
Note: For redundancy security reasons, the Rapid Spanning Tree protocol
and redundant network/ring coupling may not be enabled simultaneously.
Note: The network that connects the master and the slave must always be a
HiPER-Ring. The coupling switch in single mode also must have a HiPER-
Ring Configured.
Further information concerning this function you will find in the User Manual
”Redundancy Configuration”.
CLI L2P
Release 8.0 05/2013 471
CLI Commands: Switching 5.5 Redundant Coupling
CLI L2P
472 Release 8.0 05/2013
CLI Commands: Switching 5.5 Redundant Coupling
partner IP
Display the switch's Ring Coupling partner IP address (only valid for
remote configurations).
port
Display the switch's Ring Coupling ports
– all
– local
– partner (only takes effect in dual configurations)
– control (only takes effect in outband configurations).
redundancy-mode
Display the Ring Coupling's redundancy mode
– normal
– extended.
Ring/Network Coupling Mode
Display the Ring/Network Coupling mode
– ring-only if you wish to couple a HIPER-Ring.
– network if you wish to couple a line-type configuration.
CLI L2P
Release 8.0 05/2013 473
CLI Commands: Switching 5.5 Redundant Coupling
5.5.2 ring-coupling
Configure the redundant coupling of HIPER-Rings / network segments. This
command, if called without arguments, lists the available subcommands,
their recommended order and tips how to set up a new configuration.
Format
ring-coupling
Mode
Global Config
U no ring-coupling
Clear the ring-coupling configuration (delete it).
Format
no ring-coupling
Mode
Global Config
CLI L2P
474 Release 8.0 05/2013
CLI Commands: Switching 5.5 Redundant Coupling
CLI L2P
Release 8.0 05/2013 475
CLI Commands: Switching 5.5 Redundant Coupling
CLI L2P
476 Release 8.0 05/2013
CLI Commands: Switching 5.5 Redundant Coupling
CLI L2P
Release 8.0 05/2013 477
CLI Commands: Switching 5.6 Port Security
With the Port Securitiy function you can specify for each port from which
terminal devices data can be received and sent to other ports. This function
helps to protect the network from unauthorized access.
CLI L2P
478 Release 8.0 05/2013
CLI Commands: Switching 5.6 Port Security
CLI L2P
Release 8.0 05/2013 479
CLI Commands: Switching 5.6 Port Security
U no port-sec
No action is taken if port security is violated at this port.
Format
no port-sec
Mode
Interface Config
CLI L2P
480 Release 8.0 05/2013
CLI Commands: Switching 5.6 Port Security
CLI L2P
Release 8.0 05/2013 481
CLI Commands: Switching 5.6 Port Security
CLI L2P
482 Release 8.0 05/2013
CLI Commands: Switching 5.6 Port Security
CLI L2P
Release 8.0 05/2013 483
CLI Commands: Switching 5.6 Port Security
CLI L2P
484 Release 8.0 05/2013
CLI Commands: Switching 5.7 DHCP Relay Commands
CLI L2P
Release 8.0 05/2013 485
CLI Commands: Switching 5.7 DHCP Relay Commands
5.7.1 dhcp-relay
Set different options for BOOTP/DHCP relay and option 82 inclusion.
Format
dhcp-relay
{opt82
{operation {disable|enable}|
man-id <Manual Remote ID>|
remote-id-type {client-id|ip|mac|other}}|
server-address <Server-ID (1..4)> <Server IP
Address>}
Mode
Global Config
dhcp-relay opt82 operation {disable|enable}
Enable/Disable option 82 globally. Default: enable.
dhcp-relay opt82 man-id <Manual Remote ID>
Configure the DCHP Relay's Option 82 Manual Value for the Remote
ID Type (only effective, if Remote ID is set to ”other“). Default: no ID.
dhcp-relay opt82 remote-id-type {client-id|ip|mac|other}
Configure the DCHP Relay's Option 82 Remote ID Type.
Default: mac
dhcp-relay server-address <Server ID (1..4)> <Server IP Address>
Set the server IP address for one of the 4 possible server IDs.
Default: 0.0.0.0
U no dhcp-relay
Clear the DCHP Relay configuration (set all server addresses to 0.0.0.0).
Format
no dhcp-relay
Mode
Global Config
CLI L2P
486 Release 8.0 05/2013
CLI Commands: Switching 5.7 DHCP Relay Commands
5.7.2 dhcp-relay
Set different port specific options for option 82 inclusion.
Format
dhcp-relay {admin-state {disable|enable} |
operation {disable|enable} |
hirschmann-device {disable|enable} |
hirschmann-agent {disable|enable}}
Mode
Interface Config
dhcp-relay admin-state {disable|enable}
Enable or disable the DHCP Realy's Admin State on this port.
Default: enable.
Note: Make sure that "Active Protocol" is "Relay" for both ports
involved in DHCP Relaying (the one connected to DHCP client and
the one connected to DHCP server).
dhcp-relay operation {disable|enable}
Enable or disable the DHCP Relay's Option 82 on this port. Default:
enable.
dhcp-relay hirschmann-device {disable|enable}
Enable this parameter if a Hirschmann DHCP client is connected to
this port.
- It disables the forwarding of DHCP multicast requests that are
received on this port.
- It will send its own DHCP multicast requests to be relayed by the
DHCP relay; this will reduce the load in your network.
Disable this parameter if a Non-Hirschmann DHCP client is con-
nected to this port (these devices send normal broadcast DHCP
requests; this enables the relaying of DHCP broadcast requests that
are received on this port).
dhcp-relay hirschmann-agent {disable|enable}
Enable or disable the forwarding of DHCP requests that are received
on this port. Enable this parameter if a Hirschmann DHCP client is
connected to this port. Default: disable.
Disable this parameter if a Non-Hirschmann DHCP client is con-
nected to this port (these devices send normal broadcast DHCP
requests; this enables the relaying of DHCP broadcast requests that
CLI L2P
Release 8.0 05/2013 487
CLI Commands: Switching 5.7 DHCP Relay Commands
Port
Display the port number in <slot/port> notation.
CLI L2P
488 Release 8.0 05/2013
CLI Commands: Switching 5.7 DHCP Relay Commands
Admin State
Display the DHCP Relay's admin state settings.
Possible values: Disabled, Enabled
Active Protocol
Display the DHCP Relay's active protocol settings.
Possible values: Relay, Disabled, Server, Inaccessible
Option 82
Display the DHCP Relay's option 82 settings.
Possible values: Disabled, Enabled
Hirschmann Device
Display the DHCP Relay's Hirschmann device settings.
Possible values: Disabled, Enabled
CLI L2P
Release 8.0 05/2013 489
CLI Commands: Switching 5.8 DHCP Server Commands
CLI L2P
490 Release 8.0 05/2013
CLI Commands: Switching 5.8 DHCP Server Commands
CLI L2P
Release 8.0 05/2013 491
CLI Commands: Switching 5.8 DHCP Server Commands
DHCP, Pools:
Display the DCHP server pool related information.
CLI L2P
492 Release 8.0 05/2013
CLI Commands: Switching 5.8 DHCP Server Commands
CLI L2P
Release 8.0 05/2013 493
CLI Commands: Switching 5.8 DHCP Server Commands
CLI L2P
494 Release 8.0 05/2013
CLI Commands: Switching 5.8 DHCP Server Commands
CLI L2P
Release 8.0 05/2013 495
CLI Commands: Switching 5.8 DHCP Server Commands
CLI L2P
496 Release 8.0 05/2013
CLI Commands: Switching 5.8 DHCP Server Commands
CLI L2P
Release 8.0 05/2013 497
CLI Commands: Switching 5.8 DHCP Server Commands
CLI L2P
498 Release 8.0 05/2013
CLI Commands: Switching 5.8 DHCP Server Commands
CLI L2P
Release 8.0 05/2013 499
CLI Commands: Switching 5.8 DHCP Server Commands
CLI L2P
500 Release 8.0 05/2013
CLI Commands: Switching 5.9 Sub-Ring Commands
CLI L2P
Release 8.0 05/2013 501
CLI Commands: Switching 5.9 Sub-Ring Commands
info
Display status information for the given Sub-Ring ID.
mode
Display the switch's mode for the given Sub-Ring ID.
operation
Display the switch's operative setting for the given Sub-Ring ID.
Note: In case of configuration problems, this value may differ from
the administrative setting (may become 'Disabled').
protocol
Display the switch's protocol setting for the given Sub-Ring ID.
Note: In case of configuration problems, this value may differ from
the administrative setting (may become 'Disabled').
port
Display the ports for the given Sub-Ring ID.
summary
Display a summary for the given Sub-Ring ID.
ring-name
Display ring name for the given Sub-Ring ID.
vlan
Display the VLAN ID for the given Sub-Ring ID.
mrp-domainID
Display the MRP domain ID for the given Sub-Ring ID.
partner-mac
Display the partner MAC for the given Sub-Ring ID.
CLI L2P
502 Release 8.0 05/2013
CLI Commands: Switching 5.9 Sub-Ring Commands
CLI L2P
Release 8.0 05/2013 503
CLI Commands: Switching 5.9 Sub-Ring Commands
CLI L2P
504 Release 8.0 05/2013
CLI Commands: Switching 5.9 Sub-Ring Commands
CLI L2P
Release 8.0 05/2013 505
CLI Commands: Switching 5.9 Sub-Ring Commands
CLI L2P
506 Release 8.0 05/2013
CLI Commands: Switching 5.9 Sub-Ring Commands
CLI L2P
Release 8.0 05/2013 507
CLI Commands: Switching 5.9 Sub-Ring Commands
CLI L2P
508 Release 8.0 05/2013
CLI Commands: Security
CLI L2P
Release 8.0 05/2013 509
CLI Commands: Security
CLI L2P
510 Release 8.0 05/2013
CLI Commands: Security 6.1 Security Commands
Note: The default login list included with the default configuration can not be
changed.
Format
authentication login <listname> [method1 [method2
[method3]]]
Mode
Global Config
CLI L2P
Release 8.0 05/2013 511
CLI Commands: Security 6.1 Security Commands
U no authentication login
This command deletes the specified authentication login list.
You will be unable to delete if any of the following conditions are true:
D The login list name is invalid or does not match an existing
authentication login list
D The specified authentication login list is assigned to any user or to the
non configured user for any component
D The login list is the default login list included with the default
configuration and was not created using ‘authentication login’.
The default login list cannot be deleted.
Format
no authentication login <listname>
Mode
Global Config
CLI L2P
512 Release 8.0 05/2013
CLI Commands: Security 6.1 Security Commands
CLI L2P
Release 8.0 05/2013 513
CLI Commands: Security 6.1 Security Commands
CLI L2P
514 Release 8.0 05/2013
CLI Commands: Security 6.1 Security Commands
CLI L2P
Release 8.0 05/2013 515
CLI Commands: Security 6.1 Security Commands
U no dot1x guest-vlan
This command is used to disable Guest VLAN for the port.
Format
no dot1x guest-vlan
Mode
Global Config
CLI L2P
516 Release 8.0 05/2013
CLI Commands: Security 6.1 Security Commands
CLI L2P
Release 8.0 05/2013 517
CLI Commands: Security 6.1 Security Commands
U no dot1x mac-auth-bypass
This command disables the MAC-authorized-bypass on that interface.
Default
disabled
Format
no dot1x mac-auth-bypass
Mode
Interface Config
CLI L2P
518 Release 8.0 05/2013
CLI Commands: Security 6.1 Security Commands
U no dot1x max-req
This command sets the maximum number of times the authenticator state
machine on this port will transmit an EAPOL EAP Request/Identity frame be-
fore timing out the supplicant.
Format
no dot1x max-req
Mode
Interface Config
CLI L2P
Release 8.0 05/2013 519
CLI Commands: Security 6.1 Security Commands
U no dot1x max-users
The ‘no’ form of this command resets the maximum number of clients allowed
to its default value of 16.
Format
no dot1x max-users
Mode
Interface Config
CLI L2P
520 Release 8.0 05/2013
CLI Commands: Security 6.1 Security Commands
U no dot1x port-control
This command sets the port-control mode for the specified port to the
default mode (force-authorized).
Format
no dot1x port-control
Mode
Interface Config
CLI L2P
Release 8.0 05/2013 521
CLI Commands: Security 6.1 Security Commands
CLI L2P
522 Release 8.0 05/2013
CLI Commands: Security 6.1 Security Commands
U no dot1x re-authentication
This command disables re-authentication of the supplicant for the speci-
fied port.
Format
no dot1x re-authentication
Mode
Interface Config
CLI L2P
Release 8.0 05/2013 523
CLI Commands: Security 6.1 Security Commands
U no dot1x safe-vlan
Use this command to disable the safe-vlan assignment on the switch.
Default
disabled
Format
no dot1x safe-vlan
Mode
Global Config
CLI L2P
524 Release 8.0 05/2013
CLI Commands: Security 6.1 Security Commands
U no dot1x system-auth-control
This command is used to disable the dot1x authentication support on the
switch.
Format
no dot1x system-auth-control
Mode
Global Config
CLI L2P
Release 8.0 05/2013 525
CLI Commands: Security 6.1 Security Commands
U no dot1x timeout
This command sets the value, in seconds, of the timer used by the
authenticator state machine on this port to the default values. Depending
on the token used, the corresponding default values are set.
Format
no dot1x timeout {reauth-period | quiet-period |
tx-period | supp-timeout | server-timeout}
Mode
Interface Config
CLI L2P
526 Release 8.0 05/2013
CLI Commands: Security 6.1 Security Commands
CLI L2P
Release 8.0 05/2013 527
CLI Commands: Security 6.1 Security Commands
U no dot1x unauthenticated-vlan
The ‘no’ form of this command resets the value for the unauthenticated VLAN
to its default value.
Format
no dot1x unauthenticated-vlan
Mode
Interface Config
CLI L2P
528 Release 8.0 05/2013
CLI Commands: Security 6.1 Security Commands
U no dot1x user
This command removes the user from the list of users with access to the
specified port or all ports.
Format
no dot1x user <user> {<slot/port> | all}
Mode
Global Config
CLI L2P
Release 8.0 05/2013 529
CLI Commands: Security 6.1 Security Commands
U no ip ssh
This command sets IP secure shell (SSH) parameters to default value.
Format
no ip ssh
Mode
Privileged Exec
CLI L2P
530 Release 8.0 05/2013
CLI Commands: Security 6.1 Security Commands
CLI L2P
Release 8.0 05/2013 531
CLI Commands: Security 6.1 Security Commands
used, the command will configure the UDP port number to use to connect to
the configured RADIUS server. In order to configure the UDP port number,
the IP address must match that of a previously configured RADIUS
authentication server. The port number must lie between 1 - 65535, with
1812 being the default value.
If the 'acct' token is used, the command configures the IP address to use for
the RADIUS accounting server. Only a single accounting server can be
configured. If an accounting server is currently configured, it must be
removed from the configuration using the no form of the command before this
command succeeds. If the optional <port> parameter is used, the command
will configure the UDP port to use to connect to the RADIUS accounting
server. The IP address specified must match that of a previously configured
accounting server. If a port is already configured for the accounting server
then the new port will replace the previously configured value. The port must
be a value in the range 1 - 65535, with 1813 being the default value.
Format
radius server host {auth | acct} <ipaddr> [<port>]
Mode
Global Config
CLI L2P
532 Release 8.0 05/2013
CLI Commands: Security 6.1 Security Commands
CLI L2P
Release 8.0 05/2013 533
CLI Commands: Security 6.1 Security Commands
CLI L2P
534 Release 8.0 05/2013
CLI Commands: Security 6.1 Security Commands
CLI L2P
Release 8.0 05/2013 535
CLI Commands: Security 6.1 Security Commands
CLI L2P
536 Release 8.0 05/2013
CLI Commands: Security 6.1 Security Commands
If the optional token 'statistics <ipaddr>' is not included, then only the
accounting mode and the RADIUS accounting server details are displayed.
Mode
Enabled or disabled
IP Address
The configured IP address of the RADIUS accounting server
Port
The port in use by the RADIUS accounting server
Secret Configured
Yes or No
If the optional token 'statistics <ipaddr>' is included, the statistics for the
configured RADIUS accounting server are displayed. The IP address
parameter must match that of a previously configured RADIUS accounting
server. The following information regarding the statistics of the RADIUS
accounting server is displayed.
Accounting Server IP Address
IP Address of the configured RADIUS accounting server
Round Trip Time
The time interval, in hundredths of a second, between the most
recent Accounting-Response and the Accounting-Request that
matched it from the RADIUS accounting server.
Requests
The number of RADIUS Accounting-Request packets sent to this
accounting server. This number does not include retransmissions.
Retransmission
The number of RADIUS Accounting-Request packets retransmitted to
this RADIUS accounting server.
Responses
The number of RADIUS packets received on the accounting port from
this server.
Malformed Responses
The number of malformed RADIUS Accounting-Response packets
received from this server. Malformed packets include packets with an
CLI L2P
Release 8.0 05/2013 537
CLI Commands: Security 6.1 Security Commands
CLI L2P
538 Release 8.0 05/2013
CLI Commands: Security 6.1 Security Commands
CLI L2P
Release 8.0 05/2013 539
CLI Commands: Security 6.1 Security Commands
CLI L2P
540 Release 8.0 05/2013
CLI Commands: Security 6.1 Security Commands
Administrative mode
Indicates whether authentication control on the switch is enabled or
disabled.
VLAN Assignment Mode
Indicates whether the VLAN Assignment Mode is enabled or
disabled.
Dynamic VLAN Creation Mode
Indicates whether the Dynamic VLAN Creation Mode is enabled or
disabled.
Safe VLAN Mode
Indicates whether the Safe VLAN Mode is enabled or disabled.
If the optional parameter 'summary {<slot/port> | all}' is used, the dot1x con-
figuration for the specified port or all ports are displayed.
Port
The interface whose configuration is displayed.
Control Mode
The configured control mode for this port. Possible values are
force-unauthorized | force-authorized | auto |
mac-based
Operating Control Mode
The control mode under which this port is operating. Possible values
are authorized | unauthorized
Reauthentication Enabled
Indicates whether re-authentication is enabled on this port
Key Transmission Enabled
Indicates if the key is transmitted to the supplicant for the specified
port
CLI L2P
Release 8.0 05/2013 541
CLI Commands: Security 6.1 Security Commands
Protocol Version
The protocol version associated with this port. The only possible
value is 1, corresponding to the first version of the dot1x specification.
PAE Capabilities
The port access entity (PAE) functionality of this port. Possible
values are Authenticator or Supplicant.
Control Mode
Display the state of the Control Mode. Possible values: auto,
forceauthorized, ....
Authenticator PAE State
Current state of the authenticator PAE state machine. Possible
values are Initialize, Disconnected, Connecting, Authenticating,
Authenticated, Aborting, Held, ForceAuthorized, and
ForceUnauthorized.
Backend Authentication State
Current state of the backend authentication state machine. Possible
values are Request, Response, Success, Fail, Timeout, Idle, and
Initialize.
Quiet Period
The timer used by the authenticator state machine on this port to
define periods of time in which it will not attempt to acquire a
supplicant. The value is expressed in seconds and will be in the
range 0 and 65535.
Transmit Period
The timer used by the authenticator state machine on the specified
port to determine when to send an EAPOL EAP Request/Identity
frame to the supplicant. The value is expressed in seconds and will
be in the range of 1 and 65535.
Guest VLAN ID
Display the Guest VLAN ID. Default value: 0.
Guest VLAN Period (secs)
Display the Guest VLAN Period. Default value: 90 seconds.
CLI L2P
542 Release 8.0 05/2013
CLI Commands: Security 6.1 Security Commands
Supplicant Timeout
The timer used by the authenticator state machine on this port to
timeout the supplicant. . The value is expressed in seconds and will
be in the range of 1 and 65535.
Server Timeout
The timer used by the authenticator on this port to timeout the
authentication server. The value is expressed in seconds and will be
in the range of 1 and 65535.
Maximum Requests
The maximum number of times the authenticator state machine on
this port will retransmit an EAPOL EAP Request/Identity before timing
out the supplicant. The value will be in the range of 1 and 10.
VLAN Id
Display the VLAN Id.
VLAN Assigned Reason
Display the state of the VLAN Assigned Reason parameter.
Possible values: RADIUS, Not Assigned, ....
Reauthentication Period
The timer used by the authenticator state machine on this port to
determine when reauthentication of the supplicant takes place. The
value is expressed in seconds and will be in the range of 1 and
65535.
Reauthentication Enabled
Indicates if reauthentication is enabled on this port. Possible values
are ‘True” or “False”.
Key Transmission Enabled
Indicates if the key is transmitted to the supplicant for the specified
port. Possible values are True or False.
Control Direction
Indicates the control direction for the specified port or ports. Possible
values are both or in.
Maximum Users
Display the value of Maximum Users.
CLI L2P
Release 8.0 05/2013 543
CLI Commands: Security 6.1 Security Commands
Unauthenticated VLAN ID
Display the value of Unauthenticated VLAN ID
Session Timeout
Display the value of Session Timeout
Session Termination Action
Display the value of Session Termination Action
MAC-Authorized-Bypass
Display the value of MAC-Authorized-Bypass
If the optional parameter 'statistics <slot/port>' is used, the dot1x statistics for
the specified port are displayed.
Port
The interface whose statistics are displayed.
EAPOL Frames Received
The number of valid EAPOL frames of any type that have been
received by this authenticator.
EAPOL Frames Transmitted
The number of EAPOL frames of any type that have been transmitted
by this authenticator.
EAPOL Start Frames Received
The number of EAPOL start frames that have been received by this
authenticator.
EAPOL Logoff Frames Received
The number of EAPOL logoff frames that have been received by this
authenticator.
Last EAPOL Frame Version
The protocol version number carried in the most recently received
EAPOL frame.
Last EAPOL Frame Source
The source MAC address carried in the most recently received
EAPOL frame.
CLI L2P
544 Release 8.0 05/2013
CLI Commands: Security 6.1 Security Commands
CLI L2P
Release 8.0 05/2013 545
CLI Commands: Security 6.1 Security Commands
CLI L2P
546 Release 8.0 05/2013
CLI Commands: Security 6.1 Security Commands
CLI L2P
Release 8.0 05/2013 547
CLI Commands: Security 6.1 Security Commands
CLI L2P
548 Release 8.0 05/2013
CLI Commands: Security 6.1 Security Commands
Server IP Address
CLI L2P
Release 8.0 05/2013 549
CLI Commands: Security 6.1 Security Commands
Access Rejects
The number of RADIUS Access-Reject packets, including both valid
and invalid packets, which were received from this server.
Access Challenges
The number of RADIUS Access-Challenge packets, including both
valid and invalid packets, which were received from this server.
Malformed Access Responses
The number of malformed RADIUS Access-Response packets
received from this server. Malformed packets include packets with an
invalid length. Bad authenticators or signature attributes or unknown
types are not included as malformed access responses.
Bad Authenticators
The number of RADIUS Access-Response packets containing invalid
authenticators or signature attributes received from this server.
Pending Requests
The number of RADIUS Access-Request packets destined for this
server that have not yet timed out or received a response.
Timeouts
The number of authentication timeouts to this server.
Unknown Types
The number of RADIUS packets of unknown types, which were
received from this server on the authentication port.
Packets Dropped
The number of RADIUS packets received from this server on the
authentication port and dropped for some other reason.
CLI L2P
550 Release 8.0 05/2013
CLI Commands: Security 6.1 Security Commands
CLI L2P
Release 8.0 05/2013 551
CLI Commands: Security 6.1 Security Commands
Note: Note that the login list associated with the ‘admin’ user can not be
changed to prevent accidental lockout from the switch.
Format
users login <user> <listname>
Mode
Global Config
user
Enter user name.
listname
Enter an alphanumeric string of not more than 15 characters.
Note: When assigning a list to the 'admin' account, include an
authentication method that allows administrative access even when
remote authentication is unavailable (use 'authentication login
<listname> [method1 [method2 [method3]]]').
CLI L2P
552 Release 8.0 05/2013
CLI Commands: Security 6.2 HTTP Commands
U no ip http secure-port
This command is used to reset the sslt port to the default value.
Format
no ip http secure-port
Mode
Privileged EXEC
CLI L2P
Release 8.0 05/2013 553
CLI Commands: Security 6.2 HTTP Commands
CLI L2P
554 Release 8.0 05/2013
CLI Commands: Security 6.2 HTTP Commands
U no ip http server
This command disables access to the switch‘s graphical user interface (web-
based interface) via a web browser. When access is disabled, the user can-
not login to the switch's web server.
Format
no ip http server
Mode
Privileged EXEC
CLI L2P
Release 8.0 05/2013 555
CLI Commands: Security 6.2 HTTP Commands
CLI L2P
556 Release 8.0 05/2013
CLI Commands: Security 6.2 HTTP Commands
U no ip https server
This command is used to turn off the HTTPS server 3.
This command disables access to the switch‘s graphical user interface (web-
based interface) via a web browser. When access is disabled, the user can-
not login to the switch's web server.
Format
no ip https server
Mode
Privileged EXEC
CLI L2P
Release 8.0 05/2013 557
CLI Commands: Security 6.2 HTTP Commands
U no ip https port
This command is used to reset the https port to the default value.
Format
no ip https port
Mode
Privileged EXEC
CLI L2P
558 Release 8.0 05/2013
CLI Commands: Security 6.2 HTTP Commands
CLI L2P
Release 8.0 05/2013 559
CLI Commands: Security 6.2 HTTP Commands
CLI L2P
560 Release 8.0 05/2013
Appendix- VLAN Example
LAN switches can segment networks into logically defined virtual work-
groups.This logical segmentation is commonly referred as a virtual LAN
(VLAN). This logical segmentation of devices provides better LAN adminis-
tration, security, and management of broadcast activity over the network. Vir-
tual LANs have become an integral feature of switched LAN solutions.
The VLAN example below demonstrates a simple VLAN
configuration.
If a single port is a member of VLANs 2, 3 and 4, the port expects to see traffic
tagged with either VLAN 2,3 or 4.
The PVID (Port Virtual Identification) could be something entirely different,
for example '12' and things would still work fine, just so incoming traffic was
tagged.
Example:
Project A = (VLAN2, ports 1,2)
Project B = (VLAN3, ports 3,4)
Project C = (VLAN4, ports 5,6)
Project P = (VLAN 9, port 7)
VLAN Command
create VLAN 2 vlan database
vlan 2
exit
config
interface 1/1
vlan participation include 2
exit
interface 1/2
vlan participation include 2
exit
CLI L2P
Release 8.0 05/2013 561
Appendix- VLAN Example
VLAN Command
create VLAN 3 vlan database
vlan 3
exit
config
interface 0/3
vlan participation include 3
exit
interface 0/4
vlan participation include 3
exit
create VLAN 4 vlan database
vlan 4
exit
config
interface 0/5
vlan participation include 4
exit
interface 0/6
vlan participation include 4
exit
create VLAN 9 vlan database
vlan 9
exit
config
interface 0/1
vlan participation include 9
exit
interface 0/2
vlan participation include 9
exit
interface 0/3
vlan participation include 9
exit
interface 0/4
vlan participation include 9
exit
interface 0/5
vlan participation include 9
exit
interface 0/6
vlan participation include 9
exit
interface 0/7
vlan participation include 9
exit
CLI L2P
562 Release 8.0 05/2013
Appendix- VLAN Example 7.1 SOLUTION 1
7.1 SOLUTION 1
All traffic entering the ports is tagged traffic. Since the traffic is tagged, the
PVID configuration for each port is not a concern.
D The network card configuration for devices on Project A must be set to tag
all traffic with 'VLAN 2'
D The network card configuration for devices on Project B must be set to tag
all traffic with 'VLAN 3'
D The network card configuration for devices on Project C must be set to tag
all traffic with 'VLAN 4'
D The network card configuration for devices on Project P must be set to tag
all traffic with 'VLAN 9'
CLI L2P
Release 8.0 05/2013 563
Appendix- VLAN Example 7.1 SOLUTION 1
CLI L2P
564 Release 8.0 05/2013
Appendix- VLAN Example 7.2 SOLUTION 2
7.2 SOLUTION 2
CLI L2P
Release 8.0 05/2013 565
Appendix- VLAN Example 7.2 SOLUTION 2
CLI L2P
566 Release 8.0 05/2013
Glossary
CLI L2P
Release 8.0 05/2013 567
Glossary
CLI L2P
568 Release 8.0 05/2013
Glossary
CLI L2P
Release 8.0 05/2013 569
Glossary
CLI L2P
570 Release 8.0 05/2013
Glossary
CLI L2P
Release 8.0 05/2013 571
Glossary
CLI L2P
572 Release 8.0 05/2013
Glossary
gateway recognizes the packet as server that can support IPv6 packets
belonging to a computer within its can also support IPv4 packets.
immediate neighborhood or domain.
That gateway then forwards the J
packet directly to the computer
whose address is specified. Joint Test Action Group. An IEEE
group that specifies test framework
Because a message is divided into a standards for electronic logic
number of packets, each packet can, components.
if necessary, be sent by a different
route across the Internet. Packets JTAG. See “Joint Test Action
can arrive in a different order than Group” on page 573.
they were sent. The Internet
Protocol just delivers them. It's up to L
another protocol, the Transmission
Control Protocol (TCP) to put them LAN. See “Local Area Network” on
back in the right order. IP is a page 574.
connectionless protocol, which
means that there is no continuing LDAP. See “Lightweight Directory
connection between the end points Access Protocol” on page 573.
that are communicating. Each Lightweight Directory Access
packet that travels through the Protocol. A set of protocols for
Internet is treated as an independent accessing information directories.
unit of data without any relation to LDAP is based on the standards
any other unit of data. (The reason contained within the X.500 standard,
the packets do get put in the right but is significantly simpler. Unlike
order is because of TCP, the X.500, LDAP supports TCP/IP,
connection-oriented protocol that which is necessary for any type of
keeps track of the packet sequence Internet access. Although not yet
in a message.) In the Open Systems widely implemented, LDAP should
Interconnection (OSI) eventually make it possible for
communication model, IP is in Layer almost any application running on
3, the Networking Layer. The most virtually any computer platform to
widely used version of IP today is IP obtain directory information, such as
version 4 (IPv4). However, IP e-mail addresses and public keys.
version 6 (IPv6) is also beginning to Because LDAP is an open protocol,
be supported. IPv6 provides for applications need not worry about
much longer addresses and the type of server hosting the
therefore for the possibility of many directory.
more Internet users. IPv6 includes
the capabilities of IPv4 and any
CLI L2P
Release 8.0 05/2013 573
Glossary
Learning. The bridge examines the what is called a WAN or Wide Area
Layer 2 source addresses of every Network.
frame on the attached networks
(called listening) and then maintains M
a table, or cache, of which MAC
addresses are attached to each of MAC. (1) Medium Access Control.
its ports. In LANs, the sublayer of the data link
control layer that supports medium-
Link-State. In routing protocols, the dependent functions and uses the
declared information about the services of the physical layer to
available interfaces and available provide services to the logical link
neighbors of a router or network. control (LLC) sublayer. The MAC
The protocol's topological database sublayer includes the method of
is formed from the collected link- determing when a device has
state declarations. access to the transmission medium.
LLDP. The IEEE 802.1AB standard (2) Message Authentication Code. In
for link layer discovery in Ethernet computer security, a value that is a
networks provides a method for part of a message or accompanies a
switches, routers and access points message and is used to determine
to advertise their identification, that the contents, origin, author, or
configuration and capabilities to other attributes of all or part of the
neighboring devices that store the message are as they appear to be.
data in a MIB (management (IBM Glossary of Computing Terms)
information base). Link layer Management Information Base.
discovery allows a network
management system to model the When SNMP devices send SNMP
topology of the network by messages to the management
interrogating the MIB databases in console (the device managing
the devices. SNMP messages), it stores
information in the MIB.
Local Area Network. A group of
computers that are located in one MBONE. See “Multicast Backbone”
area and are connected by less than on page 575.
1,000 feet of cable. A typical LAN
might interconnect computers and MDC. Management Data Clock.
peripherals on a single floor or in a MDI. Management Data Interface.
single building. LANs can be
connected together, but if modems MDIO. Management Data Input/
and telephones connect two or more Output.
LANs, the larger network constitutes
CLI L2P
574 Release 8.0 05/2013
Glossary
CLI L2P
Release 8.0 05/2013 575
Glossary
CLI L2P
576 Release 8.0 05/2013
Glossary
CLI L2P
Release 8.0 05/2013 577
Glossary
CLI L2P
578 Release 8.0 05/2013
Glossary
CLI L2P
Release 8.0 05/2013 579
Glossary
CLI L2P
580 Release 8.0 05/2013
Glossary
CLI L2P
Release 8.0 05/2013 581
Glossary
CLI L2P
582 Release 8.0 05/2013
Index
9 Index
CLI L2P
Release 8.0 05/2013 583
Index
CLI L2P
584 Release 8.0 05/2013
Index
CLI L2P
Release 8.0 05/2013 585
Index
CLI L2P
586 Release 8.0 05/2013
Index
CLI L2P
Release 8.0 05/2013 587
Index
CLI L2P
588 Release 8.0 05/2013
Index
CLI L2P
Release 8.0 05/2013 589
Index
T adding 267
tagging 278, 280 changing the name of 272
telnet 99 deleting 267
sessions, closing 285, 316 details 248
sessions, displaying 286 frame acceptance mode 269, 270, 275
telnetcon maxsessions 162 IDs 277, 279
telnetcon timeout 163 ingress filtering 271, 276
temperature 319
jointime 199, 200, 201, 202, 203, 204, 205
traceroute 299
transport input telnet 100 leave all time 207
transport output telnet 101 leave time 206
trap log participation in 273, 274
clearing 303, 304 port information 251
trunks. See LAGs resetting parameters 304
summary information 251
U tagging 278, 280
User Account Management Commands 285 voice vlan (Global Config Mode) 281
user account management commands voice vlan (Interface Config Mode) 282
201 commands 285 voice vlan auth 284
User Exec Mode 45
users W
adding 290, 291 Web connections, displaying 286
deleting 289, 290, 291
displaying 287
passwords 292, 302
users access 290
users defaultlogin 288
users login 289, 552
users name 291
users passwd 292
users snmpv3 accessmode 293
users snmpv3 authentication 294
users snmpv3 encryption 295
utilization alarm-threshold 80
V
vlan 267
vlan acceptframe 269, 270
vlan ingressfilter 271
VLAN Mode 45
vlan name 272
vlan participation 273
vlan participation all 274
vlan port acceptframe all 275
vlan port ingressfilter all 276
vlan port priority all 92
vlan port pvid all 277
vlan port tagging all 278
vlan priority 93
vlan pvid 279
vlan tagging 280
vlan0-transparent-mode 268
VLANs
CLI L2P
590 Release 8.0 05/2013
Further support
U Technical Questions
For technical questions, please contact any Hirschmann dealer in your
area or Hirschmann directly..
You will find the addresses of our partners on the Internet at
http://www.hirschmann.com
Contact our support at
https://hirschmann-support.belden.eu.com