Allied Telesis AT-8000S Series Instruction Manual

Layer 2
Ethernet Switch
AT-8000S Series
CLI Reference Guide

Allied Telesis AT-8000S Command Line Interface User’s Guide

Page i
Table of Contents
Preface ................................................................................................................................... 1
Intended Audience...........................................................................................................................2
Document Conventions ...................................................................................................................3
Contacting Allied Telesis .................................................................................................................4
Chapter 1.Using the CLI ....................................................................................................... 5
Overview................................................................................................................................................5
CLI Command Modes......................................................................................................................5
Introduction................................................................................................................................................5
User EXEC Mode ......................................................................................................................................5
Privileged EXEC Mode..............................................................................................................................5
Global Configuration Mode........................................................................................................................6
Interface Configuration and Specific Configuration Modes........................................................................7
Starting the CLI................................................................................................................................8
Editing Features ..............................................................................................................................9
Entering Commands..................................................................................................................................9
Terminal Command Buffer...................................................................................................................9
Negating the Effect of Commands.....................................................................................................10
Command Completion........................................................................................................................10
Nomenclature.....................................................................................................................................10
Keyboard Shortcuts............................................................................................................................10
CLI Command Conventions...............................................................................................................11
Copying and Pasting Text........................................................................................................................11
Chapter 2.ACL Commands ................................................................................................ 12
ip access-list.........................................................................................................................................12
permit (ip).............................................................................................................................................12
deny (IP)...............................................................................................................................................15
mac access-list.....................................................................................................................................17
permit (MAC)........................................................................................................................................18
deny (MAC)..........................................................................................................................................19
service-acl............................................................................................................................................20
show access-lists.................................................................................................................................20
show interfaces access-lists.................................................................................................................21
Chapter 3.AAA Commands ................................................................................................ 23
aaa authentication login.......................................................................................................................23
aaa authentication enable....................................................................................................................24
login authentication..............................................................................................................................25
enable authentication...........................................................................................................................26
ip http authentication............................................................................................................................26

Page ii
Not approved by Document Control. For review only.
Allied Telesis
Command Line Interface User’s Guide
ip https authentication..........................................................................................................................27
show authentication methods..............................................................................................................28
password.............................................................................................................................................29
username.............................................................................................................................................29
show users accounts...........................................................................................................................30
enable password .................................................................................................................................31
Chapter 4.Address Table Commands............................................................................... 33
bridge address.....................................................................................................................................33
bridge multicast filtering.......................................................................................................................33
bridge multicast address......................................................................................................................34
bridge multicast forbidden address......................................................................................................35
bridge multicast forward-all..................................................................................................................36
bridge multicast forbidden forward-all..................................................................................................36
bridge aging-time.................................................................................................................................37
clear bridge..........................................................................................................................................38
port security.........................................................................................................................................38
port security mode...............................................................................................................................39
port security max.................................................................................................................................40
port security routed secure-address....................................................................................................40
show bridge address-table ..................................................................................................................41
show bridge address-table static.........................................................................................................42
show bridge address-table count.........................................................................................................43
show bridge multicast address-table ...................................................................................................44
show bridge multicast address-table static..........................................................................................46
show bridge multicast filtering .............................................................................................................46
show ports security..............................................................................................................................48
show ports security addresses............................................................................................................49
Chapter 5.Clock Commands .............................................................................................. 51
clock set...............................................................................................................................................51
clock source.........................................................................................................................................51
clock timezone.....................................................................................................................................52
clock summer-time ..............................................................................................................................53
sntp authentication-key........................................................................................................................54
sntp authenticate.................................................................................................................................55
sntp trusted-key...................................................................................................................................55
sntp client poll timer.............................................................................................................................56
sntp broadcast client enable................................................................................................................56
sntp anycast client enable ...................................................................................................................57
sntp client enable (Interface)...............................................................................................................58
sntp unicast client enable....................................................................................................................58
sntp unicast client poll .........................................................................................................................59
sntp server...........................................................................................................................................59
show clock...........................................................................................................................................60
show sntp configuration.......................................................................................................................61
show sntp status..................................................................................................................................62

Page iii
Chapter 6.Configuration and Image File Commands ...................................................... 64
copy......................................................................................................................................................64
dir.........................................................................................................................................................66
delete ...................................................................................................................................................67
boot system..........................................................................................................................................68
show running-config.............................................................................................................................68
show startup-config..............................................................................................................................69
show bootvar........................................................................................................................................70
Chapter 7.DHCP Option 82 Commands ............................................................................ 71
ip dhcp information option....................................................................................................................71
show ip dhcp information option...........................................................................................................71
ip dhcp relay enable.............................................................................................................................72
Chapter 8.DHCP Snooping Commands ............................................................................ 73
ip dhcp snooping..................................................................................................................................73
ip dhcp snooping vlan ..........................................................................................................................73
ip dhcp snooping trust..........................................................................................................................74
ip dhcp snooping information option allowed-untrusted.......................................................................75
ip dhcp snooping verify ........................................................................................................................75
ip dhcp snooping database..................................................................................................................76
ip dhcp snooping database update-freq...............................................................................................76
ip dhcp snooping binding .....................................................................................................................77
clear ip dhcp snooping database .........................................................................................................78
show ip dhcp snooping binding............................................................................................................78
Chapter 9.Ethernet Configuration Commands................................................................. 80
interface ethernet.................................................................................................................................80
interface range ethernet.......................................................................................................................80
shutdown..............................................................................................................................................81
description............................................................................................................................................82
speed ...................................................................................................................................................82
duplex...................................................................................................................................................83
negotiation............................................................................................................................................84
flowcontrol............................................................................................................................................84
mdix......................................................................................................................................................85
back-pressure ......................................................................................................................................86
clear counters.......................................................................................................................................86
set interface active...............................................................................................................................87
show interfaces advertise.....................................................................................................................87
show interfaces configuration...............................................................................................................88
show interfaces status..........................................................................................................................90
show interfaces description..................................................................................................................91
show interfaces counters .....................................................................................................................92
show system flowcontrol......................................................................................................................94
port storm-control include-multicast (IC)..............................................................................................95
port storm-control broadcast enable ....................................................................................................95

Page iv
Not approved by Document Control. For review only.
Allied Telesis
Command Line Interface User’s Guide
port storm-control broadcast rate ........................................................................................................96
show ports storm-control.....................................................................................................................97
Chapter 10.GVRP Commands............................................................................................ 98
gvrp enable (Global)............................................................................................................................98
gvrp enable (Interface) ........................................................................................................................98
garp timer ............................................................................................................................................99
gvrp vlan-creation-forbid....................................................................................................................100
gvrp registration-forbid.......................................................................................................................100
clear gvrp statistics............................................................................................................................101
show gvrp configuration.....................................................................................................................101
show gvrp statistics ...........................................................................................................................102
show gvrp error-statistics...................................................................................................................103
Chapter 11.IGMP Snooping Commands......................................................................... 105
ip igmp snooping (Global)..................................................................................................................105
ip igmp snooping (Interface)..............................................................................................................105
ip igmp snooping mrouter learn-pim-dvmrp.......................................................................................106
ip igmp snooping host-time-out .........................................................................................................107
ip igmp snooping querier enable .......................................................................................................107
ip igmp snooping querier address .....................................................................................................108
ip igmp snooping querier version.......................................................................................................109
ip igmp snooping mrouter-time-out....................................................................................................109
ip igmp snooping leave-time-out........................................................................................................110
show ip igmp snooping mrouter.........................................................................................................111
show ip igmp snooping interface.......................................................................................................112
show ip igmp snooping groups..........................................................................................................113
Chapter 12.IP Addressing Commands............................................................................ 114
ip address..........................................................................................................................................114
ip address dhcp.................................................................................................................................114
ip default-gateway .............................................................................................................................115
show ip interface................................................................................................................................116
arp .....................................................................................................................................................117
arp timeout.........................................................................................................................................117
clear arp-cache..................................................................................................................................118
show arp............................................................................................................................................119
ip domain-lookup.............................................................................................................................119
ip domain-name.................................................................................................................................120
ip name-server...................................................................................................................................121
ip host................................................................................................................................................121
clear host...........................................................................................................................................122
clear host dhcp..................................................................................................................................122
show hosts.........................................................................................................................................123
Chapter 13.Line Commands ............................................................................................ 125
line.....................................................................................................................................................125

Page v
speed .................................................................................................................................................125
autobaud............................................................................................................................................126
exec-timeout.......................................................................................................................................127
history.................................................................................................................................................127
history size.........................................................................................................................................128
terminal history...................................................................................................................................128
terminal history size ...........................................................................................................................129
show line............................................................................................................................................129
Section 14.LACP Commands........................................................................................... 131
lacp system-priority............................................................................................................................131
lacp port-priority .................................................................................................................................132
lacp timeout........................................................................................................................................133
show lacp ethernet.............................................................................................................................134
show lacp port-channel......................................................................................................................136
Chapter 15.Management ACL Commands ..................................................................... 137
management access-list ....................................................................................................................137
permit (Management).........................................................................................................................138
deny (Management)...........................................................................................................................139
management access-class.................................................................................................................139
show management access-list...........................................................................................................140
show management access-class.......................................................................................................141
Chapter 16.PHY Diagnostics Commands ....................................................................... 142
test copper-port tdr.............................................................................................................................142
show copper-ports tdr ........................................................................................................................142
show copper-ports cable-length.........................................................................................................143
Chapter 17.Port Channel Commands ............................................................................. 145
interface port-channel ........................................................................................................................145
interface range port-channel..............................................................................................................145
channel-group....................................................................................................................................146
show interfaces port-channel.............................................................................................................146
Chapter 18.Port Monitor Commands .............................................................................. 148
port monitor........................................................................................................................................148
show ports monitor.............................................................................................................................149
Chapter 19.Power over Ethernet Commands................................................................. 150
power inline........................................................................................................................................150
power inline powered-device..............................................................................................................150
power inline priority............................................................................................................................151
power inline usage-threshold.............................................................................................................152
power inline traps enable...................................................................................................................152
show power inline...............................................................................................................................153

Page vi
Not approved by Document Control. For review only.
Allied Telesis
Command Line Interface User’s Guide
Chapter 20.QoS Commands ............................................................................................ 156
qos.....................................................................................................................................................156
show qos ...........................................................................................................................................156
priority-queue out num-of-queues .....................................................................................................157
rate-limit.............................................................................................................................................157
traffic-shape.......................................................................................................................................158
show qos interface.............................................................................................................................158
wrr-queue cos-map............................................................................................................................159
qos wrr-queue threshold....................................................................................................................160
qos trust(Global)................................................................................................................................161
qos map dscp-queue.........................................................................................................................162
qos cos..............................................................................................................................................162
show qos map ...................................................................................................................................163
Chapter 21.Radius Commands........................................................................................ 165
radius-server host..............................................................................................................................165
radius-server key...............................................................................................................................166
radius-server retransmit.....................................................................................................................166
radius-server source-ip......................................................................................................................167
radius-server timeout.........................................................................................................................168
radius-server deadtime......................................................................................................................168
show radius-servers ..........................................................................................................................169
Chapter 22.RMON Commands......................................................................................... 170
show rmon statistics..........................................................................................................................170
rmon collection history.......................................................................................................................172
show rmon collection history .............................................................................................................172
show rmon history .............................................................................................................................173
rmon alarm ........................................................................................................................................176
show rmon alarm-table......................................................................................................................177
show rmon alarm...............................................................................................................................178
rmon event.........................................................................................................................................179
show rmon events .............................................................................................................................180
show rmon log...................................................................................................................................181
rmon table-size..................................................................................................................................182
Chapter 23.SNMP Commands ......................................................................................... 184
snmp-server community....................................................................................................................184
snmp-server view ..............................................................................................................................185
snmp-server group ............................................................................................................................186
snmp-server user...............................................................................................................................186
snmp-server engineID local...............................................................................................................188
snmp-server enable traps..................................................................................................................189
snmp-server filter...............................................................................................................................189
snmp-server host...............................................................................................................................190
snmp-server v3-host..........................................................................................................................191
snmp-server trap authentication........................................................................................................192

Page vii
snmp-server contact...........................................................................................................................193
snmp-server location..........................................................................................................................193
snmp-server set .................................................................................................................................194
show snmp.........................................................................................................................................195
show snmp engineid ..........................................................................................................................196
show snmp views...............................................................................................................................197
show snmp groups.............................................................................................................................197
show snmp filters ...............................................................................................................................198
show snmp users...............................................................................................................................199
Chapter 24.Spanning-Tree Commands........................................................................... 200
spanning-tree.....................................................................................................................................200
spanning-tree mode...........................................................................................................................200
spanning-tree forward-time................................................................................................................201
spanning-tree hello-time.....................................................................................................................201
spanning-tree max-age......................................................................................................................202
spanning-tree priority .........................................................................................................................203
spanning-tree disable.........................................................................................................................203
spanning-tree cost..............................................................................................................................204
spanning-tree port-priority..................................................................................................................205
spanning-tree portfast........................................................................................................................205
spanning-tree link-type.......................................................................................................................206
spanning-tree pathcost method..........................................................................................................206
spanning-tree bpdu............................................................................................................................207
spanning-tree guard root....................................................................................................................208
spanning-tree bpduguard...................................................................................................................208
clear spanning-tree detected-protocols..............................................................................................209
spanning-tree mst priority...................................................................................................................209
spanning-tree mst max-hops..............................................................................................................210
spanning-tree mst port-priority...........................................................................................................210
spanning-tree mst cost.......................................................................................................................211
spanning-tree mst configuration.........................................................................................................212
instance (mst).....................................................................................................................................212
name (mst).........................................................................................................................................213
revision (mst)......................................................................................................................................214
show (mst)..........................................................................................................................................214
exit (mst) ............................................................................................................................................215
abort (mst)..........................................................................................................................................216
show spanning-tree............................................................................................................................216
Chapter 25.SSH Commands ............................................................................................ 228
ip ssh port...........................................................................................................................................228
ip ssh server.......................................................................................................................................228
crypto key generate dsa.....................................................................................................................229
crypto key generate rsa......................................................................................................................229
ip ssh pubkey-auth.............................................................................................................................230
crypto key pubkey-chain ssh..............................................................................................................230

Page viii
Not approved by Document Control. For review only.
Allied Telesis
Command Line Interface User’s Guide
user-key.............................................................................................................................................231
key-string...........................................................................................................................................232
show ip ssh........................................................................................................................................233
show crypto key mypubkey ...............................................................................................................234
show crypto key pubkey-chain ssh....................................................................................................235
Chapter 26.Syslog Commands ........................................................................................ 237
logging on..........................................................................................................................................237
logging...............................................................................................................................................237
logging console..................................................................................................................................238
logging buffered.................................................................................................................................239
logging buffered size .........................................................................................................................239
clear logging......................................................................................................................................240
logging file .........................................................................................................................................241
clear logging file.................................................................................................................................241
aaa logging........................................................................................................................................242
file-system logging.............................................................................................................................242
management logging.........................................................................................................................243
show logging......................................................................................................................................244
show logging file................................................................................................................................245
show syslog-servers..........................................................................................................................246
Chapter 27.TACACS+ Commands................................................................................... 248
tacacs-server host.............................................................................................................................248
tacacs-server key ..............................................................................................................................249
tacacs-server timeout........................................................................................................................249
tacacs-server source-ip.....................................................................................................................250
show tacacs.......................................................................................................................................250
Chapter 28.System Management Commands................................................................ 252
ping....................................................................................................................................................252
reload.................................................................................................................................................254
resume...............................................................................................................................................254
hostname...........................................................................................................................................255
stack master......................................................................................................................................255
stack reload.......................................................................................................................................256
stack change unit-id...........................................................................................................................257
show stack.........................................................................................................................................258
show users ........................................................................................................................................259
show sessions...................................................................................................................................260
show system......................................................................................................................................261
show system id..................................................................................................................................262
show version......................................................................................................................................262
set system .........................................................................................................................................263
Chapter 29.User Interface Commands............................................................................ 265
enable................................................................................................................................................265

Page ix
disable................................................................................................................................................265
login....................................................................................................................................................266
configure ............................................................................................................................................266
exit (Configuration).............................................................................................................................267
exit......................................................................................................................................................267
end.....................................................................................................................................................268
help ....................................................................................................................................................268
terminal datadump .............................................................................................................................269
show history.......................................................................................................................................270
show privilege ....................................................................................................................................270
Chapter 30.VLAN Commands .......................................................................................... 272
vlan database.....................................................................................................................................272
vlan.....................................................................................................................................................272
default-vlan vlan.................................................................................................................................273
interface vlan......................................................................................................................................273
interface range vlan............................................................................................................................274
name..................................................................................................................................................275
switchport protected...........................................................................................................................275
switchport mode.................................................................................................................................276
switchport access vlan.......................................................................................................................278
switchport trunk allowed vlan.............................................................................................................278
switchport trunk native vlan................................................................................................................279
switchport general allowed vlan.........................................................................................................279
switchport general pvid ......................................................................................................................280
switchport general ingress-filtering disable........................................................................................281
switchport general acceptable-frame-type tagged-only .....................................................................281
switchport general map macs-group vlan ..........................................................................................282
map mac macs-group ........................................................................................................................283
show vlan macs-group.......................................................................................................................283
switchport forbidden vlan ...................................................................................................................284
ip internal-usage-vlan.........................................................................................................................285
show vlan...........................................................................................................................................286
show vlan internal usage....................................................................................................................286
show interfaces switchport.................................................................................................................287
Chapter 31.Web Server Commands ................................................................................ 291
ip http server ......................................................................................................................................291
ip http port..........................................................................................................................................291
ip http exec-timeout............................................................................................................................292
ip https server.....................................................................................................................................292
ip https port ........................................................................................................................................293
ip https exec-timeout..........................................................................................................................293
crypto certificate generate..................................................................................................................294
crypto certificate request....................................................................................................................295
crypto certificate import......................................................................................................................296
ip https certificate...............................................................................................................................297

Page x
Not approved by Document Control. For review only.
Allied Telesis
Command Line Interface User’s Guide
show crypto certificate mycertificate..................................................................................................298
show ip http .......................................................................................................................................299
show ip https......................................................................................................................................299
Chapter 32. ........................................................................................ 802.1x Commands301
aaa authentication dot1x ...................................................................................................................301
dot1x system-auth-control.................................................................................................................301
dot1x port-control...............................................................................................................................302
dot1x re-authentication......................................................................................................................303
dot1x timeout re-authperiod...............................................................................................................303
dot1x re-authenticate.........................................................................................................................304
dot1x timeout quiet-period.................................................................................................................304
dot1x timeout tx-period......................................................................................................................305
dot1x max-req....................................................................................................................................306
dot1x timeout supp-timeout...............................................................................................................306
dot1x timeout server-timeout.............................................................................................................307
show dot1x ........................................................................................................................................308
show dot1x users...............................................................................................................................310
show dot1x statistics..........................................................................................................................311
dot1x auth-not-req.............................................................................................................................313
dot1x guest-vlan ................................................................................................................................313
dot1x single-host-violation.................................................................................................................314
dot1x mac-authentication ..................................................................................................................315
show dot1x advanced........................................................................................................................316
dot1x guest-vlan enable ....................................................................................................................317
...........................................................................................................................................................317
Index................................................................................................................................... 318

Preface
Page 1
Preface
This guide describes how to configure an AT-8000S Series switch using the command line interface. The
commands are grouped by topic into the following chapters:
•Chapter 1. "Using the CLI" — Describe the CLI basic structure and command usage.
•Chapter 2. "ACL Commands" — Define MAC and IP based ACLs and ACL bindings.
•Chapter 3. "AAA Commands" — Define the authentication method lists for servers.
•Chapter 4. "Address Table Commands" — Register MAC-layer Multicast addresses, and handles MAC-
layer secure address to a routed port .
•Chapter 5. "Clock Commands" — Show the configuration or status of the Simple Network Time Protocol
(SNTP).
•Chapter 6. "Configuration and Image File Commands" — Display the contents of the currently running
configuration file, specify contents of image files.
•Chapter 7. "DHCP Option 82 Commands" — DHCP with Option 82 attaches authentication messages to
the packets sent from the host. DHCP passes the configuration information to hosts on a TCP/IP network.
This permits network administrators to limit address allocation authorized hosts.
•Chapter 8. "DHCP Snooping Commands" — Contains parameters for enabling DHCP Snooping on the
device
•Chapter 9. "Ethernet Configuration Commands" — Configure multiple Ethernet type interfaces.
•Chapter 10. "GVRP Commands" — Display the GARP VLAN Registration Protocol (GVRP) configuration
information, enable GVRP globally or on an interface.
•Chapter 11. "IGMP Snooping Commands" — Enable the Internet Group Management Protocol (IGMP)
snooping.
•Chapter 12. "IP Addressing Commands" — Define a default gateway, set an IP address for interface,
delete entries from the host.
•Chapter 13. "Line Commands" — Display line parameters, enable the command history function, or
configure the command history buffer size.— Configure system priority, physical port priority, assign

Page 2
Not approved by Document Control. For review only.
Allied Telesis
Command Line Interface User’s Guide
administrative LACP timeouts, display LACP information for Ethernet ports, and display LACP information for
a port-channel.
•Chapter 15. "Management ACL Commands" — Define a permit or deny a rule, or configure a management
access control list.
•Chapter 16. "PHY Diagnostics Commands" — Display the optical transceiver diagnostics.
•Chapter 17. "Port Channel Commands" — Enter the interface configuration mode to configure a specific,
or a multiple port-channel.
•Chapter 18. "Port Monitor Commands" — Start a port monitoring session, or display the port monitoring
status.
•Chapter 19. "Power over Ethernet Commands" — Configure and display Power over Ethernet device
settings.
•Chapter 20. "QoS Commands" — Enable Quality of Service (QoS) on the device, create policy maps, and
define traffic classifications
•Chapter 21. "Radius Commands" — Specify the source IP address used for communication with Remote
Authentication Dial-in User Service (RADIUS) servers, and display the RADIUS server settings.
•Chapter 22. "RMON Commands" — Display the Remote Network Monitoring (RMON) Ethernet history
statistics, alarms table and configuration.
•Chapter 23. "SNMP Commands" — Configure the community access string to permit access to the Simple
Network Management Protocol (SNMP) server, create or update SNMP server entries, and specify SNMP
engineID.
•Chapter 24. "Spanning-Tree Commands" — Configure the spanning-tree functionality.
•Chapter 25. "SSH Commands" — Display the Secure Socket Shell (SSH) public keys on the device, SSH
server configuration, or which SSH public key is manually configured.
•Chapter 26. "Syslog Commands" — Log messages to a syslog server, or limit log messages to a syslog
server.
•Chapter 27. "TACACS+ Commands" — Display configuration and statistical information about a Terminal
Access Controller Access Control System (TACACS+) server, or specify a TACACS+ host.
•Chapter 28. "System Management Commands" — Display and list system, version or Telnet session
information.
•Chapter 29. "User Interface Commands" — Display and list system, version or Telnet session information.
•Chapter 30. "VLAN Commands" — Enter the (Virtual Local Area Network) VLAN Configuration mode,
enable simultaneously configuring multiple VLANs, or adds or remove VLANs.
•Chapter 31. "Web Server Commands" — Enable configuring the device from a browser, or display the
HTTP server configuration.
•Chapter 32. "802.1x Commands" — Specify authentication, authorization and accounting (AAA) methods
for use on interfaces running IEEE 802.1x, and enable 802.1x globally.
Intended Audience
This guide is intended for network administrators familiar with IT concepts and terminology.

Preface
Document Conventions
Page 3
Document Conventions
This document uses the following conventions:
Note
Provides related information or information of special importance.
Caution
Indicates potential damage to hardware or software, or loss of data.
Warning
Indicates a risk of personal injury.

Page 4
Not approved by Document Control. For review only.
Allied Telesis
Command Line Interface User’s Guide
Contacting Allied Telesis
This section provides Allied Telesis contact information for technical support as well as sales or corporate
information. .
Online SupportYou can request technical support online by accessing the Allied Telesis Knowledge Base
from the following web site:
www.alliedtelesis.com/support. You can use the Knowledge Base to submit questions
to our technical support staff and review answers to previously asked questions..
Email and Telephone
Support
For Technical Support via email or telephone, refer to the Allied Telesis web site:
www.alliedtelesis.com. Select your country from the list displayed on the website. Then
select the appropriate menu tab.
Returning Products Products for return or repair must first be assigned a Return Materials Authorization (RMA)
number. A product sent to Allied Telesis without a RMA number will be returned to the
sender at the sender’s expense.
To obtain an RMA number, contact the Allied Telesis Technical Support group at our web
site: www.alliedtelesis.com/support/rma. Select your country from the list displayed on
the website. Then select the appropriate menu tab.
For Sales or
Corporate
Information
You can contact Allied Telesis for sales or corporate information at our web site:
www.alliedtelesis.com. Select your country from the list displayed on the website. Then
select the appropriate menu tab.
Warranty The AT-iMG646xx series intelligent Multiservice Gateway has a limited warranty of two
years. Go to www.alliedtelesis.com/warranty for the specific terms and conditions of the
warranty and for warranty registration.

Using the CLI
CLI Command Modes
Page 5
Chapter 1. Using the CLI
Overview
This chapter describes how to start using the CLI and the CLI command editing features.
CLI Command Modes
Introduction
To assist in configuring the device, the Command Line Interface (CLI) is divided into different command modes.
Each command mode has its own set of specific commands. Entering a question mark "?" at the system prompt
(console prompt) displays a list of commands available for that particular command mode.
From each mode a specific command is used to navigate from one command mode to another. The standard
order to access the modes is as follows: User EXEC mode, Privileged EXEC mode, Global Configuration mode,
and Interface Configuration mode.
When starting a session, the initial mode is the User EXEC mode. Only a limited subset of commands are
available in User EXEC mode. This level is reserved for tasks that do not change the configuration. To enter the
next level, the Privileged EXEC mode, a password is required.
The Privileged EXEC mode gives access to commands that are restricted on User EXEC mode and provides
access to the device Configuration mode.
The Global Configuration mode manages the device configuration on a global level.
The Interface Configuration mode configures specific interfaces in the device.
User EXEC Mode
After logging into the device, the user is automatically in User EXEC command mode unless the user is defined as
a privileged user. In general, the User EXEC commands allow the user to perform basic tests, and list system
information.
The user-level prompt consists of the device host name followed by the angle bracket (>).
The default host name is Console unless it has been changed using the hostname command in the Global
Configuration mode.
Privileged EXEC Mode
Privileged access is password protected to prevent unauthorized use because many of the privileged commands
set operating system parameters. The password is not displayed on the screen and is case sensitive.
Privileged users enter directly into the Privileged EXEC mode. To enter the Privileged EXEC mode from the User
EXEC mode, perform the following steps:
1. At the prompt enter the enable command and press <Enter>. A password prompt is displayed.
Console>

Page 6
Not approved by Document Control. For review only.
Allied Telesis
Command Line Interface User’s Guide
2. Enter the password and press <Enter>. The password is displayed as *. The Privileged EXEC mode prompt
is displayed. The Privileged EXEC mode prompt consists of the device host name followed by #.
To return from the Privileged EXEC mode to the User EXEC mode, use the disable command. The following
example illustrates how to access the Privileged EXEC mode and return to the User EXEC mode:
The exit command is used to return from any mode to the previous mode except when returning to the User
EXEC mode from the Privileged EXEC mode. For example, the exit command is used to return from the Interface
Configuration mode to the Global Configuration mode.
Global Configuration Mode
Global Configuration mode commands apply to features that affect the system as a whole, rather than just a
specific interface. The configure Privileged EXEC mode command is used to enter the Global Configuration
mode.
To enter the Global Configuration mode perform the following steps:
1. At the Privileged EXEC mode prompt enter the configure command and press <Enter>. The Global
Configuration mode prompt is displayed. The Global Configuration mode prompt consists of the device host
name followed by (config) and #.
One of the following commands can be used to return from the Global Configuration mode to the Privileged EXEC
mode:
•exit
•end
•Ctrl+Z
The following example illustrates how to access the Global Configuration mode and return to the Privileged EXEC
mode:
Console#
Console>
enable
Enter Password: ******
Console#
Console#
disable
Console>
Console(config)#
Console#
Console#
configure
Console(config)# exit
Console#

Using the CLI
CLI Command Modes
Page 7
Interface Configuration and Specific Configuration Modes
Interface Configuration mode commands modify specific interface operations. The following are the Interface
Configuration modes:
•Line Interface — Contains commands to configure the management connections. These include commands
such as line timeout settings, etc. The line Global Configuration mode command is used to enter the Line
Configuration command mode.
•VLAN Database — Contains commands to create a VLAN as a whole. The VLAN database Global
Configuration mode command is used to enter the VLAN Database Interface Configuration mode.
•Management Access List — Contains commands to define management access-lists. The management
access-list Global Configuration mode command is used to enter the Management Access List Configuration
mode.
•Ethernet — Contains commands to manage port configuration. The interface ethernet Global Configuration
mode command is used to enter the Interface Configuration mode to configure an Ethernet type interface.
•Port Channel — Contains commands to configure port-channels, for example, assigning ports to a port-
channel. Most of these commands are the same as the commands in the Ethernet interface mode, and are
used to manage the member ports as a single entity. The interface port-channel Global Configuration mode
command is used to enter the Port Channel Interface Configuration mode.
•SSH Public Key-chain — Contains commands to manually specify other device SSH public keys. The
crypto key pubkey-chain ssh Global Configuration mode command is used to enter the SSH Public Key-
chain Configuration mode.
•QoS — Contains commands related to service definitions. The qos Global Configuration mode command is
used to enter the QoS services configuration mode.
•MAC Access-List— Configures conditions required to allow traffic based on MAC addresses. The mac
access-list Global Configuration mode command is used to enter the MAC access-list configuration mode.

Page 8
Not approved by Document Control. For review only.
Allied Telesis
Command Line Interface User’s Guide
Starting the CLI
The device can be managed over a direct connection to the device console port or via a Telnet connection. The
device is managed by entering command keywords and parameters at the prompt. Using the device Command
Line Interface (CLI) is very similar to entering commands on a UNIX system.
If access is via a Telnet connection, ensure that the device has a defined IP address, corresponding management
access is granted, and the workstation used to access the device is connected to the device prior to using CLI
commands.
Note
The following steps are for use on the console line only.
To start using the CLI, perform the following steps:
1. Connect the DB9 null-modem or cross over cable to the RS-232 serial port of the device to the RS-232 serial
port of the terminal or computer running the terminal emulation application.
Note
The default data rate is 115200 bps.
a) Set the data format to 8 data bits, 1 stop bit, and no parity.
b) Set Flow Control to none.
c) Under Properties, select VT100 for Emulation mode.
d) Select Terminal keys for Function, Arrow, and Ctrl keys. Ensure that the setting is for Terminal keys
(not Windows keys).
Note
When using HyperTerminal with Microsoft® Windows 2000, ensure that Windows® 2000 Service Pack 2
or later is installed. With Windows 2000 Service Pack 2, the arrow keys function properly in
HyperTerminal’s VT100 emulation. Go to www.microsoft.com for information on Windows 2000 service
packs.
2. Enter the following commands to begin the configuration procedure:
Console> enable
Console# configure
Console(config)#
3. Configure the device and enter the necessary commands to complete the required tasks.
4. When finished, exit the session with the exit command.
When a different user is required to log onto the system, use the login Privileged EXEC mode command. This
effectively logs off the current user and logs on the new user.