D-Link DES-1228 - Web Smart Switch User manual

CLI Reference Manual
Product Model : DES-1228/ME
Managed10/100MbpsMetroEthernet Switch
Release1

_________________________________________________________________________________
Information in this document is subject to change without notice.
© 2009 D-Link Corporation. All rights reserved.
Reproduction in any manner whatsoever without the written permission of D-Link Corporation is strictly forbidden.
Trademarks used in this text: D-Link and the D-LINK logo are trademarks of D-Link Corporation; Microsoft and Windows are
registered trademarks of Microsoft Corporation.
Other trademarks and trade names may be used in this document to refer to either the entities claiming the marks and names or
their products. D-Link Corporation disclaims any proprietary interest in trademarks and trade names other than its own.
August 2009 P/N 651ES1228015G

Table of Contents
INTRODUCTION ..........................................................................................................................................................1
USING THE CONSOLE CLI.........................................................................................................................................3
COMMAND SYNTAX...................................................................................................................................................7
BASIC SWITCH COMMANDS.....................................................................................................................................9
MODIFY BANNER AND PROMPT COMMANDS .....................................................................................................21
SWITCH PORT COMMANDS....................................................................................................................................24
PORT SECURITY COMMANDS................................................................................................................................28
NETWORK MANAGEMENT (SNMP) COMMANDS .................................................................................................32
SWITCH UTILITY COMMANDS ................................................................................................................................54
NETWORK MONITORING COMMANDS..................................................................................................................64
MULTIPLE SPANNING TREE PROTOCOL (MSTP) COMMANDS .........................................................................76
FORWARDING DATABASE COMMANDS...............................................................................................................88
BROADCAST STORM CONTROL COMMANDS.....................................................................................................98
COS COMMANDS ...................................................................................................................................................101
PORT MIRRORING COMMANDS...........................................................................................................................116
VLAN COMMANDS .................................................................................................................................................119
LINK AGGREGATION COMMANDS.......................................................................................................................126
BASIC IP COMMANDS............................................................................................................................................131
IGMP SNOOPING COMMANDS..............................................................................................................................134
DHCP RELAY...........................................................................................................................................................144
802.1X COMMANDS................................................................................................................................................151
ACCESS CONTROL LIST (ACL) COMMANDS......................................................................................................170

SAFEGUARD ENGINE COMMANDS .....................................................................................................................182
TRAFFIC SEGMENTATION COMMANDS..............................................................................................................184
TIME AND SNTP COMMANDS...............................................................................................................................186
ARP COMMANDS....................................................................................................................................................192
ROUTING TABLE COMMANDS..............................................................................................................................196
MAC NOTIFICATION COMMANDS ........................................................................................................................198
ACCESS AUTHENTICATION CONTROL COMMANDS........................................................................................202
SSH COMMANDS....................................................................................................................................................222
SMTP COMMANDS .................................................................................................................................................229
CABLE DIAGNOSTICS COMMANDS.....................................................................................................................233
DHCP LOCAL RELAY COMMANDS ......................................................................................................................234
GRATUITOUS ARP COMMANDS...........................................................................................................................236
VLAN TRUNKING COMMANDS .............................................................................................................................240
ASYMMETRIC VLAN COMMANDS ........................................................................................................................244
IGMP SNOOPING MULTICAST VLAN COMMANDS.............................................................................................246
LLDP COMMANDS..................................................................................................................................................251
PPPOE COMMANDS...............................................................................................................................................270
IP-MAC-PORT BINDING COMMANDS...................................................................................................................273
LAYER 3 CONTROL PACKET FILTERING............................................................................................................278
LOOPBACK DETECTION COMMANDS.................................................................................................................280
TECHNICAL SUPPORT COMMANDS....................................................................................................................284
COMMAND HISTORY LIST.....................................................................................................................................287
DHCP SERVER SCREEN LIST...............................................................................................................................292

ARP SPOOFING ATTACK PREVENTION LIST.....................................................................................................295
TECHNICAL SPECIFICATIONS..............................................................................................................................297

DES-1228/ME Layer 2 Metro Ethernet Switch CLI Reference Manual
1
1
INTRODUCTION
The Switch can be managed through the Switch’s serial port, Telnet, or the Web-based management agent. The Command Line
Interface (CLI) can be used to configure and manage the Switch via the serial port or Telnet interfaces.
This manual provides a reference for all of the commands contained in the CLI. Configuration and management of the Switch via
the Web-based management agent is discussed in the Manual. This manual provides a reference for all of the commands contained
in the CLI for members of this series, including the DES-1228/ME. Examples present in this manual may refer to any member of
this series and may show different port counts, but are universal to this series of switches, unless otherwise stated. Configuration
and management of the Switch via the Web-based management agent is discussed in the User’s Guide.
Accessing the Switch via the Serial Port
The Switch’s serial port’s default settings are as follows:
•9600 baud
•no parity
•8 data bits
•1 stop bit
A computer running a terminal emulation program capable of emulating a VT-100 terminal and a serial port configured as above
are then connected to the Switch’s serial port via an RS-232 DB-9 cable.
With the serial port properly connected to a management computer, the following screen should be visible. If this screen does not
appear, try pressing Ctrl+r to refresh the console screen.
DES-1228/ME Metro Ethernet Switch Command Line Interface
Firmware: Build 1.00.B04
Copyright(C) 2009 D-Link Corporation. All rights reserved.
username:
Figure 1-1. Initial CLI screen
There is no initial username or password. Just press the Enter key twice to display the CLI input cursor −DES-1228/ME:4#.This
is the command line where all commands are input.

DES-1228/ME Layer 2 Metro Ethernet Switch CLI Reference Manual
2
Setting the Switch’s IP Address
Each Switch must be assigned its own IP Address, which is used for communication with an SNMP network manager or other
TCP/IP application (for example BOOTP, TFTP). The Switch’s default IP address is 10.90.90.90. Users can change the default
Switch IP address to meet the specification of your networking address scheme.
The Switch is also assigned a unique MAC address by the factory. This MAC address cannot be changed, and can be found on the
initial boot console screen – shown below.
Boot Procedure V1.00.01
--------------------------------------------------------------------------
Power On Self Test.................................100%
MAC Address : 00-21-91-98-60-77
H/W Version : A1
Please wait, loading V1.00.B04 Runtime image........100%
Figure 1-2. Boot screen
The Switch’s MAC address can also be found in the Web management program on the Switch Information (Basic Settings)
window on the Configuration menu.
The IP address for the Switch must be set before it can be managed with the Web-based manager. The Switch IP address can be
automatically set using BOOTP or DHCP protocols, in which case the actual address assigned to the Switch must be known.
The IP address may be set using the Command Line Interface (CLI) over the console serial port as follows:
1. Starting at the command line prompt, enter the commands config ipif System ipaddress
xxx.xxx.xxx.xxx/yyy.yyy.yyy.yyy. Where the x’s represent the IP address to be assigned to the IP interface named
System and the y’s represent the corresponding subnet mask.
2. Alternatively, users can enter config ipif System ipaddress xxx.xxx.xxx.xxx/z. Where the x’s represent the IP address to
be assigned to the IP interface named System and the zrepresents the corresponding number of subnets in CIDR
notation.
The IP interface named System on the Switch can be assigned an IP address and subnet mask which can then be used to connect a
management station to the Switch’s Telnet or Web-based management agent.
DES-1228/ME:4#config ipif System ipaddress 10.73.21.11/255.0.0.0
Command: config ipif System ipaddress 10.73.21.11/8
Success.
DES-1228/ME:4#
Figure 1-3. Assigning an IP Address
In the above example, the Switch was assigned an IP address of 10.90.90.91 with a subnet mask of 255.0.0.0. The system message
Success indicates that the command was executed successfully. The Switch can now be configured and managed via Telnet,
SNMP MIB browser and the CLI or via the Web-based management agent using the above IP address to connect to the Switch.

DES-1228/ME Layer 2 Metro Ethernet Switch CLI Reference Manual
3
2
USING THE CONSOLE CLI
The DES-1228/ME support a console management interface that allows the user to connect to the Switch’s management agent via
a serial port and a terminal or a computer running a terminal emulation program. The console can also be used over the network
using the TCP/IP Telnet protocol. The console program can be used to configure the Switch to use an SNMP-based network
management software over the network.
This chapter describes how to use the console interface to access the Switch, change its settings, and monitor its operation.
Note: Switch configuration settings are saved to non-volatile RAM using the save command. The current
configuration will then be retained in the Switch’s NV-RAM, and reloaded when the Switch is rebooted. If the
Switch is rebooted without using the save command, the last configuration saved to NV-RAM will be loaded.
Connecting to the Switch
The console interface is used by connecting the Switch to a VT100-compatible terminal or a computer running an ordinary
terminal emulator program (e.g., the HyperTerminal program included with the Windows operating system) using an RS-232C
serial cable. Your terminal parameters will need to be set to:
•VT-100 compatible
•9600 baud
•8 data bits
•No parity
•One stop bit
•No flow control
Users can also access the same functions over a Telnet interface. Once users have set an IP address for your Switch, users can use
a Telnet program (in VT-100 compatible terminal mode) to access and control the Switch. All of the screens are identical, whether
accessed from the console port or from a Telnet interface.
After the Switch reboots and users have logged in, the console looks like this:
DES-1228/ME Metro Ethernet Switch Command Line Interface
Firmware: Build 1.00.B04
Copyright(C) 2009 D-Link Corporation. All rights reserved.
username:
Figure 2-1. Initial Console Screen after logging in
Commands are entered at the command prompt, DES-1228/ME:4#.
There are a number of helpful features included in the CLI. Entering the ?command will display a list of all of the top-level
commands.

DES-1228/ME Layer 2 Metro Ethernet Switch CLI Reference Manual
4
.
?
cable_diag ports
clear
clear arptable
clear counters
clear fdb
clear flood_fdb
clear igmp_snooping data_driven_group
clear log
clear port_security_entry port
config 802.1p default_priority
config 802.1p user_priority
config 802.1x auth_mode
config 802.1x auth_parameter ports
config 802.1x auth_protocol
config 802.1x capability ports
config 802.1x guest_vlan ports
config 802.1x init
config 802.1x reauth
config access_profile profile_id
config account
CTRL+C ESC q Quit SPACE n Next Page ENTER Next Entry a All
Figure 2-2. The ? Command
When users enter a command without its required parameters, the CLI will prompt users with Next possible completions:
message.
DES-1228/ME:4#config account
Command: config account
Next possible completions:
<username>
DES-1228/ME:4#
Figure 2-3. Example Command Parameter Help
In this case, the command config account was entered with the parameter <username>. The CLI will then prompt users to enter
the <username> with the message, Next possible completions:. Every command in the CLI has this feature, and complex
commands have several layers of parameter prompting.
In addition, after typing any given command plus one space, users can see all of the next possible sub-commands, in sequential
order, by repeatedly pressing the Tab key.
To re-enter the previous command at the command prompt, press the up arrow cursor key. The previous command will appear at
the command prompt.

DES-1228/ME Layer 2 Metro Ethernet Switch CLI Reference Manual
5
DES-1228/ME:4#config account
Command: config account
Next possible completions:
<username>
DES-1228/ME:4#config account
Command: config account
Next possible completions:
<username>
DES-1228/ME:4#
Figure 2-4. Using the Up Arrow to Re-enter a Command
In the above example, the command config account was entered without the required parameter <username>, the CLI returned
the Next possible completions: <username> prompt. The up arrow cursor control key was pressed to re-enter the previous
command (config account) at the command prompt. Now the appropriate username can be entered and the config account
command re-executed.
All commands in the CLI function in this way. In addition, the syntax of the help prompts are the same as presented in this manual
−angle brackets < > indicate a numerical value or character string, braces { } indicate optional parameters or a choice of
parameters, and brackets [ ] indicate required parameters.
If a command is entered that is unrecognized by the CLI, the top-level commands will be displayed under the Available
commands: prompt.
DES-1228/ME:4#the
Available commands:
.. ? cable_diag clear
config create delete dir
disable download enable login
logout ping reboot reset
save show smtp telnet
traceroute upload
DES-1228/ME:4#
Figure 2-5. The Next Available Commands Prompt
The top-level commands consist of commands such as show or config. Most of these commands require one or more parameters
to narrow the top-level command. This is equivalent to show what? or config what? Where the what? is the next parameter.
For example, if users enter the show command with no additional parameters, the CLI will then display all of the possible next
parameters.