D-Link DES-3010F User manual

DES-3010F/DES-3010FL/DES-3010G/DES-3016/DES-3018/DES-3026
Managed 8/16/24-port 10/100Mbps N-Way Fast Ethernet Switch
Command Line Interface Reference Manual
Fourth Edition (November 2008)
651ES3026055G
Printed In Taiwan
RECYCLABLE

Table of Contents
Introduction...................................................................................................................................................................................... 1
Using the Console CLI..................................................................................................................................................................... 3
Command Syntax............................................................................................................................................................................. 8
Basic Switch Commands................................................................................................................................................................ 10
Switch Port Commands.................................................................................................................................................................. 24
Network Management (SNMP) Commands .................................................................................................................................. 28
SMTP Commands.......................................................................................................................................................................... 48
DHCP relay Commands................................................................................................................................................................. 53
Download/Upload Commands....................................................................................................................................................... 66
Network Monitoring Commands.................................................................................................................................................... 71
Spanning Tree Commands ............................................................................................................................................................. 84
Loopback Detection Commands.................................................................................................................................................... 90
Forwarding Database Commands .................................................................................................................................................. 94
Traffic Control Commands .......................................................................................................................................................... 101
QoS Commands............................................................................................................................................................................ 105
Traffic Segmentation Commands................................................................................................................................................. 120
Port Mirroring Commands ........................................................................................................................................................... 122
VLAN Commands........................................................................................................................................................................ 125
VLAN Trunk Commands............................................................................................................................................................. 128
Link Aggregation Commands...................................................................................................................................................... 131
Basic IP Commands ..................................................................................................................................................................... 137
IP-MAC Binding Commands....................................................................................................................................................... 139
MAC Notification Commands ..................................................................................................................................................... 145
IGMP Snooping Commands ........................................................................................................................................................ 149
IGMP Access Control Commands............................................................................................................................................... 156
CPU ACL Filtering Commands................................................................................................................................................... 158
Port Security Commands.............................................................................................................................................................. 167
802.1X Commands....................................................................................................................................................................... 171
Time and SNTP Commands......................................................................................................................................................... 192
Routing Table Commands............................................................................................................................................................ 198
ARP Commands........................................................................................................................................................................... 200
D-Link Single IP Management Commands ................................................................................................................................. 203

SSH Server Commands ................................................................................................................................................................214
Command History List..................................................................................................................................................................221
Technical Specifications...............................................................................................................................................................225

DES-3000 Series Layer 2 Switch CLI Reference Manual
1
1
INTRODUCTION
This document is a reference guide for all DES-3010F/DES-3010FL/DES-3010G/DES-3016/DES-3018/DES-3026 switches.
Throughout this manual, the DES-3026 Switch will be the Switch referred to for all examples and configuration information. All
DES-3010F/DES-3010FL /DES-3010G/DES-3016/DES-3018/DES-3026 switches contain the same information and posses the
same configuration capabilities. The difference between the switches resides in the port type and the port count only.
The DES-3026 Switch can be managed through the Switch’s serial port, Telnet, or the Web-based management agent. The
Command Line Interface (CLI) can be used to configure and manage the Switch via the serial port or Telnet interfaces.
This manual provides a reference for all of the commands contained in the CLI. Configuration and management of the Switch via
the Web-based management agent is discussed in the User’s Guide.
Accessing the Switch via the Serial Port
The Switch’s serial port’s default settings are as follows:
9600 baud
no parity
8 data bits
1 stop bit
A computer running a terminal emulation program capable of emulating a VT-100 terminal and a serial port configured as above
is then connected to the Switch’s serial port via an RS-232 DB-9 cable.
With the serial port properly connected to a management computer, the following screen should be visible. If this screen does not
appear, try pressing Ctrl+r to refresh the console screen.
DES-3026 Fast Ethernet Switch Command Line Interface
Firmware: Build 4.20.B27
Copyright(C) 2008 D-Link Corporation. All rights reserved.
UserName:
Figure 1-1. Initial CLI screen
There is no initial username or password. Just press the Enter key twice to display the CLI input cursor DES-3026:4#.This is
the command line where all commands are inputted.
Setting the Switch’s IP Address
Each switch must be assigned its own IP Address, which is used for communication with an SNMP network manager or other
TCP/IP application (for example BOOTP, TFTP). The Switch’s default IP address is 10.90.90.90. The default Switch IP address
can be changed to meet the specification of your networking address scheme.
The Switch is also assigned a unique MAC address by the factory. This MAC address cannot be changed, and can be found on the
initial boot console screen – shown below.

DES-3000 Series Layer 2 Switch CLI Reference Manual
2
Boot Procedure V1.01.009
---------------------------------------------------------------------------
Power On Self Test ......................................100%
MAC Address : 00-13-46-ED-3E-78
H/W Version : A3
Please Wait, Loading V4.20.B27 Runtime Image.............55%
Figure 1-2. Boot Screen
The Switch’s MAC address can also be found in the Web management program on the Switch Information (Basic Settings)
window on the Configuration menu.
The IP address for the Switch must be set before it can be managed with the Web-based manager. The Switch IP address can be
automatically set using BOOTP or DHCP protocols, in which case the actual address assigned to the Switch must be known.
The IP address may be set using the Command Line Interface (CLI) over the console serial port as follows:
1. Starting at the command line prompt, enter the commands config ipif System ipaddress
xxx.xxx.xxx.xxx/yyy.yyy.yyy.yyy. Where the x’s represent the IP address to be assigned to the IP interface named
System and the y’s represent the corresponding subnet mask.
2. Alternatively, you can enter config ipif System ipaddress xxx.xxx.xxx.xxx/z. Where the x’s represent the IP address to
be assigned to the IP interface named System and the zrepresents the corresponding number of subnets in CIDR
notation.
The IP interface named System on the Switch can be assigned an IP address and subnet mask which can then be used to connect a
management station to the Switch’s Telnet or Web-based management agent.
DES-3026 Fast Ethernet Switch Command Line Interface
Firmware: Build 4.20.B27
Copyright(C) 2008 D-Link Corporation. All rights reserved.
UserName:
PassWord:
DES-3026:4#config ipif System ipaddress 10.73.21.42/255.0.0.0
Command: config ipif System ipaddress 10.73.21.42/8
Success
DES-3026:4#_
Figure 1-3. Assigning an IP Address
In the above example, the Switch was assigned an IP address of 10.73.21.42 with a subnet mask of 255.0.0.0 (8 in CIDR from).
The system message Success indicates that the command was executed successfully. The Switch can now be configured and
managed via Telnet and the CLI or via the Web-based management agent using the above IP address to connect to the Switch.

DES-3000 Series Layer 2 Switch CLI Reference Manual
3
2
USING THE CONSOLE CLI
The DES-3026 supports a console management interface that allows the user to connect to the Switch’s management agent via a
serial port and a terminal or a computer running a terminal emulation program. The console can also be used over the network
using the TCP/IP Telnet protocol. The console program can be used to configure the Switch to use an SNMP-based network
management software over the network.
This chapter describes how to use the console interface to access the Switch, change its settings, and monitor its operation.
Note: Switch configuration settings are saved to non-volatile RAM using the
save command. The current configuration will then be retained in the
Switch’s NV-RAM, and reloaded when the Switch is rebooted. If the Switch
is rebooted without using the save command, the last configuration saved to
NV-RAM will be loaded.
Connecting to the Switch
The console interface is used by connecting the Switch to a VT100-compatible terminal or a computer running an ordinary
terminal emulator program (e.g., the HyperTerminal program included with the Windows operating system) using an RS-232C
serial cable. Your terminal parameters will need to be set to:
VT-100 compatible
9600 baud
8 data bits
No parity
One stop bit
No flow control
You can also access the same functions over a Telnet interface. Once you have set an IP address for your Switch, you can use a
Telnet program (in VT-100 compatible terminal mode) to access and control the Switch. All of the screens are identical, whether
accessed from the console port or from a Telnet interface.

DES-3000 Series Layer 2 Switch CLI Reference Manual
4
After the Switch reboots and you have logged in, the console looks like this:
DES-3026 Fast Ethernet Switch Command Line Interface
Firmware: Build 4.20.B27
Copyright(C) 2008 D-Link Corporation. All rights reserved.
UserName:
PassWord:
DES-3026:4#_
Figure 2-1. Console Screen after login
Commands are entered at the command prompt, DES-3026:4#.
There are a number of helpful features included in the CLI. Entering the ?command will display a list of all the top-level
commands.
..
?
cable_diag ports
clear
clear arptable
clear counters
clear fdb
clear log
clear port_security_entry port
config 802.1p default_priority
config 802.1p user_priority
config 802.1x auth_mode
config 802.1x auth_parameter ports
config 802.1x auth_protocol
config 802.1x capability ports
config 802.1x fwd_pdu ports
config 802.1x fwd_pdu system
config 802.1x guest_vlan ports
config 802.1x init
config 802.1x reauth
config account
config address_binding aging_interval
CTRL+C ESC q Quit SPACE n Next Page ENTER Next Entry a All
Figure 2-2. The ? Command
The dir command has the same function as the ? command.

DES-3000 Series Layer 2 Switch CLI Reference Manual
5
When you enter a command without its required parameters, the CLI will prompt you with Next possible completions: message.
DES-3026:4#show
Command: show
Next possible completions:
802.1p 802.1x account acct_client
address_binding arpentry auth_client auth_diagnostics
auth_session_statistics auth_statistics autoconfig
bandwidth_control command_history config cos
cpu_access_profile dhcp_relay dscp_mapping error
fdb igmp igmp_snooping ipif
iproute lacp_port link_aggregation log
log_save_timing loopdetect mac_notification mirror
multicast multicast_fdb packet port_security
ports radius router_ports scheduling
scheduling_mechanism serial_port session
sim smtp snmp sntp
ssh stp switch syslog
terminal_line time traffic
traffic_segmentation trusted_host utilization
vlan vlan_trunk
DES-3026:4#
Figure 2-3. Example Command Parameter Help
In this case, the command show was entered without a parameter. The CLI will then prompt you to enter the next possible
completions with the message, Next possible completions:. Every command in the CLI has this feature, and complex commands
have several layers of parameter prompting.
In addition, after typing any given command plus one space, you can see all of the next possible sub-commands, in sequential
order, by repeatedly pressing the Tab key.
To re-enter a previously entered command at the command prompt, press the up arrow cursor key. The previous command will
appear at the command prompt.

DES-3000 Series Layer 2 Switch CLI Reference Manual
6
DES-3026:4#config account
Command: config account
Next possible completions:
<username>
DES-3026:4#config account
Command: config account
Next possible completions:
<username>
DES-3026:4#_
Figure 2-4. Using the Up Arrow to Re-enter a Command
In the above example, the command config account was entered without the required parameter <username>, the CLI returned
the Next possible completions: <username> prompt. The up arrow cursor control key was pressed to re-enter the previous
command (config account) at the command prompt. Now the appropriate user name can be entered and the config account
command re-executed.
All commands in the CLI function in this way. In addition, the syntax of the help prompts are the same as presented in this
manual angle brackets < > indicate a numerical value or character string, braces { } indicate optional parameters or a choice of
parameters, and brackets [ ] indicate required parameters.
If a command is entered that is unrecognized by the CLI, the top-level commands will be displayed under the Available
commands: prompt.
DES-3026:4#the
Available commands:
.. ? cable_diag clear
config create delete dir
disable download enable login
logout ping reboot reconfig
reset save show smtp
upload
DES-3026:4#
Figure 2-5. The Next Available Commands Prompt
The top-level commands consist of commands such as show or config. Most of these commands require one or more parameters
to narrow the top-level command. This is equivalent to show what? or config what? Where the what? is the next parameter.
For example, if you enter the show command with no additional parameters, the CLI will then display all of the possible next
parameters.

DES-3000 Series Layer 2 Switch CLI Reference Manual
7
DES-3026:4#show
Command: show
Next possible completions:
802.1p 802.1x account acct_client
address_binding arpentry auth_client auth_diagnostics
auth_session_statistics auth_statistics autoconfig
bandwidth_control command_history config cos
cpu_access_profile dhcp_relay dscp_mapping error
fdb igmp igmp_snooping ipif
iproute lacp_port link_aggregation log
log_save_timing loopdetect mac_notification mirror
multicast multicast_fdb packet port_security
ports radius router_ports scheduling
scheduling_mechanism serial_port session
sim smtp snmp sntp
ssh stp switch syslog
terminal_line time traffic
traffic_segmentation trusted_host utilization
vlan vlan_trunk
DES-3026:4#
Figure 2-6. Next possible completions: show command
In the above example, all of the possible next parameters for the show command are displayed. At the next command prompt, the
up arrow was used to re-enter the show command, followed by the account parameter. The CLI then displays the user accounts
configured on the Switch.

DES-3000 Series Layer 2 Switch CLI Reference Manual
8
3
COMMAND SYNTAX
The following symbols are used to describe how command entries are made and values and arguments are specified in this
manual. The online help contained in the CLI and available through the console interface uses the same syntax.
Note: All commands are case-sensitive. Be sure to disable Caps Lock or
any other unwanted function that changes text case.
<angle brackets>
Purpose Encloses a variable or value that must be specified.
Syntax config ipif [System] [{ipaddress <network_address> | vlan
<vlan_name> | state [enable | disable]} | [description <desc 128> |
clear_description} | bootp | dhcp]
Description In the above syntax example a VLAN name must be specified in the
<vlan_name 32> space and the network address in the <network_address>
space. Do not type the angle brackets.
Example
Command config ipif System ipaddress 10.24.22.5/255.0.0.0 vlan Design state
enable
[square brackets]
Purpose Encloses a required value or set of required arguments. One value or
argument can be specified.
Syntax create account [admin | user] <username 15>
Description In the above syntax example, an admin or a user level account must be
specified to be created. Do not type the square brackets.
Example
Command create account admin Darren
| vertical bar
Purpose Separates two or more mutually exclusive items in a list, one of which must
be entered.
Syntax show multicast_fdb {vlan <vlan_name 32> | mac_address <macaddr>}
Description In the above syntax example, either a VLAN, or a MAC address must be
specified to show multicast FDB entries. Do not type the vertical bar.
Example
Command show multicast_fdb vlan default mac_address 0A-25-3D-8E-41-00

DES-3000 Series Layer 2 Switch CLI Reference Manual
9
{braces}
Purpose Encloses an optional value or set of optional arguments.
Syntax reset {[config | system]}
Description In the above syntax example, you have the option to specify config or
system. It is not necessary to specify either optional value, however the
effect of the system reset is dependent on which, if any, value is specified.
Therefore, with this example there are three possible outcomes of
performing a system reset. See the chapter Basic Commands for more
details about the reset command.
Example
command reset config
Line Editing Key Usage
Delete Deletes the character under the cursor and then shifts the remaining
characters in the line to the left.
Backspace Deletes the character to the left of the cursor and shifts the remaining
characters in the line to the left.
Left Arrow Moves the cursor to the left.
Right Arrow Moves the cursor to the right.
Up Arrow Repeat the previously entered command. Each time the up arrow is
pressed, the command previous to that displayed appears. This way it is
possible to review the command history for the current session. Use the
down arrow to progress sequentially forward through the command history
list.
Down Arrow The down arrow will display the next command in the command history
entered in the current session. This displays each command sequentially as
it was entered. Use the up arrow to review previous commands.
Tab Shifts the cursor to the next field to the left.
Multiple Page Display Control Keys
Space Displays the next page.
CTRL+c Stops the display of remaining pages when multiple pages are to be
displayed.
ESC Stops the display of remaining pages when multiple pages are to be
displayed.
n Displays the next page.
p Displays the previous page.
q Stops the display of remaining pages when multiple pages are to be
displayed.
r Refreshes the pages currently displayed.
a Displays the remaining pages without pausing between pages.
Enter Displays the next line or table entry.

DES-3000 Series Layer 2 Switch CLI Reference Manual
10
4
BASIC SWITCH COMMANDS
The basic switch commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the
following table.
Command Parameters
enable password
encryption
disable password
encryption
config account <username> {encrypt [plain_text | sha_1] <password>}
delete account <username> {force_agree}
show account
show session
show switch
show config [current_config | config_in_nvram]
show serial_port
config serial_port {baud_rate [9600 | 19200 | 38400 | 115200] |auto_logout [never |
2_minutes | 5_minutes| 10_minutes | 15_minutes]}
enable clipaging
disable clipaging
enable telnet {<tcp_port_number 1-65535>}
disable telnet
enable web {<tcp_port_number 1-65535>}
disable web
save {[config | log | all]}
reboot {force_agree}
reset {[config | system]} {force_agree}
login
logout
ping <ipaddr> {times <value 1-255>} {timeout <sec 1-99>}
config terminal_line [default | <value 20-80>]
show terminal_line
Each command is listed, in detail, in the following sections.

DES-3000 Series Layer 2 Switch CLI Reference Manual
11
enable/disable password encryption
Purpose Used to create user accounts.
Syntax enable password encryption
disable password encryption
Description The user account configuration information will be stored in the
configuration file, and can be applied to the system later.
If the password encryption is enabled, the password will be in
encrypted form.
When password encryption is disabled, if the user specifies the
password in plain text form, the password will be in plain text form.
However, if the user specifies the password in encrypted form, or if
the password has been converted to encrypted form by the last
enable password encryption command, the password will still be in
the encrypted form. It can not be reverted to the plain text form.
Parameters None
Restrictions Only Administrator-level users can issue this command.
Example usage:
To enable password encryption.
DES-3026:4# enable password encryption
Command: enable password encryption
Success.
DES-3026:4#
create account
Purpose Used to create user accounts.
Syntax create [admin | user] <username 15>
Description The create account command is used to create user accounts that
consists of a username of 1 to 15 characters and a password of 0
to 15 characters. Up to 8 user accounts can be created.
Parameters admin <username>
user <username>
Restrictions Only Administrator-level users can issue this command.
Usernames can be between 1 and 15 characters.
Passwords can be between 0 and 15 characters.
Example usage:
To create an administrator-level user account with the username “dlink”.
DES-3026:4#create account admin dlink
Command: create account admin dlink
Enter a case-sensitive new password:****
Enter the new password again for confirmation:****
Success.

DES-3000 Series Layer 2 Switch CLI Reference Manual
12
DES-3026:4#
NOTICE: In case of lost passwords or password corruption, please refer to the
D-Link website and the White Paper entitled “Password Recovery Procedure”,
which will guide you through the steps necessary to resolve this issue.
config account
Purpose Used to configure user accounts.
Syntax config account <username> {encrypt [plain_text | sha_1]
<password>}
Description The config account command configures a user account that has
been created using the create account command.
Parameters <username> Enter the username of the account.
<password> Enter a password for the account.
Restrictions Only Administrator-level users can issue this command.
Usernames can be between 1 and 15 characters.
Passwords can be between 0 and 15 characters.
Example usage:
To configure the user password of “dlink” account:
DES-3026:4#config account dlink
Command: config account dlink
Enter a old password:****
Enter a case-sensitive new password:****
Enter the new password again for confirmation:****
Success.
DES-3026:4#
show account
Purpose Used to display user accounts.
Syntax show account
Description Displays all user accounts created on the Switch. Up to 8 user
accounts can exist on the Switch at one time.
Parameters None.
Restrictions Only Administrator-level users can issue this command.
Example usage:
To display the accounts that have been created:

DES-3000 Series Layer 2 Switch CLI Reference Manual
13
DES-3026:4#show account
Command: show account
Current Accounts:
Username Access Level
--------------- ------------
dlink Admin
DES-3026:4#
delete account
Purpose Used to delete an existing user account.
Syntax delete account <username> {force_agree}
Description The delete account command deletes a user account that has been
created using the create account command.
Parameters <username> –Enter the username of the account to be deleted.
force_agree – Entering this parameter will bypass the “Are you
sure?” question and immediately delete the account.
Restrictions Only Administrator-level users can issue this command.
Example usage:
To delete the user account “System”:
DES-3026:4#delete account System
Command: delete account System
Are you sure to delete the last administrator
account?(y/n)
Success.
DES-3026:4#
show session
Purpose Used to display a list of currently logged-in users.
Syntax show session
Description This command displays a list of all the users that are logged-in at
the time the command is issued.
Parameters None.
Restrictions None.
Example usage:
To display the way that the users logged in:
DES-3026:4#show session
Command: show session
ID Login Time Live Time From Level Name
-- ----------- --------- ------ -------- ----------
*8 2204/01/26 3:36:27 0:0:20.260 Serial Port 4 Anonymous
Total entries: 1

DES-3000 Series Layer 2 Switch CLI Reference Manual
14
CTRL+C ESC q Quit SPACE n Next Page p Previous Page r Refresh
show switch
Purpose Used to display information about the Switch.
Syntax show switch
Description This command displays information about the Switch.
Parameters None.
Restrictions None.
Example usage:
To display the Switch information:
DES-3026:4#show switch
Command: show switch
Device Type : DES-3026 Fast Ethernet Switch
Module 1 Type : None
Module 2 Type : None
MAC Address : 00-1C-F0-11-69-59
IP Address : 10.73.21.26 (Manual)
VLAN Name : default
Subnet Mask : 255.0.0.0
Default Gateway : 0.0.0.0
Boot PROM Version : Build 1.01.009
Firmware Version : Build 4.20.B27
Hardware Version : A3
System Name :
System Location :
System Contact :
Spanning Tree : Disabled
LoopBack Detection : Disabled
IGMP Snooping : Disabled
VLAN trunk : Disabled
802.1X : Disabled
TELNET : Enabled(TCP 23)
WEB : Enabled(TCP 80)
RMON : Disabled
CTRL+C ESC q Quit SPACE n Next Page ENTER Next Entry a All
show config
Purpose Used to display a list of configuration commands entered into the
Switch.

DES-3000 Series Layer 2 Switch CLI Reference Manual
15
show config
Syntax show config [current_config | config_in_nvram]
Description This command displays a list of configuration commands entered
into the Switch.
Parameters current_config – Entering this parameter will display configurations
entered without being saved to NVRAM.
config_in_nvram – Entering this parameter will display
configurations entered and saved to NVRAM.
Restrictions Only Administrator-level users can issue this command.
Example usage:
To view configurations entered on the Switch that were saved to the DRAM:
DES-3026:4# show config config_in_nvram
Command: show config config_in_nvram
# BASIC
config serial_port baud_rate 9600 auto_logout never
enable telnet 23
enable web 80
enable clipaging
# STORM
config traffic control 1-16 broadcast disable multicast disable
dlf disable threshold 128
CTRL+C ESC q Quit SPACE n Next Page ENTER Next Entry a All
show serial_port
Purpose Used to display the current serial port settings.
Syntax show serial_port
Description This command displays the current serial port settings.
Parameters None.
Restrictions None.
Example usage:
To display the serial port setting:
DES-3026:4#show serial_port
Command: show serial_port
Baud Rate : 9600
Data Bits : 8
Parity Bits: None
Stop Bits : 1
Auto-Logout: 10 mins
DES-3026:4#

DES-3000 Series Layer 2 Switch CLI Reference Manual
16
config serial_port
Purpose Used to configure the serial port.
Syntax {baud_rate [9600 | 19200 | 38400 | 115200] |auto_logout [never |
2_minutes | 5_minutes| 10_minutes | 15_minutes]}
Description This command is used to configure the serial port’s baud rate and auto
logout settings.
Parameters baud rate [9600 | 19200 | 38400 | 115200] The serial bit rate that will be
used to communicate with the management host.
auto_logout – This parameter will allow the user to choose the time the
Switch’s serial port will be idle before automatically logging out. The user
may choose one of the following.
never No time limit on the length of time the console can be open
with no user input.
2_minutes The console will log out the current user if there is no
user input for 2 minutes.
5_minutes The console will log out the current user if there is no
user input for 5 minutes.
10_minutes The console will log out the current user if there is
no user input for 10 minutes.
15_minutes The console will log out the current user if there is
no user input for 15 minutes.
Restrictions Only Administrator-level users can issue this command.
Example usage:
To configure the baud rate:
DES-3026:4#config serial_port baud_rate 9600
Command: config serial_port baud_rate 9600
Success.
DES-3026:4#