D-Link DGS-3224TGR - Switch User manual

DGS-3224TGR
Layer 2 Gigabit Ethernet Switch
Command Line Interface Reference Manual
(September 2004)
6S24TGRCLI03
Printed In China
RECYCLABLE

Trademarks
Copyright 2004 D-Link Corporation.
Contents subject to change without prior notice.
D-Link is a registered trademark of D-Link Corporation/D-Link Systems, Inc. All other trademarks belong to their respective
proprietors.
Copyright Statement
No part of this publication may be reproduced in any form or by any means or used to make any derivative such as translation,
transformation, or adaptation without permission from D-Link Corporation/D-Link Systems Inc., as stipulated by the United States
Copyright Act of 1976.
ii

Table of Contents
Introduction....................................................................................................................................................................................1
Using the Console CLI...................................................................................................................................................................4
Command Syntax ...........................................................................................................................................................................8
Basic Switch Commands..............................................................................................................................................................10
Switch Port Commands................................................................................................................................................................24
Network Management Commands...............................................................................................................................................27
Download/Upload Commands .....................................................................................................................................................36
Network Monitoring Commands .................................................................................................................................................39
Spanning Tree Commands ...........................................................................................................................................................45
Layer 2 Forwarding Database Commands ...................................................................................................................................51
Broadcast Storm Control Commands...........................................................................................................................................56
ARP Commands...........................................................................................................................................................................58
QOS Commands...........................................................................................................................................................................60
Port Mirroring Commands ...........................................................................................................................................................68
Port Security Commands..............................................................................................................................................................71
VLAN Commands........................................................................................................................................................................74
Link Aggregation Commands ......................................................................................................................................................82
IP Interface Commands................................................................................................................................................................88
IGMP Snooping Commands ........................................................................................................................................................90
Routing Table Commands............................................................................................................................................................98
802.1X Commands.....................................................................................................................................................................101
Access Control List (ACL) Commands .....................................................................................................................................115
SSH Commands .........................................................................................................................................................................125
SSL Commands..........................................................................................................................................................................131
Access Authentication Control Commands................................................................................................................................138
Traffic Segmentation Commands...............................................................................................................................................158
D-Link Single IP Management Commands ...............................................................................................................................160
Command History List ...............................................................................................................................................................173
Technical Specifications ............................................................................................................................................................177

DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual
1
INTRODUCTION
The switch can be managed through the switch’s serial port, Telnet, or the Web-based management agent. The Command Line
Interface (CLI) can be used to configure and manage the switch via the serial port or Telnet interfaces.
This manual provides a reference for all of the commands contained in the CLI. Configuration and management of the switch
via the Web-based management agent is discussed in the User’s Guide.
Accessing the Switch via the Serial Port
The switch’s serial port’s default settings are as follows:
• 9600 baud
• no parity
• 8 data bits
• 1 stop bit
A computer running a terminal emulation program capable of emulating a VT-100 terminal and a serial port configured as
above is then connected to the switch’s serial port via an RS-232 DB-9 cable.
With the serial port properly connected to a management computer, the following screen should be visible. If this screen does
not appear, try pressing Ctrl+r to refresh the console screen.
Figure 1-1. Initial Console screen
There is no initial username or password. Just press the Enter key twice to display the CLI input cursor −DGS-3224TGR:4#.
This is the command line where all commands are input.
Setting the Switch’s IP Address
Each switch must be assigned its own IP Address, which is used for communication with an SNMP network manager or other
TCP/IP application (for example BOOTP or TFTP). The switch’s default IP address is 10.90.90.90. You can change the default
switch IP address to meet the specification of your networking address scheme.
1
The switch is also assigned a unique MAC address by the factory that cannot be changed.

DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual
Figure 1-2. Boot screen
The switch’s MAC address can be found from the console program under the Switch Information menu item, as shown below.
The IP address for the switch must be set before it can be managed with the web-based manager. The switch IP address can be
automatically set using BOOTP or DHCP protocols, in which case the actual address assigned to the switch must be known.
By default, an IP interface named System is configured on the switch and contains all of the ports on the switch. The System
interface can be used initially to assign a range of IP addresses to the switch. Later, when you configure VLANs and IP
interfaces on the switch, the ports you assign to these VLANs and IP interfaces will be removed from the System interface.
The IP address may be set using the Command Line Interface (CLI) over the console serial port as follows:
1. Starting at the command line prompt DGS-3224TGR:4# −enter the commands config ipif System ipaddress
xxx.xxx.xxx.xxx/yyy.yyy.yyy.yyy. Where the x’s represent the IP address to be assigned to the IP interface named
System and the y’s represent the corresponding subnet mask.
2. Alternaltively, you can enter DGS3224TGR:4# −enter the commands config ipif System ipaddress
xxx.xxx.xxx.xxx/z. Where the x’s represent the IP address to be assigned to the IP interface named System and the z
represents the corresponding number of subnets in CIDR notation.
The IP interface named System on the switch can be assigned an IP address and subnet mask which can then be used to connect
a management station to the switch’s Telnet or Web-based management agent.
2

DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual
Figure 1-3. Assigning the Switch an IP Address
In the above example, the switch was assigned an IP address of 10.24.22.8 with a subnet mask of 255.0.0.0. The system
message “Success” indicates that the command was executed successfully. The switch can now be configured and managed via
Telnet and the CLI or via the Web-based management agent using the above IP address to connect to the switch.
3

DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual
2
USING THE CONSOLE CLI
The DGS-3224TGR supports a console management interface that allows the user to connect to the switch’s management agent
via a serial port and a terminal or a computer running a terminal emulation program. The console can also be used over the
network using the TCP/IP Telnet protocol. The console program can be used to configure the switch to use an SNMP-based
network management software over the network.
This chapter describes how to use the console interface to access the switch, change its settings, and monitor its operation.
NOTE: Switch configuration settings are saved to non-volatile RAM using
save command. The current configuration will then be retained in the
switch’s NV-RAM, and reloaded when the switch is rebooted. If the switch
is rebooted without using the save command, the last configuration saved
to NV-RAM will be loaded.
Connecting to the Switch
The console interface is used by connecting the switch to a VT100-compatible terminal or a computer running an ordinary
terminal emulator program (e.g., the HyperTerminal program included with the Windows operating system) using an RS-232C
serial cable. Your terminal parameters will need to be set to:
• VT-100 compatible
• 9,600 baud
• 8 data bits
• No parity
• One stop bit
• No flow control
You can also access the same functions over a Telnet interface. Once you have set an IP address for your switch, you can use a
Telnet program (in VT-100 compatible terminal mode) to access and control the switch. All of the screens are identical, whether
accessed from the console port or from a Telnet interface.
After the switch reboots and you have logged in, the console looks like this:
4

DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual
Figure 2-1. Initial Console screen
Commands are entered at the command prompt, DGS-3224TGR:4#.
There are a number of helpful features included in the CLI. Entering the ?command will display a list of all of the top-level
commands.
Figure 2-2. The ? Command
The dir command has the same function as the ? command.
When you enter a command without its required parameters, the CLI will prompt you with a Next possible completions:
message.
5

DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual
Figure 2-3. Example Command Parameter Help
In this case, the command config account was entered with the parameter <username>. The CLI will then prompt you to enter
the <username> with the message, Next possible completions:. Every command in the CLI has this feature, and complex
commands have several layers of parameter prompting.
To re-enter the previous command at the command prompt, press the up arrow cursor key. The previous command will appear
at the command prompt.
Figure 2-4. Using the Up Arrow to Re-enter a Command
In the above example, the command config account was entered without the required parameter <username>, the CLI returned
the Next possible completions: <username> prompt. The up arrow cursor control key was pressed to re-enter the previous
command (config account) at the command prompt. Now the appropriate User name can be entered and the config account
command re-executed.
All commands in the CLI function in this way. In addition, the syntax of the help prompts are the same as presented in this
manual −angle brackets < > indicate a numerical value or character string, braces { } indicate optional parameters or a choice of
parameters, and brackets [ ] indicate required parameters.
If a command is entered that is unrecognized by the CLI, the top-level commands will be displayed under the Available
commands: prompt.
6

DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual
Figure 2-5. The Available Commands Prompt
The top-level commands consist of commands like show or config. Most of these commands require one or more parameters to
narrow the top-level command. This is equivalent to show what? or config what? Where the what? is the next parameter.
For example, if you enter the show command with no additional parameters, the CLI will then display all of the possible next
parameters.
Figure 2-6. Next possible completions: Show Command
In the above example, all of the possible next parameters for the show command are displayed. At the next command prompt,
the up arrow was used to re-enter the show command, followed by the account parameter. The CLI then displays the user
accounts configured on the switch.
7

DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual
3
COMMAND SYNTAX
The following symbols are used in this manual to describe how command entries are made and values and
arguments are specified in this manual. The online help contained in the CLI and available through the console
interface uses the same syntax.
<angle brackets>
Purpose Encloses a variable or value that must be specified.
Example Syntax config ipif System ipaddress <network_address>
Description In the above syntax example, you must supply the network address in the
<network_address> space. Do not type the angle brackets.
Example Command config ipif System ipaddress 10.24.22.9/255.0.0.0
[square brackets]
Purpose Encloses a required value or set of required arguments. One or more values
or arguments can be specified.
Example Syntax create account [admin|user]
Description In the above syntax example, you must specify either an admin or a user
level account to be created. Do not type the square brackets.
Example Command create account admin
| vertical bar
Purpose Separates two or more mutually exclusive items in a list −one of which must
be entered.
Example Syntax show snmp [community|trap receiver|detail]
Description In the above syntax example, you must specify either community, trap
receiver, or detail. Do not type the vertical bar.
Example Command show snmp community
8

DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual
{braces}
Purpose Encloses an optional value or set of optional arguments.
Example Syntax config igmp [<ipif_name>|all] {version <value>|query_interval
<sec>|max_response_time <sec>| robustness_variable
<value>|last_member_query_interval <value>|state
[enabled|disabled]}
Description In the above syntax example, you must choose to enter an IP interface
name in the <ipif_name> space or all, but version <value>,
query_interval <sec>, max_response_time <sec>, robustness_variable
<value>, last_member_query_interval <value>, and state
[enabled|disabled] are all optional arguments. You can specify any or all
of the arguments contained by braces. Do not type the braces.
Example command config igmp all version 2
Line Editing Key Usage
Delete Deletes character under the cursor and then shifts the remaining characters in the line to the
left.
Backspace Delete the character to the left of the cursor and shifts the remaining characters in the line to
the left.
Insert Can be toggled on or off. When toggled on, inserts text at the current cursor position and
shifts the remainder of the line to the left.
Left Arrow Moves the cursor to the left.
Right Arrow Moves the cursor to the right.
Tab Shifts the cursor to the next field to the left.
Multiple Page Display Control Keys
Space Displays the next page.
CTRL+c Stops the display of remaining pages when multiple pages are to be displayed.
ESC Stops the display of remaining pages when multiple pages are to be displayed.
n Displays the next page.
p Displays the previous page.
q Stops the display of remaining pages when multiple pages are to be displayed.
r Refreshes the pages currently displaying.
a Displays the remaining pages without pausing between pages.
Enter Displays the next line or table entry.
9

DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual
4
BASIC SWITCH COMMANDS
The basic switch commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the
following table.
Command Parameters
create account [admin|user]
<username 15>
config account <username>
show account
delete account <username>
show session
show switch
show serial_port
config serial_port {baud_rate [9600|19200|38400|115200]
auto_logout(2) [never(0)|2_minutes(2)|5_minutes(5)
|10_minutes(10)|15_minutes(15)]}(1)
enable jumbo_frame
disable jumbo_frame
show jumbo_frame
enable clipaging
disable clipaging
enable telnet {<tcp_port_number 1-65535>}
disable telnet
enable web {<tcp_port_number 1-65535>}
disable web
save
reboot
reset {config|system}
login
logout
config realtime date <date ddmthyyyy> <time hour:min:sec>
show realtime
show config [dram|flash]
10

DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual
Each command is listed, in detail, in the following sections.
create account
Purpose Used to create user accounts
Syntax create account [admin|user] <username>
Description The create account command is used to create user accounts that consist of a
username of 1 to 15 characters and a password of 0 to 15 characters. Up to eight user
accounts can be created.
Parameters admin <username>
user <username>
Restrictions Only Administrator-level users can issue this command.
Usernames can be between 1 and 15 characters.
Passwords can be between 0 and 15 characters.
Example Usage:
To create an administrator-level user account with the username “dlink”:
DGS-3224TGR:4#create account admin dlink
Command: create account admin dlink
Enter a case-sensitive new password:****
Enter the new password again for confirmation:****
Success.
DGS-3224TGR:4#
config account
Purpose Used to configure user accounts
Syntax config account <username>
Description The config account command configures a user account that has been created using the
create account command.
Parameters <username>
Restrictions Only Administrator-level users can issue this command.
Usernames can be between 1 and 15 characters.
Passwords can be between 0 15 characters.
Example Usage:
To configure the user password of “dlink” account:
11

DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual
DGS-3224TGR:4#config account dlink
Command: config account dlink
Enter a old password:****
Enter a case-sensitive new password:****
Enter the new password again for confirmation:****
Success.
DGS-3224TGR:4#
show account
Purpose Used to display user accounts
Syntax show account
Description Displays all user accounts created on the switch. Up to eight user accounts can exist on the
switch at one time.
Parameters None.
Restrictions None.
Example Usage:
To display the accounts that have been created:
DGS-3224TGR:4#show account
Command: show account
Current Accounts:
Username Access Level
--------------- ------------
System user
dlink Admin
DGS-3224TGR:4#
delete account
Purpose Used to delete an existing user account
Syntax delete account <username>
Description The delete account command deletes a user account that has been created using the create
account command.
Parameters <username>
Restrictions Only Administrator-level users can issue this command.
Example Usage:
To delete the user account “System”:
12

DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual
DGS-3224TGR:4#delete account System
Command: delete account System
Success.
DGS-3224TGR:4#
show session
Purpose Used to display a list of currently logged-in users.
Syntax show session
Description This command displays a list of all the users that are logged-in at the time the command is
issued.
Parameters None
Restrictions None.
Example Usage:
To display the way that the users logged in:
DGS-3224TGR:4#show session
Command: show session
ID Login Time Live Time From Level Name
--- --------------------------- ------------------- ------------------- ------- ----------------
0 2004/09/03 13:34:24 00:01:13 172.18.212.199 4 Anonymous
1 2004/09/03 13:35:19 00:00:18 Serial Port 4 Anonymous
8 2004/09/03 13:04:26 00:31:11 Serial Port 4 Anonymous
Total Entries: 3
show switch
Purpose Used to display information about the switch.
Syntax show switch
Description This command displays information about the switch.
Parameters None.
Restrictions None.
Example Usage:
To display the switch information:
13

DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual
DGS-3224TGR:4#sh sw
Command: show switch
Device Type : DGS-3224TGR Gigabit-Ethernet Switch
MAC Address : 00-01-02-03-04-00
IP Address : 10.90.90.90 (Manual)
VLAN Name : default
Subnet Mask : 255.0.0.0
Default Gateway : 0.0.0.0
Boot PROM Version: Build 0.01.004
Firmware Version : Build 0.03.018
Hardware Version : 2A1
System Name :
System Location :
System Contact :
Spanning Tree : Disabled
GVRP : Disabled
IGMP Snooping : Disabled
TELNET : Enabled(TCP 23)
SSH : Enabled(TCP 22)
WEB : Enabled(TCP 80)
RMON : Disabled
RPS State : Inactive
DGS-3224TGR:4#
show serial_port
Purpose Used to display the current serial port settings.
Syntax show serial_port
Description This command displays the current serial port settings.
Parameters None.
Restrictions None
Example Usage:
To display the serial port setting:
DGS-3224TGR:4#show serial_port
Command: show serial_port
Baud Rate : 9600
Data Bits : 8
Parity Bits : None
Stop Bits : 1
Auto-Logout : 10 mins
DGS-3224TGR:4#
14

DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual
config serial_port
Purpose Used to configure the serial port.
Syntax config serial_port {baud_rate[9600|19200|38400|115200]|auto_logout
[never|2_minutes|5_minutes|10_minutes| 15_minutes]}
Description This command is used to configure the serial port’s baud rate and auto logout settings.
Parameters [9600|19200|38400|115200] −The serial bit rate that will be used to communicate with the
management host.
never −No time limit on the length of time the console can be open with no user input.
2_minutes −The console will log out the current user if there is no user input for 2 minutes.
5_minutes −The console will log out the current user if there is no user input for 5 minutes.
10_minutes −The console will log out the current user if there is no user input for 10 minutes.
15_minutes −The console will log out the current user if there is no user input for 15 minutes.
Restrictions Only administrator-level users can issue this command.
Example Usage:
To configure baud rate:
DGS-3224TGR:4#config serial_port baud_rate 9600
Command: config serial_port baud_rate 9600
Success.
DGS-3224TGR:4#
enable jumbo_frame
Purpose Used to enable support for Jumbo Frames.
Syntax enable jumbo_frame
Description This command is used to enable support for Jumbo Frames up to 9216 bytes.
Parameters None.
Restrictions Only administrator-level users can issue this command.
Example Usage:
To enable jumbo frame support on the switch:
DGS-3224TGR:4#enable jumbo_frame
Command: enable jumbo_frame
Success.
DGS-3224TGR:4#
15

DGS-3224TGR Gigabit Ethernet Switch CLI Reference Manual
disable jumbo_frame
Purpose Used to disable support for Jumbo Frames.
Syntax disable jumbo_frame
Description This command is used to disable support for Jumbo Frames of up to 9216 bytes.
Parameters None.
Restrictions Only administrator-level users can issue this command.
Example Usage:
To disable jumbo frame support on the switch:
DGS-3224TGR:4#disable jumbo_frame
Command: disable jumbo_frame
Success.
DGS-3224TGR:4#
show jumbo_frame
Purpose Used to display whether support for Jumbo Frames is currently enabled.
Syntax show jumbo_frame
Description This command is used to display whether support for Jumbo Frames of up to 9216 bytes is
enabled.
Parameters None.
Restrictions None.
Example Usage:
To display jumbo frame support on the switch:
DGS-3224TGR:4#show jumbo_frame
Command: show jumbo_frame
On.
DGS-3224TGR:4#
16