D-Link xStack DES-3200 Series User manual

xStack® DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual
®
CLI Reference
Manual
Product Model : DES-3200 Series
Layer 2 Managed Ethernet Switch
Release 1.21

xStack® DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual
Information in this document is subject to change without notice.
© 2010 D-Link Corporation. All rights reserved.
Reproduction in any manner whatsoever without the written permission of D-Link Corporation is strictly forbidden.
Trademarks used in this text: D-Link and the D-LINK logo are trademarks of D-Link Corporation; Microsoft and Windows are
registered trademarks of Microsoft Corporation.
Other trademarks and trade names may be used in this document to refer to either the entities claiming the marks and names or
their products. D-Link Corporation disclaims any proprietary interest in trademarks and trade names other than its own.
April 2010 P/N 651ES3200025G

xStack® DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual
Table of Contents
INTRODUCTION.........................................................................................................................................................1
USING THE CONSOLE CLI........................................................................................................................................3
COMMAND SYNTAX ..................................................................................................................................................7
BASIC SWITCH COMMANDS..................................................................................................................................10
MODIFY BANNER AND PROMPT COMMANDS ....................................................................................................30
SWITCH PORT COMMANDS ...................................................................................................................................33
PORT SECURITY COMMANDS ...............................................................................................................................37
NETWORK MANAGEMENT (SNMP) COMMANDS................................................................................................43
SWITCH UTILITY COMMANDS..............................................................................................................................67
NETWORK MONITORING COMMANDS................................................................................................................82
MULTIPLE SPANNING TREE PROTOCOL (MSTP) COMMANDS........................................................................99
FORWARDING DATABASE COMMANDS ............................................................................................................115
PACKET STORM CONTROL COMMANDS...........................................................................................................123
QOS COMMANDS ...................................................................................................................................................127
PORT MIRRORING COMMANDS..........................................................................................................................142
VLAN COMMANDS.................................................................................................................................................145
LINK AGGREGATION COMMANDS.....................................................................................................................156
BASIC IP COMMANDS ...........................................................................................................................................162
IGMP SNOOPING COMMANDS.............................................................................................................................168
DHCP RELAY COMMANDS...................................................................................................................................180
802.1X COMMANDS ................................................................................................................................................188

xStack® DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual
ACCESS CONTROL LIST (ACL) COMMANDS .....................................................................................................210
TIME RANGE COMMANDS ...................................................................................................................................227
SAFEGUARD ENGINE COMMANDS .....................................................................................................................229
TRAFFIC SEGMENTATION COMMANDS............................................................................................................231
TIME AND SNTP COMMANDS ..............................................................................................................................233
ARP COMMANDS....................................................................................................................................................239
ROUTING TABLE COMMANDS.............................................................................................................................243
MAC NOTIFICATION COMMANDS......................................................................................................................250
ACCESS AUTHENTICATION CONTROL COMMANDS.......................................................................................255
SSH COMMANDS....................................................................................................................................................278
SSL COMMANDS.....................................................................................................................................................286
D-LINK SINGLE IP MANAGEMENT COMMANDS...............................................................................................293
SMTP COMMANDS.................................................................................................................................................305
CABLE DIAGNOSTICS COMMANDS ....................................................................................................................310
DHCP LOCAL RELAY COMMANDS .....................................................................................................................312
GRATUITOUS ARP COMMANDS ..........................................................................................................................314
VLAN TRUNKING COMMANDS............................................................................................................................319
Q-IN-Q COMMANDS...............................................................................................................................................323
ASYMMETRIC VLAN COMMANDS ......................................................................................................................331
MLD SNOOPING COMMANDS ..............................................................................................................................333
IGMP SNOOPING MULTICAST VLAN COMMANDS...........................................................................................340
LIMITED IP MULTICAST ADDRESS COMMANDS..............................................................................................347
LLDP COMMANDS .................................................................................................................................................354

xStack® DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual
DOS PREVENTION COMMANDS...........................................................................................................................377
IP-MAC-PORT BINDING COMMANDS .................................................................................................................383
LOOPBACK DETECTION COMMANDS................................................................................................................395
PROTOCOL VLAN COMMANDS...........................................................................................................................402
MAC-BASED VLAN COMMANDS..........................................................................................................................408
FLOW METER COMMANDS..................................................................................................................................411
MAC-BASED ACCESS CONTROL COMMANDS...................................................................................................414
ARP SPOOFING PREVENTION COMMANDS.......................................................................................................431
TECHNICAL SUPPORT COMMANDS ...................................................................................................................434
COMMAND HISTORY COMMANDS .....................................................................................................................438
CONNECTIVITY FAULT MANAGEMENT COMMANDS.....................................................................................442
ETHERNET OAM COMMANDS.............................................................................................................................469
BPDU ATTACK PROTECTION COMMANDS........................................................................................................485
PER-QUEUE BANDWIDTH CONTROL COMMANDS ..........................................................................................492
ERPS COMMANDS..................................................................................................................................................495
NETWORK LOAD BALANCING (NLB) COMMANDS...........................................................................................505
PPPOE CIRCUIT ID INSERTION COMMANDS ....................................................................................................511
DHCP SERVER SCREENING SETTINGS...............................................................................................................515
APPENDIX A -TECHNICAL SPECIFICATIONS....................................................................................................519
APPENDIX B - PASSWORD RECOVERY PROCEDURE.......................................................................................522
APPENDIX C - RADIUS ATTRIBUTES ASSIGNMENT .........................................................................................524

xStack® DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual
1
1
INTRODUCTION
The Switch can be managed through the Switch’s serial port, Telnet, or the Web-based management agent. The Command Line
Interface (CLI) can be used to configure and manage the Switch via the serial port or Telnet interfaces.
This manual provides a reference for all of the commands contained in the CLI. Configuration and management of the Switch via
the Web-based management agent is discussed in the Manual. Configuration and management of the Switch via the Web-based
management agent is discussed in the User’s Guide.
Accessing the Switch via the Serial Port
The Switch’s serial port’s default settings are as follows:
9600 baud
no parity
8 data bits
1 stop bit
A computer running a terminal emulation program capable of emulating a VT-100 terminal and a serial port configured as above
are then connected to the Switch’s serial port via an RS-232 DB-9 cable.
With the serial port properly connected to a management computer, the following screen should be visible. If this screen does not
appear, try pressing Ctrl+r to refresh the console screen.
DES-3200-28 Fast Ethernet Switch
Command Line Interface
Firmware: Build 1.10.B014
Copyright(C) 2009 D-Link Corporation. All rights reserved.
UserName:
PassWord:
Figure 1 - 1. Initial CLI screen
There is no initial username or password. Just press the Enter key twice to display the CLI input cursor DES-3200-28:4#. This is
the command line where all commands are input.
Setting the Switch’s IP Address
Each Switch must be assigned its own IP Address, which is used for communication with an SNMP network manager or other
TCP/IP application (for example BOOTP, TFTP). The Switch’s default IP address is 10.90.90.90. Users can change the default
Switch IP address to meet the specification of your networking address scheme.
The Switch is also assigned a unique MAC address by the factory. This MAC address cannot be changed, and can be found on the
initial boot console screen – shown below.
Boot Procedure V1.00.B002
--------------------------------------------------------------------------
Power On Self Test........................................100%
MAC Address : 00-21-91-98-60-77
H/W Version : A1
Please wait, loading V1.10.B014 Runtime image...............100%
Figure 1 - 2. Boot screen

xStack® DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual
2
The Switch’s MAC address can also be found in the Web management program on the Switch Information (Basic Settings)
window in the Configuration folder.
The IP address for the Switch must be set before it can be managed with the Web-based manager. The Switch IP address can be
automatically set using BOOTP or DHCP protocols, in which case the actual address assigned to the Switch must be known.
The IP address may be set using the Command Line Interface (CLI) over the console serial port as follows:
Starting at the command line prompt, enter the command config ipif System ipaddress xxx.xxx.xxx.xxx/yyy.yyy.yyy.yyy. Where
the x’s represent the IP address to be assigned to the IP interface named System and the y’s represent the corresponding subnet
mask.
Alternatively, users can enter config ipif System ipaddress xxx.xxx.xxx.xxx/z. Where the x’s represent the IP address to be
assigned to the IP interface named System and the z represents the corresponding number of subnets in CIDR notation.
The IP interface named System on the Switch can be assigned an IP address and subnet mask which can then be used to connect a
management station to the Switch’s Telnet or Web-based management agent.
DES-3200-28:4#config ipif System ipaddress 10.73.21.11/255.0.0.0
Command: config ipif System ipaddress 10.73.21.11/8
Success.
DES-3200-28:4#
Figure 1 - 3. Assigning an IP Address
In the above example, the Switch was assigned an IP address of 10.73.21.11 with a subnet mask of 255.0.0.0. The system message
Success indicates that the command was executed successfully. The Switch can now be configured and managed via Telnet,
SNMP MIB browser and the CLI or via the Web-based management agent using the above IP address to connect to the Switch.

xStack® DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual
3
2
USING THE CONSOLE CLI
The Switch supports a console management interface that allows the user to connect to the Switch’s management agent via a serial
port and a terminal or a computer running a terminal emulation program. The console can also be used over the network using the
TCP/IP Telnet protocol. The console program can be used to configure the Switch to use an SNMP-based network management
application over the network.
This chapter describes how to use the console interface to access the Switch, change its settings, and monitor its operation.
Note: Switch configuration settings are saved to non-volatile RAM using the save command. The current
configuration will then be retained in the Switch’s NV-RAM, and reloaded when the Switch is rebooted. If
the Switch is rebooted without using the save command, the last configuration saved to NV-RAM will be
loaded.
Connecting to the Switch
The console interface is used by connecting the Switch to a VT100-compatible terminal or a computer running an ordinary
terminal emulator program (e.g., the HyperTerminal program included with the Windows operating system) using an RS-232C
serial cable. Your terminal parameters will need to be set to:
VT-100 compatible
9600 baud
8 data bits
No parity
One stop bit
No flow control
Users can also access the same functions over a Telnet interface. Once users have set an IP address for your Switch, users can use
a Telnet program (in VT-100 compatible terminal mode) to access and control the Switch. All of the screens are identical, whether
accessed from the console port or from a Telnet interface.
After the Switch reboots and users have logged in, the console looks like this:
DES-3200-28 Fast Ethernet Switch
Command Line Interface
Firmware: Build 1.10.B014
Copyright(C) 2009 D-Link Corporation. All rights reserved.
UserName:
PassWord:
Figure 2 - 1. Initial Console Screen after logging in
Commands are entered at the command prompt, DES-3200-28:4#.
There are a number of helpful features included in the CLI. Entering the ? command will display a list of all of the top-level
commands.

xStack® DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual
4
..
?
cable_diag ports
clear
clear address_binding dhcp_snoop binding_entry ports
clear arptable
clear counters
clear dos_prevention counters
clear fdb
clear igmp_snooping data_driven_group
clear log
clear mac_based_access_control auth_mac
clear port_security_entry port
config 802.1p default_priority
config 802.1p user_priority
config 802.1x auth_mode
config 802.1x auth_parameter ports
config 802.1x auth_protocol
config 802.1x capability ports
config 802.1x guest_vlan ports
config 802.1x init
config 802.1x reauth
CTRL+C ESC qQuit SPACE nNext Page ENTER Next Entry aAll
Figure 2 - 2. The ? Command
When users enter a command without its required parameters, the CLI will prompt users with Next possible completions:
message.
DES-3200-28:4#config account
Command: config account
Next possible completions:
<username>
DES-3200-28:4#
Figure 2 - 3. Example Command Parameter Help
In this case, the command config account was entered without the parameter <username>. The CLI will then prompt users to enter
the <username> with the message, Next possible completions:. Every command in the CLI has this feature, and complex
commands have several layers of parameter prompting.
In addition, after typing any given command plus one space, users can see all of the next possible sub-commands, in sequential
order, by repeatedly pressing the Tab key.
To re-enter the previous command at the command prompt, press the up arrow cursor key. The previous command will appear at
the command prompt.

xStack® DES-3200 Series Layer 2 Ethernet Managed Switch CLI Reference Manual
5
DES-3200-28:4#config account
Command: config account
Next possible completions:
<username>
DES-3200-28:4#config account
Command: config account
Next possible completions:
<username>
DES-3200-28:4#
Figure 2 - 4. Using the Up Arrow to Re-enter a Command
In the above example, the command config account was entered without the required parameter <username>, the CLI returned the
Next possible completions: <username> prompt. The up arrow cursor control key was pressed to re-enter the previous command
(config account) at the command prompt. Now the appropriate username can be entered and the config account command re-
executed.
All commands in the CLI function in this way. In addition, the syntax of the help prompts are the same as presented in this manual
angle brackets < > indicate a numerical value or character string, braces { } indicate optional parameters or a choice of
parameters, and brackets [ ] indicate required parameters.
If a command is entered that is unrecognized by the CLI, the top-level commands will be displayed under the Available
commands: prompt.
DES-3200-28:4#the
Available commands:
.. ? cable_diag clear
config create delete dir
disable download enable login
logout ping ping6 reboot
reconfig reset save show
smtp telnet traceroute upload
DES-3200-28:4#
Figure 2 - 5. The Next Available Commands Prompt
The top-level commands consist of commands such as show or config. Most of these commands require one or more parameters
to narrow the top-level command. This is equivalent to show what? or config what? Where the what? is the next parameter.
For example, if users enter the show command with no additional parameters, the CLI will then display all of the possible next
parameters.