D-Link xStack DES-3500 Series User manual

CLIManual
ProductModel:
TM
DES-3500Series
Layer2ManagedStackableFastEthernetSwitch
Release5.1

Table of Contents
INTRODUCTION .........................................................................................................................1
USING THE CONSOLE CLI........................................................................................................3
COMMAND SYNTAX ..................................................................................................................7
BASIC SWITCH COMMANDS ....................................................................................................9
MODIFY BANNER AND PROMPT COMMANDS .....................................................................21
SWITCH PORT COMMANDS ...................................................................................................25
PORT SECURITY COMMANDS ...............................................................................................28
NETWORK MANAGEMENT (SNMP) COMMANDS .................................................................32
SWITCH UTILITY COMMANDS................................................................................................54
NETWORK MONITORING COMMANDS..................................................................................62
MULTIPLE SPANNING TREE PROTOCOL (MSTP) COMMANDS..........................................76
FORWARDING DATABASE COMMANDS...............................................................................89
TRAFFIC CONTROL COMMANDS ..........................................................................................97
QOS COMMANDS ..................................................................................................................102
PORT MIRRORING COMMANDS...........................................................................................109
VLAN COMMANDS.................................................................................................................112
ASYMMETRIC VLAN COMMANDS........................................................................................119
LINK AGGREGATION COMMANDS......................................................................................121
IP-MAC BINDING....................................................................................................................126
LIMITED IP MULTICAST ADDRESS......................................................................................142

BASIC IP COMMANDS...........................................................................................................146
IGMP SNOOPING COMMANDS.............................................................................................149
DHCP RELAY..........................................................................................................................159
802.1X COMMANDS (INCLUDING GUEST VLANS).............................................................171
ACCESS CONTROL LIST (ACL) COMMANDS .....................................................................184
SAFEGUARD ENGINE COMMANDS.....................................................................................203
FILTER COMMANDS (DHCP/NETBIOS)................................................................................205
LOOPBACK DETECTION COMMANDS ................................................................................210
TRAFFIC SEGMENTATION COMMANDS .............................................................................213
TIME AND SNTP COMMANDS...............................................................................................215
ARP COMMANDS...................................................................................................................221
ROUTING TABLE COMMANDS.............................................................................................225
MAC NOTIFICATION COMMANDS........................................................................................227
ACCESS AUTHENTICATION CONTROL COMMANDS........................................................231
SSH COMMANDS...................................................................................................................254
SSL COMMANDS ...................................................................................................................261
D-LINK SINGLE IP MANAGEMENT COMMANDS.................................................................268
COMMAND HISTORY LIST....................................................................................................278
LLDP COMMANDS.................................................................................................................281
CPU FILTERING COMMANDS...............................................................................................303
CABLE DIAGNOSTICS COMMANDS ....................................................................................305
DHCP LOCAL RELAY COMMANDS......................................................................................306

GRATUITOUS ARP COMMANDS ..........................................................................................309
ARP SPOOFING PREVENTION COMMANDS.......................................................................313
TECHNICAL SUPPORT COMMANDS....................................................................................315
TECHNICAL SPECIFICATIONS .............................................................................................317

DES-3500 Layer 2 Fast Ethernet Switch CLI Reference Manual
1
1
INTRODUCTION
The Switch can be managed through the Switch’s serial port, Telnet, or the Web-based management agent. The Command Line
Interface (CLI) can be used to configure and manage the Switch via the serial port or Telnet interfaces.
This manual provides a reference for all of the commands contained in the CLI. Configuration and management of the Switch via
the Web-based management agent is discussed in the Manual.
The DES-3500 Layer 2 stackable Fast Ethernet switches are members of the D-Link xStack family. Ranging from 10/100Mbps
edge switches to core gigabit switches, the xStack switch family has been future-proof designed to provide a stacking architecture
with fault tolerance, flexibility, port density, robust security and maximum throughput with a user-friendly management interface
for the networking professional.
This manual provides a reference for all of the commands contained in the CLI for members of the xStack DES-3500 series,
including the DES-3526, DES-3526DC, and the DES-3550. Examples present in this manual may refer to any member of the
xStack DES-3500 series and may show different port counts, but are universal to this series of switches, unless otherwise stated.
Configuration and management of the Switch via the Web-based management agent is discussed in the User’s Guide.
Accessing the Switch via the Serial Port
The Switch’s serial port’s default settings are as follows:
•9600 baud
•no parity
•8 data bits
•1 stop bit
A computer running a terminal emulation program capable of emulating a VT-100 terminal and a serial port configured as above
is then connected to the Switch’s serial port via an RS-232 DB-9 cable.
With the serial port properly connected to a management computer, the following screen should be visible. If this screen does not
appear, try pressing Ctrl+r to refresh the console screen.
DES-3526 Fast Ethernet Switch Command Line Interface
Firmware: Build 5.01-B47
Copyright(C) 2008 D-Link Corporation. All rights reserved.
username:
Figure 1-1. Initial CLI screen
There is no initial username or password. Just press the Enter key twice to display the CLI input cursor −DES-3526:admin#.
This is the command line where all commands are input.

DES-3500 Layer 2 Fast Ethernet Switch CLI Reference Manual
2
Setting the Switch’s IP Address
Each Switch must be assigned its own IP Address, which is used for communication with an SNMP network manager or other
TCP/IP application (for example BOOTP, TFTP). The Switch’s default IP address is 10.90.90.90. Users can change the default
Switch IP address to meet the specification of your networking address scheme.
The Switch is also assigned a unique MAC address by the factory. This MAC address cannot be changed, and can be found on the
initial boot console screen – shown below.
Boot Procedure 3.00.008
-------------------------------------------------------------
Power On Self Test.................................100%
MAC
Address : 00-15-E9-41-5A-B9
H/W Version : 0A3G
Please wait, loading V5.01-B47 Runtime image........15%
Figure 1-2. Boot Screen
The Switch’s MAC address can also be found in the Web management program on the Switch Information (Basic Settings)
window on the Configuration menu.
The IP address for the Switch must be set before it can be managed with the Web-based manager. The Switch IP address can be
automatically set using BOOTP or DHCP protocols, in which case the actual address assigned to the Switch must be known.
The IP address may be set using the Command Line Interface (CLI) over the console serial port as follows:
1. Starting at the command line prompt, enter the commands config ipif System ipaddress
xxx.xxx.xxx.xxx/yyy.yyy.yyy.yyy. Where the x’s represent the IP address to be assigned to the IP interface named
System and the y’s represent the corresponding subnet mask.
2. Alternatively, users can enter config ipif System ipaddress xxx.xxx.xxx.xxx/z. Where the x’s represent the IP address to
be assigned to the IP interface named System and the zrepresents the corresponding number of subnets in CIDR
notation.
The IP interface named System on the Switch can be assigned an IP address and subnet mask which can then be used to connect a
management station to the Switch’s Telnet or Web-based management agent.
DES-3526:admin#config ipif System ipaddress 10.73.21.51/8
Command: config ipif System ipaddress 10.73.21.51/8
Success.
DES-3526:admin#
Figure 1-3. Assigning an IP Address
In the above example, the Switch was assigned an IP address of 10.41.44.254 with a subnet mask of 255.0.0.0. The system
message Success indicates that the command was executed successfully. The Switch can now be configured and managed via
Telnet, SNMP MIB browser and the CLI or via the Web-based management agent using the above IP address to connect to the
Switch.

DES-3500 Layer 2 Fast Ethernet Switch CLI Reference Manual
3
2
USING THE CONSOLE CLI
The DES-3500 Series supports a console management interface that allows the user to connect to the Switch’s management agent
via a serial port and a terminal or a computer running a terminal emulation program. The console can also be used over the
network using the TCP/IP Telnet protocol. The console program can be used to configure the Switch to use an SNMP-based
network management software over the network.
This chapter describes how to use the console interface to access the Switch, change its settings, and monitor its operation.
Note: Switchconfiguration settings aresaved to non-volatile RAM using the save command. The current
configuration will then be retained in the Switch’s NV-RAM, and reloaded when the Switch is rebooted. If
the Switch is rebooted without using thesavecommand, the last configuration saved to NV-RAM will be
loaded.
Connecting to the Switch
The console interface is used by connecting the Switch to a VT100-compatible terminal or a computer running an ordinary
terminal emulator program (e.g., the HyperTerminal program included with the Windows operating system) using an RS-232C
serial cable. Your terminal parameters will need to be set to:
•VT-100 compatible
•9600 baud
•8 data bits
•No parity
•One stop bit
•No flow control
Users can also access the same functions over a Telnet interface. Once users have set an IP address for your Switch, users can use
a Telnet program (in VT-100 compatible terminal mode) to access and control the Switch. All of the screens are identical, whether
accessed from the console port or from a Telnet interface.
After the Switch reboots and users have logged in, the console looks like this:
DES-3526 Fast Ethernet Switch Command Line Interface
Firmware: Build 5.01-B47
Copyright(C) 2008 D-Link Corporation. All rights reserved.
username:
Figure 2-1. Initial Console Screen after logging in
Commands are entered at the command prompt, DES-3526:admin#.
There are a number of helpful features included in the CLI. Entering the ?command will display a list of all of the top-level
commands.

DES-3500 Layer 2 Fast Ethernet Switch CLI Reference Manual
4
..
?
cable_diag ports
clear
clear address_binding dhcp_snoop binding_entry ports
clear arptable
clear counters
clear fdb
clear log
clear port_security_entry port
config 802.1p default_priority
config 802.1p user_priority
config 802.1x auth_mode
config 802.1x auth_parameter ports
config 802.1x auth_protocol
config 802.1x capability ports
config 802.1x guest_vlan ports
config 802.1x init
config 802.1x reauth
config access_profile profile_id
config account
config address_binding dhcp_snoop max entry ports
CTRL+C ESC q Quit SPACE n Next Page ENTER Next Entry aAll
Figure 2-2. The ? Command
When users enter a command without its required parameters, the CLI will prompt users with a Next possible completions:
message.
DES-3526:admin#config account
Command: config account
Next possible completions:
<username>
DES-3526:admin#
Figure 2-3. Example Command Parameter Help
In this case, the command config account was entered with the parameter <username>. The CLI will then prompt users to enter
the <username> with the message, Next possible completions:. Every command in the CLI has this feature, and complex
commands have several layers of parameter prompting.
In addition, after typing any given command plus one space, users can see all of the next possible sub-commands, in sequential
order, by repeatedly pressing the Tab key.
To re-enter the previous command at the command prompt, press the up arrow cursor key. The previous command will appear at
the command prompt.
DES-3526:admin#config account
Command: config account
Next possible completions:
<username>
DES-3526:admin#config account
Command: config account
Next possible completions:

DES-3500 Layer 2 Fast Ethernet Switch CLI Reference Manual
5
<u
sername>
DES-3526:admin#
Figure 2-4. Using the Up Arrow to Re-enter a Command
In the above example, the command config account was entered without the required parameter <username>, the CLI returned
the Next possible completions: <username> prompt. The up arrow cursor control key was pressed to re-enter the previous
command (config account) at the command prompt. Now the appropriate username can be entered and the config account
command re-executed.
All commands in the CLI function in this way. In addition, the syntax of the help prompts are the same as presented in this manual
−angle brackets < > indicate a numerical value or character string, braces { } indicate optional parameters or a choice of
parameters, and brackets [ ] indicate required parameters.
If a command is entered that is unrecognized by the CLI, the top-level commands will be displayed under the Available
commands: prompt.
DES-3526:admin#the
Available commands:
.. ? cable_diag clear
config create delete dir
disable download drv enable
login logout ping reboot
reconfig reset save show
telnet upload
DES-3526:admin#
Figure 2-5. The Next Available Commands Prompt
The top-level commands consist of commands such as show or config. Most of these commands require one or more parameters
to narrow the top-level command. This is equivalent to show what? or config what? Where the what? is the next parameter.
For example, if users enter the show command with no additional parameters, the CLI will then display all of the possible next
parameters.

DES-3500 Layer 2 Fast Ethernet Switch CLI Reference Manual
6
DES-3526:admin#show
Command: show
Next
possible completions:
802.1p 802.1x access_profile account
address_binding arp_spoofing_prevention arpentry
asymmetric_vlan authen authen_enable authen_login
authen_policy autoconfig bandwidth_control command_history
config cpu cpu_filter
cpu_interface_filtering current_config dhcp_local_relay
dhcp_relay error fdb filter
firmware flow_meter gratuitous_arp greeting_message
gvrp igmp_snooping ipif iproute
lacp_port limited_multicast_addr link_aggregation
lldp log loopdetect mac_notification
mirror multicast multicast_fdb multicast_range
packet port_security ports radius
router_ports safeguard_engine scheduling serial_port
session sim snmp sntp
ssh ssl stp switch
syslog system_severity tech_support terminal_line
time time_range traffic
traffic_segmentation trusted_host utilization
vlan
DES-3526:admin#
Figure 2-6. Next possible completions: Show Command
In the above example, all of the possible next parameters for the show command are displayed. At the next command prompt, the
up arrow was used to re-enter the show command, followed by the account parameter. The CLI then displays the user accounts
configured on the Switch.