D-Link DAS-3636 User manual

CLI Reference Manual
Product Model: DAS-3636
VDSL2 Switch
Release .00

____________________________________________________________________________
Information in this document is subject to change without notice.
© 2009 D-Link Cor oration. All rights reserved.
Re roduction in any manner whatsoever without the written ermission of D-Link Cor oration is strictly forbidden.
Trademarks used in this text: D-Link and the D-LINK logo are trademarks of D-Link Cor oration; Microsoft and Windows are
registered trademarks of Microsoft Cor oration.
Other trademarks and trade names may be used in this document to refer to either the entities claiming the marks and names or
their roducts. D-Link Cor oration disclaims any ro rietary interest in trademarks and trade names other than its own.
July 2009 P/N 651370012005G

Table of Contents
INTRODUCTION............................................................................................................................1
USING THE CONSOLE CLI..........................................................................................................3
COMMAND SYNTAX.....................................................................................................................6
BASIC SWITCH COMMANDS ......................................................................................................8
MODIFY BANNER AND PROMPT COMMANDS.......................................................................28
SWITCH UTILITY COMMANDS..................................................................................................32
BASIC IP COMMANDS...............................................................................................................44
ROUTING TABLE COMMANDS.................................................................................................48
IPV6 NEIGHBOR DISCOVERY COMMANDS............................................................................5
LIMITED IP MULTICAST ADDRESS..........................................................................................54
SWITCH PORT COMMANDS......................................................................................................61
ARP COMMANDS........................................................................................................................66
DHCP RELAY..............................................................................................................................78
EXTERNAL ALARM COMMANDS.............................................................................................84
NETWORK MANAGEMENT (SNMP) COMMANDS...................................................................86
TIME AND SNTP COMMANDS.................................................................................................12
VLAN COMMANDS...................................................................................................................125
Q-IN-Q COMMANDS.................................................................................................................15
LINK AGGREGATION COMMANDS........................................................................................155
IGMP SNOOPING COMMANDS...............................................................................................16

IGMP MULTICAST VLAN COMMANDS...................................................................................175
MLD MULTICAST VLAN COMMANDS....................................................................................183
MLD SNOOPING COMMAND LIST..........................................................................................191
PORT MIRRORING COMMANDS.............................................................................................2 4
LOOP-BACK DETECTION COMMANDS.................................................................................2 7
MULTIPLE SPANNING TREE PROTOCOL (MSTP) COMMANDS.........................................211
FORWARDING DATABASE COMMANDS...............................................................................247
CONNECTIVITY FAULT MANAGEMENT COMMANDS..........................................................254
VLAN COUNTER COMMANDS................................................................................................273
QOS COMMANDS.....................................................................................................................276
TRAFFIC CONTROL COMMANDS...........................................................................................286
SAFEGUARD ENGINE COMMANDS.......................................................................................29
PORT SECURITY COMMANDS................................................................................................293
SSL COMMANDS......................................................................................................................297
SSH COMMANDS......................................................................................................................3 3
ACCESS AUTHENTICATION CONTROL COMMANDS..........................................................327
FILTER COMMANDS (DHCP SERVER/NETBIOS)..................................................................392
ACCESS CONTROL LIST (ACL) COMMANDS.......................................................................396
VDSL COMMANDS ..................................................................................................................41
NETWORK MONITORING COMMANDS..................................................................................44
PASSWORD RECOVERY COMMAND LIST............................................................................466
COMMAND HISTORY LIST.......................................................................................................47

PASSWORD RECOVERY PROCEDURE.................................................................................474

DAS-3600 Series Ethernet over VDSL Switch CLI Reference Manual
1
INTRODUCTION
The VDSL Switch can be managed through the VDSL Switch’s serial ort, Telnet, or the Web-based management agent. The
Command Line Interface (CLI) can be used to configure and manage the VDSL Switch via the serial ort or Telnet interfaces.
This manual rovides a reference for all of the commands contained in the CLI. Configuration and management of the VDSL
Switch via the Web-based management agent is discussed in the User Manual.
This manual rovides a reference for all of the commands contained in the CLI for the DAS-3626. Exam les resent in this
manual may refer to either member of this series and may show different ort counts, but are universal to this series of switches,
unless otherwise stated. Configuration and management of the VDSL Switch via the Web-based management agent is discussed in
the User Guide.
NOTE: For the remainder of this manual, the DAS-3626 switches will be referred to as simply
the Switch or the DAS-3600 Series.
Accessing the Switch via the Serial Port
The Switch’s serial ort’s default settings are as follows:
•115200 baud
•no parity
•8 data bits
•1 stop bit
A com uter running a terminal emulation rogram ca able of emulating a VT-100 terminal and a serial ort configured as above
is then connected to the Switch’s serial ort via an RS-232 DB-9 cable.
With the serial ort ro erly connected to a management com uter, the following screen should be visible. If this screen does not
a ear, try ressing Ctrl+r to refresh the console screen.
DAS-3626 VDSL2 Switch
Command Line Interface
Firmware: Build 1 00 B042
Copyright(C) 2009 D-Link Corporation All rights reserved
UserName:
Figure 1-1. Initial CLI screen
There is no initial username or assword. Just ress the Enter key twice to dis lay the CLI in ut cursor − DAS-3626:admin#.
This is the command line where all commands are in ut.
1

DAS-3600 Series Ethernet over VDSL Switch CLI Reference Manual
Setting the Switch’s IP Address
Each Switch must be assigned its own IP Address, which is used for communication with an SNMP network manager or other
TCP/IP a lication (for exam le BOOTP, TFTP). The Switch’s default IP address is 10.90.90.90. Users can change the default
Switch IP address to meet the s ecification of your networking address scheme.
The Switch is also assigned a unique MAC address by the factory. This MAC address cannot be changed, and can be found on the
initial boot console screen – shown below.
boot Procedure V1 03 B016
-------------------------------------------------------------------------------
Power On Self Test 100%
MAC Address : 00-26-54-60-54-60
H/W Version :
Please Wait, Loading V1 02 B018 Runtime Image [1] 100%
R2R3R4R5R6
BME 1:POST: Success
BME 2:POST: Success
BME 3:POST: Success
BME 1:Download: Downloaded successfully
BME 2:Download: Downloaded successfully
BME 3:Download: Downloaded successfully
VDSL driver version 5 3 0 13IK005010
UART init 100 %
Figure 1-2. Boot screen
The Switch’s MAC address can also be found in the Web management rogram on the Switch Information (Basic Settings)
window on the Configuration menu.
The IP address for the Switch must be set before it can be managed with the Web-based manager. The Switch IP address can be
automatically set using BOOTP or DHCP rotocols, in which case the actual address assigned to the Switch must be known.
The IP address may be set using the Command Line Interface (CLI) over the console serial ort as follows:
1. Starting at the command line rom t, enter the commands confi ipif System ipaddress
xxx.xxx.xxx.xxx/yyy.yyy.yyy.yyy. Where the x’s re resent the IP address to be assigned to the IP interface named
System and the y’s re resent the corres onding subnet mask.
2. Alternatively, users can enter confi ipif System ipaddress xxx.xxx.xxx.xxx/z. Where the x’s re resent the IP address to
be assigned to the IP interface named System and the z re resents the corres onding number of subnets in CIDR
notation.
The IP interface named System on the Switch can be assigned an IP address and subnet mask which can then be used to connect a
management station to the Switch’s Telnet or Web-based management agent.
DAS-3626:admin#config ipif System ipaddress 10 24 73 21/8
Command: config ipif System ipaddress 10 24 73 21/8
Success
DAS-3626:admin#
Figure 1-3. Assigning an IP Address screen
In the above exam le, the Switch was assigned an IP address of 10.24.73.21 with a subnet mask of 255.0.0.0. The system message
Success indicates that the command was executed successfully. The Switch can now be configured and managed via Telnet,
SNMP MIB browser and the CLI or via the Web-based management agent using the above IP address to connect to the Switch.
2

DAS-3600 Series Ethernet over VDSL Switch CLI Reference Manual
2
USING THE CONSOLE CLI
The DAS-3600 Series su orts a console management interface that allows the user to connect to the Switch’s management agent
via a serial ort and a terminal or a com uter running a terminal emulation rogram. The console can also be used over the
network using the TCP/IP Telnet rotocol. The console rogram can be used to configure the Switch to use an SNMP-based
network management software over the network.
This cha ter describes how to use the console interface to access the Switch, change its settings, and monitor its o eration.
Note: Switch confi uration settin s are saved to non-volatile RAM usin the save command. The
current confi uration will then be retained in the Switch’s NV-RAM, and reloaded when the Switch is
rebooted. If the Switch is rebooted without usin the save command, the last confi uration saved to NV-
RAM will be loaded.
Connecting to the Switch
The console interface is used by connecting the Switch to a VT100-com atible terminal or a com uter running an ordinary
terminal emulator rogram (e.g., the HyperTerminal rogram included with the Windows o erating system) using an RS-232C
serial cable. Your terminal arameters will need to be set to:
•VT-100 compatible
•115200 baud
•8 data bits
•No parity
•One stop bit
•No flow control
Users can also access the same functions over a Telnet interface. Once users have set an IP address for your Switch, users can use
a Telnet rogram (in VT-100 com atible terminal mode) to access and control the Switch. All of the screens are identical, whether
accessed from the console ort or from a Telnet interface.
After the Switch reboots and users have logged in, the console looks like this:
DAS-3626 VDSL2 Switch
Command Line Interface
Firmware: Build 1 02-B018
Copyright(C) 2008 D-Link Corporation All rights reserved
UserName:
Figure 2-1. Initial Console screen after logging in
Commands are entered at the command rom t, DAS-3626:admin#.
There are a number of hel ful features included in the CLI. Entering the ? command will dis lay a list of all of the to -level
commands.
3

DAS-3600 Series Ethernet over VDSL Switch CLI Reference Manual
?
cable_diag ports
cfm linktrace
cfm loopback
clear
clear address_binding dhcp_snoop binding_entry ports
clear arptable
clear attack_log
clear cfm pkt_cnt
clear counters
clear ethernet_oam ports
clear fdb
clear historical_counters ports
clear igmp_snooping data_driven_group
clear igmp_snooping statistic counter
clear log
clear mac_based_access_control auth_mac
clear mld_snooping data_driven_group
clear mld_snooping statistic counter
clear port_security_entry
clear vlan_counter statistics
CTRL+C ESC q Quit SPACE n Next Page ENTER Next Entry a All
Figure 2-2. The ? Command
When users enter a command without its required arameters, the CLI will rom t users with a Next possible completions:
message.
DAS-3626:admin#config account
Command: config account
Next possible completions:
<username>
DAS-3626:admin#
Figure 2-3. Example Command Parameter Help
In this case, the command confi account was entered with the arameter <username>. The CLI will then rom t users to enter
the <username> with the message, Next possible completions:. Every command in the CLI has this feature, and com lex
commands have several layers of arameter rom ting.
In addition, after ty ing any given command lus one s ace, users can see all of the next ossible sub-commands, in sequential
order, by re eatedly ressing the Tab key.
To re-enter the revious command at the command rom t, ress the u arrow cursor key. The revious command will a ear at
the command rom t.
DAS-3626:admin#config account
Command: config account
Next possible completions:
<username>
DAS-3626:admin#config account
Command: config account
Next possible completions:
<username>
DAS-3626:admin#
Figure 2-4. Using the Up Arrow to Re-enter a Command
4

DAS-3600 Series Ethernet over VDSL Switch CLI Reference Manual
In the above exam le, the command confi account was entered without the required arameter <username>, the CLI returned
the Next possible completions: <username> rom t. The u arrow cursor control key was ressed to re-enter the revious
command (confi account) at the command rom t. Now the a ro riate username can be entered and the confi account
command re-executed.
All commands in the CLI function in this way. In addition, the syntax of the hel rom ts are the same as resented in this manual
− angle brackets < > indicate a numerical value or character string, braces { } indicate o tional arameters or a choice of
arameters, and brackets [ ] indicate required arameters.
If a command is entered that is unrecognized by the CLI, the to -level commands will be dis layed under the Available
commands: rom t.
DAS-3626:admin#the
Available commands:
? cfm
clear config create delete
disable download enable login
logout ping ping6 reboot
reconfig reset save show
upload
DAS-3626:admin#
Figure 2-5. The Next Available Commands Prompt
The to -level commands consist of commands such as show or confi . Most of these commands require one or more arameters
to narrow the to -level command. This is equivalent to show what? or confi what? Where the what? is the next arameter.
For exam le, if users enter the show command with no additional arameters, the CLI will then dis lay all of the ossible next
arameters.
DAS-3626:admin#show
Command: show
Next possible completions:
802 1p 802 1x access_profile account
accounting alarm arpentry asymmetric_vlan
attack_log authen authen_enable authen_login
authen_policy authentication authorization bandwidth_control
bpdu-filter cfm command_history config
current_config dhcp_relay dot1v_protocol_group
dscp_replace_priority error external_alarm
fdb filter firmware greeting_message
gvrp hardware igmp_snooping ipif
ipif_ipv6_link_local_auto iproute ipv6
jumbo_frame lacp_port limited_multicast_addr
link_aggregation log log_save_timing
log_support_module loopdetect lpr
mac_spoof_detect max_mcast_group mcast_filter_profile
mirror mld_snooping module_info multicast
multicast_fdb packet port port_security
port_vlan ports pvid qinq
radius ratelimit rmt router_ports
safeguard_engine scheduling scheduling_mechanism
serial_port session snmp sntp
ssh ssl stp switch
syslog system_severity system_usage_threshold
time time_range traffic
traffic_segmentation trusted_host utilization
vdsl vlan vlan_counter vlan_translation
vlan_translation_profile vlan_trunk
DAS-3626:admin#
Figure 2-6. Next possible completions: Show Command
In the above exam le, all of the ossible next arameters for the show command are dis layed. At the next command rom t, the
u arrow was used to re-enter the show command, followed by the account arameter. The CLI then dis lays the user accounts
configured on the Switch.
5