D-Link DAS-3636 User manual

CLI Reference Manual
Product Model: DAS-3636
VDSL2 Switch
Release .00

____________________________________________________________________________
Information in this document is subject to change without notice.
© 2009 D-Link Cor oration. All rights reserved.
Re roduction in any manner whatsoever without the written ermission of D-Link Cor oration is strictly forbidden.
Trademarks used in this text: D-Link and the D-LINK logo are trademarks of D-Link Cor oration; Microsoft and Windows are
registered trademarks of Microsoft Cor oration.
Other trademarks and trade names may be used in this document to refer to either the entities claiming the marks and names or
their roducts. D-Link Cor oration disclaims any ro rietary interest in trademarks and trade names other than its own.
July 2009 P/N 651370012005G

Table of Contents
INTRODUCTION............................................................................................................................1
USING THE CONSOLE CLI..........................................................................................................3
COMMAND SYNTAX.....................................................................................................................6
BASIC SWITCH COMMANDS ......................................................................................................8
MODIFY BANNER AND PROMPT COMMANDS.......................................................................28
SWITCH UTILITY COMMANDS..................................................................................................32
BASIC IP COMMANDS...............................................................................................................44
ROUTING TABLE COMMANDS.................................................................................................48
IPV6 NEIGHBOR DISCOVERY COMMANDS............................................................................5
LIMITED IP MULTICAST ADDRESS..........................................................................................54
SWITCH PORT COMMANDS......................................................................................................61
ARP COMMANDS........................................................................................................................66
DHCP RELAY..............................................................................................................................78
EXTERNAL ALARM COMMANDS.............................................................................................84
NETWORK MANAGEMENT (SNMP) COMMANDS...................................................................86
TIME AND SNTP COMMANDS.................................................................................................12
VLAN COMMANDS...................................................................................................................125
Q-IN-Q COMMANDS.................................................................................................................15
LINK AGGREGATION COMMANDS........................................................................................155
IGMP SNOOPING COMMANDS...............................................................................................16

IGMP MULTICAST VLAN COMMANDS...................................................................................175
MLD MULTICAST VLAN COMMANDS....................................................................................183
MLD SNOOPING COMMAND LIST..........................................................................................191
PORT MIRRORING COMMANDS.............................................................................................2 4
LOOP-BACK DETECTION COMMANDS.................................................................................2 7
MULTIPLE SPANNING TREE PROTOCOL (MSTP) COMMANDS.........................................211
FORWARDING DATABASE COMMANDS...............................................................................247
CONNECTIVITY FAULT MANAGEMENT COMMANDS..........................................................254
VLAN COUNTER COMMANDS................................................................................................273
QOS COMMANDS.....................................................................................................................276
TRAFFIC CONTROL COMMANDS...........................................................................................286
SAFEGUARD ENGINE COMMANDS.......................................................................................29
PORT SECURITY COMMANDS................................................................................................293
SSL COMMANDS......................................................................................................................297
SSH COMMANDS......................................................................................................................3 3
ACCESS AUTHENTICATION CONTROL COMMANDS..........................................................327
FILTER COMMANDS (DHCP SERVER/NETBIOS)..................................................................392
ACCESS CONTROL LIST (ACL) COMMANDS.......................................................................396
VDSL COMMANDS ..................................................................................................................41
NETWORK MONITORING COMMANDS..................................................................................44
PASSWORD RECOVERY COMMAND LIST............................................................................466
COMMAND HISTORY LIST.......................................................................................................47

PASSWORD RECOVERY PROCEDURE.................................................................................474

DAS-3600 Series Ethernet over VDSL Switch CLI Reference Manual
1
INTRODUCTION
The VDSL Switch can be managed through the VDSL Switch’s serial ort, Telnet, or the Web-based management agent. The
Command Line Interface (CLI) can be used to configure and manage the VDSL Switch via the serial ort or Telnet interfaces.
This manual rovides a reference for all of the commands contained in the CLI. Configuration and management of the VDSL
Switch via the Web-based management agent is discussed in the User Manual.
This manual rovides a reference for all of the commands contained in the CLI for the DAS-3626. Exam les resent in this
manual may refer to either member of this series and may show different ort counts, but are universal to this series of switches,
unless otherwise stated. Configuration and management of the VDSL Switch via the Web-based management agent is discussed in
the User Guide.
NOTE: For the remainder of this manual, the DAS-3626 switches will be referred to as simply
the Switch or the DAS-3600 Series.
Accessing the Switch via the Serial Port
The Switch’s serial ort’s default settings are as follows:
•115200 baud
•no parity
•8 data bits
•1 stop bit
A com uter running a terminal emulation rogram ca able of emulating a VT-100 terminal and a serial ort configured as above
is then connected to the Switch’s serial ort via an RS-232 DB-9 cable.
With the serial ort ro erly connected to a management com uter, the following screen should be visible. If this screen does not
a ear, try ressing Ctrl+r to refresh the console screen.
DAS-3626 VDSL2 Switch
Command Line Interface
Firmware: Build 1 00 B042
Copyright(C) 2009 D-Link Corporation All rights reserved
UserName:
Figure 1-1. Initial CLI screen
There is no initial username or assword. Just ress the Enter key twice to dis lay the CLI in ut cursor − DAS-3626:admin#.
This is the command line where all commands are in ut.
1

DAS-3600 Series Ethernet over VDSL Switch CLI Reference Manual
Setting the Switch’s IP Address
Each Switch must be assigned its own IP Address, which is used for communication with an SNMP network manager or other
TCP/IP a lication (for exam le BOOTP, TFTP). The Switch’s default IP address is 10.90.90.90. Users can change the default
Switch IP address to meet the s ecification of your networking address scheme.
The Switch is also assigned a unique MAC address by the factory. This MAC address cannot be changed, and can be found on the
initial boot console screen – shown below.
boot Procedure V1 03 B016
-------------------------------------------------------------------------------
Power On Self Test 100%
MAC Address : 00-26-54-60-54-60
H/W Version :
Please Wait, Loading V1 02 B018 Runtime Image [1] 100%
R2R3R4R5R6
BME 1:POST: Success
BME 2:POST: Success
BME 3:POST: Success
BME 1:Download: Downloaded successfully
BME 2:Download: Downloaded successfully
BME 3:Download: Downloaded successfully
VDSL driver version 5 3 0 13IK005010
UART init 100 %
Figure 1-2. Boot screen
The Switch’s MAC address can also be found in the Web management rogram on the Switch Information (Basic Settings)
window on the Configuration menu.
The IP address for the Switch must be set before it can be managed with the Web-based manager. The Switch IP address can be
automatically set using BOOTP or DHCP rotocols, in which case the actual address assigned to the Switch must be known.
The IP address may be set using the Command Line Interface (CLI) over the console serial ort as follows:
1. Starting at the command line rom t, enter the commands confi ipif System ipaddress
xxx.xxx.xxx.xxx/yyy.yyy.yyy.yyy. Where the x’s re resent the IP address to be assigned to the IP interface named
System and the y’s re resent the corres onding subnet mask.
2. Alternatively, users can enter confi ipif System ipaddress xxx.xxx.xxx.xxx/z. Where the x’s re resent the IP address to
be assigned to the IP interface named System and the z re resents the corres onding number of subnets in CIDR
notation.
The IP interface named System on the Switch can be assigned an IP address and subnet mask which can then be used to connect a
management station to the Switch’s Telnet or Web-based management agent.
DAS-3626:admin#config ipif System ipaddress 10 24 73 21/8
Command: config ipif System ipaddress 10 24 73 21/8
Success
DAS-3626:admin#
Figure 1-3. Assigning an IP Address screen
In the above exam le, the Switch was assigned an IP address of 10.24.73.21 with a subnet mask of 255.0.0.0. The system message
Success indicates that the command was executed successfully. The Switch can now be configured and managed via Telnet,
SNMP MIB browser and the CLI or via the Web-based management agent using the above IP address to connect to the Switch.
2

DAS-3600 Series Ethernet over VDSL Switch CLI Reference Manual
2
USING THE CONSOLE CLI
The DAS-3600 Series su orts a console management interface that allows the user to connect to the Switch’s management agent
via a serial ort and a terminal or a com uter running a terminal emulation rogram. The console can also be used over the
network using the TCP/IP Telnet rotocol. The console rogram can be used to configure the Switch to use an SNMP-based
network management software over the network.
This cha ter describes how to use the console interface to access the Switch, change its settings, and monitor its o eration.
Note: Switch confi uration settin s are saved to non-volatile RAM usin the save command. The
current confi uration will then be retained in the Switch’s NV-RAM, and reloaded when the Switch is
rebooted. If the Switch is rebooted without usin the save command, the last confi uration saved to NV-
RAM will be loaded.
Connecting to the Switch
The console interface is used by connecting the Switch to a VT100-com atible terminal or a com uter running an ordinary
terminal emulator rogram (e.g., the HyperTerminal rogram included with the Windows o erating system) using an RS-232C
serial cable. Your terminal arameters will need to be set to:
•VT-100 compatible
•115200 baud
•8 data bits
•No parity
•One stop bit
•No flow control
Users can also access the same functions over a Telnet interface. Once users have set an IP address for your Switch, users can use
a Telnet rogram (in VT-100 com atible terminal mode) to access and control the Switch. All of the screens are identical, whether
accessed from the console ort or from a Telnet interface.
After the Switch reboots and users have logged in, the console looks like this:
DAS-3626 VDSL2 Switch
Command Line Interface
Firmware: Build 1 02-B018
Copyright(C) 2008 D-Link Corporation All rights reserved
UserName:
Figure 2-1. Initial Console screen after logging in
Commands are entered at the command rom t, DAS-3626:admin#.
There are a number of hel ful features included in the CLI. Entering the ? command will dis lay a list of all of the to -level
commands.
3

DAS-3600 Series Ethernet over VDSL Switch CLI Reference Manual
?
cable_diag ports
cfm linktrace
cfm loopback
clear
clear address_binding dhcp_snoop binding_entry ports
clear arptable
clear attack_log
clear cfm pkt_cnt
clear counters
clear ethernet_oam ports
clear fdb
clear historical_counters ports
clear igmp_snooping data_driven_group
clear igmp_snooping statistic counter
clear log
clear mac_based_access_control auth_mac
clear mld_snooping data_driven_group
clear mld_snooping statistic counter
clear port_security_entry
clear vlan_counter statistics
CTRL+C ESC q Quit SPACE n Next Page ENTER Next Entry a All
Figure 2-2. The ? Command
When users enter a command without its required arameters, the CLI will rom t users with a Next possible completions:
message.
DAS-3626:admin#config account
Command: config account
Next possible completions:
<username>
DAS-3626:admin#
Figure 2-3. Example Command Parameter Help
In this case, the command confi account was entered with the arameter <username>. The CLI will then rom t users to enter
the <username> with the message, Next possible completions:. Every command in the CLI has this feature, and com lex
commands have several layers of arameter rom ting.
In addition, after ty ing any given command lus one s ace, users can see all of the next ossible sub-commands, in sequential
order, by re eatedly ressing the Tab key.
To re-enter the revious command at the command rom t, ress the u arrow cursor key. The revious command will a ear at
the command rom t.
DAS-3626:admin#config account
Command: config account
Next possible completions:
<username>
DAS-3626:admin#config account
Command: config account
Next possible completions:
<username>
DAS-3626:admin#
Figure 2-4. Using the Up Arrow to Re-enter a Command
4

DAS-3600 Series Ethernet over VDSL Switch CLI Reference Manual
In the above exam le, the command confi account was entered without the required arameter <username>, the CLI returned
the Next possible completions: <username> rom t. The u arrow cursor control key was ressed to re-enter the revious
command (confi account) at the command rom t. Now the a ro riate username can be entered and the confi account
command re-executed.
All commands in the CLI function in this way. In addition, the syntax of the hel rom ts are the same as resented in this manual
− angle brackets < > indicate a numerical value or character string, braces { } indicate o tional arameters or a choice of
arameters, and brackets [ ] indicate required arameters.
If a command is entered that is unrecognized by the CLI, the to -level commands will be dis layed under the Available
commands: rom t.
DAS-3626:admin#the
Available commands:
? cfm
clear config create delete
disable download enable login
logout ping ping6 reboot
reconfig reset save show
upload
DAS-3626:admin#
Figure 2-5. The Next Available Commands Prompt
The to -level commands consist of commands such as show or confi . Most of these commands require one or more arameters
to narrow the to -level command. This is equivalent to show what? or confi what? Where the what? is the next arameter.
For exam le, if users enter the show command with no additional arameters, the CLI will then dis lay all of the ossible next
arameters.
DAS-3626:admin#show
Command: show
Next possible completions:
802 1p 802 1x access_profile account
accounting alarm arpentry asymmetric_vlan
attack_log authen authen_enable authen_login
authen_policy authentication authorization bandwidth_control
bpdu-filter cfm command_history config
current_config dhcp_relay dot1v_protocol_group
dscp_replace_priority error external_alarm
fdb filter firmware greeting_message
gvrp hardware igmp_snooping ipif
ipif_ipv6_link_local_auto iproute ipv6
jumbo_frame lacp_port limited_multicast_addr
link_aggregation log log_save_timing
log_support_module loopdetect lpr
mac_spoof_detect max_mcast_group mcast_filter_profile
mirror mld_snooping module_info multicast
multicast_fdb packet port port_security
port_vlan ports pvid qinq
radius ratelimit rmt router_ports
safeguard_engine scheduling scheduling_mechanism
serial_port session snmp sntp
ssh ssl stp switch
syslog system_severity system_usage_threshold
time time_range traffic
traffic_segmentation trusted_host utilization
vdsl vlan vlan_counter vlan_translation
vlan_translation_profile vlan_trunk
DAS-3626:admin#
Figure 2-6. Next possible completions: Show Command
In the above exam le, all of the ossible next arameters for the show command are dis layed. At the next command rom t, the
u arrow was used to re-enter the show command, followed by the account arameter. The CLI then dis lays the user accounts
configured on the Switch.
5

DAS-3600 Series Ethernet over VDSL Switch CLI Reference Manual
3
COMMAND SYNTAX
The following symbols are used to describe how command entries are made and values and arguments are s ecified in this
manual. The online hel contained in the CLI and available through the console interface uses the same syntax.
Note: All commands are case-sensitive. Be sure to disable Caps Lock or
any other unwanted function that chan es text case.
<angle brackets>
Purpose Encloses a variable or value that must be specified.
Syntax config ipif <ipif_name 12> [{ipaddress <network_address> |vlan <vlan_name 32> |state
[enable |disable]} | bootp |dhcp | ipv6 [ipv6address <ipv6networkaddr> | state [enable|
disable]] |ipv4 state [enable | disable]]
Description In the above syntax example, users must supply an IP interface name in the <ipif_name 12>
space, a VLAN name in the <vlan_name 32> space, and the network address in the
<network_address> space. Do not type the an le brackets.
Example
Command
config ipif Engineering ipaddress 1 .24.22.5/255. . . vlan Design state enable
[square brackets]
Purpose Encloses a required value or set of required ar uments. One value or ar ument can be
specified.
Syntax create account [admin | operator | user] <username 15>
Description In the above syntax example, users must specify either an admin or a user level account to
be created. Do not type the square brackets.
Example
Command
create account admin Tommy
| vertical bar
Purpose Separates two or more mutually exclusive items in a list, one of which must be entered.
Syntax create account [admin | operator | user] <username 15>
Description In the above syntax example, users must specify either admin, or user. Do not type the
backslash.
Example
Command
create account admin Tommy
6

DAS-3600 Series Ethernet over VDSL Switch CLI Reference Manual
{braces}
Purpose Encloses an optional value or set of optional ar uments.
Syntax reset {[config |system]} {force_agree}
Description In the above syntax example, users have the option to specify config or system. It is not
necessary to specify either optional value, however the effect of the system reset is
dependent on which, if any, value is specified. Therefore, with this example there are three
possible outcomes of performin a system reset. See the followin chapter, Basic
Commands for more details about the reset command.
Example command reset config
Line Editing Key Usage
Delete Deletes the character under the cursor and then shifts the remainin characters in the line to
the left.
Backspace Deletes the character to the left of the cursor and then shifts the remainin characters in the
line to the left.
Left Arrow Moves the cursor to the left.
Ri ht Arrow Moves the cursor to the ri ht.
Up Arrow Repeats the previously entered command. Each time the up arrow is pressed, the command
previous to that displayed appears. This way it is possible to review the command history for
the current session. Use the down arrow to pro ress sequentially forward throu h the
command history list.
Down Arrow The down arrow will display the next command in the command history entered in the current
session. This displays each command sequentially as it was entered. Use the up arrow to
review previous commands.
Tab Shifts the cursor to the next field to the left.
Multiple Page Display Control Keys
Space Displays the next pa e.
CTRL+c Stops the display of remainin pa es when multiple pa es are to be displayed.
ESC Stops the display of remainin pa es when multiple pa es are to be displayed.
n Displays the next pa e.
p Displays the previous pa e.
q Stops the display of remainin pa es when multiple pa es are to be displayed.
r Refreshes the pa es currently displayed.
a Displays the remainin pa es without pausin between pa es.
Enter Displays the next line or table entry.
7

DAS-3600 Series Ethernet over VDSL Switch CLI Reference Manual
4
BASIC SWITCH COMMANDS
The basic switch commands in the Command Line Interface (CLI) are listed (along with the a ro riate arameters) in the
following table.
Command Parameters
create account [admin | operator | user] <username 15>
confi account <username>
show account
delete account [<username>]
show session
show switch
show device_status
show serial_port
confi serial_port { baud_rate [9600|19200|38400|115200] | auto_lo out [never|2_minutes|5_minutes|
10_minutes|15_minutes] }
enable clipa in
disable clipa in
enable telnet <tcp_port_number 1-65535>
disable telnet
enable web <tcp_port_number 1-65535>
disable web
save {[confi | lo | all]}
reboot
reboot {force_a ree}
reset {[confi |system]} {force_a ree}
reset {[confi force_a ree | system force_a ree]}
lo in
lo out
Each command is listed, in detail, in the following sections.
8

DAS-3600 Series Ethernet over VDSL Switch CLI Reference Manual
create account
Purpose Used to create user accounts.
Syntax create account [admin | operator | user] <username 15>
Description This command is used to create user accounts that consist of a username of 1 to 15
characters and a password of 0 to 15 characters. Up to 8 user accounts can be created.
Parameters [admin | operator | user] <username 15>
Restrictions Only Administrator-level users can issue this command.
Usernames can be between 1 and 15 characters.
Passwords can be between 0 and 15 characters.
Exam le usage:
To create an administrator-level user account with the username “dlink”.
DAS-3626:admin#create account admin dlink
Command: create account admin dlink
Enter a case-sensitive new password:****
Enter the new password again for confirmation:****
Success
DAS-3626:admin#
NOTICE: In case of lost passwords or password corruption, please refer to the
“Password Recovery Command List” section in this manual, and the “Password
Recovery Procedure” will uide you throu h the steps necessary to resolve this
issue.
config account
Purpose Used to confi ure user accounts
Syntax config account <username>
Description When the password information is not specified in the command, the system will prompt the
user to input the password interactively.
Parameters username> − Name of the account. The account must already be defined.
Passwords must have a minimum of 0 character and can have a maximum of 15 characters.
Restrictions Only Administrator-level users can issue this command.
Usernames can be between 1 and 15 characters.
Passwords can be between 0 and 15 characters.
Exam le usage:
To configure the user assword of “dlink” account:
DAS-3626:admin#config account dlink
Command: config account dlink
Enter a old password:****
Enter a case-sensitive new password:****
Enter the new password again for confirmation:****
Success
DAS-3626:admin#
9

DAS-3600 Series Ethernet over VDSL Switch CLI Reference Manual
show account
Purpose Used to display user accounts.
Syntax show account
Description This command is used to display all user accounts created on the Switch. Up to 8 user
accounts can exist at one time.
Parameters None.
Restrictions Only Administrator-level users can issue this command.
Exam le usage:
To dis lay the accounts that have been created:
DAS-3626:admin#show account
Command: show account
Current Accounts:
Username Access Level
--------------- ------------
dlink Admin
Total Entries: 1
DAS-3626:admin#
delete account
Purpose Used to delete an existin user account.
Syntax delete account <username>
Description This command is used to delete an existin account.
Parameters username> − Name of the user who will be deleted.
Restrictions Only Administrator-level users can issue this command.
Exam le usage:
To delete the user account “System”:
DAS-3626:admin#delete account System
Command: delete account System
Success
DAS-3626:admin#
10

DAS-3600 Series Ethernet over VDSL Switch CLI Reference Manual
show session
Purpose Used to display a list of currently lo ed-in users.
Syntax show session
Description This command is used to display a list of all the users that are lo ed-in at the time the
command is issued.
Parameters None.
Restrictions Only Administrator and Operator-level users can issue this command.
Exam le usage:
To dis lay a list of current logged-in users:
DAS-3626:admin#show session
Command: show session
ID Live Time From Level Name
--- --------- ------------ ----- -------
8 00:00:16 250 Serial Port 5 Anonymous
Total Entries: 1
CTRL+C ESC q Quit SPACE n Next Page p Previous Page r Refresh
show switch
Purpose Used to display eneral information about the Switch.
Syntax show switch
Description This command is used to display information about the Switch.
Parameters None.
Restrictions None.
11

DAS-3600 Series Ethernet over VDSL Switch CLI Reference Manual
Exam le usage:
To dis lay the Switch’s information:
DAS-3626:admin#show switch
Command: show switch
Device Type : DAS-3600-12 Gigabit Ethernet Switch
MAC Address : 00-21-91-AF-37-D0
IP Address : 10 24 73 21 (Manual)
VLAN Name : default
Subnet Mask : 255 0 0 0
Default Gateway : 0 0 0 0
Boot PROM Version : Build 1 00 B002
Firmware Version : Build 1 00 B035
Hardware Version : A1
System Name :
System Location :
System Contact :
Spanning Tree : Disabled
GVRP : Disabled
IGMP Snooping : Disabled
MLD Snooping : Disabled
TELNET : Enabled (TCP 23)
WEB : Enabled (TCP 80)
SNMP : Disabled
SSL Status : Disabled
SSH Status : Disabled
802 1x : Disabled
CTRL+C ESC q Quit SPACE n Next Page ENTER Next Entry a All
show device_status
Purpose Used to display the current Switch power, temperature and fan status.
Syntax show device_status
Description This command is used to display status of both the Switch’s internal and external power,
temperature, and fan status.
Parameters None.
Restrictions None.
12

DAS-3600 Series Ethernet over VDSL Switch CLI Reference Manual
Exam le usage:
To dis lay the Switch status:
13

DAS-3600 Series Ethernet over VDSL Switch CLI Reference Manual
DAS-3626:admin#show device_status
Command: show device_status
DAS-3626:admin#show device_status
Command: show device_status
Power Status: AC Active
DC Status: DC POWER DOES NOT EXIST
AC Status: AC POWER EXIST
FAN TRAY INSERT
FAN RPM Max Min Status errCount
------------------------------------------------------
1 4560 4560 4440 Normal 0
2 4500 4560 4500 Normal 0
3 4500 4560 4440 Normal 0
Sensor deg C Max Min Threshold(Hi/Lo) Status errCount
---------------------------------------------------------------------
T1 33 32 31 77 / 0 Normal 0
T2 33 33 29 81 / 0 Normal 0
T3 34 34 31 65 / 0 Normal 0
14

DAS-3600 Series Ethernet over VDSL Switch CLI Reference Manual
15