D-Link DES-3028 User manual

CLI Reference Manual
Product Model : DES-3028/DES-3028P/DES-3028G/DES-3052/DES-3052P
Managed 10/100Mbps Fast Ethernet Switch
Release 2

_________________________________________________________________________________
Information in this document is subject to change without notice.
© 2009 D-Link Corporation. All rights reserved.
Reproduction in any manner whatsoever without the written permission of D-Link Computer Corporation is strictly forbidden.
Trademarks used in this text: D-Link and the D-LINK logo are trademarks of D-Link Computer Corporation; Microsoft and
Windows are registered trademarks of Microsoft Corporation.
Other trademarks and trade names may be used in this document to refer to either the entities claiming the marks and names or
their products. D-Link Computer Corporation disclaims any proprietary interest in trademarks and trade names other than its
own.
January 2009 P/N 651ES3028025G

Table of Contents
INTRODUCTION ..........................................................................................................................................................1
USING THE CONSOLE CLI.........................................................................................................................................3
COMMAND SYNTAX...................................................................................................................................................7
BASIC SWITCH COMMANDS.....................................................................................................................................9
MODIFY BANNER AND PROMPT COMMANDS .....................................................................................................22
SWITCH PORT COMMANDS....................................................................................................................................25
PORT SECURITY COMMANDS................................................................................................................................29
NETWORK MANAGEMENT (SNMP) COMMANDS .................................................................................................33
SWITCH UTILITY COMMANDS ................................................................................................................................53
NETWORK MONITORING COMMANDS..................................................................................................................62
MULTIPLE SPANNING TREE PROTOCOL (MSTP) COMMANDS .........................................................................74
FORWARDING DATABASE COMMANDS...............................................................................................................87
BROADCAST STORM CONTROL COMMANDS.....................................................................................................94
COS COMMANDS......................................................................................................................................................98
PORT MIRRORING COMMANDS...........................................................................................................................112
VLAN COMMANDS .................................................................................................................................................115
LINK AGGREGATION COMMANDS.......................................................................................................................122
BASIC IP COMMANDS............................................................................................................................................127
IGMP SNOOPING COMMANDS..............................................................................................................................130
DHCP RELAY...........................................................................................................................................................141
802.1X COMMANDS................................................................................................................................................148
ACCESS CONTROL LIST (ACL) COMMANDS......................................................................................................168

TIME RANGE COMMANDS.....................................................................................................................................182
SAFEGUARD ENGINE COMMANDS......................................................................................................................184
TRAFFIC SEGMENTATION COMMANDS..............................................................................................................186
TIME AND SNTP COMMANDS...............................................................................................................................188
ARP COMMANDS....................................................................................................................................................195
ROUTING TABLE COMMANDS..............................................................................................................................199
MAC NOTIFICATION COMMANDS ........................................................................................................................201
ACCESS AUTHENTICATION CONTROL COMMANDS........................................................................................205
SSH COMMANDS....................................................................................................................................................226
SSL COMMANDS ....................................................................................................................................................233
D-LINK SINGLE IP MANAGEMENT COMMANDS.................................................................................................239
SMTP COMMANDS .................................................................................................................................................250
POE COMMANDS....................................................................................................................................................254
CABLE DIAGNOSTICS COMMANDS.....................................................................................................................259
DHCP LOCAL RELAY COMMANDS ......................................................................................................................260
GRATUITOUS ARP COMMANDS...........................................................................................................................262
VLAN TRUNKING COMMANDS .............................................................................................................................266
QINQ COMMANDS..................................................................................................................................................270
ASYMMETRIC VLAN COMMANDS........................................................................................................................273
MLD SNOOPING COMMANDS...............................................................................................................................275
IGMP SNOOPING MULTICAST VLAN COMMANDS.............................................................................................282
LIMITED IP MULTICAST ADDRESS COMMANDS................................................................................................287
LLDP COMMANDS..................................................................................................................................................292

DOS PREVENTION COMMANDS...........................................................................................................................311
IP-MAC-PORT BINDING COMMANDS...................................................................................................................316
LOOPBACK DETECTION COMMANDS.................................................................................................................327
TECHNICAL SUPPORT COMMANDS....................................................................................................................331
COMMAND HISTORY LIST.....................................................................................................................................334
TECHNICAL SPECIFICATIONS..............................................................................................................................338
ARP PACKET CONTENT ACL................................................................................................................................344
PASSWORD RECOVERY PROCEEDURE.............................................................................................................352

DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual
1
1
INTRODUCTION
The Switch can be managed through the Switch’s serial port, Telnet, or the Web-based management agent. The Command Line
Interface (CLI) can be used to configure and manage the Switch via the serial port or Telnet interfaces.
This manual provides a reference for all of the commands contained in the CLI. Configuration and management of the Switch via
the Web-based management agent is discussed in the Manual. This manual provides a reference for all of the commands contained
in the CLI for members of this series, including the DES-3028, DES-3028P, DES-3028G, DES-3052, and DES-3052P. Examples
present in this manual may refer to any member of this series and may show different port counts, but are universal to this series
of switches, unless otherwise stated. Configuration and management of the Switch via the Web-based management agent is
discussed in the User’s Guide.
Accessing the Switch via the Serial Port
The Switch’s serial port’s default settings are as follows:
9600 baud
no parity
8 data bits
1 stop bit
A computer running a terminal emulation program capable of emulating a VT-100 terminal and a serial port configured as above
are then connected to the Switch’s serial port via an RS-232 DB-9 cable.
With the serial port properly connected to a management computer, the following screen should be visible. If this screen does not
appear, try pressing Ctrl+r to refresh the console screen.
DES-3028P Fast Ethernet Switch Command Line Interface
Firmware: Build 2.00.B23
Copyright(C) 2009 D-Link Corporation. All rights reserved.
username:
Figure 1-1. Initial CLI screen
There is no initial username or password. Just press the Enter key twice to display the CLI input cursor DES-3028P:4#.This is
the command line where all commands are input.

DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual
2
Setting the Switch’s IP Address
Each Switch must be assigned its own IP Address, which is used for communication with an SNMP network manager or other
TCP/IP application (for example BOOTP, TFTP). The Switch’s default IP address is 10.90.90.90. Users can change the default
Switch IP address to meet the specification of your networking address scheme.
The Switch is also assigned a unique MAC address by the factory. This MAC address cannot be changed, and can be found on the
initial boot console screen – shown below.
Boot Procedure V1.00.06
--------------------------------------------------------------------------
Power On Self Test.................................100%
MAC Address : 00-21-91-98-60-77
H/W Version : A1
Please wait, loading V2.00.B23 Runtime image........100%
Figure 1-2. Boot screen
The Switch’s MAC address can also be found in the Web management program on the Switch Information (Basic Settings)
window on the Configuration menu.
The IP address for the Switch must be set before it can be managed with the Web-based manager. The Switch IP address can be
automatically set using BOOTP or DHCP protocols, in which case the actual address assigned to the Switch must be known.
The IP address may be set using the Command Line Interface (CLI) over the console serial port as follows:
1. Starting at the command line prompt, enter the commands config ipif System ipaddress
xxx.xxx.xxx.xxx/yyy.yyy.yyy.yyy. Where the x’s represent the IP address to be assigned to the IP interface named
System and the y’s represent the corresponding subnet mask.
2. Alternatively, users can enter config ipif System ipaddress xxx.xxx.xxx.xxx/z. Where the x’s represent the IP address to
be assigned to the IP interface named System and the zrepresents the corresponding number of subnets in CIDR
notation.
The IP interface named System on the Switch can be assigned an IP address and subnet mask which can then be used to connect a
management station to the Switch’s Telnet or Web-based management agent.
DES-3028P:4#config ipif System ipaddress 10.73.21.11/255.0.0.0
Command: config ipif System ipaddress 10.73.21.11/8
Success.
DES-3028P:4#
Figure 1-3. Assigning an IP Address
In the above example, the Switch was assigned an IP address of 10.90.90.91 with a subnet mask of 255.0.0.0. The system message
Success indicates that the command was executed successfully. The Switch can now be configured and managed via Telnet,
SNMP MIB browser and the CLI or via the Web-based management agent using the above IP address to connect to the Switch.

DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual
3
2
USING THE CONSOLE CLI
The DES-3028/28P/28G/52/52P support a console management interface that allows the user to connect to the Switch’s
management agent via a serial port and a terminal or a computer running a terminal emulation program. The console can also be
used over the network using the TCP/IP Telnet protocol. The console program can be used to configure the Switch to use an
SNMP-based network management software over the network.
This chapter describes how to use the console interface to access the Switch, change its settings, and monitor its operation.
Note: Switch configuration settings are saved to non-volatile RAM using the save command. The current
configuration will then be retained in the Switch’s NV-RAM, and reloaded when the Switch is rebooted. If
the Switch is rebooted without using the save command, the last configuration saved to NV-RAM will be
loaded.
Connecting to the Switch
The console interface is used by connecting the Switch to a VT100-compatible terminal or a computer running an ordinary
terminal emulator program (e.g., the HyperTerminal program included with the Windows operating system) using an RS-232C
serial cable. Your terminal parameters will need to be set to:
VT-100 compatible
9600 baud
8 data bits
No parity
One stop bit
No flow control
Users can also access the same functions over a Telnet interface. Once users have set an IP address for your Switch, users can use
a Telnet program (in VT-100 compatible terminal mode) to access and control the Switch. All of the screens are identical, whether
accessed from the console port or from a Telnet interface.
After the Switch reboots and users have logged in, the console looks like this:
DES-3028P Fast Ethernet Switch Command Line Interface
Firmware: Build 2.00.B23
Copyright(C) 2009 D-Link Corporation. All rights reserved.
username:
Figure 2-1. Initial Console Screen after logging in
Commands are entered at the command prompt, DES-3028P:4#.
There are a number of helpful features included in the CLI. Entering the ?command will display a list of all of the top-level
commands.

DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual
4
.
?
cable_diag ports
clear
clear address_binding dhcp_snoop binding_entry ports
clear arptable
clear counters
clear dos_prevention counters
clear fdb
clear igmp_snooping data_driven_group
clear log
clear port_security_entry port
config 802.1p default_priority
config 802.1p user_priority
config 802.1x auth_mode
config 802.1x auth_parameter ports
config 802.1x auth_protocol
config 802.1x capability ports
config 802.1x guest_vlan ports
config 802.1x init
config 802.1x reauth
config access_profile profile_id
CTRL+C ESC q Quit SPACE n Next Page ENTER Next Entry a All
Figure 2-2. The ? Command
When users enter a command without its required parameters, the CLI will prompt users with Next possible completions:
message.
DES-3028P:4#config account
Command: config account
Next possible completions:
<username>
DES-3028P:4#
Figure 2-3. Example Command Parameter Help
In this case, the command config account was entered with the parameter <username>. The CLI will then prompt users to enter
the <username> with the message, Next possible completions:. Every command in the CLI has this feature, and complex
commands have several layers of parameter prompting.
In addition, after typing any given command plus one space, users can see all of the next possible sub-commands, in sequential
order, by repeatedly pressing the Tab key.
To re-enter the previous command at the command prompt, press the up arrow cursor key. The previous command will appear at
the command prompt.

DES-3028 DES-3028P DES-3028G DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual
5
DES-3028P:4#config account
Command: config account
Next possible completions:
<username>
DES-3028P:4#config account
Command: config account
Next possible completions:
<username>
DES-3028P:4#
Figure 2-4. Using the Up Arrow to Re-enter a Command
In the above example, the command config account was entered without the required parameter <username>, the CLI returned
the Next possible completions: <username> prompt. The up arrow cursor control key was pressed to re-enter the previous
command (config account) at the command prompt. Now the appropriate username can be entered and the config account
command re-executed.
All commands in the CLI function in this way. In addition, the syntax of the help prompts are the same as presented in this manual
angle brackets < > indicate a numerical value or character string, braces { } indicate optional parameters or a choice of
parameters, and brackets [ ] indicate required parameters.
If a command is entered that is unrecognized by the CLI, the top-level commands will be displayed under the Available
commands: prompt.
DES-3028P:4#the
Available commands:
.. ? cable_diag clear
config create debug delete
dir disable download enable
login logout ping reboot
reconfig reset save show
smtp telnet traceroute upload
DES-3028P:4#
Figure 2-5. The Next Available Commands Prompt
The top-level commands consist of commands such as show or config. Most of these commands require one or more parameters
to narrow the top-level command. This is equivalent to show what? or config what? Where the what? is the next parameter.
For example, if users enter the show command with no additional parameters, the CLI will then display all of the possible next
parameters.