D-Link DES-3028 User manual

D-Link ™ DES-3028/DES-3028P/DES-3052/DES-3052P
Managed 10/100Mbps Fast Ethernet Switch
Release I
CLI Reference Manual

_________________________________________________________________________________
Information in this document is subject to change without notice.
© 2007 D-Link Corporation. All rights reserved.
Reproduction in any manner whatsoever without the written permission of D-Link Computer Corporation is strictly forbidden.
Trademarks used in this text: D-Link and the D-LINK logo are trademarks of D-Link Computer Corporation; Microsoft and
Windows are registered trademarks of Microsoft Corporation.
Other trademarks and trade names may be used in this document to refer to either the entities claiming the marks and names or
their products. D-Link Computer Corporation disclaims any proprietary interest in trademarks and trade names other than its
own.
March 2007 P/N 651ES3052015G

Table of Contents
CLI REFERENCE MANUAL .........................................................................................................................................I
INTRODUCTION ..........................................................................................................................................................1
USING THE CONSOLE CLI.........................................................................................................................................4
COMMAND SYNTAX ...................................................................................................................................................8
BASIC SWITCH COMMANDS...................................................................................................................................10
MODIFY BANNER AND PROMPT COMMANDS .....................................................................................................20
SWITCH PORT COMMANDS ....................................................................................................................................23
PORT SECURITY COMMANDS ................................................................................................................................26
NETWORK MANAGEMENT (SNMP) COMMANDS .................................................................................................30
SWITCH UTILITY COMMANDS ................................................................................................................................49
NETWORK MONITORING COMMANDS ..................................................................................................................57
MULTIPLE SPANNING TREE PROTOCOL (MSTP) COMMANDS .........................................................................69
FORWARDING DATABASE COMMANDS...............................................................................................................81
BROADCAST STORM CONTROL COMMANDS .....................................................................................................87
COS COMMANDS......................................................................................................................................................91
PORT MIRRORING COMMANDS ...........................................................................................................................105
VLAN COMMANDS .................................................................................................................................................108
LINK AGGREGATION COMMANDS.......................................................................................................................113
BASIC IP COMMANDS............................................................................................................................................118
IGMP SNOOPING COMMANDS..............................................................................................................................121
DHCP RELAY...........................................................................................................................................................128
802.1X COMMANDS................................................................................................................................................133

ACCESS CONTROL LIST (ACL) COMMANDS......................................................................................................151
TIME RANGE COMMANDS.....................................................................................................................................164
SAFEGUARD ENGINE COMMANDS......................................................................................................................166
TRAFFIC SEGMENTATION COMMANDS..............................................................................................................168
TIME AND SNTP COMMANDS ...............................................................................................................................170
ARP COMMANDS....................................................................................................................................................176
ROUTING TABLE COMMANDS..............................................................................................................................180
MAC NOTIFICATION COMMANDS ........................................................................................................................182
ACCESS AUTHENTICATION CONTROL COMMANDS ........................................................................................185
SSH COMMANDS....................................................................................................................................................206
SSL COMMANDS ....................................................................................................................................................213
D-LINK SINGLE IP MANAGEMENT COMMANDS.................................................................................................219
SMTP COMMANDS .................................................................................................................................................229
POE COMMANDS....................................................................................................................................................233
COMMAND HISTORY LIST.....................................................................................................................................237
TECHNICAL SPECIFICATIONS..............................................................................................................................241

DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual
1
INTRODUCTION
The Switch can be managed through the Switch’s serial port, Telnet, or the Web-based management agent. The Command Line
Interface (CLI) can be used to configure and manage the Switch via the serial port or Telnet interfaces.
This manual provides a reference for all of the commands contained in the CLI. Configuration and management of the Switch via
the Web-based management agent is discussed in the Manual. This manual provides a reference for all of the commands contained
in the CLI for members of this series, including the DES-3028, DES-3028P, DES-3052, and DES-3052P. Examples present in this
manual may refer to any member of this series and may show different port counts, but are universal to this series of switches,
unless otherwise stated. Configuration and management of the Switch via the Web-based management agent is discussed in the
User’s Guide.
Accessing the Switch via the Serial Port
The Switch’s serial port’s default settings are as follows:
• 9600 baud
• no parity
• 8 data bits
• 1 stop bit
A computer running a terminal emulation program capable of emulating a VT-100 terminal and a serial port configured as above
is then connected to the Switch’s serial port via an RS-232 DB-9 cable.
With the serial port properly connected to a management computer, the following screen should be visible. If this screen does not
appear, try pressing Ctrl+r to refresh the console screen.
Figure 1-1. Initial CLI screen
There is no initial username or password. Just press the Enter key twice to display the CLI input cursor −DES-3028P:4#.This is
the command line where all commands are input.
1

DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual
Setting the Switch’s IP Address
Each Switch must be assigned its own IP Address, which is used for communication with an SNMP network manager or other
TCP/IP application (for example BOOTP, TFTP). The Switch’s default IP address is 10.90.90.90. Users can change the default
Switch IP address to meet the specification of your networking address scheme.
The Switch is also assigned a unique MAC address by the factory. This MAC address cannot be changed, and can be found on the
initial boot console screen – shown below.
Figure 1-2. Boot screen
The Switch’s MAC address can also be found in the Web management program on the Switch Information (Basic Settings)
window on the Configuration menu.
The IP address for the Switch must be set before it can be managed with the Web-based manager. The Switch IP address can be
automatically set using BOOTP or DHCP protocols, in which case the actual address assigned to the Switch must be known.
The IP address may be set using the Command Line Interface (CLI) over the console serial port as follows:
1. Starting at the command line prompt, enter the commands config ipif System ipaddress
xxx.xxx.xxx.xxx/yyy.yyy.yyy.yyy. Where the x’s represent the IP address to be assigned to the IP interface named
System and the y’s represent the corresponding subnet mask.
2. Alternatively, users can enter config ipif System ipaddress xxx.xxx.xxx.xxx/z. Where the x’s represent the IP address to
be assigned to the IP interface named System and the zrepresents the corresponding number of subnets in CIDR
notation.
The IP interface named System on the Switch can be assigned an IP address and subnet mask which can then be used to connect a
management station to the Switch’s Telnet or Web-based management agent.
2

DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual
Figure 1-3. Assigning an IP Address
In the above example, the Switch was assigned an IP address of 10.90.90.91 with a subnet mask of 255.0.0.0. The system message
Success indicates that the command was executed successfully. The Switch can now be configured and managed via Telnet,
SNMP MIB browser and the CLI or via the Web-based management agent using the above IP address to connect to the Switch.
3

DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual
2
USING THE CONSOLE CLI
The DES-3028/28P/52/52P support a console management interface that allows the user to connect to the Switch’s management
agent via a serial port and a terminal or a computer running a terminal emulation program. The console can also be used over the
network using the TCP/IP Telnet protocol. The console program can be used to configure the Switch to use an SNMP-based
network management software over the network.
This chapter describes how to use the console interface to access the Switch, change its settings, and monitor its operation.
Note: Switch configuration settings are saved to non-volatile RAM using the save command. The current
configuration will then be retained in the Switch’s NV-RAM, and reloaded when the Switch is rebooted. If
the Switch is rebooted without using the save command, the last configuration saved to NV-RAM will be
loaded.
Connecting to the Switch
The console interface is used by connecting the Switch to a VT100-compatible terminal or a computer running an ordinary
terminal emulator program (e.g., the HyperTerminal program included with the Windows operating system) using an RS-232C
serial cable. Your terminal parameters will need to be set to:
• VT-100 compatible
• 9600 baud
• 8 data bits
• No parity
• One stop bit
• No flow control
Users can also access the same functions over a Telnet interface. Once users have set an IP address for your Switch, users can use
a Telnet program (in VT-100 compatible terminal mode) to access and control the Switch. All of the screens are identical, whether
accessed from the console port or from a Telnet interface.
After the Switch reboots and users have logged in, the console looks like this:
Figure 2-1. Initial Console Screen after logging in
Commands are entered at the command prompt, DES-3028P:4#.
There are a number of helpful features included in the CLI. Entering the ?command will display a list of all of the top-level
commands.
4

DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual
Figure 2-2. The ? Command
When users enter a command without its required parameters, the CLI will prompt users with a Next possible completions:
message.
Figure 2-3. Example Command Parameter Help
In this case, the command config account was entered with the parameter <username>. The CLI will then prompt users to enter
the <username> with the message, Next possible completions:. Every command in the CLI has this feature, and complex
commands have several layers of parameter prompting.
In addition, after typing any given command plus one space, users can see all of the next possible sub-commands, in sequential
order, by repeatedly pressing the Tab key.
To re-enter the previous command at the command prompt, press the up arrow cursor key. The previous command will appear at
the command prompt.
5

DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual
Figure 2-4. Using the Up Arrow to Re-enter a Command
In the above example, the command config account was entered without the required parameter <username>, the CLI returned
the Next possible completions: <username> prompt. The up arrow cursor control key was pressed to re-enter the previous
command (config account) at the command prompt. Now the appropriate username can be entered and the config account
command re-executed.
All commands in the CLI function in this way. In addition, the syntax of the help prompts are the same as presented in this manual
−angle brackets < > indicate a numerical value or character string, braces { } indicate optional parameters or a choice of
parameters, and brackets [ ] indicate required parameters.
If a command is entered that is unrecognized by the CLI, the top-level commands will be displayed under the Available
commands: prompt.
Figure 2-5. The Next Available Commands Prompt
The top-level commands consist of commands such as show or config. Most of these commands require one or more parameters
to narrow the top-level command. This is equivalent to show what? or config what? Where the what? is the next parameter.
For example, if users enter the show command with no additional parameters, the CLI will then display all of the possible next
parameters.
6

DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual
Figure 2-6. Next possible completions: Show Command
In the above example, all of the possible next parameters for the show command are displayed. At the next command prompt, the
up arrow was used to re-enter the show command, followed by the account parameter. The CLI then displays the user accounts
configured on the Switch.
7

DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual
3
COMMAND SYNTAX
The following symbols are used to describe how command entries are made and values and arguments are specified in this
manual.
Note: All commands are case-sensitive. Be sure to disable Caps Lock or
any other unwanted function that changes text case.
<angle brackets>
Purpose Encloses a variable or value that must be specified.
Syntax config ipif <ipif_name 12> [{ipaddress <network_address> |
vlan <vlan_name 32> | state [enable | disable}] | bootp | dhcp]
Description In the above syntax example, users must supply an IP interface
name in the <ipif_name 12> space, a VLAN name in the
<vlan_name 32> space, and the network address in the
<network_address> space. Do not type the angle brackets.
Example
Command
config ipif Engineering ipaddress 10.24.22.5/255.0.0.0 vlan
Design state enable
[square brackets]
Purpose Encloses a required value or set of required arguments. One value
or argument can be specified.
Syntax create account [admin | user] <username 15>
Description In the above syntax example, users must specify either an admin or
a user level account to be created. Do not type the square brackets.
Example
Command
create account admin Darren
| vertical bar
Purpose Separates two or more mutually exclusive items in a list, one of
which must be entered.
Syntax create account [admin | user] <username 15>
Description In the above syntax example, users must specify either admin, or
user. Do not type the vertical bar.
Example
Command
create account admin Darren
{braces}
Purpose Encloses an optional value or set of optional arguments.
Syntax reset {[config | system]}
Description In the above syntax example, users have the option to specify
confi
g
or s
y
stem. It is not necessar
y
to s
p
ecif
y
either o
p
tional value
,
8

DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual
{braces}
however the effect of the system reset is dependent on which, if any,
value is specified. Therefore, with this example there are three
possible outcomes of performing a system reset. See the following
chapter, Basic Commands for more details about the reset
command.
Example
command
reset config
Line Editing Key Usage
Delete Deletes the character under the cursor and then shifts the
remaining characters in the line to the left.
Backspace Deletes the character to the left of the cursor and then shifts the
remaining characters in the line to the left.
Insert or Ctrl+R Toggle on and off. When toggled on, inserts text and shifts previous
text to the right.
Left Arrow Moves the cursor to the left.
Right Arrow Moves the cursor to the right.
Up Arrow Repeats the previously entered command. Each time the up arrow
is pressed, the command previous to that displayed appears. This
way it is possible to review the command history for the current
session. Use the down arrow to progress sequentially forward
through the command history list.
Down Arrow The down arrow will display the next command in the command
history entered in the current session. This displays each command
sequentially as it was entered. Use the up arrow to review previous
commands.
Tab Shifts the cursor to the next field to the left.
Multiple Page Display Control Keys
Space Displays the next page.
CTRL+c Stops the display of remaining pages when multiple pages are to be
displayed.
ESC Stops the display of remaining pages when multiple pages are to be
displayed.
n Displays the next page.
p Displays the previous page.
q Stops the display of remaining pages when multiple pages are to be
displayed.
r Refreshes the pages currently displayed.
a Displays the remaining pages without pausing between pages.
Enter Displays the next line or table entry.
9

DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual
4
BASIC SWITCH COMMANDS
The basic switch commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters) in the
following table.
Command Parameters
create account [admin | user] <username 15>
config account <username 15>
show account
delete account <username 15>
show session
show switch
show serial_port
config serial_port {baud_rate [9600 | 19200 | 38400 | 115200] auto_logout [never | 2_minutes |
5_minutes | 10_minutes | 15_minutes]}
enable clipaging
disable clipaging
enable telnet <tcp_port_number 1-65535>
disable telnet
telnet <ipaddr> {tcp_port <value 0-65535>}
enable web <tcp_port_number 1-65535>
disable web
save
reboot
reset {[config | system]}
login
logout
Each command is listed, in detail, in the following sections.
create account
Purpose Used to create user accounts.
Syntax create [admin | user] <username 15>
Description The create account command is used to create user accounts that
consist of a username of 1 to 15 characters and a password of 0 to
15 characters. Up to 8 user accounts can be created.
Parameters admin <username>
user <username>
Restrictions Only Administrator-level users can issue this command.
Usernames can be between 1 and 15 characters.
Passwords can be between 0 and 15 characters.
Example usage:
10

DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual
To create an administrator-level user account with the username “dlink”.
DES-3028P:4#create account admin dlink
Command: create account admin dlink
Enter a case-sensitive new password:****
Enter the new password again for confirmation:****
Success.
DES-3028P:4#
NOTICE: In case of lost passwords or password corruption, please refer to the
D-Link website and the White Paper entitled “Password Recovery Procedure”,
which will guide you through the steps necessary to resolve this issue.
config account
Purpose Used to configure user accounts
Syntax config account <username>
Description The config account command configures a user account that has
been created using the create account command.
Parameters <username>
Restrictions Only Administrator-level users can issue this command.
Usernames can be between 1 and 15 characters.
Passwords can be between 0 and 15 characters.
Example usage:
To configure the user password of “dlink” account:
DES-3028P:4#config account dlink
Command: config account dlink
Enter a old password:****
Enter a case-sensitive new password:****
Enter the new password again for confirmation:****
Success.
DES-3028P:4#
show account
Purpose Used to display user accounts.
Syntax show account
Description Displays all user accounts created on the Switch. Up to 8 user
accounts can exist at one time.
Parameters None.
Restrictions Only Administrator-level users can issue this command.
Example usage:
To display the accounts that have been created:
11

DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual
DES-3028P:4#show account
Command: show account
Current Accounts:
Username Access Level
--------------- ------------
dlink Admin
Total Entries: 1
DES-3028P:4#
delete account
Purpose Used to delete an existing user account.
Syntax delete account <username>
Description The delete account command deletes a user account that has
been created using the create account command.
Parameters <username>
Restrictions Only Administrator-level users can issue this command.
Example usage:
To delete the user account “System”:
DES-3028P:4#delete account System
Command: delete account System
Success.
DES-3028P:4#
show session
Purpose Used to display a list of currently logged-in users.
Syntax show session
Description This command displays a list of all the users that are logged-in at
the time the command is issued.
Parameters None.
Restrictions None.
12

DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual
Example usage:
To display the way that the users logged in:
DES-3028P:4#show session
Command: show session
ID Login Time Live Time From Level Name
-- ------------------------------ --------- ------------ ----- -----------
8 00000 days 00:00:37 0:3:36:27 Serial Port 4 Anonymous
Total Entries: 1
CTRL+C ESC q Quit SPACE n Next Page p Previous Page r Refresh
show switch
Purpose Used to display general information about the Switch.
Syntax show switch
Description This command displays information about the Switch.
Parameters None.
Restrictions Only Administrator-level users can issue this command.
Example usage:
To display the Switch’s information:
DES-3028P:4#show switch
Command: show switch
Device Type : DES-3028P Fast Ethernet Switch
MAC Address : 00-01-02-03-04-00
IP Address : 10.90.90.91 (Manual)
VLAN Name : default
Subnet Mask : 255.0.0.0
Default Gateway : 0.0.0.0
Boot PROM Version : Build 1.00.B04
Firmware Version : Build 1.00-B22
Hardware Version : 1A1G
System Name : DES-3028P
System Location : 7th_flr_east_cabinet
System Contact : Channing_Frye_212-555-6666
Spanning Tree : Disabled
GVRP : Disabled
IGMP Snooping : Disabled
802.1x : Disabled
TELNET : Enabled (TCP 23)
WEB : Enabled (TCP 80)
RMON : Enabled
SSH : Enabled
SSL : Enabled
Clipaging : Enabled
Syslog Global State : Disabled
Dual Image : Supported
DES-3028P:4#
13

DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual
show serial_port
Purpose Used to display the current serial port settings.
Syntax show serial_port
Description This command displays the current serial port settings.
Parameters None.
Restrictions None
Example usage:
To display the serial port setting:
DES-3028P:4#show serial_port
Command: show serial_port
Baud Rate : 9600
Data Bits : 8
Parity Bits : None
Stop Bits : 1
Auto-Logout : 10 mins
DES-3028P:4#
config serial_port
Purpose Used to configure the serial port.
Syntax config serial_port {baud_rate [9600 | 19200 | 38400 | 115200] |
auto_logout [never | 2_minutes | 5_minutes | 10_minutes |
15_minutes]}
Description This command is used to configure the serial port’s baud rate and auto
logout settings.
Parameters baud_rate [9600 | 19200 | 38400 | 115200]−The serial bit rate that will be
used to communicate with the management host. There are four options:
9600, 19200, 38400, 115200.
never −No time limit on the length of time the console can be open with
no user input.
2_minutes −The console will log out the current user if there is no user
input for 2 minutes.
5_minutes −The console will log out the current user if there is no user
input for 5 minutes.
10_minutes −The console will log out the current user if there is no user
input for 10 minutes.
15_minutes −The console will log out the current user if there is no user
input for 15 minutes.
Restrictions Only administrator-level users can issue this command.
Example usage:
To configure the baud rate:
DES-3028P:4#config serial_port baud_rate 115200
Command: config serial_port baud_rate 115200
Success.
DES-3028P:4#
14

DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual
enable clipaging
Purpose Used to pause the scrolling of the console screen when a command
displays more than one page.
Syntax enable clipaging
Description This command is used when issuing a command which causes the
console screen to rapidly scroll through several pages. This
command will cause the console to pause at the end of each page.
The default setting is enabled.
Parameters None.
Restrictions Only administrator-level users can issue this command.
Example usage:
To enable pausing of the screen display when the show command output reaches the end of the page:
DES-3028P:4#enable clipaging
Command: enable clipaging
Success.
DES-3028P:4#
disable clipaging
Purpose Used to disable the pausing of the console screen scrolling at the
end of each page when a command displays more than one screen
of information.
Syntax disable clipaging
Description This command is used to disable the pausing of the console screen
at the end of each page when a command would display more than
one screen of information.
Parameters None.
Restrictions Only administrator-level users can issue this command.
Example usage:
To disable pausing of the screen display when show command output reaches the end of the page:
DES-3028P:4#disable clipaging
Command: disable clipaging
Success.
DES-3028P:4#
enable telnet
Purpose Used to enable communication with and management of the Switch
using the Telnet protocol.
Syntax enable telnet <tcp_port_number 1-65535>
Description This command is used to enable the Telnet protocol on the Switch.
The user can specify the TCP or UDP port number the Switch will
use to listen for Telnet requests.
Parameters <tcp_port_number 1-65535> −The TCP port number. TCP ports
b d b t 1 d 65535 Th “ ll
k”TCPtf
15

DES-3028 DES-3028P DES-3052 DES-3052P Layer 2 Fast Ethernet Switch CLI Reference Manual
enable telnet
are numbered between 1 and 65535. The “well-known” TCP port for
the Telnet protocol is 23.
Restrictions Only administrator-level users can issue this command.
Example usage:
To enable Telnet and configure port number:
DES-3028P:4#enable telnet 23
Command: enable telnet 23
Success.
DES-3028P:4#
disable telnet
Purpose Used to disable the Telnet protocol on the Switch.
Syntax disable telnet
Description This command is used to disable the Telnet protocol on the Switch.
Parameters None.
Restrictions Only administrator-level users can issue this command.
Example usage:
To disable the Telnet protocol on the Switch:
DES-3028P:4#disable telnet
Command: disable telnet
Success.
DES-3028P:4#
telnet
Purpose Used to Telnet another device on the network.
Syntax telnet <ipaddr> {tcp_port <value 0-65535>}
Description This command is used to connect to another device’s management
through Telnet.
Parameters <ipaddr> - Enter the IP address of the device to connect through,
using Telnet.
tcp_port <value 0-65535> - Enter the TCP port number used to
connect through. The common TCP port number for telnet is 23.
Restrictions Only administrator-level users can issue this command.
Example usage:
To connect to a device through telnet with a IP address of 10.53.13.99:
DES-3028P:4#telnet 10.53.13.99 tcp_port 23
Command: telnet 10.53.13.99 tcp_port 23
16