D-Link DES-3528 - xStack Switch - Stackable Instruction Manual

®
CLI Reference Guide
Product Model: xStack®DES-3528/DES-3552 Series
Layer 2 Managed Stackable Fast Ethernet Switch
Release 2.60

ii
Table of Contents
INTRODUCTION .........................................................................................................................5
USING THE CONSOLE CLI........................................................................................................7
COMMAND SYNTAX ................................................................................................................10
BASIC SWITCH COMMANDS ..................................................................................................12
MODIFY BANNER AND PROMPT COMMANDS .....................................................................24
SWITCH PORT COMMANDS ...................................................................................................27
PORT SECURITY COMMANDS ...............................................................................................31
STACKING COMMANDS..........................................................................................................36
NETWORK MANAGEMENT (SNMP) COMMANDS .................................................................40
SWITCH UTILITY COMMANDS................................................................................................57
NETWORK MONITORING COMMANDS..................................................................................63
MULTIPLE SPANNING TREE PROTOCOL (MSTP) COMMANDS..........................................76
FORWARDING DATABASE COMMANDS...............................................................................87
TRAFFIC CONTROL COMMANDS ..........................................................................................93
QOS COMMANDS ....................................................................................................................97
PORT MIRRORING COMMANDS...........................................................................................107
VLAN COMMANDS.................................................................................................................110
VOICE VLAN COMMANDS.....................................................................................................124
SUBNET-BASED VLAN COMMANDS ...................................................................................130
ASYMMETRIC VLAN COMMANDS........................................................................................133
LINK AGGREGATION COMMANDS......................................................................................135
IP–MAC-PORT BINDING (IMPB) COMMANDS .....................................................................139
LIMITED IP MULTICAST ADDRESS......................................................................................155
BASIC IP COMMANDS...........................................................................................................160
MULTICAST VLAN COMMANDS...........................................................................................165
IGMP / MLD SNOOPING COMMANDS ..................................................................................179
DHCP RELAY COMMANDS ...................................................................................................208
802.1X COMMANDS (INCLUDING GUEST VLANS) .............................................................221
ACCESS CONTROL LIST (ACL) COMMANDS .....................................................................238
SAFEGUARD ENGINE COMMANDS .....................................................................................258
FILTER COMMANDS (DHCP SERVER / NETBIOS)..............................................................260
LAYER 3 CPU FILTER COMMANDS .....................................................................................265
LOOP-BACK DETECTION COMMANDS...............................................................................267

iii
TRAFFIC SEGMENTATION COMMANDS .............................................................................271
SFLOW COMMANDS..............................................................................................................273
TIME AND SNTP COMMANDS...............................................................................................281
ARP AND GRATUITOUS ARP COMMANDS.........................................................................286
ROUTING TABLE COMMANDS.............................................................................................292
MAC NOTIFICATION COMMANDS........................................................................................294
ACCESS AUTHENTICATION CONTROL COMMANDS........................................................297
SECURE SHELL (SSH) COMMANDS....................................................................................315
SECURE SOCKETS LAYER (SSL) COMMANDS..................................................................321
D-LINK SINGLE IP MANAGEMENT COMMANDS.................................................................326
JWAC COMMANDS................................................................................................................335
LINK LAYER DISCOVERY PROTOCOL (LLDP) COMMANDS.............................................350
Q-IN-Q COMMANDS...............................................................................................................363
RSPAN COMMANDS..............................................................................................................369
STATIC MAC-BASED VLAN COMMANDS............................................................................373
SIMPLE RED COMMANDS.....................................................................................................375
MAC-BASED ACCESS CONTROL COMMANDS LIST .........................................................382
WEB-BASED ACCESS CONTROL COMMANDS..................................................................392
POWER OVER ETHERNET (POE) COMMANDS...................................................................400
PPPOE CIRCUIT ID INSERTION COMMANDS......................................................................404
DNS RELAY COMMANDS......................................................................................................405
POLICY ROUTE COMMANDS................................................................................................407
BPDU ATTACK PROTECTION COMMANDS........................................................................409
ETHERNET OAM COMMANDS..............................................................................................413
DHCP SERVER COMMANDS.................................................................................................422
CABLE DIAGNOSTICS COMMANDS ....................................................................................434
CONNECTIVITY FAULT MANAGEMENT COMMANDS ........................................................435
COMMAND HISTORY LIST....................................................................................................451
ARP SPOOFING PREVENTION COMMANDS.......................................................................453
AUTO-CONFIGURATION COMMANDS.................................................................................455
COMPOUND AUTHENTICATION COMMANDS ....................................................................458
DEBUG SOFTWARE COMMANDS........................................................................................464
DHCPV6 CLIENT COMMANDS..............................................................................................469
DHCPV6 RELAY COMMANDS...............................................................................................471

iv
D-LINK UNIDIRECTIONAL LINK DETECTION (DULD) COMMANDS...................................476
ETHERNET RING PROTECTION SWITCHING (ERPS) COMMANDS ..................................478
IPV6 NEIGHBOR DISCOVER COMMANDS...........................................................................487
IPV6 ROUTE COMMANDS .....................................................................................................491
LAYER 2 PROTOCOL TUNNELING (L2PT) COMMANDS....................................................493
LOCAL ROUTE COMMANDS.................................................................................................496
MSTP DEBUG ENHANCEMENT COMMANDS......................................................................498
PING COMMANDS..................................................................................................................502
SHOW TECHNICAL SUPPORT COMMANDS .......................................................................504
TRACE ROUTE COMMANDS.................................................................................................507
VLAN COUNTER COMMANDS..............................................................................................509
APPENDIX A - PASSWORD RECOVERY PROCEDURE......................................................512
APPENDIX B - TECHNICAL SPECIFICATIONS ....................................................................513
APPENDIX C - MITIGATING ARP SPOOFING ATTACKS VIA PACKET CONTENT ACL...516

xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide
5
INTRODUCTION
The Switch can be managed through the Switch’s serial port, Telnet, or the Web-based management agent. The
Command Line Interface (CLI) can be used to configure and manage the Switch via the serial port or Telnet
interfaces.
The DES-3528/DES-3552 Series Layer 2 stackable Fast Ethernet Switch Series are members of the D-Link xStack®
family. Ranging from 10/100Mbps edge Switches to core gigabit Switches, the xStack Switch family has been future-
proof designed to provide a stacking architecture with fault tolerance, flexibility, port density, robust security and
maximum throughput with a user-friendly management interface for the networking professional.
This manual provides a reference for all of the commands contained in the CLI for the xStack®DES-3528, DES-
3528P, DES-3528DC, DES-3552 and DES-3552P series of Switches. Configuration and management of the Switch
via the Web-based management agent is discussed in the User’s Guide.
NOTE: For the remainder of this manual, all versions of the DES-3528, DES-3528P, DES-3528DC,
DES-3552 and DES-3552P Switches will be referred to as simply the Switch or the DES-3528/52
Series.
Accessing the Switch via the Serial Port
The Switch’s serial port’s default settings are as follows:
•115200 baud
•no parity
•8 data bits
•1 stop bit
A computer running a terminal emulation program capable of emulating a VT-100 terminal and a serial port configured
as above are then connected to the Switch’s serial port via an RS-232 DB-9 cable.
With the serial port properly connected to a management computer, the following screen should be visible. If this
screen does not appear, try pressing Ctrl+r to refresh the console screen.
DES-3528 Fast Ethernet Switch
Command Line Interface
Firmware: Build 2.60.017
Copyright(C) 2010 D-Link Corporation. All rights reserved.
UserName:
Figure 1-1. Initial CLI screen
There is no initial username or password. Just press the Enter key twice to display the CLI input cursor −DES-
3528:admin# .This is the command line where all commands are input.
Setting the Switch’s IP Address
Each Switch must be assigned its own IP Address, which is used for communication with an SNMP network manager
or other TCP/IP application (for example BOOTP, TFTP). The Switch’s default IP address is 10.90.90.90. Users can
change the default Switch IP address to meet the specification of your networking address scheme.
The Switch is also assigned a unique MAC address by the factory. This MAC address cannot be changed, and can be
found on the initial boot console screen – shown below.

xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide
6
Boot Procedure V1.00.B008
-------------------------------------------------------------------------------
Power On Self Test ........................................ 100 %
MAC Address : 00-22-B0-10-8A-00
H/W Version : A2
Please wait, loading V2.60..017 Runtime image ............. 100 %
UART init ................................................. 100 %
Device Discovery .......................................... 100 %
Configuration init ........................................ |
Figure 1-2. Boot screen
The Switch’s MAC address can also be found in the Web management program on the Switch Information (Basic
Settings) window on the Configuration menu.
The IP address for the Switch must be set before it can be managed with the Web-based manager. The Switch IP
address can be automatically set using BOOTP or DHCP protocols, in which case the actual address assigned to the
Switch must be known.
The IP address may be set using the Command Line Interface (CLI) over the console serial port as follows:
1. Starting at the command line prompt, enter the commands config ipif System ipaddress
xxx.xxx.xxx.xxx/yyy.yyy.yyy.yyy. Where the x’s represent the IP address to be assigned to the IP interface
named System and the y’s represent the corresponding subnet mask.
2. Alternatively, users can enter config ipif System ipaddress xxx.xxx.xxx.xxx/z. Where the x’s represent the
IP address to be assigned to the IP interface named System and the zrepresents the corresponding number
of subnets in CIDR notation.
The IP interface named System on the Switch can be assigned an IP address and subnet mask which can then be
used to connect a management station to the Switch’s Telnet or Web-based management agent.
DES-3528:admin# config ipif System ipaddress 10.24.73.21/8
Command: config ipif System ipaddress 10.24.73.21/8
Success.
DES-3528:admin#
Figure 1-3. Assigning an IP Address screen
In the above example, the Switch was assigned an IP address of 10.24.73.21 with a subnet mask of 255.0.0.0. The
system message Success indicates that the command was executed successfully. The Switch can now be configured
and managed via Telnet, SNMP MIB browser and the CLI or via the Web-based management agent using the above
IP address to connect to the Switch.

xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide
7
USING THE CONSOLE CLI
The DES-3528/52 Series supports a console management interface that allows the user to connect to the Switch’s
management agent via a serial port and a terminal or a computer running a terminal emulation program. The console
can also be used over the network using the TCP/IP Telnet protocol. The console program can be used to configure
the Switch to use an SNMP-based network management software over the network.
This chapter describes how to use the console interface to access the Switch, change its settings, and monitor its
operation.
NOTE: Switch configuration settings are saved to non-volatile RAM using the save command. The
current configuration will then be retained in the Switch’s NV-RAM, and reloaded when the Switch is
rebooted. If the Switch is rebooted without using the save command, the last configuration saved to
NV-RAM will be loaded.
Connecting to the Switch
The console interface is used by connecting the Switch to a VT100-compatible terminal or a computer running an
ordinary terminal emulator program (e.g., the HyperTerminal program included with the Windows operating system)
using an RS-232C serial cable. Your terminal parameters will need to be set to:
•VT-100 compatible
•115200 baud
•8 data bits
•No parity
•One stop bit
•No flow control
Users can also access the same functions over a Telnet interface. Once users have set an IP address for your Switch,
users can use a Telnet program (in VT-100 compatible terminal mode) to access and control the Switch. All of the
screens are identical, whether accessed from the console port or from a Telnet interface.
After the Switch reboots and users have logged in, the console looks like this:
DES-3528 Fast Ethernet Switch
Command Line Interface
Firmware: Build 2.60.017
Copyright(C) 2010 D-Link Corporation. All rights reserved.
UserName:
Figure 2-1. Initial Console screen after logging in
Commands are entered at the command prompt, DES-3528:admin# ..
There are a number of helpful features included in the CLI. Entering the ?command will display a list of all of the top-
level commands.
?
cable_diag ports
cfm linktrace
cfm loopback
clear
clear address_binding dhcp_snoop binding_entry ports
clear address_binding nd_snoop binding_entry ports
clear arptable
clear attack_log
clear cfm pkt_cnt
clear counters
clear dhcp binding
clear dhcp conflict_ip
clear ethernet_oam ports
clear fdb

xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide
8
clear igmp_snooping data_driven_group
clear igmp_snooping statistics counter
clear jwac auth_state
clear log
clear mac_based_access_control auth_state
clear mld_snooping data_driven_group
CTRL+C ESC qQuit SPACE nNext Page ENTER Next Entry aAll
Figure 2-2. The ? Command
When users enter a command without its required parameters, the CLI will prompt users with a Next possible
completions: message.
DES-3528:admin# config account
Command: config account
Next possible completions:
<username>
DES-3528:admin#
Figure 2-3. Example Command Parameter Help
In this case, the command config account was entered with the parameter <username>. The CLI will then prompt
users to enter the <username> with the message, Next possible completions:. Every command in the CLI has this
feature, and complex commands have several layers of parameter prompting.
In addition, after typing any given command plus one space, users can see all of the next possible sub-commands, in
sequential order, by repeatedly pressing the Tab key.
To re-enter the previous command at the command prompt, press the up arrow cursor key. The previous command
will appear at the command prompt.
DES-3528:admin# config account
Command: config account
Next possible completions:
<username>
DES-3528:admin# config account
Command: config account
Next possible completions:
<username>
DES-3528:admin#
Figure 2-4. Using the Up Arrow to Re-enter a Command
In the above example, the command config account was entered without the required parameter <username>, the
CLI returned the Next possible completions: <username> prompt. The up arrow cursor control key was pressed to
re-enter the previous command (config account) at the command prompt. Now the appropriate username can be
entered and the config account command re-executed.
All commands in the CLI function in this way. In addition, the syntax of the help prompts are the same as presented in
this manual −angle brackets < > indicate a numerical value or character string, braces { } indicate optional parameters
or a choice of parameters, and brackets [ ] indicate required parameters.
If a command is entered that is unrecognized by the CLI, the top-level commands will be displayed under the
Available commands: prompt.
DES-3528:admin#the
Available commands:
.. ? cable_diag cfm
clear config create debug
delete disable download enable
login logout no ping
ping6 reboot reconfig reset
save show telnet traceroute

xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide
9
traceroute6 upload
DES-3528:admin#
Figure 2-5. The Next Available Commands Prompt
The top-level commands consist of commands such as show or config. Most of these commands require one or
more parameters to narrow the top-level command. This is equivalent to show what? or config what? Where the
what? is the next parameter.
For example, if users enter the show command with no additional parameters, the CLI will then display all of the
possible next parameters.
DES-3528:admin# show
Command: show
Next possible completions:
802.1p 802.1x access_profile account
accounting acct_client address_binding
arp_spoofing_prevention arpentry asymmetric_vlan
attack_log auth_client auth_diagnostics
auth_session_statistics auth_statistics authen
authen_enable authen_login authen_policy authentication
authorization autoconfig bandwidth_control bpdu_protection
cfm command_history config cpu
cpu_filter current_config device_status dhcp
dhcp_local_relay dhcp_relay dhcp_server dhcpv6_relay
dnsr dot1v_protocol_group dscp
duld erps error ethernet_oam
fdb filter firmware flow_meter
gratuitous_arp greeting_message gvrp hol_prevention
igmp_snooping ipfdb ipif
ipif_ipv6_link_local_auto iproute ipv6
ipv6route jumbo_frame jwac l2protocol_tunnel
lacp_port limited_multicast_addr link_aggregation
lldp local_route log log_save_timing
log_software_module loopdetect
mac_based_access_control mac_based_access_control_local
mac_based_vlan mac_notification max_mcast_group
mcast_filter_profile mef_l2_protocols
mef_vlan_preservation mirror mld_snooping
multicast multicast_fdb packet per_queue
poe policy_route port port_security
port_security_entry port_vlan ports
pppoe pvid qinq radius
rmon router_ports rspan safeguard_engine
scheduling scheduling_mechanism serial_port
session sflow sim snmp
sntp sred ssh ssl
stack_device stack_information stacking_mode stp
subnet_vlan switch syslog system_severity
tech_support terminal time time_range
traffic traffic_segmentation trap
trusted_host utilization vlan vlan_counter
vlan_precedence vlan_translation vlan_trunk voice_vlan
wac
DES-3528:admin#
Figure 2-6. Next possible completions: Show Command
In the above example, all of the possible next parameters for the show command are displayed. At the next command
prompt, the up arrow was used to re-enter the show command, followed by the account parameter. The CLI then
displays the user accounts configured on the Switch.

xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide
10
COMMAND SYNTAX
The following symbols are used to describe how command entries are made and values and arguments are specified
in this manual. The online help contained in the CLI and available through the console interface uses the same syntax.
NOTE: All commands are case-sensitive. Be sure to disable Caps Lock or any other unwanted
function that changes text case.
<angle brackets>
Purpose Encloses a variable or value that must be specified.
Syntax config ipif <ipif_name 12> [{ipaddress <network_address> | vlan <vlan_name 32> |
state [enable | disable}] | bootp | dhcp]
Description In the above syntax example, users must supply an IP interface name in the <ipif_name
12> space, a VLAN name in the <vlan_name 32> space, and the network address in the
<network_address> space. Do not type the angle brackets.
Example Command config ipif Engineering ipaddress 10.24.22.5/255.0.0.0 vlan Design state enable
[square brackets]
Purpose Encloses a required value or set of required arguments. One value or argument can be
specified.
Syntax create account [admin | operator | user] <username 15>
Description In the above syntax example, users must specify either an admin or a user level account
to be created. Do not type the square brackets.
Example Command create account admin Tommy
| vertical bar
Purpose Separates two or more mutually exclusive items in a list, one of which must be entered.
Syntax create account [admin | operator | user] <username 15>
Description In the above syntax example, users must specify either admin, or user. Do not type the
vertical bar.
Example Command create account admin Tommy
{braces}
Purpose Encloses an optional value or set of optional arguments.
Syntax reset {[config | system]} force_agree
Description In the above syntax example, users have the option to specify config or system. It is not
necessary to specify either optional value, however the effect of the system reset is
dependent on which, if any, value is specified. Therefore, with this example there are three
possible outcomes of performing a system reset. See the following chapter, Basic
Commands for more details about the reset command. Do not type the braces.
Example command reset config
(parentheses)

xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide
11
(parentheses)
Purpose Indicates at least one or more of the values or arguments in the preceding syntax
enclosed by braces must be specified.
Syntax config dhcp_relay {hops <value 1-16> | time <sec 0-65535>}(1)
Description In the above syntax example, users have the option to specify hops or time or both of
them. The "(1)" following the set of braces indicates at least one argument or value within
the braces must be specified. Do not type the parentheses.
Example command config dhcp_relay hops 3
Line Editing Key Usage
Delete Deletes the character under the cursor and then shifts the remaining characters in the line
to the left.
Backspace Deletes the character to the left of the cursor and then shifts the remaining characters in
the line to the left.
Left Arrow Moves the cursor to the left.
Right Arrow Moves the cursor to the right.
Up Arrow Repeats the previously entered command. Each time the up arrow is pressed, the
command previous to that displayed appears. This way it is possible to review the
command history for the current session. Use the down arrow to progress sequentially
forward through the command history list.
Down Arrow The down arrow will display the next command in the command history entered in the
current session. This displays each command sequentially as it was entered. Use the up
arrow to review previous commands.
Tab Shifts the cursor to the next field to the left.
Multiple Page Display Control Keys
Space Displays the next page.
CTRL+c Stops the display of remaining pages when multiple pages are to be displayed.
ESC Stops the display of remaining pages when multiple pages are to be displayed.
n Displays the next page.
p Displays the previous page.
q Stops the display of remaining pages when multiple pages are to be displayed.
r Refreshes the pages currently displayed.
a Displays the remaining pages without pausing between pages.
Enter Displays the next line or table entry.

xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide
12
BASIC SWITCH COMMANDS
The basic Switch commands in the Command Line Interface (CLI) are listed (along with the appropriate parameters)
in the following table.
Command Parameters
create account [admin | operator | power_user | user] <username 15>
config account <username> {encrypt [plain_text | sha_1] <password>}
show account
delete account <username>
enable password
encryption
disable password
encryption
show session
show switch
show device_status
show serial_port
config serial_port {baud_rate [9600 | 19200 | 38400 | 115200] | auto_logout [never | 2_minutes | 5_minutes |
10_minutes | 15_minutes]}(1)
enable clipaging
disable clipaging
telnet <ipaddr> {tcp_port <value 1-65535>}
enable telnet <tcp_port_number 1-65535>
disable telnet
enable web <tcp_port_number 1-65535>
disable web
save {[config <config_id 1-2> | log | all]}
reboot {force_agree}
reset {[config | system]} {force_agree}
login
logout
clear
config terminal width [default | <value 80-200>]
show terminal width
Each command is listed, in detail, in the following sections.
create account
Purpose Used to create user accounts.

xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide
13
create account
Syntax create account [admin | operator | power_user | user] <username 15>
Description This command is used to create user accounts that consist of a username of 1 to 15
characters and a password of 0 to 15 characters. Up to 8 user accounts can be created.
Parameters admin – Specifies that the user account will be set to admin.
operator– Specifies that the user account will be set to operator.
power_user – Specifies that the user account will be set to power user.
user – Specifies that the user account will be set to user.
<username 15> - Enter the account username here. This name can be up to 15 characters
long.
Restrictions Only Administrator-level users can issue this command.
Usernames can be between 1 and 15 characters.
Passwords can be between 0 and 15 characters.
Example usage:
To create an administrator-level user account with the username “dlink”.
DES-3528:admin# create account admin dlink
Command: create account admin dlink
Enter a case-sensitive new password:****
Enter the new password again for confirmation:****
Success.
DES-3528:admin#
NOTICE: In case of lost passwords or password corruption, please refer to the D-Link website and
the White Paper entitled “Password Recovery Procedure”, which will guide you through the steps
necessary to resolve this issue.
config account
Purpose Used to configure user accounts
Syntax config account <username> {encrypt [plain_text | sha_1] <password>}
Description When the password information is not specified in the command, the system will prompt the
user to input the password interactively. For this case, the user can only input the plain text
password.
If the password is present in the command, the user can select to input the password in the
plain text form or in the encrypted form. The encryption algorithm is based on SHA-I.
Parameters <username> −Name of the account. The account must already be defined.
plain_text −Select to specify the password in plain text form.
sha_1 −Select to specify the password in the SHA-I enacrpted form.
password −The password for the user account.
The length for of password in plain-text form and in encrypted form are different. For the
plain-text form, passwords must have a minimum of 0 character and can have a maximum of
15 characters. For the encrypted form password, the length is fixed to 35 bytes long. The
assword is case-sensitive.
Restrictions Only Administrator-level users can issue this command.
Usernames can be between 1 and 15 characters.
Passwords can be between 0 and 15 characters.
Example usage:
To configure the user password of “dlink” account:

xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide
14
DES-3528:admin# config account dlink
Command: config account dlink
Enter a old password:****
Enter a case-sensitive new password:****
Enter the new password again for confirmation:****
Success.
DES-3528:admin#
show account
Purpose Used to display user accounts.
Syntax show account
Description This command is used to display all user accounts created on the Switch. Up to 8 user
accounts can exist at one time.
Parameters None.
Restrictions Only Administrator-level users can issue this command.
Example usage:
To display the accounts that have been created:
DES-3528:admin# show account
Command: show account
Current Accounts:
Username Access Level
--------------- ------------
dlink Admin
Total Entries: 1
DES-3528:admin#
delete account
Purpose Used to delete an existing user account.
Syntax delete account <username>
Description This command is used to delete an existing entry.
Parameters <username> −Name of the user who will be deleted.
Restrictions Only Administrator-level users can issue this command.
Example usage:
To delete the user account “System”:
DES-3528:admin# delete account System
Command: delete account System
Success.
DES-3528:admin#
enable password encryption
Purpose Used to enable password encryption.
Syntax enable password encryption
Description The user account configuration information will be stored in the configuration file, and can be

xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide
15
enable password encryption
applied to the system later.
If the password encryption is enabled, the password will be in encrypted form.
When password encryption is diabled, if the user specifies the password in plain text form,
the password will be in plain text form. However, if the user specifies the password in
encrypted form, or if the password has been converted to encrypted form by the last enable
password encryption command, the password will still be in the encrypted form. It cannot be
reverted to the plaintext.
Parameters None.
Restrictions Only Administrator-level users can issue this command.
Example usage:
To enable password encryption:
DES-3528:admin# enable password encryption
Command: enable password encryption
Success.
DES-3528:admin#
disable password encryption
Purpose Used to disable password encryption.
Syntax disable password encryption
Description The user account configuration information will be stored in the configuration file, and can be
applied to the system later.
If the password encryption is enabled, the password will be in encrypted form.
When password encryption is disabled, if the user specifies the password in plain text form,
the password will be in plan text form. However, if the user specifies the password in
encrypted form, or if the password has been converted to encrypted form by the last enable
password encryption command, the password will still be in the encrypted form. It cannot be
reverted to the plaintext.
Parameters None.
Restrictions Only Administrator-level users can issue this command.
Example usage:
To disable password encryption:
DES-3528:admin# disable password encryption
Command: disable password encryption
Success.
DES-3528:admin#
show session
Purpose Used to display a list of currently logged-in users.
Syntax show session
Description This command displays a list of all the users that are logged-in at the time the command is
issued.
Parameters None.
Restrictions Only Administrator and Operator-level users can issue this command.
Example usage:

xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide
16
To display the way that the users logged in:
DES-3528:admin# show session
Command: show session
ID Live Time From Level Name
--- --------- ------------ ----- -------
8 00:00:16.250 Serial Port 5 Anonymous
Total Entries: 1
CTRL+C ESC qQuit SPACE nNext Page pPrevious Page rRefresh
show switch
Purpose Used to display general information about the Switch.
Syntax show switch
Description This command displays information about the Switch.
Parameters None.
Restrictions None.
Example usage:
To display the Switch’s information:
DES-3528:admin# show switch
Command: show switch
Device Type : DES-3528 Fast Ethernet Switch
MAC Address : 1C-AF-F7-AD-33-20
IP Address : 10.90.90.90 (Manual)
VLAN Name : default
Subnet Mask : 255.0.0.0
Default Gateway : 0.0.0.0
Boot PROM Version : Build 1.00.B008
Firmware Version : Build 2.60.B010
Hardware Version : A4
Serial Number : P1UQ3A4000012
System Name :
System Location :
System Uptime : 0 days, 0 hours, 3 minutes, 58 seconds
System Contact :
Spanning Tree : Disabled
GVRP : Disabled
IGMP Snooping : Disabled
MLD Snooping : Disabled
VLAN Trunk : Disabled
Telnet : Enabled (TCP 23)
Web : Enabled (TCP 80)
SNMP : Disabled
CTRL+C ESC qQuit SPACE nNext Page ENTER Next Entry aAll
show device_status
Purpose Used to display the current Switch’s power and fan status.
Syntax show device_status
Description This command displays status of both the Switch’s internal and external power and the fan
status.
Parameters None.

xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide
17
show device_status
Restrictions None.
Example usage:
To display the Switch’s device status:
DES-3528:admin# show device_status
Command: show device_status
Internal Power: Active
External Power: Fail
DES-3528:admin#
show serial_port
Purpose Used to display the current serial port settings.
Syntax show serial_port
Description This command displays the current serial port settings.
Parameters None.
Restrictions None
Example usage:
To display the serial port setting:
DES-3528:admin#show serial_port
Command: show serial_port
Baud Rate : 115200
Data Bits : 8
Parity Bits : None
Stop Bits : 1
Auto-Logout : Never
DES-3528:admin#
config serial_port
Purpose Used to configure the serial port.
Syntax config serial_port {baud_rate [9600 | 19200 | 38400 | 115200] | auto_logout [never |
2_minutes | 5_minutes | 10_minutes | 15_minutes]}(1)
Description This command is used to configure the serial port’s baud rate and auto logout settings.
Parameters baud_rate [9600 | 19200 | 38400 | 115200] −The serial bit rate that will be used to
communicate with the management host. There are four options: 9600, 19200, 38400,
115200. Factory default setting is 115200.
never −No time limit on the length of time the console can be open with no user input.
2_minutes −The console will log out the current user if there is no user input for 2 minutes.
5_minutes −The console will log out the current user if there is no user input for 5 minutes.
10_minutes −The console will log out the current user if there is no user input for 10
minutes.
15_minutes −The console will log out the current user if there is no user input for 15
minutes.
Restrictions Only Administrator and Operator-level users can issue this command.
Example usage:
To configure baud rate:

xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide
18
DES-3528:admin# config serial_port baud_rate 115200
Command: config serial_port baud_rate 115200
Success.
DES-3528:admin#
enable clipaging
Purpose Used to pause the scrolling of the console screen when a command displays more than one
page.
Syntax enable clipaging
Description This command is used when issuing a command which causes the console screen to rapidly
scroll through several pages. This command will cause the console to pause at the end of
each page. The default setting is enabled.
Parameters None.
Restrictions Only Administrator and Operator-level users can issue this command.
Example usage:
To enable pausing of the screen display when the show command output reaches the end of the page:
DES-3528:admin# enable clipaging
Command: enable clipaging
Success.
DES-3528:admin#
disable clipaging
Purpose Used to disable the pausing of the console screen scrolling at the end of each page when a
command displays more than one screen of information.
Syntax disable clipaging
Description This command is used to disable the pausing of the console screen at the end of each page
when a command would display more than one screen of information.
Parameters None.
Restrictions Only Administrator and Operator-level users can issue this command.
Example usage:
To disable pausing of the screen display when show command output reaches the end of the page:
DES-3528:admin# disable clipaging
Command: disable clipaging
Success.
DES-3528:admin#
telnet
Purpose Used to login the remote device system through the network.
NOTE: If a user configures the serial port’s baud rate, the baud rate will take effect and save
immediately. Baud rate settings will not change even if the user resets or reboots the Switch. The
Baud rate will only change when the user configures it again. The serial port’s baud rate setting is not
stored in the Switch’s configuration file. Resetting the Switch will not restore the baud rate to the
default setting.

xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide
19
telnet
Syntax telnet <ipaddr> {tcp_port <value 1-65535>}
Description This command is used when the manager want to manage the device system which isn’t on
local. So can use this command to login in the remote system which is located on other side.
If connect successful, some actions can be done as local.
Parameters <ipaddr>−The network ip address. This is the destination which wants to login.
<value 1-65535> −The TCP port number. TCP ports are numbered between 1 and 65535.
The “well-known” TCP port for the Telnet protocol is 23.
Restrictions Only Administrator and Operator-level users can issue this command.
Example usage:
Telnet to the remote Switch:
DES-3528:admin# telnet 172.18.168.12 tcp_port 50
Command: telnet 172.18.168.12 tcp_port 50
Connecting to server,please wait....
DES-3528 Gigabit Ethernet Switch
Command Line Interface
Firmware: Build 2.60.B010
Copyright(C) 2009 D-Link Corporation. All rights reserved.
UserName:
PassWord:
enable telnet
Purpose Used to enable communication with and management of the Switch using the Telnet
protocol.
Syntax enable telnet <tcp_port_number 1-65535>
Description This command is used to enable the Telnet protocol on the Switch. The user can specify the
TCP or UDP port number the Switch will use to listen for Telnet requests.
Parameters <tcp_port_number 1-65535> −The TCP port number. TCP ports are numbered between 1
and 65535. The “well-known” TCP port for the Telnet protocol is 23.
Restrictions Only Administrator and Operator-level users can issue this command.
Example usage:
To enable Telnet and configure port number:
DES-3528:admin# enable telnet 23
Command: enable telnet 23
Success.
DES-3528:admin#
disable telnet
Purpose Used to disable the Telnet protocol on the Switch.
Syntax disable telnet
Description This command is used to disable the Telnet protocol on the Switch.
Parameters None.
Restrictions Only Administrator and Operator-level users can issue this command.
Example usage:

xStack® DES-3528/DES-3552 Series Layer 2 Fast Ethernet Managed Switch CLI Reference Guide
20
To disable the Telnet protocol on the Switch:
DES-3528:admin# disable telnet
Command: disable telnet
Success.
DES-3528:admin#
enable web
Purpose Used to enable the HTTP-based management software on the Switch.
Syntax enable web <tcp_port_number 1-65535>
Description This command is used to enable the Web-based management software on the Switch. The
user can specify the TCP port number the Switch will use to listen for Telnet requests.
Parameters <tcp_port_number 1-65535> −The TCP port number. TCP ports are numbered between 1
and 65535. The “well-known” port for the Web-based management software is 80.
Restrictions Only Administrator and Operator-level users can issue this command.
Example usage:
To enable HTTP and configure port number:
DES-3528:admin# enable web 80
Command: enable web 80
Success.
DES-3528:admin#
disable web
Purpose Used to disable the HTTP-based management software on the Switch.
Syntax disable web
Description This command disables the Web-based management software on the Switch.
Parameters None.
Restrictions Only Administrator and Operator-level users can issue this command.
Example usage:
To disable HTTP:
DES-3528:admin# disable web
Command: disable web
Success.
DES-3528:admin#
save
Purpose Used to save changes in the Switch’s configuration to non-volatile RAM.
Syntax save {[config <config_id 1-2> | log | all]}
Description This command is used to enter the current Switch configuration into non-volatile RAM. The
saved Switch configuration will be loaded into the Switch’s memory each time the Switch is
restarted.
Parameters config <config_id 1-2> – Specify to save current settings to configuration file 1 or 2.
log – Specify to save current Switch log to NV-RAM.