D-Link DES-7200 Instruction Manual

. i
DES-7200
Basic Configuration Command
Reference Guide
Version 10.4(3)
DES-7200 CLI Reference Guide

. ii
Revision No.:Version 10.4(3)
Date:
Copyright Statement
D-Link Corporation ©2011
All rights reserved.
Without our written permission, this document may not be excerpted, reproduced,
transmitted, or otherwise in all or in part by any party in any means.

. iii
Preface
Version Description
This manual matches the firmware version 10.4(3).
Target Readers
This manual is intended for the following readers:
Network engineers
Technical salespersons
Network administrators
Conventions in this Document
1. Universal Format Convention
Arial: Arial with the point size 10 is used for the body.
Note: A line is added respectively above and below the prompts such as caution and note to
separate them from the body.
Format of information displayed on the terminal: Courier New, point size 8, indicating the
screen output. User's entries among the information shall be indicated with bolded
characters.
2. Command Line Format Convention
Arial is used as the font for the command line. The meanings of specific formats are
described below:
Bold: Key words in the command line, which shall be entered exactly as they are displayed,
shall be indicated with bolded characters.
Italic: Parameters in the command line, which must be replaced with actual values, shall be
indicated with italic characters.
[ ]: The part enclosed with [ ] means optional in the command.
{ x | y | ... }: It means one shall be selected among two or more options.
[ x | y | ... ]: It means one or none shall be selected among two or more options.
//:Lines starting with an exclamation mark "//" are annotated.

. iv
3. Signs
Various striking identifiers are adopted in this manual to indicate the matters that special
attention should be paid in the operation, as detailed below:
Caution
Warning, danger or alert in the operation.
Note
Descript, prompt, tip or any other necessary supplement or explanation for
the operation.
Note
The port types mentioned in the examples of this manual may not be
consistent with the actual ones. In real network environments, you need
configure port types according to the support on various products.
The display information of some examples in this manual may include the
information on other series products, like model and description. The details
are subject to the used equipments.

DES-7200 CLI Reference Guide Chapter 1CLI Authorization Configuration Commands
. 1-1
1CLI Authorization
Configuration Commands
1.1 alias
You can use the alias command to configure an alias of a command in the
global configuration mode. Use the no form of the command to remove the alias
of a specified command or all the aliases under one mode.
alias mode command-alias original-command
no alias mode command-alias
Parameter Description
mode Mode of the command represented by
the alias
command-alias Alias of the command
Parameter
description
original-command Syntax of the command represented
by the alias
Default
Settings Some commands in the privileged EXEC mode have
default alias names.
Command
mode Global configuration mode.
Usage
guidelines
The following table lists the default alias of the commands
in the privileged EXEC mode.
Alias Actual Command
h help
p ping
s show

DES-7200 CLI Reference Guide Chapter 1CLI Authorization Configuration Commands
. 1-2
un undebug
The default alias cannot be deleted by the no alias exec
command.
By setting the alias, you can use a word to replace a
command. For example, you can create an alias to
represent the first part of a command, and then type the
rest part of the command.
The mode of the command represented by the alias is the
command mode existing in the current system. In the
global configuration mode, you can use alias ? to list all
the modes under which you can configure alias for
commands.
DES-7200(config)# alias ?
aaa-gs AAA server group mode
acl acl configure mode
bgp Configure bgp Protocol
config globle configure mode
......
The alias also has its help information that is displayed
after * in the following format:
*command-alias=original-command
For example, in the privileged EXEC mode, the default
alias sstands for show. You can enter s? to query the key
words beginning with sand the help information of the
alias.
DES-7200#s?
*s=show show start-chat start-terminal-service
If an alias represents more than one word, the command
will be displayed in brackets. For example, if you set sv
stand for show version in the privileged EXEC mode,
then:
DES-7200#s?
*s=show *sv="show version" show start-chat
start-terminal-service
The alias must begin with the first letter of the command.
The first letter of the command cannot be a space. The
space before the command cannot be used as a valid
alias.
DES-7200# s?
show start-chat start-terminal-service
The command alias also has its help information. For
example, if the alias ia represents ip address in the

DES-7200 CLI Reference Guide Chapter 1CLI Authorization Configuration Commands
. 1-3
interface configuration mode, then:
DES-7200(config-if)#ia ?
A.B.C.D IP address
dhcp IP Address via DHCP
DES-7200(config-if)# ip address
The above help information lists the parameters of ip
address and shows the actual command name.
You must enter an entire alias; otherwise it cannot be
recognized.
Use the show aliases command to show the aliases
setting in the system.
Examples
In the global configuration mode, use def-route to
represent the default route setting of ip route 0.0.0.0
0.0.0.0 192.168.1.1:
DES-7200# configure terminal
DES-7200(config)# alias config def-route ip route 0.0.0.0
0.0.0.0 192.168.1.1
DES-7200(config)#def-route?
*def-route="ip route 0.0.0.0 0.0.0.0 192.168.1.1"
DES-7200(config)# end
DES-7200# show aliases config
globle configure mode alias:
def-route ip route 0.0.0.0 0.0.0.0
192.168.1.1
Command Description
Related
commands show aliases Show the aliases settings.
1.2 privilege
To attribute the execution rights of a command to a command level, use
privilege in the global configuration mode. The no form of this command
recovers the execution rights of a command to the default setting.
privilege mode [all] [level level | reset ]command-string
no privilege mode [all] [level level ]command-string
Parameter Description
mode CLI mode of the command to which
the execution rights are attributed.
all Alias of the command
Parameter
description
level Specify the execution right levels

DES-7200 CLI Reference Guide Chapter 1CLI Authorization Configuration Commands
. 1-4
(0–15) of a command or
sub-commands
reset Restore the command execution rights
to its default level
command-string: Command string to be authorized
Default
Settings N/A.
Command
mode Global configuration mode.
Usage
guidelines
The following table lists some key words that can be
authorized by command privilege in the CLI mode. The
number of command modes that can be authorized may
vary with different devices. In the global configuration
mode, you can use privilege ? to list all CLI command
modes that can be authorized.
Mode Descripton
config Global configuration mode.
exec Privileged EXEC mode
interface Interface configuration mode
ip-dhcp-pool DHCP address pool
configuration mode
keychain KeyChain configuration mode
keychain-key KeyChain-key configuration
mode
time-range Time-Range configuration mode
Examples
Set the password of CLI level 1 as test and attribute the
reload rights to reset the device:
DES-7200(config)#enable secret level 1 0 test
DES-7200(config)#privilege exec level 1reload
After the above setting, you can access the CLI window as
level-1 user to use the reload command:
DES-7200>reload ?
LINE Reason for reload

DES-7200 CLI Reference Guide Chapter 1CLI Authorization Configuration Commands
. 1-5
<cr>
You can use the key word all to attribute all sub-commands
of reload to level-1 users:
DES-7200(config)# privilege exec all level 1 reload
After the above setting, you can access the CLI window as
level-1 user to use all sub commands of the reload
command:
DES-7200>reload ?
LINE Reason for reload
at reload at a specific time/date
cancel cancel pending reload scheme
in reload after a time interval
<cr>
Command Description
Related
commands enable secret Set CLI-level password
1.3 show aliases
To display all the command aliases or aliases in special command modes, run
the show aliases command in the privileged EXEC mode.
show aliases [mode]
Parameter Description
Parameter
description mode Mode of the command represented by
the alias.
Default
Settings N/A.
Command
mode EXEC mode.
Usage
guidelines Show all the configuration of aliases if the command mode
has not been input.
Examples Following example shows the command alias in the EXEC
mode:
DES-7200#show aliases exec

DES-7200 CLI Reference Guide Chapter 1CLI Authorization Configuration Commands
. 1-6
exec mode alias:
h help
p ping
s show
u undebug
un undebug
Command Description
Related
commands alias Set the alias of a command.

DES-7200 CLI Reference Guide Chapter 2Switch Management Configuration Commands
. 2-1
2Switch Management
Configuration Commands
2.1 User Management
Related Commands
2.1.1 disable
To exit from privileged user mode to normal user mode or lower the privilege
level, execute the privileged user command disable.
disable [ privilege-level ]
Parameter Description
Parameter
description privilege-level Privilege level
Command
mode Privileged mode.
Usage
guidelines
Use this command to return to user mode from privileged
mode. If a privilege level is added, the current privilege
level will be lowered to the specified level.
Note
The privilege level following the disable
command must be lower than the current
level.
Examples The example below lowers the current privilege level of the
device down to level 10:
DES-7200# disable 10
Command Description
Related
commands enable From user mode enter to the
privileged mode or log on the
higher level of authority.

DES-7200 CLI Reference Guide Chapter 2Switch Management Configuration Commands
. 2-2
2.1.2 enable
To enter into the privileged user mode, execute the normal user configuration
command enable.
For the details of the command, see the Security Configuration Command
Reference.
2.1.3 enable
password
To configure the password for different privilege level, execute the global
configuration command enable password. The no form of this command is
used to delete the password of the specified level.
enable password [level level] {password | [0|7] encrypted-password}
no enable password [level level]
Parameter Description
Password Password for user to enter into the
EXEC configuration layer
Level User's level.
0|7 Password encryption type, "0" for
no encryption, "7" for simple
encryption
Parameter
description
encrypted-password Password text.
Command
mode Global configuration mode.

DES-7200 CLI Reference Guide Chapter 2Switch Management Configuration Commands
. 2-3
Usage
guidelines
No encryption is required in general. The encryption type is
required generally when the password that has been
encrypted with the command for the device are to be
copies and pasted.
The effective password is defined as below:
Consists of 1 ~ 26 letter in upeer/lower case and
numerals
Leading spaces are allowed but ignored. Spaces in
between or at the end are regarded as part of the
password.
Caution
If an encryption type is specified and then a
plaintext password is entered, it is
impossible to enter into the privileged
EXEC mode. A lost password that has
been encrypted with any method cannot be
restored. The only way is to reconfigure the
device password.
Examples The example below configures the password as pw10:
DES-7200(config)# enable password pw10
Command Description
Related
commands enable secret Set the security password
2.1.4 enable secret
To configure the security password for different privilege level, execute the
global configuration command enable secret. The no form of this command is
used to delete the password of the specified level.
enable secret [level level] {secret | [0|5] encrypted-secret}
no enable secret
Parameter Description
secret Password for user to enter into the
EXEC configuration layer
level User's level.
0|5 Password encryption type, "0" for
no encryption, "5" for security
encryption
Parameter
description
encrypted-password Password text

DES-7200 CLI Reference Guide Chapter 2Switch Management Configuration Commands
. 2-4
Command
mode Global configuration mode.
Usage
guidelines
The password falls into "password" and "security"
passwords. The "password" is simple encryption
password, which can be set only for level 15. The
"security" means the security encryption password, which
can be set for level 0 ~ 15. If the two kinds of passwords
exist in the system at the same time, the "password" type
password will not take effect. If a "password" type
password is set for a level other than 15, an alert is
provided and the password is automatically converted into
the "security" password. If "password" type password is
set for level 15 and the same as the "security" password,
an alert is provided. The password must be saved in
encrypted manner, with simple encryption for the
"password" type password and security encryption for the
"security" type password.
Examples The example below configures the security password as
pw10:
DES-7200(config)# enable secret 0 pw10
Command Description
Related
commands enable
password Set passwords for different privilege
levels.
2.1.5 enable service
To enable or disable the specified service such as SSH Server/Telnet
Server/Web Server/SNMP Agent, use the enable service command in the
global configuration mode:
enable service { ssh-sesrver | telnet-server | web-server | snmp-agent}
Keyword Description
ssh-server Enable SSH Server, and the IPv4 and
IPv6 services are enabled at the same
time.
Parameter
description
telnet-server Enable Telnet Server, and the IPv4 and
IPv6 services are enabled at the same
time.

DES-7200 CLI Reference Guide Chapter 2Switch Management Configuration Commands
. 2-5
web-server Enable HTTP Server, and the IPv4 and
IPv6 services are enabled at the same
time.
snmp-agent Enable SNMP Agent, and the IPv4 and
IPv6 services are enabled at the same
time.
Command
mode Global configuration mode.
Usage
guidelines
This command is used to enable the specified service. Use
the no enable service command to disable the specified
service.
Examples The example below enables the SSH Server:
DES-7200(Config)# enable service ssh-sesrver
Command Description
Related
commands show service View the service status of the current
system.
2.1.6 execute
To execute the commands in the batch files, use the privileged EXEC mode
command execute.
execute [flash: ] filename
Parameter Description
flash: Parent directory of the batch file
Parameter
description filename Name of the batch file
Default
configuration N/A
Command
mode Privileged EXEC mode.

DES-7200 CLI Reference Guide Chapter 2Switch Management Configuration Commands
. 2-6
Usage
guidelines
This command is used to execute the commands in the
batch files. Users could self-specify the filename and
content of the batch file. In general, after finishing editting
the batch files on the user PC , the files are transmit to the
Flash of the device through the TFTP. The content of
batch files completely imitates the user entering, so the
content should be edited in order of CLI command
configuration. Besides, for some interactive commands ,
the response message should be pre-wrote into the batch
files to ensure the commands can be normally executed.
Caution: The size of the batch file shall not exceed 128K,
otherwise the execution of batch files may fail. For the
over-sized batch files, you can divide them into several
small files with size less than 128K to complete the
execution.
Examples
The example below executes the batch file
line_rcms_script.text ,which is used to enable the reverse
Telnet function for all asynchronous Interfaces, and whose
contents are as follows:
configure terminal
line tty 1 16
transport input all
no exec
end
The execution result is as below:
DES-7200# execute flash:line_rcms_script.text
executing script file line_rcms_script.text ......
executing done
DES-7200# configure terminal
Enter configuration commands, one per line. End with
CNTL/Z.
DES-7200(config)# line tty 1 16
DES-7200(config-line)# transport input all
DES-7200(config-line)# no exec
DES-7200(config-line)# end

DES-7200 CLI Reference Guide Chapter 2Switch Management Configuration Commands
. 2-7
2.1.7 ip http
authenticatio
n
When using the Http Server, it needs to perform the logon authentication to
enter the Web page. Use this command to set the mode of Web logon
authentication.
ip http authentication {enable | local }
Keyword Description
enable Use the password set by the enable
password or enable secret, the password
must be of the level15.
Parameter
description local Use the username and password set by the
local username command. The user must
bind to the privilege of level15.
Default enable
Command
mode Global configuration mode.
Usage
guidelines
This command is used to set the mode of Web logon
authentication. Use the no ip http authentication
command to restore it to the default setting.
Examples The example below sets the mode of Web logon
authentication as local:
DES-7200(Config)# ip http authentication local
Command Description
Related
commands enable service Enable or disable the specified
service.
2.1.8 ip http port
To set the port of the HTTP service ,use this command in the global
configuration mode:
ip http port number

DES-7200 CLI Reference Guide Chapter 2Switch Management Configuration Commands
. 2-8
Keyword Description
Parameter
description number Port number of the HTTP server, the default
value is 80.
Default
configuration 80
Command
mode Global configuration mode.
Usage
guidelines
This command is used to set the port of the HTTP service.
Use the no ip http port command to restore it to the
default setting.
Examples The example below set the port of the HTTP service as
8080:
DES-7200(Config)# ip http port 8080
Command Description
Related
commands enable service Enable or disable the specified
service
2.1.9 ip http
source-port
This command is used to configure the port for HTTPS services in the global
configuration mode.
ip http source-port number
Parameter Description
Parameter
description number Configure the port for HTTPS services, and
the default value is 443.
Default
configuration 443
Command
mode Global configuration mode.

DES-7200 CLI Reference Guide Chapter 2Switch Management Configuration Commands
. 2-9
Usage
guidelines
This command is used to configure the port for HTTPS
services. The no form of this command is used to restore
the default port configuration.
Examples The example below sets the port for HTTPS services as
4443.
DES-7200(config)# ip http secure-port 4443
Command Description
enable service Enable or disable the specified
service.
Related
commands show
web-server
status Show the status of the web server.
2.1.10 ip telnet
source-interfa
ce
To specify the IP address of one interface as the source address for the Telnet
connection, use the ip telnet source-interface command in the global
configuration mode:
ip telnet source-interface interface-name
Keyword Description
Parameter
description interface-name Name of the specified interface
Command
mode Global configuration mode.
Usage
guidelines
This command is used to specify the IP address of one
interface as the source address for the global Telnet
connetction. When using the telnet command to log in a
Telnet server, if no source interface or source address is
specified for this connnetcion, the global setting is
used.Use the no ip telnet source-interface command to
restore it to the default setting.
Examples
The example below specifies the IP address of the
interface Loopback1 as the source address for the global
Telnet connection.
DES-7200(Config)# ip telnet source-interface Loopback 1

DES-7200 CLI Reference Guide Chapter 2Switch Management Configuration Commands
. 2-10
Command Description
Related
commands telnet log in a Telnet server
2.1.11 lock
To set a temporary password at the terminal, execute the EXEC mode
command lock.
lock
Parameter
description N/A.
Command
mode Privileged mode.
Usage
guidelines
You can lock the terminal interface but maintain the
continuity of session, to prevent it from being accessed by
setting the temporary password.The terminal interface can
be locked by the steps below:
1. Enter the lock command, and the system will prompt
you to enter the password:
2. Enter the password, which may be any string.The
system will prompt you to confirm the entered
password, and then clear the screen as well as show
the "Locked" information.
3. To enter into the terminal, enter the set temporary
password.
To use the terminal locked function at the terminal,
execute the lockable command in the line configuration
mode, and enable the characteristic to support the terminal
lock in corresponding line.
Examples
The example below locks a terminal interface:
DES-7200(config-line)# lockable
DES-7200(config-line)# end
DES-7200# lock
Password: <password>
Again: <password>
Locked
Password: <password>
DES-7200#