D-Link DGS-6600-48T Instruction Manual

-
ii

-
iii
DGS-6604 CLI Reference Guide
Software Release 2.00.022
Date: November 3, 2011
Copyright Statement
D-Link Corporation © 2011
All rights reserved.
Without our written permission this document may not be excerpted, reproduced, transmitted, or
otherwise in all or part by any party by any means.

-
iv
Preface
Version Description
This manual’s command descriptions are based on the software release 2.00.022. The
commands listed here are the subset of commands that are supported by the DGS-6600
series switches.
Note: Other Ethernet L2/L3 Chassis-Based Switch series Hardware using similar software
may support a different subset of commands although generally the majority of the supported
commands and options will be similar.
Audience
This reference manual is intended for network administrators and other IT networking
professionals responsible for managing the DGS-6604 by using the D-LINK Command Line
Reference (CLI). The CLI is the primary management interface to the D-LINK DGS-6604
which will be generally referred to as the “switch” within this manual. This manual is written in
a way that assumes that you already have the experience and knowledge of Ethernet and
modern networking principles for Local Area Networks.
Document Organiztion
Other Documentation
The documents below are a further source of information in regards to configuring and troubleshooting the
switch . All the documents are available for download from D-Links web site www.d-link.com.
• DGS-6600 Series Quick Installation Guide
• DGS-6600 Series Hardware Installation Guide
Preface Describes how to use the CLI reference manual.
Feature Table of
Contents
A clickable commnad list of the DGS-6604 commands grouped by their features
and linked to the command descriptions..
Command Listings A complete list of available commands arranged in alphabetical order.
Acronyms A glossary of acronyms used througout the reference manual.

-
v
Conventions
Notes, Notices, and Cautions
Below are examples of the 3 types of indicators used in this manual. When administering your switch
using the information in this document, you should pay special attention to these indicators. Each
example below provides an explanatory remark regarding each type of indicator.
Convention Description
boldface font Commands, command options and keywords are printed in boldface. Key words
in the command line, are to be entered exactly as they are displayed.
UPPERCASE ITALICS
font
Parameters or values that must be specified are printed in UPPERCASE
ITALICS. Parameters in the command line, are to be replaced with the actual
values that are desired to be used with the command.
[ ] Square brackets enclose an optional value or set of optional arguments.
{a|b|c} Braces enclose alternative keywords seperated by vertical bars. Generally, one
of the keywords in the seperated list can be chosen.
[ a | b | c ] Optional values or arguements are enclosed in square barackets and seperated
by vertical bars. Generally, one of the vales or arguements in the seperated list
can be chosen.
blue color screen Blue color screen font:is used it presents an example of a screen
console display including example entries of CLI command input with the
corresponding output.
NOTE: A NOTE indicates important information that helps you make better use of your
device
NOTICE: A NOTICE indicates either potential damage to hardware or loss of data and tells
you how to avoid the problem
CAUTION: A CAUTION indicates a potential for property damage, personal injury, or death.

-
vi
Command Descriptions:
The information pertaining to each command in this reference guide is presented using a number of
template fields. The fields are:
• Description - This is a short and consise statement describing the commands functionality.
• Syntax - The precise form to use when entering and issuing the command. The form conventions
are described in the table shown under the section “Conventions” on page v of this guide.
• Syntax Description - A table where each row describes the optional or required arguments, and
their use, that can be issued with the command.
• Default - If the command sets a configuration value or administrative state of the switch then any
default settings (i.e. without issuing the command) of the configuration is shown here.
• Command Mode - The mode in which the command can be issued. The modes are either User
EXEC, Privileged EXEC, Global Configuration or a specific configuration mode. These modes are
described in the section titled “Command Modes” on page vi below.
•Command Usage - If necessary, a detailed description of the command and its various utilization
scenarios is given here.
• Example(s) - Each command is accompanied by a practical example of the command being
issued in a suitable scenario.
Command Modes
There are several command modes available in the command-line interface (CLI). The set of commands
available to the user depends on both the mode the user is currently in and their privilege level. For each
case, the user can see all the commands that are available in a particular command mode by entering a
question mark (?) at the system prompt.
The command-line interface has four privilege levels:
•Basic User- Privilege Level 1. This user account level has the lowest priority of the user accounts
and is allowed to configure the terminal control settings. The purpose of this type of user account
level is for basic system checking. This user account can only show limited information that is not
related to security. The most important limitation of this account is that there is no way of changing
the access right level.
•Advanced User- Privilege Level 2. This user account level is very similar to a basic user except
that an advanced user can enter privileged EXEC mode.
•Power User- Privilege Level 12. This user account level is used to grant system configuration
rights for users who need to change or monitor system configuration, except for security related
information such as user accounts and SNMP account settings, etc.
•Administrator- Privilege Level 15. This administrator user account level can monitor all system
information and change any of the system configuration settings expressed in this configuration
guide.
The command-line interface has a number of command modes. There are three basic command modes:

-
vii
• User EXEC mode
• Privileged EXEC mode
•Global Configuration mode
All other sub-configuration modes can be accessed via global configuration mode.
When a user logs in to the Switch, the privilege level of the user determines the command mode the user
will enter after initially logging in. The user will either log into user EXEC mode or privileged EXEC mode.
Users with a basic user and advanced user level will log into the Switch in user EXEC mode. Users with
power user and administrator level accounts will log into the Switch in privileged EXEC mode. Therefore,
user EXEC mode can operate at either basic user level or advanced user level, and privileged EXEC
mode can operate at either power user level or administrator level. The user can only enter global
configuration mode from privileged EXEC mode. Therefore, global configuration mode can be accessed
by users who have power user or administrator level user accounts. As for sub-configuration modes, a
subset of those can only be accessed by users who have the highest secure administrator level
privileges.
In user EXEC mode at advanced user level, the user is allowed to enter privileged EXEC mode by
entering the enable password. In privileged EXEC mode, the user is allowed to exit to the user EXEC
mode at advanced user level by entering the disable command. The enable password and disable
commands are functions that can be used to switch between user EXEC mode and privileged EXEC
mode.
The following state diagram describes the main command modes and how to enter each one:
Login
User EXEC mode
Basic user
User EXEC mode
Advanced user
Privileged EXEC mode
Power user
Privileged EXEC mode
Administrator
Global configuration mode
Administrator
Interface configuration mode
Administrator VLAN configuration mode
Administrator
Mgmt-if configuration mode
Administrator
Disable
Administrator
Enable
Power User
Disable
Power User
Basic User Advanced UserPower User
config
Enable
Administrator
Administrator
mgmt-if
vlan
interface
config

-
viii
The following table briefly lists the available command modes. Only the basic command modes and some
of the sub-configuration modes are enumerated. The basic command modes and basic sub-configuration
modes are further described in the following chapters. Descriptions for the rest of the sub-configuration
modes are not provided in this section. For more information on the additional sub-configuration modes,
the user should refer to the chapters relating to these functions.
The available command modes and privilege levels are described below:
Note: Not all configuration modes are listed in the above figure. For example, in
global configuration mode, enter “router ospf” to enter OSPF router configuration
mode
Command Mode & Privilege Level Purpose
User EXEC mode at Basic User level For checking basic system settings, allowing users to
change the local terminal session settings, and verifying
basic network connectivity. Checking security related
settings is not allowed at this command mode and
privilege level.
User EXEC mode at Advanced User level This level has almost the same access rights as user
EXEC mode at basic user level, except that a user in this
mode and at this level can enter privileged EXEC mode
by entering the enable command.
Privileged EXEC mode at Power User level For changing both local and global terminal settings,
monitoring, and performing certain system
administration tasks. The system administration tasks
that can be performed at this level includes the clearing
of system configuration settings, except for any security
related information, such as user accounts, SNMP
account settings etc.
Privileged EXEC mode at Administrator
level
This level is identical to privileged EXEC mode at power
user level, except that a user at the administrator level
can monitor and clear security related settings.
Global Configuration Mode at Power User
level
For applying global settings, except for security related
settings, on the entire Switch. In addition to applying
global settings on the entire Switch, the user can access
other sub-configuration modes from global configuration
mode.
Global Configuration Mode at Administrator
level
For applying global settings on the entire Switch. In
addition to applying global settings on the entire Switch,
the user can access other sub-configuration modes from
global configuration mode.
Interface Configuration Mode at Power
User level
For applying interface related settings.

-
ix
User EXEC Mode at Basic User Level
This command mode is mainly designed for checking basic system settings, allowing users to change the
local terminal session settings and carry out basic network connectivity verification. One limitation of this
command mode is that it cannot be used to display information related to security. The most significant
limitation of this command mode is that there is no way of changing the access right level of the logged in
user.
This command mode can be entered by logging in as a basic user.
User EXEC Mode at Advanced User Level
User EXEC mode at advanced user level has the same purpose as user EXEC mode at basic user level,
except that user EXEC mode at advanced user level is allowed to use the enable command to enter
privileged EXEC mode.
This command mode can be entered by logging in as an advanced user or by using the disable
command in privileged EXEC mode.
In the following example, the user is currently logged in as an advanced user in privileged EXEC mode
and uses the disable command to return to user EXEC mode at advanced user level:
Privileged EXEC Mode at Power User Level
Users logged into the Switch in privileged EXEC mode at this level can change both local and global
terminal settings, monitor, and perform system administration tasks like clearing configuration settings
(except for security related information such as user accounts, SNMP account settings etc.)
There are two methods that a user can use to enter privileged EXEC mode at power user level. The first
method is to login to the Switch with a user account that has a privilege level of 12. The other method is to
use the enable privilege LEVEL command in user EXEC mode.
In the following example, the user enters privileged EXEC mode at power user level by logging in with a
user account called “power-user” that has a privilege level of 12:
VLAN Interface Configuration Mode For applying VLAN interface related settings.
VLAN Configuration Mode For applying settings to a VLAN.
IP Access-List Configuration Mode For specifying filtering criteria for an IP access list.
DGS-6604:15#disable
DGS-6604:2>
Command Mode & Privilege Level Purpose

-
x
In the following example, the user enters the enable privilege LEVEL command in user EXEC mode to
enter privileged EXEC mode at Power User level:
Privileged EXEC Mode at Administrator Level
This command mode has a privilege level of 15. Users logged in with this command mode can monitor all
system information and change any system configuration settings mentioned in this Configuration Guide.
There are two methods that a user can use to enter privileged EXEC mode at administrator level. The first
method is to login to the Switch with a user account that has a privilege level of 15. The second method
requires a user to login to the Switch in as a user with an advanced user or power user level and and use
the enable privilege LEVEL command.
In this command mode, the user can return to user EXEC mode at an advanced user level by entering the
disable command.
In the following example, the user is currently logged in as an administrator in privileged EXEC mode and
uses the disable command to return to user EXEC mode at an advanced user level:
User Access Verification
Username: power-user
Password:
DGS-6604 Chassis-based High-Speed Switch
Command Line Interface
Firmware: 1.00.029
Copyright (c) 2010 D-Link Corporation. All rights reserved.
DGS-6604:12#
DGS-6604:2>enable privilege 12
DGS-6604:12#
DGS-6604:15#disable
DGS-6604:2>

-
xi
In the following example, the user enters the enable privilege LEVEL command in privileged EXEC
mode at power user level to enter privileged EXEC mode at an administrator level:
Global Configuration Mode
The primary purpose of global configuration mode is to apply global settings on the entire Switch. Global
configuration mode can be accessed at both power user and administrator level. However, security
related settings are not accessible at power user level. In addition to applying global settings on the entire
Switch, the user can also access other sub-configuration modes.
In order to access global configuration mode, the user must be logged in as an administrator or power
user and use the configure terminal command in privileged EXEC mode.
In the following example, the user is logged in as an Administrator in privileged EXEC mode and uses the
configure terminal command to access global configuration mode:
The exit command is used to exit global configuration mode and return to privileged EXEC mode.
The procedures to enter the different sub-configuration modes can be found in the related chapters in this
Configuration Guide. The command modes are used to configure the individual functions.
Interface Configuration Mode
Interface configuration mode is used to configure the parameters for an interface or a range of interfaces.
An interface can be a physical port, VLAN, or other virtual interface. Thus, interface configuration mode is
distinguished further according to the type of interface. The command prompt for each type of interface is
slightly different.
VLAN Interface Configuration Mode
VLAN interface configuration mode is one of the available interface modes and is used to configure the
parameters of a VLAN interface.
To access VLAN interface configuration mode, use the following command in global configuration mode:
DGS-6604:12#enable privilege 15
DGS-6604:15#
DGS-6604:15#configure terminal
DGS-6604:15(config)#
Command Explanation
DGS-6604:15(config)#interface
vlanVLAN-ID
Enters VLAN interface configuration mode.

DGS-6604 m
CLI Reference Guide 1
Command Listing by Feature
802.1x dot1x auth-mode — 160
dot1x auth-protocol — 161
dot1x control-direction — 162
dot1x default — 163
dot1x forward-pdu — 164
dot1x guest-vlan — 165
dot1x initialize — 167
dot1x max-req — 168
dot1x pae authenticator — 169
dot1x port-control — 170
dot1x re-authenticate — 171
dot1x re-authentication — 172
dot1x system-auth-control — 173
dot1x timeout — 174
dot1x user — 175
show dot1x — 577
show dot1x user — 581
show dot1x vlan — 580
AAA aaa authentication — 27
aaa authorization — 29
aaa group server — 30
server — 526
show aaa — 557
show aaa group server — 560

DGS-6604 m
CLI Reference Guide 2
Access
Control Lists
ip access-group — 214
ip access-list — 215
ipv6 access-group — 317
ipv6 access-list — 319
mac access-group — 399
mac access-list — 400
periodic — 457
permit | deny (ip access-list) — 458
permit | deny (ipv6 access list) — 461
permit | deny (mac access-list) — 463
resequence access-list — 512
show access-group — 561
show access-list — 562
show time-range — 751
time-range — 886
Access
Management
banner login — 57
command prompt — 121
configure terminal — 123
disable — 150
enable — 177
enable password — 178
end — 179
exit — 180
help — 206
ip http server — 254
ip http service-port — 255
ip telnet server — 313

DGS-6604 m
CLI Reference Guide 3
ip telnet service-port — 314
ip trusted-host — 315
login — 392
logout — 393
password encryption — 456
show history — 590
show ip trusted-host — 680
show username — 754
show user-session — 755
telnet — 873
terminal length — 878
terminal timeout — 879
terminal width — 880
username — 896
Basic IPv4 arp — 53
arp timeout — 54
clear arp-cache — 89
ip address — 216
show arp — 563
show ip interface — 632
Basic IPv6 clear ipv6 neighbors — 105
default ipv6 nd prefix — 141
ipv6 address — 320
ipv6 enable — 330
ipv6 hop-limit — 331
ipv6 nd managed-config-flag — 332

DGS-6604 m
CLI Reference Guide 4
ipv6 nd other-config-flag — 333
ipv6 nd prefix — 334
ipv6 nd ra-interval — 335
ipv6 nd ra-lifetime — 336
ipv6 nd reachable-time — 337
ipv6 nd retrans-timer — 338
ipv6 nd suppress-ra — 339
ipv6 neighbor — 340
show ipv6 interface — 687
show ipv6 interface brief — 688
show ipv6 neighbors — 689
Basic Switch show environment — 584
show system — 747
show unit — 753
show version — 756
BGP address-family ipv4 — 37
aggregate-address — 38
bgp always-compare-med — 67
bgp asnotation dot — 68
bgp bestpath as-path ignore — 70
bgp bestpath compare-routerid — 72
bgp default ipv4-unicast — 73
bgp default local-preference — 74
bgp deterministic-med — 75
bgp enforce-first-as — 76
bgp log-neighbor-changes — 77

DGS-6604 m
CLI Reference Guide 5
bgp router-id — 78
clear ip bgp — 94
clear ip bgp peer-group — 96
default-information originate (BGP) — 137
ip dhcp screening ports — 220
ip community-list — 235
match as-path — 409
match community — 410
neighbor advertisement-interval — 429
neighbor description — 430
neighbor filter-list — 431
neighbor peer-group (create group) — 432
neighbor peer-group (add group member) — 433
neighbor remote-as — 434
neighbor route-map — 435
neighbor send-community — 436
neighbor shutdown — 437
neighbor timers — 438
neighbor update-source — 439
neighbor weight — 440
network (BGP) — 445
redistribute — 502
router bgp — 517
set as-path — 534
set community — 535
set origin — 549
set weight — 550

DGS-6604 m
CLI Reference Guide 6
show ip as-path access-list — 594
show ip bgp — 595
show ip bgp community-list — 597
show ip bgp filter-list — 599
show ip bgp neighbors — 600
show ip community-list — 603
synchronization — 871
timers bgp — 885
Broadcast
Storm
show storm-control — 745
storm-control (Interface) — 859
storm-control action (Interface) — 860
storm-control level (Interface) — 862
storm-control timer (Global) — 864
Chassis reboot — 501
Dynamic ARP
Inspection
ip arp inspection trust — 227
ip arp inspection validate — 228
ip arp inspection vlan — 230
show ip arp inspection — 786
DHCP Client
(IPv6)
clear ipv6 dhcp client — 104
ipv6 address — 320
ipv6 dhcp client information refresh minimum — 325
ipv6 dhcp client pd — 326
show ipv6 dhcp — 681
show ipv6 general-prefix — 685
DHCP Relay
(IPv4)
ip dhcp relay — 243

DGS-6604 m
CLI Reference Guide 7
ip dhcp relay address — 244
ip dhcp relay hops — 245
ip dhcp relay information check — 246
ip dhcp relay information option — 247
ip dhcp relay information policy — 249
ip dhcp relay information trust-all — 250
ip dhcp relay information trusted — 251
show ip dhcp relay — 610
show ip dhcp relay information trusted-sources — 611
DHCP Relay
(IPv6)
ipv6 dhcp relay destination — 328
show ipv6 dhcp relay interface — 684
DHCP Server
(IPv4)
accept dhcp client-identifier — 31
accept dhcp relay-agent — 32
based-on client-id — 59
based-on c-vid — 60
based-on interface-ip-address — 61
based-on mac-address — 62
based-on relay-ip-address — 63
based-on s-vid — 64
based-on user-class — 65
bootfile — 81
clear ip dhcp binding — 98
clear ip dhcp conflict — 100
clear ip dhcp server statistics — 102
default-router — 146
dns-server — 153

DGS-6604 m
CLI Reference Guide 8
domain-name — 154
ip address-list — 219
ip dhcp ping packets — 240
ip dhcp ping timeout — 241
ip dhcp pool — 242
lease — 367
netbios node-type — 441
netbios scope-id — 442
netbios wins-server — 443
next-server — 447
service dhcp — 528
show ip dhcp binding — 604
show ip dhcp conflict — 606
show ip dhcp pool — 607
show ip dhcp server statistics — 613
subnet-mask — 867
DHCP Server
Screening/
Client Filtering
ip dhcp screening ports — 220
ip dhcp screening — 221
ip dhcp screening trap-log — 222
ip dhcp screening suppress-duration — 226
show ip dhcp screening — 792
DHCP
Snooping
ip dhcp snooping — 223
ip dhcp snooping information option — 224
ip dhcp snooping trust — 225
ip dhcp snooping verify MAC-address — 237
ip dhcp snooping vlan — 238

DGS-6604 m
CLI Reference Guide 9
show ip dhcp snooping — 615
show ip dhcp snooping binding — 773
show ip dhcp snooping database — 776
DoS
Prevention
clear dos prevention counter — 91
dos_prevention action — 155
dos_prevention type — 156
show dos_prevention — 575
DVMRP ip dvmrp — 252
ip dvmrp metric — 253
show ip dvmrp interface — 616
show ip dvmrp neighbor — 617
show ip dvmrp prune — 620
show ip dvmrp route — 621
ERPS erps — 181
erps domain — 182
erpi enable — 183
erpi type — 184
erpi raps-vlan — 186
erpi ring-mel — 187
erpi ring-port — 188
erpi rpl — 190
erpi protected-vlan — 191
erpi timer — 193
erpi tc-propagation — 195
show erps domain — 777
show erps erpi — 779

DGS-6604 m
CLI Reference Guide 10
Errdisable errdisable recovery — 196
show errdisable recovery — 582
File System delete — 147
dir — 149
GVRP clear gvrp statistics interface — 93
gvrp (Global) — 199
gvrp (Interface) — 200
gvrp advertise (Interface) — 201
gvrp advertise (VLAN) — 202
gvrp dynamic-vlan-creation — 203
gvrp forbidden — 204
gvrp timer — 205
show gvrp configuration — 587
show gvrp statistics — 589
IGMP ip igmp access-group — 256
ip igmp last-member-query-interval — 258
ip igmp query-interval — 259
ip igmp query-max-response-time — 260
ip igmp robustness-variable — 261
ip igmp version — 270
show ip igmp group — 622
show ip igmp interface — 625
IGMP
Snooping
ip igmp snooping — 262
ip igmp snooping (multicast router) — 264
ip igmp snooping immediate-leave — 266
ip igmp snooping querier — 267