D-Link DGS-6600-48TS User manual

0.9.3

-
ii
DGS-6604 CLI Reference Guide
Software Release 2.10.011
Date: March 1, 2012
Copyright Statement
D-Link Corporation © 2011-2012
All rights reserved.
Without our written permission this document may not be excerpted, reproduced, transmitted, or
otherwise in all or part by any party by any means.

-
iii
Preface
Version Description
This manual’s command descriptions are based on the software release 2.10.011. The
commands listed here are the subset of commands that are supported by the DGS-6600
series switches.
Note: Other Ethernet L2/L3 Chassis-Based Switch series Hardware using similar software
may support a different subset of commands although generally the majority of the supported
commands and options will be similar.
Audience
This reference manual is intended for network administrators and other IT networking
professionals responsible for managing the DGS-6604 by using the D-LINK Command Line
Reference (CLI). The CLI is the primary management interface to the D-LINK DGS-6604
which will be generally referred to as the “switch” within this manual. This manual is written in
a way that assumes that you already have the experience and knowledge of Ethernet and
modern networking principles for Local Area Networks.
Document Organization
Other Documentation
The documents below are a further source of information in regards to configuring and troubleshooting the
switch. All the documents are available for download from D-Links web site www.d-link.com.
• DGS-6600 Series Quick Installation Guide
• DGS-6600 Series Hardware Installation Guide
Preface Describes how to use the CLI reference manual.
Feature Table of
Contents
A command list of the DGS-6604 commands grouped by their features and
linked to the command descriptions.
Command Listings A complete list of available commands arranged in alphabetical order.
Acronyms A glossary of acronyms used throughout the reference manual.

-
iv
Conventions
Notes, Notices, and Cautions
Below are examples of the 3 types of indicators used in this manual. When administering your switch
using the information in this document, you should pay special attention to these indicators. Each
example below provides an explanatory remark regarding each type of indicator.
Convention Description
boldface font Commands, command options and keywords are printed in boldface. Key words
in the command line, are to be entered exactly as they are displayed.
UPPERCASE ITALICS
font
Parameters or values that must be specified are printed in UPPERCASE
ITALICS. Parameters in the command line, are to be replaced with the actual
values that are desired to be used with the command.
[ ] Square brackets enclose an optional value or set of optional arguments.
{a|b|c} Braces enclose alternative keywords separated by vertical bars. Generally, one
of the keywords in the separated list can be chosen.
[ a | b | c ] Optional values or arguments are enclosed in square brackets and separated by
vertical bars. Generally, one of the vales or arguments in the separated list can
be chosen.
blue color screen Blue color screen fonts: are used it presents an example of a screen
console display including example entries of CLI command input with the
corresponding output.
NOTE: A NOTE indicates important information that helps you make better use of your
device
NOTICE: A NOTICE indicates either potential damage to hardware or loss of data and tells
you how to avoid the problem
CAUTION: A CAUTION indicates a potential for property damage, personal injury, or death.

-
v
Command Descriptions:
The information pertaining to each command in this reference guide is presented using a number of
template fields. The fields are:
• Description - This is a short and concise statement describing the commands functionality.
• Syntax - The precise form to use when entering and issuing the command. The form conventions
are described in the table shown under the section “Conventions” on page iv of this guide.
• Syntax Description - A table where each row describes the optional or required arguments, and
their use, that can be issued with the command.
• Default - If the command sets a configuration value or administrative state of the switch then any
default settings (i.e. without issuing the command) of the configuration is shown here.
• Command Mode - The mode in which the command can be issued. The modes are either User
EXEC, Privileged EXEC, Global Configuration or a specific configuration mode. These modes are
described in the section titled “Command Modes” on page v below.
•Command Usage - If necessary, a detailed description of the command and its various utilization
scenarios is given here.
• Example(s) - Each command is accompanied by a practical example of the command being
issued in a suitable scenario.
Command Modes
There are several command modes available in the command-line interface (CLI). The set of commands
available to the user depends on both the mode the user is currently in and their privilege level. For each
case, the user can see all the commands that are available in a particular command mode by entering a
question mark (?) at the system prompt.
The command-line interface has four privilege levels:
•Basic User- Privilege Level 1. This user account level has the lowest priority of the user accounts
and is allowed to configure the terminal control settings. The purpose of this type of user account
level is for basic system checking. This user account can only show limited information that is not
related to security. The most important limitation of this account is that there is no way of changing
the access right level.
•Advanced User- Privilege Level 2. This user account level is very similar to a basic user except
that an advanced user can enter privileged EXEC mode.
•Power User- Privilege Level 12. This user account level is used to grant system configuration
rights for users who need to change or monitor system configuration, except for security related
information such as user accounts and SNMP account settings, etc.
•Administrator- Privilege Level 15. This administrator user account level can monitor all system
information and change any of the system configuration settings expressed in this configuration
guide.
The command-line interface has a number of command modes. There are three basic command modes:

-
vi
• User EXEC mode
• Privileged EXEC mode
•Global Configuration mode
All other sub-configuration modes can be accessed via global configuration mode.
When a user logs in to the Switch, the privilege level of the user determines the command mode the user
will enter after initially logging in. The user will either log into user EXEC mode or privileged EXEC mode.
Users with a basic user and advanced user level will log into the Switch in user EXEC mode. Users with
power user and administrator level accounts will log into the Switch in privileged EXEC mode. Therefore,
user EXEC mode can operate at either basic user level or advanced user level, and privileged EXEC
mode can operate at either power user level or administrator level. The user can only enter global
configuration mode from privileged EXEC mode. Therefore, global configuration mode can be accessed
by users who have power user or administrator level user accounts. As for sub-configuration modes, a
subset of those can only be accessed by users who have the highest secure administrator level
privileges.
In user EXEC mode at advanced user level, the user is allowed to enter privileged EXEC mode by
entering the enable password. In privileged EXEC mode, the user is allowed to exit to the user EXEC
mode at advanced user level by entering the disable command. The enable password and disable
commands are functions that can be used to switch between user EXEC mode and privileged EXEC
mode.
The following state diagram describes the main command modes and how to enter each one:
Login
User EXEC mode
Basic user
User EXEC mode
Advanced user
Privileged EXEC mode
Power user
Privileged EXEC mode
Administrator
Global configuration mode
Administrator
Interface configuration mode
Administrator VLAN configuration mode
Administrator
Mgmt-if configuration mode
Administrator
Disable
Administrator
Enable
Power User
Disable
Power User
Basic User Advanced UserPower User
config
Enable
Administrator
Administrator
mgmt-if
vlan
interface
config

-
vii
The following table briefly lists the available command modes. Only the basic command modes and some
of the sub-configuration modes are enumerated. The basic command modes and basic sub-configuration
modes are further described in the following chapters. Descriptions for the rest of the sub-configuration
modes are not provided in this section. For more information on the additional sub-configuration modes,
the user should refer to the chapters relating to these functions.
The available command modes and privilege levels are described below:
Note: Not all configuration modes are listed in the above figure. For example, in
global configuration mode, enter “router ospf” to enter OSPF router configuration
mode
Command Mode & Privilege Level Purpose
User EXEC mode at Basic User level For checking basic system settings, allowing users to
change the local terminal session settings, and verifying
basic network connectivity. Checking security related
settings is not allowed at this command mode and
privilege level.
User EXEC mode at Advanced User level This level has almost the same access rights as user
EXEC mode at basic user level, except that a user in this
mode and at this level can enter privileged EXEC mode
by entering the enable command.
Privileged EXEC mode at Power User level For changing both local and global terminal settings,
monitoring, and performing certain system
administration tasks. The system administration tasks
that can be performed at this level includes the clearing
of system configuration settings, except for any security
related information, such as user accounts, SNMP
account settings etc.
Privileged EXEC mode at Administrator
level
This level is identical to privileged EXEC mode at power
user level, except that a user at the administrator level
can monitor and clear security related settings.
Global Configuration Mode at Power User
level
For applying global settings, except for security related
settings, on the entire Switch. In addition to applying
global settings on the entire Switch, the user can access
other sub-configuration modes from global configuration
mode.
Global Configuration Mode at Administrator
level
For applying global settings on the entire Switch. In
addition to applying global settings on the entire Switch,
the user can access other sub-configuration modes from
global configuration mode.
Interface Configuration Mode at Power
User level
For applying interface related settings.

-
viii
User EXEC Mode at Basic User Level
This command mode is mainly designed for checking basic system settings, allowing users to change the
local terminal session settings and carry out basic network connectivity verification. One limitation of this
command mode is that it cannot be used to display information related to security. The most significant
limitation of this command mode is that there is no way of changing the access right level of the logged in
user.
This command mode can be entered by logging in as a basic user.
User EXEC Mode at Advanced User Level
User EXEC mode at advanced user level has the same purpose as user EXEC mode at basic user level,
except that user EXEC mode at advanced user level is allowed to use the enable command to enter
privileged EXEC mode.
This command mode can be entered by logging in as an advanced user or by using the disable
command in privileged EXEC mode.
In the following example, the user is currently logged in as an advanced user in privileged EXEC mode
and uses the disable command to return to user EXEC mode at advanced user level:
Privileged EXEC Mode at Power User Level
Users logged into the Switch in privileged EXEC mode at this level can change both local and global
terminal settings, monitor, and perform system administration tasks like clearing configuration settings
(except for security related information such as user accounts, SNMP account settings etc.)
There are two methods that a user can use to enter privileged EXEC mode at power user level. The first
method is to login to the Switch with a user account that has a privilege level of 12. The other method is to
use the enable privilege LEVEL command in user EXEC mode.
In the following example, the user enters privileged EXEC mode at power user level by logging in with a
user account called “power-user” that has a privilege level of 12:
VLAN Interface Configuration Mode For applying VLAN interface related settings.
VLAN Configuration Mode For applying settings to a VLAN.
IP Access-List Configuration Mode For specifying filtering criteria for an IP access list.
DGS-6604:15#disable
DGS-6604:2>
Command Mode & Privilege Level Purpose

-
ix
In the following example, the user enters the enable privilege LEVEL command in user EXEC mode to
enter privileged EXEC mode at Power User level:
Privileged EXEC Mode at Administrator Level
This command mode has a privilege level of 15. Users logged in with this command mode can monitor all
system information and change any system configuration settings mentioned in this Configuration Guide.
There are two methods that a user can use to enter privileged EXEC mode at administrator level. The first
method is to login to the Switch with a user account that has a privilege level of 15. The second method
requires a user to login to the Switch in as a user with an advanced user or power user level and and use
the enable privilege LEVEL command.
In this command mode, the user can return to user EXEC mode at an advanced user level by entering the
disable command.
In the following example, the user is currently logged in as an administrator in privileged EXEC mode and
uses the disable command to return to user EXEC mode at an advanced user level:
User Access Verification
Username: power-user
Password:
DGS-6604 Chassis-based High-Speed Switch
Command Line Interface
Firmware: 2.00.001
Copyright (c) 2010 D-Link Corporation. All rights reserved.
DGS-6604:12#
DGS-6604:2>enable privilege 12
DGS-6604:12#
DGS-6604:15#disable
DGS-6604:2>

-
x
In the following example, the user enters the enable privilege LEVEL command in privileged EXEC
mode at power user level to enter privileged EXEC mode at an administrator level:
Global Configuration Mode
The primary purpose of global configuration mode is to apply global settings on the entire Switch. Global
configuration mode can be accessed at both power user and administrator level. However, security
related settings are not accessible at power user level. In addition to applying global settings on the entire
Switch, the user can also access other sub-configuration modes.
In order to access global configuration mode, the user must be logged in as an administrator or power
user and use the configure terminal command in privileged EXEC mode.
In the following example, the user is logged in as an Administrator in privileged EXEC mode and uses the
configure terminal command to access global configuration mode:
The exit command is used to exit global configuration mode and return to privileged EXEC mode.
The procedures to enter the different sub-configuration modes can be found in the related chapters in this
Configuration Guide. The command modes are used to configure the individual functions.
Interface Configuration Mode
Interface configuration mode is used to configure the parameters for an interface or a range of interfaces.
An interface can be a physical port, VLAN, or other virtual interface. Thus, interface configuration mode is
distinguished further according to the type of interface. The command prompt for each type of interface is
slightly different.
VLAN Interface Configuration Mode
VLAN interface configuration mode is one of the available interface modes and is used to configure the
parameters of a VLAN interface.
To access VLAN interface configuration mode, use the following command in global configuration mode:
DGS-6604:12#enable privilege 15
DGS-6604:15#
DGS-6604:15#configure terminal
DGS-6604:15(config)#
Command Explanation
DGS-6604:15(config)#interface
vlanVLAN-ID
Enters VLAN interface configuration mode.

DGS-6604 m
CLI Reference Guide 1
Command Listing by Feature
802.1x dot1x auth-mode — 169
dot1x auth-protocol — 170
dot1x control-direction — 171
dot1x default — 172
dot1x forward-pdu — 173
dot1x guest-vlan — 174
dot1x initialize — 176
dot1x max-req — 177
dot1x pae authenticator — 178
dot1x port-control — 179
dot1x re-authenticate — 180
dot1x re-authentication — 181
dot1x system-auth-control — 182
dot1x timeout — 183
dot1x user — 184
show dot1x — 596
show dot1x user — 600
show dot1x vlan — 599
AAA aaa authentication — 27
aaa authorization — 29
aaa group server — 30
server — 541
show aaa — 572
show aaa group server — 575

DGS-6604 m
CLI Reference Guide 2
Access
Control Lists
ip access-group — 224
ip access-list — 225
ipv6 access-group — 327
ipv6 access-list — 329
mac access-group — 413
mac access-list — 414
periodic — 472
permit | deny (ip access-list) — 473
permit | deny (ipv6 access list) — 476
permit | deny (mac access-list) — 478
resequence access-list — 527
show access-group — 576
show access-list — 577
show time-range — 770
time-range — 905
Access
Management
banner login — 57
command prompt — 122
configure terminal — 124
disable — 159
enable — 186
enable password — 187
end — 188
exit — 189
help — 216
ip http server — 264
ip http service-port — 265
ip telnet server — 323

DGS-6604 m
CLI Reference Guide 3
ip telnet service-port — 324
ip trusted-host — 325
login — 406
logout — 407
password encryption — 471
show history — 609
show ip trusted-host — 699
show username — 773
show user-session — 774
telnet — 892
terminal length — 897
terminal timeout — 898
terminal width — 899
username — 916
Basic IPv4 arp — 53
arp timeout — 54
clear arp-cache — 90
ip address — 226
show arp — 578
show ip interface — 651
Basic IPv6 clear ipv6 neighbors — 106
default ipv6 nd prefix — 150
ipv6 address — 330
ipv6 enable — 340
ipv6 hop-limit — 341
ipv6 nd managed-config-flag — 342

DGS-6604 m
CLI Reference Guide 4
ipv6 nd other-config-flag — 343
ipv6 nd prefix — 344
ipv6 nd ra-interval — 345
ipv6 nd ra-lifetime — 346
ipv6 nd reachable-time — 347
ipv6 nd retrans-timer — 348
ipv6 nd suppress-ra — 349
ipv6 neighbor — 350
show ipv6 interface — 706
show ipv6 interface brief — 707
show ipv6 neighbors — 708
Basic Switch show environment — 603
show system — 766
show unit — 772
show version — 775
BGP address-family ipv4 — 37
aggregate-address — 38
bgp always-compare-med — 67
bgp asnotation dot — 68
bgp bestpath as-path ignore — 70
bgp bestpath compare-routerid — 72
bgp default ipv4-unicast — 73
bgp default local-preference — 74
bgp deterministic-med — 75
bgp enforce-first-as — 76
bgp log-neighbor-changes — 77

DGS-6604 m
CLI Reference Guide 5
bgp router-id — 78
clear ip bgp — 95
clear ip bgp peer-group — 97
default-information originate (BGP) — 146
ip dhcp screening ports — 230
ip community-list — 245
match as-path — 423
match community — 424
neighbor advertisement-interval — 444
neighbor description — 445
neighbor filter-list — 446
neighbor peer-group (create group) — 447
neighbor peer-group (add group member) — 448
neighbor remote-as — 449
neighbor route-map — 450
neighbor send-community — 451
neighbor shutdown — 452
neighbor timers — 453
neighbor update-source — 454
neighbor weight — 455
network (BGP) — 460
redistribute — 517
router bgp — 532
set as-path — 549
set community — 550
set origin — 564
set weight — 565

DGS-6604 m
CLI Reference Guide 6
show ip as-path access-list — 613
show ip bgp — 614
show ip bgp community-list — 616
show ip bgp filter-list — 618
show ip bgp neighbors — 619
show ip community-list — 622
synchronization — 890
timers bgp — 904
Broadcast
Storm
show storm-control — 764
storm-control (Interface) — 878
storm-control action (Interface) — 879
storm-control level (Interface) — 881
storm-control timer (Global) — 883
Chassis reboot — 516
Digital
Diagnostic
Monitoring
(DDM)
ddm log — 137
ddm state — 138
ddm shutdown — 139
ddm temperature — 140
ddm voltage — 141
ddm bias-current — 142
ddm tx-power — 143
ddm rx-power — 144
show ddm — 590
show ddm status — 591
show ddm configuration — 592

DGS-6604 m
CLI Reference Guide 7
Dynamic ARP
Inspection
ip arp inspection trust — 237
ip arp inspection validate — 238
ip arp inspection vlan — 240
show ip arp inspection — 805
DHCP Client
(IPv6)
clear ipv6 dhcp client — 105
ipv6 address — 330
ipv6 dhcp client information refresh minimum — 335
ipv6 dhcp client pd — 336
show ipv6 dhcp — 700
show ipv6 general-prefix — 704
DHCP Relay
(IPv4)
ip dhcp relay — 253
ip dhcp relay address — 254
ip dhcp relay hops — 255
ip dhcp relay information check — 256
ip dhcp relay information option — 257
ip dhcp relay information policy — 259
ip dhcp relay information trust-all — 260
ip dhcp relay information trusted — 261
show ip dhcp relay — 629
show ip dhcp relay information trusted-sources — 630
DHCP Relay
(IPv6)
ipv6 dhcp relay destination — 338
show ipv6 dhcp relay interface — 703
DHCP Server
(IPv4)
accept dhcp client-identifier — 31
accept dhcp relay-agent — 32
based-on client-id — 59

DGS-6604 m
CLI Reference Guide 8
based-on c-vid — 60
based-on interface-ip-address — 61
based-on mac-address — 62
based-on relay-ip-address — 63
based-on s-vid — 64
based-on user-class — 65
bootfile — 81
clear ip dhcp binding — 99
clear ip dhcp conflict — 101
clear ip dhcp server statistics — 103
default-router — 155
dns-server — 162
domain-name — 163
ip address-list — 229
ip dhcp ping packets — 250
ip dhcp ping timeout — 251
ip dhcp pool — 252
lease — 381
netbios node-type — 456
netbios scope-id — 457
netbios wins-server — 458
next-server — 462
service dhcp — 543
show ip dhcp binding — 623
show ip dhcp conflict — 625
show ip dhcp pool — 626
show ip dhcp server statistics — 632

DGS-6604 m
CLI Reference Guide 9
subnet-mask — 886
DHCP Server
Screening/
Client Filtering
ip dhcp screening ports — 230
ip dhcp screening — 231
ip dhcp screening trap-log — 232
ip dhcp screening suppress-duration — 236
show ip dhcp screening — 811
DHCP
Snooping
ip dhcp snooping — 233
ip dhcp snooping information option — 234
ip dhcp snooping trust — 235
ip dhcp snooping verify MAC-address — 247
ip dhcp snooping vlan — 248
show ip dhcp snooping — 634
show ip dhcp snooping binding — 792
show ip dhcp snooping database — 795
DoS
Prevention
clear dos prevention counter — 92
dos_prevention action — 164
dos_prevention type — 165
show dos_prevention — 594
DVMRP ip dvmrp — 262
ip dvmrp metric — 263
show ip dvmrp interface — 635
show ip dvmrp neighbor — 636
show ip dvmrp prune — 639
show ip dvmrp route — 640
ERPS erps — 190
erps domain — 191

DGS-6604 m
CLI Reference Guide 10
erpi enable — 192
erpi type — 193
erpi raps-vlan — 195
erpi ring-mel — 196
erpi ring-port — 197
erpi rpl — 199
erpi protected-vlan — 200
erpi timer — 202
erpi tc-propagation — 204
show erps domain — 796
show erps erpi — 798
Errdisable errdisable recovery — 205
show errdisable recovery — 601
File System delete — 156
dir — 158
GVRP clear gvrp statistics interface — 94
gvrp (Global) — 209
gvrp (Interface) — 210
gvrp advertise (Interface) — 211
gvrp advertise (VLAN) — 212
gvrp dynamic-vlan-creation — 213
gvrp forbidden — 214
gvrp timer — 215
show gvrp configuration — 606
show gvrp statistics — 608
IGMP ip igmp access-group — 266