D-Link DXS-3600 Series User manual

DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide
1

DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide
2
Table of Contents
1. Introduction......................................................................................................................................................................6
2. Basic CLI Commands ...................................................................................................................................................15
3. 802.1X Commands........................................................................................................................................................29
4. Access Control List (ACL) Commands..........................................................................................................................42
5. Access Management Commands.................................................................................................................................72
6. ARP Spoofing Prevention Commands..........................................................................................................................91
7. Authentication, Authorization, and Accounting (AAA) Commands...............................................................................93
8. Basic IPv4 Commands................................................................................................................................................119
9. Basic IPv6 Commands................................................................................................................................................128
10. Border Gateway Protocol (BGP) Commands...........................................................................................................145
11. BPDU Protection Commands...................................................................................................................................253
12. Cable Diagnostics Commands.................................................................................................................................257
13. Command Logging Commands ...............................................................................................................................260
14. Connectivity Fault Management (CFM) Commands................................................................................................261
15. CPU Access Control List (ACL) Commands............................................................................................................294
16. CPU Port Statistics Commands ...............................................................................................................................298
17. Debug Commands ...................................................................................................................................................301
18. DHCP Auto-Configuration Commands.....................................................................................................................311
19. DHCP Client Commands..........................................................................................................................................313
20. DHCP Relay Commands..........................................................................................................................................317
21. DHCP Server Commands........................................................................................................................................332
22. DHCP Snooping Commands ...................................................................................................................................360
23. DHCPv6 Client Commands......................................................................................................................................379
24. DHCPv6 Guard Commands.....................................................................................................................................382
25. DHCPv6 Relay Commands......................................................................................................................................386
26. DHCPv6 Server Commands ....................................................................................................................................392
27. Digital Diagnostics Monitoring (DDM) Commands...................................................................................................407
28. Distance Vector Multicast Routing Protocol (DVMRP) Commands.........................................................................416
29. D-Link License Management System (DLMS) Commands .....................................................................................422
30. D-Link Unidirectional Link Detection (DULD) Commands .......................................................................................425
31. Domain Name System (DNS) Commands...............................................................................................................428
32. DoS Prevention Commands.....................................................................................................................................435
33. Dynamic ARP Inspection Commands......................................................................................................................438
34. Enhanced Transmission Selection (ETS) Commands.............................................................................................452
35. Error Recovery Commands......................................................................................................................................455
36. Ethernet OAM Commands.......................................................................................................................................458
37. Ethernet Ring Protection Switching (ERPS) Commands.........................................................................................476
38. Expansion Module Commands ................................................................................................................................492

DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide
3
39. File System Commands...........................................................................................................................................495
40. Filter Database (FDB) Commands...........................................................................................................................502
41. GARP VLAN Registration Protocol (GVRP) Commands.........................................................................................515
42. Gratuitous ARP Commands.....................................................................................................................................524
43. IGMP Proxy Commands...........................................................................................................................................527
44. IGMP Snooping Commands ....................................................................................................................................532
45. Interface Commands................................................................................................................................................553
46. Internet Group Management Protocol (IGMP) Commands......................................................................................566
47. IP Multicast (IPMC) Commands...............................................................................................................................579
48. IP Source Guard Commands...................................................................................................................................589
49. IP Tunnel Commands...............................................................................................................................................595
50. IP Utility Commands.................................................................................................................................................601
51. IP-MAC-Port Binding (IMPB) Commands................................................................................................................607
52. IPMCv6 Commands.................................................................................................................................................610
53. IPv6 Snooping Commands.......................................................................................................................................618
54. IPv6 Source Guard Commands ...............................................................................................................................623
55. Jumbo Frame Commands........................................................................................................................................629
56. Layer 2 Protocol Tunnel (L2PT) Commands............................................................................................................630
57. Link Aggregation Control Protocol (LACP) Commands...........................................................................................637
58. Link Layer Discovery Protocol (LLDP) Commands..................................................................................................644
59. Loopback Detection (LBD) Commands....................................................................................................................675
60. MAC Authentication Commands..............................................................................................................................680
61. Mirror Commands.....................................................................................................................................................683
62. MLD Proxy Commands............................................................................................................................................690
63. MLD Snooping Commands......................................................................................................................................696
64. Multicast Listener Discovery (MLD) Commands......................................................................................................714
65. Multicast VLAN Commands .....................................................................................................................................722
66. Multiple Spanning Tree Protocol (MSTP) Commands.............................................................................................734
67. Multiprotocol Label Switching (MPLS) Commands..................................................................................................745
68. Neighbor Discovery (ND) Inspection Commands ....................................................................................................784
69. Network Access Authentication Commands............................................................................................................788
70. Network Load Balancing (NLB) Commands ............................................................................................................801
71. Open Shortest Path First Version 2 (OSPFv2) Commands.....................................................................................804
72. Open Shortest Path First Version 3 (OSPFv3) Commands.....................................................................................855
73. Policy-based Routing (PBR) Commands.................................................................................................................885
74. Port Security Commands .........................................................................................................................................887
75. Power Saving Commands........................................................................................................................................893
76. Priority-based Flow Control (PFC) Commands........................................................................................................899
77. Private VLAN Commands ........................................................................................................................................903
78. Protocol Independent Multicast (PIM) IPv6 Commands ..........................................................................................909

DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide
4
79. Protocol Independent Multicast (PIM) Commands ..................................................................................................930
80. Protocol Independent Commands............................................................................................................................948
81. QoS Amendment Data Center Bridge (DCB) Commands.......................................................................................964
82. Quality of Service (QoS) Commands.......................................................................................................................975
83. Quantized Congestion Notification (QCN) Commands..........................................................................................1008
84. Remote Network MONitoring (RMON) Commands ...............................................................................................1020
85. Route Map Commands ..........................................................................................................................................1028
86. Router Advertisement (RA) Guard Commands......................................................................................................1039
87. Routing Information Protocol (RIP) Commands.....................................................................................................1043
88. Routing Information Protocol Next Generation (RIPng) Commands .....................................................................1056
89. Safeguard Engine Commands...............................................................................................................................1067
90. Secure File Transfer Protocol (SFTP) Server Commands.....................................................................................1074
91. Secure Shell (SSH) Commands.............................................................................................................................1077
92. Secure Sockets Layer (SSL) Commands ..............................................................................................................1085
93. sFlow Commands...................................................................................................................................................1093
94. Simple Mail Transfer Protocol (SMTP) Commands...............................................................................................1099
95. Simple Network Management Protocol (SNMP) Commands ................................................................................1104
96. Single IP Management (SIM) Commands..............................................................................................................1125
97. Spanning Tree Protocol (STP) Commands............................................................................................................1135
98. Stacking Commands..............................................................................................................................................1149
99. Storm Control Commands......................................................................................................................................1153
100. Super VLAN Commands...................................................................................................................................1157
101. Switch Controller Commands............................................................................................................................1161
102. Switch Port Commands.....................................................................................................................................1162
103. System File Management Commands..............................................................................................................1167
104. System Log Commands....................................................................................................................................1181
105. Time and SNTP Commands.............................................................................................................................1190
106. Time Range Commands ...................................................................................................................................1197
107. Traffic Segmentation Commands......................................................................................................................1200
108. Unicast Reverse Path Forwarding (URPF) Commands....................................................................................1202
109. Virtual LAN (VLAN) Tunnel Commands............................................................................................................1206
110. Virtual LAN (VLAN) Commands........................................................................................................................1219
111. Virtual Private LAN Service (VPLS) Commands...............................................................................................1235
112. Virtual Private Wire Service (VPWS) Commands.............................................................................................1246
113. Virtual Router Redundancy Protocol (VRRP) Commands................................................................................1254
114. Virtual Routing and Forwarding Lite (VRF-lite) Commands..............................................................................1266
115. Web Authentication Commands........................................................................................................................1273
116. Weighted Random Early Detection (WRED) Commands.................................................................................1278
Appendix A - Password Recovery Procedure...................................................................................................................1285
Appendix B - System Log Entries .....................................................................................................................................1286

DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide
5
Appendix C - Trap Entries.................................................................................................................................................1319
Appendix D - RADIUS Attributes Assignment...................................................................................................................1324
Appendix E - IETF RADIUS Attributes Support................................................................................................................1327

DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide
6
1. Introduction
This manual’s command descriptions are based on the software release 2.00. The commands listed here
are the subset of commands that are supported by the DXS-3600 Series switch.
Audience
This reference manual is intended for network administrators and other IT networking professionals
responsible for managing the switch by using the Command Line Interface (CLI). The CLI is the primary
management interface to the DXS-3600 Series switch, which will be generally be referred to simply as the
“switch” within this manual. This manual is written in a way that assumes that you already have the
experience and knowledge of Ethernet and modern networking principles for Local Area Networks.
Other Documentation
The documents below are a further source of information in regards to configuring and troubleshooting
the switch. All the documents are available either from the CD, bundled with this switch, or from the D-
Link website. Other documents related to this switch are:
•DXS-3600 Series Hardware Installation Guide
•DXS-3600 Series Web UI Reference Guide
Conventions
Convention Description
Boldface Font Commands, command options and keywords are printed in boldface.
Keywords, in the command line, are to be entered exactly as they are
displayed.
UPPERCASE ITALICS Font Parameters or values that must be specified are printed in
UPPERCASE ITALICS. Parameters in the command line are to be
replaced with the actual values that are desired to be used with the
command.
Square Brackets [ ] Square brackets enclose an optional value or set of optional
arguments.
Braces { } Braces enclose alternative keywords separated by vertical bars.
Generally, one of the keywords in the separated list can be chosen.
Vertical Bar | Optional values or arguments are enclosed in square brackets and
separated by vertical bars. Generally, one or more of the vales or
arguments in the separated list can be chosen.
Blue Courier Font This convention is used to represent an example of a screen console
display including example entries of CLI command input with the
corresponding output. All examples used in this manual are based on
the DXS-3600-32S switch in the DXS-3600 Series.
Notes, Notices, and Cautions
Below are examples of the three types of indicators used in this manual. When administering your switch
using the information in this document, you should pay special attention to these indicators. Each
example below provides an explanatory remark regarding each type of indicator.

DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide
7
NOTE: A note indicates important information that helps you make better use of your device.
NOTICE: A notice indicates either potential damage to hardware or loss of data and tells you
how to avoid the problem.
CAUTION: A caution indicates a potential for property damage, personal injury, or death.
Command Descriptions
The information pertaining to each command in this reference guide is presented using a number of
template fields. The fields are:
•Description - This is a short and concise statement describing the commands functionality.
•Syntax - The precise form to use when entering and issuing the command.
•Parameters - A table where each row describes the optional or required parameters, and their
use, that can be issued with the command.
•Default - If the command sets a configuration value or administrative state of the switch then any
default settings (i.e. without issuing the command) of the configuration is shown here.
•Command Mode - The mode in which the command can be issued. These modes are described
in the section titled “Command Modes” below.
•Command Default Level – The user privilege level in which the command can be issued.
•Usage Guideline - If necessary, a detailed description of the command and its various utilization
scenarios is given here.
•Example(s) - Each command is accompanied by a practical example of the command being
issued in a suitable scenario.
Command Modes
There are several command modes available in the command-line interface (CLI). The set of commands
available to the user depends on both the mode the user is currently in and their privilege level. For each
case, the user can see all the commands that are available in a particular command mode by entering a
question mark (?) at the system prompt.
The command-line interface has five pre-defined privilege levels:
•Basic User - Privilege Level 1. This user account level has the lowest priority of the user
accounts. The purpose of this type of user account level is for basic system checking.
•Advanced User - Privilege Level 3. This user account level is allowed to configure the terminal
control setting. This user account can only show limited information that is not related to security.
•Power User - Privilege 8. This user account level can execute fewer commands than operator,
including configuration commands other than the operator level and administrator level
commands.
•Operator - Privilege Level 12. This user account level is used to grant system configuration rights
for users who need to change or monitor system configuration, except for security related
information such as user accounts and SNMP account settings, etc.

DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide
8
•Administrator - Privilege Level 15. This administrator user account level can monitor all system
information and change any of the system configuration settings expressed in this configuration
guide.
The command-line interface has a number of command modes. There are three basic command modes:
•User EXEC Mode
•Privileged EXEC Mode
•Global Configuration Mode
All other sub-configuration modes can be accessed via the Global Configuration Mode.
When a user logs in to the switch, the privilege level of the user determines the command mode the user
will enter after initially logging in. The user will either log into User EXEC Mode or the Privileged EXEC
Mode.
•Users with a basic user level will log into the switch in the User EXEC Mode.
•Users with advanced user, power-user, operator or administrator level accounts will log into the
switch in the Privileged EXEC Mode.
Therefore, the User EXEC Mode can operate at a basic user level and the Privileged EXEC Mode can
operate at the advanced user, power-user, operator, or administrator levels. The user can only enter the
Global Configuration Mode from the Privileged EXEC Mode. The Global Configuration Mode can be
accessed by users who have operator or administrator level user accounts.
As for sub-configuration modes, a subset of those can only be accessed by users who have the highest
secure administrator level privileges.
The following table briefly lists the available command modes. Only the basic command modes and some
of the sub-configuration modes are enumerated. The basic command modes and basic sub-configuration
modes are further described in the following chapters. Descriptions for the rest of the sub-configuration
modes are not provided in this section. For more information on the additional sub-configuration modes,
the user should refer to the chapters relating to these functions.
The available command modes and privilege levels are described below:
Command Mode/
Privilege Level
Purpose
User EXEC Mode /
Basic User level This level has the lowest priority of the user accounts. It is provided only
to check basic system settings.
Privileged EXEC Mode /
Advanced User level This level is allowed to configure the terminal control setting. This user
account can only show limited information that is not related to security.
Privileged EXEC Mode /
Power User level This level can execute less commands than operator, include the
configure commands other than the operator level and administrator
level commands.
Privileged EXEC Mode /
Operator level For changing both local and global terminal settings, monitoring, and
performing certain system administration tasks. The system
administration tasks that can be performed at this level except for any
security related information.
Privileged EXEC Mode / This level is identical to privileged EXEC mode at the operator level,

DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide
9
Administrator level
except that a user at the administrator level can monitor and clear
security related settings.
Global Configuration Mode /
Operator level For applying global settings, except for security related settings, on the
entire switch. In addition to applying global settings on the entire switch,
the user can access other sub-configuration modes from global
configuration mode.
Global Configuration Mode /
Administrator level For applying global settings on the entire switch. In addition to applying
global settings on the entire switch, the user can access other sub-
configuration modes from global configuration mode.
Interface Configuration Mode
/ Administrator level For applying interface related settings.
VLAN Interface Configuration
Mode For applying VLAN interface related settings.
VLAN Configuration Mode For applying settings to a VLAN.
IP Access-List Configuration
Mode For specifying filtering criteria for an IP access list.
User EXEC Mode at Basic User Level
This command mode is mainly designed for checking basic system settings. This command mode can be
entered by logging in as a basic user.
Privileged EXEC Mode at Advanced User Level
This command mode is mainly designed for checking basic system settings, allowing users to change the
local terminal session settings and carrying out basic network connectivity verification. One limitation of
this command mode is that it cannot be used to display information related to security. This command
mode can be entered by logging in as an advanced user.
Privileged EXEC Mode at Power User Level
User logged into the switch in privileged EXEC mode at this level can execute fewer commands than
operator, including the configuration commands other than the operator level and administrator level
commands. The method to enter privileged EXEC mode at power user level is to login to the switch with a
user account that has a privileged level of 8.
Privileged EXEC Mode at Operator Level
Users logged into the switch in privileged EXEC mode at this level can change both local and global
terminal settings, monitor, and perform system administration tasks (except for security related
information). The method to enter privileged EXEC mode at operator level is to login to the switch with a
user account that has a privilege level of 12.
Privileged EXEC Mode at Administrator Level
This command mode has a privilege level of 15. Users logged in with this command mode can monitor all
system information and change any system configuration settings mentioned in this Configuration Guide.
The method to enter privileged EXEC mode at administrator level is to login to the switch with a user
account that has a privilege level of 15.
Global Configuration Mode
The primary purpose of the global configuration mode is to apply global settings on the entire switch.
Global configuration mode can be accessed at advanced user, power user, operator or administrator level
user accounts. However, security related settings are not accessible at advanced user, power user or
operator user accounts. In addition to applying global settings on the entire switch, the user can also
access other sub-configuration modes. In order to access the global configuration mode, the user must
be logged in with the corresponding account level and use the configure terminal command in the
privileged EXEC mode.

DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide
10
In the following example, the user is logged in as an Administrator in the Privileged EXEC Mode and uses
the configure terminal command to access the Global Configuration Mode:
Switch# configure terminal
Switch(config)#
The exit command is used to exit the global configuration mode and return to the privileged EXEC mode.
Switch(config)# exit
Switch#
The procedures to enter the different sub-configuration modes can be found in the related chapters in this
Configuration Guide. The command modes are used to configure the individual functions.
Interface Configuration Mode
Interface configuration mode is used to configure the parameters for an interface or a range of interfaces.
An interface can be a physical port, VLAN, or other virtual interface. Thus, interface configuration mode is
distinguished further according to the type of interface. The command prompt for each type of interface is
slightly different.
VLAN Interface Configuration Mode
VLAN interface configuration mode is one of the available interface modes and is used to configure the
parameters of a VLAN interface.
To access VLAN interface configuration mode, use the following command in global configuration mode:
Switch(config)# interface vlan 1
Switch(config-if)#
Creating a User Account
By default, there is no user account created on this switch. For security reasons, it is highly recommended
to create user accounts to manage and control access to this switch’s interface. This section will assist a
user with creating a user account by means of the Command Line Interface.
Observe the following example.
Switch#enable
Switch# configure terminal
Switch(config)# username admin password admin
Switch(config)# username admin privilege 15
Switch(config)# line console
Switch(config-line)#login local
Switch(config-line)#
In the above example we had to navigate and access the username command.
•Starting in the User EXEC Mode we enter the command enable to access the Privileged EXEC
Mode.
•After accessing the Privileged EXEC Mode, we entered the command configure terminal to
access the Global Configuration Mode. The username command can be used in the Global
Configuration Mode.
•The command username admin password admin creates a user account with the username of
admin and a password of admin.
•The command username admin privilege 15 assigns a privilege level value of 15 to the user
account admin.

DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide
11
•The command line console allows us to access the console interface’s Line Configuration Mode.
•The command login local tell the switch that users need to enter locally configured login
credentials to access the console interface.
Save the running configuration to the start-up configuration. This means to save the changes made so
that when the switch is rebooted, the configuration will not be lost. The following example shows how to
save the running configuration to the start-up configuration.
Switch#copy running-config startup-config
Destination filename startup-config? [y/n]: y
Saving all configurations to NV-RAM.......... Done.
Switch#
After the switch was rebooted, or when the users logs out and back in, the newly created username and
password must be entered to access the CLI interface again, as seen below.
DXS-3600-32S TenGigabit Ethernet Switch
Command Line Interface
Firmware: Build 2.00.012
Copyright(C) 2013 D-Link Corporation. All rights reserved.
User Access Verification
Username:admin
Password:*****
Switch#
Interface Notation
When configuration the physical ports available on this switch, a specific interface notation is used. The
following will explain the layout, terminology and use of this notation.
In the following example, we’ll enter the Global Configuration Mode and then enter the Interface
Configuration Mode, using the notation 1/0/1. After entering the Interface Configuration Mode for port 1,
we’ll change the speed to 1 Gbps, using the speed 1000 command.
Switch# configure terminal
Switch(config)# interface Ethernet 1/0/1
Switch(config-if)# speed 1000
Switch(config-if)#
In the above example the notation 1/0/1 was used. The terminology for each parameter is as follows:
•Interface Unit’s ID / Open Slot’s ID / Port’s ID

DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide
12
The Interface Unit’s ID is the ID of the stacking unit without the physical stack. If stacking is disabled or
this unit is a stand-alone unit, then this parameter is irrelevant. The Open Slot’s ID is the ID of the module
plugged into the open module slot of the switch. The DXS-3600 Series switch doesn’t support any open
modules slots, thus this parameters will always by zero for this switch series. Lastly, the Port’s ID is the
physical port number of the port being configured.
In summary the above example will configure the stacked switch with the ID of 1, with the open slot ID of
0, and the physical port number 1.
Error Messages
When the users issue a command that the switch does not recognize, error messages will be generated
to assist users with basic information about the mistake that was made. A list of possible error messages
are found in the table below.
Error Message Meaning
Ambiguous command Not enough keywords were entered for the switch to recognize the
command.
Incomplete command The command was not entered with all the required keyword.
Invalid input detected at
^marker The command was entered incorrectly.
The following example shows how an ambiguous command error message is generated.
Switch# show v
Ambiguous command
Switch#
The following example shows how an incomplete command error message is generated.
Switch# show
Incomplete command
Switch#
The following example shows how an invalid input error message is generated.
Switch# show verb
^
Invalid input detected at ^marker
Switch#
Editing Features
The command line interface of this switch supports to following keyboard keystroke editing features.
Keystroke Description
Delete Deletes the character under the cursor and shifts the remainder of the
line to the left.
Backspace Deletes the character to the left of the cursor and shifts the remainder
of the line to the left.

DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide
13
Left Arrow Moves the cursor to the left.
Right Arrow Moves the cursor to the right.
CTRL+R Toggles the insert text function on and off. When on, text can be
inserted in the line and the remainder of the text will be shifted to the
right. When off, text can be inserted in the line and old text will
automatically be replaced with the new text.
Return Scrolls down to display the next line or used to issue a command.
Space Scrolls down to display the next page.
ESC Escapes from the displaying page.
Display Result Output Modifiers
Results displayed by show commands can be filtered using the following parameters:
•begin FILTER-STRING - This parameter is used to start the display with the first line that
matches the filter string.
•include FILTER-STRING - This parameter is used to display all the lines that match the filter
string.
•exclude FILTER-STRING - This parameter is used to exclude the lines that match the filter string
from the display.
The example below shows how to use the begin FILTER-STRING parameter in a show command.
Switch#show running-config | begin # DEVICE
# DEVICE
configure terminal
end
# AAA
configure terminal
# AAA START
no aaa new-model
# AAA END
end
Switch#
The example below shows how to use the include FILTER-STRING parameter in a show command.
Switch#show running-config | include # DEVICE
# DEVICE
Switch#
The example below shows how to use the exclude FILTER-STRING parameter in a show command.
Switch#show running-config | exclude # DEVICE
Building configuration...
Current configuration : 56102 bytes

DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide
14
#-------------------------------------------------------------------------------
# DXS-3600-32S TenGigabit Ethernet Switch
# Configuration
#
# Firmware: Build 2.00.012
# Copyright(C) 2013 D-Link Corporation. All rights reserved.
#-------------------------------------------------------------------------------
# STACK
## stacking config information
## #Box Prio-
## #ID Type Exist rity
## #--- ----------- ----- -----
## # 1 DXS-3600-32S exist 32
## # 2 DXS-3600-16S no
## # 3 NOT_EXIST no
## # 4 NOT_EXIST no
end
end
configure terminal
end
# AAA
configure terminal
# AAA START
no aaa new-model
# AAA END
end
Switch#

DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide
15
2. Basic CLI Commands
2-1 help
This command is used to display a brief description of the help system. Use the help command in any
command mode.
help
Parameters
None.
Default
None.
Command Mode
User EXEC or Any Configuration Mode.
Command Default Level
Level: 1.
Usage Guideline
The help command provides a brief description for the help system, which includes the following functions:
•To list all commands available for a particular command mode, enter a question mark (?) at the
system prompt.
•To obtain a list of commands that begin with a particular character string, enter the abbreviated
command entry immediately followed by a question mark (?). This form of help is called word
help, because it lists only the keywords or arguments that begin with the abbreviation entered.
•To list the keywords and arguments associated with a command, enter a question mark (?) in
place of a keyword or argument on the command line. This form of help is called the command
syntax help, because it lists the keywords or arguments that apply based on the command,
keywords, and arguments already entered.
Example
This example shows how the help command is used to display a brief description of the help system.
Switch# help
The switch CLI provides advanced help feature.
1. Help is available when you are ready to enter a
command argument (e.g. 'show ?') and want to know each possible
argument.
2. Helpis provided when an abbreviated argument is entered
and you want to know what arguments match the input(e.g. 'show ve?'.).
If nothing matches, the help list will be empty and you must backup
until entering a '?' shows the available options.
3. For completing a partial command name could enter the abbreviated
command name immediately followed by a <Tab> key.
Note:
Since the character ’#’ is used for help purpose, to enter the character '?' in a
string argument, press ctrl+v immediately followed by the character '?'.
Switch#

DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide
16
The following example shows how to use the word help to display all the Privileged EXEC Mode
commands that begin with the letters “re”. The letters entered before the question mark (?) are reprinted
on the next command line to allow the user to continue entering the command.
Switch# re?
reboot reconfig rename
Switch# re
The following example shows how to use the command syntax help to display the next argument of a
partially complete IP access-list standard command. The characters entered before the question mark (?)
is reprinted on the next command line to allow the user to continue entering the command.
Switch# ip access-list standard ?
<1-1999> Standard IP access-list number
WORD Access-list name
Switch# ip access-list standard
2-2 enable
This command is used to enter the Privileged EXEC Mode.
enable [PRIVILEGE-LEVEL]
Parameters
PRIVILEGE-LEVEL (Optional) Specifies to set the privilege level for the user. The privilege
level is between 1 and 15. If not specified, level 15 will be used.
Default
None.
Command Mode
User EXEC Mode.
Privilege EXEC Mode.
Command Default Level
Level: 1.
Usage Guideline
Execute this command if the current level is lower than the command level. If the privileged level requires
a password, enter it in the field provided. However, only three attempts are allowed. Failure to access this
level returns the user to the current level.
Example
This example shows how to enter the Privileged EXEC Mode.
Switch# enable 15
password:***

DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide
17
Switch#
2-3 disable
This command is used to downgrade to a level lower user level than the privileged level.
disable [PRIVILEGE-LEVEL]
Parameters
PRIVILEGE LEVEL Specifies the privilege level to enter. If not specified, level 1 is used.
Default
None.
Command Mode
User EXEC Mode.
Privilege EXEC Mode.
Command Default Level
Level: 1.
Usage Guideline
Use this command to enter the privilege level, which is lower than the current level. When using this
command to enter the privilege level, that has a password configured, no password is needed.
Example
This example shows how to logout.
Switch# disable
Switch# logout
2-4 configure terminal
This command is used to enter the Global Configuration Mode.
configure terminal
Parameters
None.
Default
None
Command Mode
Privilege EXEC Mode.
Command Default Level
Level: 12.

DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide
18
Usage Guideline
This command is used to enter the Global Configuration Mode.
Example
This example shows how to enter into Global Configuration Mode.
Switch# configure terminal
Switch(config)#
2-5 login (EXEC)
This command is used to configure a login username.
login
Parameters
None.
Default
None.
Command Mode
User EXEC Mode.
Privileged EXEC Mode.
Command Default Level
Level: 1.
Usage Guideline
Use this command to change the login account. Three attempts are allowed to login to the switch’s
interface. When using Telnet, if all attempts fail, access will return to the command prompt. If no
information is entered within 60 seconds, the session will return to the state when logged out.
Example
This example shows how to login with username “user1”.
Switch# login
Username: user1
Password: xxxxx
Switch#
2-6 login (Line)
This command is used to set the line login method. Use the no form of the command to disable the login.
login [local]
no login

DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide
19
Parameters
login Specifies that the line login method will be login.
local Specifies that the line login method will be local.
Default
By default, there is no login details configured for the console line.
By default, there is a login method (by password) configured for the Telnet line.
By default, there is a login local method (by username and password) configured for the SSH line.
Command Mode
Line Configuration Mode.
Command Default Level
Level: 15.
Usage Guideline
For Console and Telnet access, when AAA is enabled, the line uses rules configured by the AAA module.
When AAA is disabled, the line uses the following authentication rules:
•When login is disabled, the user can enter the line at Level 1.
•When the by password option is selected, after inputting the same password as the command
password, the user enter the line at level 1. If the password wasn’t previously configured an error
message will be displayed and the session will be closed.
•When the username and password option is selected, enter the username and password
configured by the username command.
For SSH access, there are three authentication types:
•SSH public key,
•Host-based authentication, and
•Password authentication.
The SSH public key and host-based authentication types are independent from the login command in the
line mode. If the authentication type is password, the following rules apply:
•When AAA is enabled, the AAA module is used.
•When AAA is disabled, the following rules are used:
oWhen login is disabled, the username and password is ignored. Enter the details at Level
1.
oWhen the username and password option is selected, use the username and password
setup by the username command.
oWhen the password option is selected, the username is ignored but a password is
required using the password command to enter the line at level 1.
Example
This example shows how to enter the Line Configuration Mode and to create a password for the line user.
This password only takes effect once the corresponding line is set to login.
Switch# configure terminal
Switch(config)# line console
Switch(config-line)# password loginpassword
Switch(config-line)#
This example shows how to configure the line console login method as “login”.
Switch# configure terminal
Switch(config)# line console

DXS-3600 Series Layer 3 Managed 10Gigabit Ethernet Switch CLI Reference Guide
20
Switch(config-line)# login
Switch(config-line)#
This example shows how to enter the login command. The device will check the validity of the user from
the password create command. If correct, the user will have access at the particular level.
Switch#login
Password:*************
Switch#
This example shows how to create a username “useraccount” with the password of “pass123” and use
Privilege 12.
Switch# configure terminal
Switch(config)# username useraccount privilege 12 password 0 pass123
Switch(config)#
This example shows how to configure the login method as login local.
Switch# configure terminal
Switch(config)# line console
Switch(config-line)# login local
Switch(config-line)#
2-7 logout
This command is used to close an active terminal session by logging off the switch.
logout
Parameters
None.
Default
None.
Command Mode
User EXEC Mode.
Privilege EXEC Mode.
Command Default Level
Level:1.
Usage Guideline
Use this command to close an active terminal session by logging out of the device.
Example
This example shows how to logout
Switch# disable