D-Link xStack DGS-3620 Series User manual

DGS-3620 m/ mSW Rls. 1.02.000
CLI Reference Guide i
Software Release SW Rls. 1.02.000
Date: April 23, 2012
Copyright Statement
D-Link Corporation © 2012
All rights reserved.
Without our written permission this document may not be excerpted, reproduced, transmitted, or
otherwise in all or part by any party by any means.

DGS-3620 m/ mSW Rls. 1.02.000
CLI Reference Guide ii
Preface
Version Description
This manual’s command descriptions are based on the software release SW Rls. 1.02.000.
The commands listed here are the subset of commands that are supported by the DGS-3620
series switches.
Note: Other Ethernet L2/L3 Chassis-Based Switch series Hardware using similar software
may support a different subset of commands although generally the majority of the supported
commands and options will be similar.
Audience
This reference manual is intended for network administrators and other IT networking
professionals responsible for managing the DGS-3620 by using the D-LINK Command Line
Reference (CLI). The CLI is the primary management interface to the D-LINK DGS-3620
which will be generally referred to as the “switch” within this manual. This manual is written in
a way that assumes that you already have the experience and knowledge of Ethernet and
modern networking principles for Local Area Networks.
Document Layout
Other Documentation
The documents below are a further source of information in regards to configuring and troubleshooting the
switch . All the documents are available for download from D-Links web site www.d-link.com.
• DGS-3620 Series Quick Installation Guide
• DGS-3620 Series Hardware Installation Guide
Preface Describes how to use the CLI reference manual.
Feature Table of
Contents A clickable command list of the DGS-3620 commands grouped by their features and linked to the command descriptions..
Command Listings A complete list of available G2 commands arranged in alphabetical order.

DGS-3620 m/ mSW Rls. 1.02.000
CLI Reference Guide iii
Conventions
Notes, Notices, and Cautions
Below are examples of the 3 types of indicators used in this manual. When administering your switch
using the information in this document, you should pay special attention to these indicators. Each
example below provides an explanatory remark regarding each type of indicator.
Command Descriptions:
The information pertaining to each command in this reference guide is presented using a number of
template fields. The fields are:
• Description - This is a short and concise statement describing the commands functionality.
• Syntax - The precise form to use when entering and issuing the command. The form conventions
are described in the table shown under the section “Conventions” on page iii of this guide.
Convention Description
boldface font Commands, command options and keywords are printed in boldface. Key words
in the command line, are to be entered exactly as they are displayed.
UPPERCASEITALICS
font Parameters or values that must be specified are printed in UPPERCASE ITALICS. Parameters in the command line, are to be replaced with the actual
values that are desired to be used with the command.
[ ] Square brackets enclose an optional value or set of optional arguments.
{a|b|c} Braces enclose alternative keywords seperated by vertical bars. Generally, one
of the keywords in the seperated list can be chosen.
[ a | b | c ] Optional values or arguements are enclosed in square barackets and seperated
by vertical bars. Generally, one or more of the vales or arguements in the
seperated list can be chosen.
blue color screen Blue color screen font:is used it presents an example of a screen
console display including example entries of CLI command input with the
corresponding output.
NOTE: A NOTE indicates important information that helps you make better use of your
device
NOTICE: A NOTICE indicates either potential damage to hardware or loss of data and tells
you how to avoid the problem
CAUTION: A CAUTION indicates a potential for property damage, personal injury, or death.

DGS-3620 m/ mSW Rls. 1.02.000
CLI Reference Guide iv
• Syntax Description - A table where each row describes the optional or required arguments, and
their use, that can be issued with the command.
• Default - If the command sets a configuration value or administrative state of the switch then any
default settings (i.e. without issuing the command) of the configuration is shown here.
• Command Mode - The mode in which the command can be issued. The modes are either User
EXEC, Privileged EXEC, Global Configuration or a specific configuration mode. These modes are
described in the section titled “Command Modes” on page iv below.
•Command Usage - If necessary, a detailed description of the command and its various utilization
scenarios is given here.
• Example(s) - Each command is accompanied by a practical example of the command being
issued in a suitable scenario.
Command Modes
There are several command modes available in the command-line interface (CLI). The set of commands
available to the user depends on both the mode the user is currently in and their privilege level. For each
case, the user can see all the commands that are available in a particular command mode by entering a
question mark (?) at the system prompt.
The command-line interface has five privilege levels:
•Basic User - Privilege Level 1. This user account level has the lowest priority of the user
accounts. The purpose of this type of user account level is for basic system checking. The most
important limitation of this account is that there is no way of changing the access right level.
•Advanced User - Privilege Level 3. This user account level is allowed to configure the terminal
control setting. This user account can only show limited information that is not related to security.
•Power User - Privilege 8. This user account level can execute fewer commands than operator,
including configuration commands other than the operator level and administrator level com-
mands.
•Operator - Privilege Level 12. This user account level is used to grant system configuration rights
for users who need to change or monitor system configuration, except for security related informa-
tion such as user accounts and SNMP account settings, etc.
•Administrator - Privilege Level 15. This administrator user account level can monitor all system
information and change any of the system configuration settings expressed in this configuration
guide.
The command-line interface has a number of command modes. There are three basic command modes:
• User EXEC mode
• Privileged EXEC mode
•Global Configuration mode

DGS-3620 m/ mSW Rls. 1.02.000
CLI Reference Guide v
All other sub-configuration modes can be accessed via global configuration mode.
When a user logs in to the Switch, the privilege level of the user determines the command mode the user
will enter after initially logging in. The user will either log into user EXEC mode or privileged EXEC mode.
Users with a basic user level will log into the Switch in user EXEC mode. Users with advanced user,
power user, operator or administrator level accounts will log into the Switch in privileged EXEC mode.
Therefore, user EXEC mode can operate at basic user level and privileged EXEC mode can operate at
advanced user, power user, operator or administrator level. The user can only enter global configuration
mode from privileged EXEC mode. Therefore, global configuration mode can be accessed by users who
have advanced user, power user, operator or administrator level user accounts. As for sub-configuration
modes, a subset of those can only be accessed by users who have the highest secure administrator
level privileges.
The following table briefly lists the available command modes. Only the basic command modes and some
of the sub-configuration modes are enumerated. The basic command modes and basic sub-configuration
modes are further described in the following chapters. Descriptions for the rest of the sub-configuration
modes are not provided in this section. For more information on the additional sub-configuration modes,
the user should refer to the chapters relating to these functions.
The available command modes and privilege levels are described below:
Command Mode & Privilege Level Purpose
User EXEC mode at Basic User level This level has the lowest priority of the user accounts. It
is provided only to check basic system settings.
Privileged EXEC mode at Advanced User
level This level is allowed to configure the terminal control setting. This user account can only show limited
information that is not related to security.
Privileged EXEC mode at Power User level This level can execute less commands than operator,
include the configure commands other than the operator
level and administrator level commands.
Privileged EXEC mode at Operator level For changing both local and global terminal settings,
monitoring, and performing certain system
administration tasks. The system administration tasks
that can be performed at this level includes the clearing
of system configuration settings, except for any security
related information, such as user accounts, SNMP
account settings etc.
Privileged EXEC mode at Administrator
level This level is identical to privileged EXEC mode at power user level, except that a user at the administrator level
can monitor and clear security related settings.
Global Configuration Mode at Power User
level For applying global settings, including the configuration commands other than the operator level and
administrator level commands.
Global Configuration Mode at Operator
level For applying global settings, except for security related settings, on the entire Switch. In addition to applying
global settings on the entire Switch, the user can access
other sub-configuration modes from global configuration
mode.

DGS-3620 m/ mSW Rls. 1.02.000
CLI Reference Guide vi
User EXEC Mode at Basic User Level
This command mode is mainly designed for checking basic system settings.The most significant limitation
of this command mode is that there is no way of changing the access right level of the logged in user.
This command mode can be entered by logging in as a basic user.
Privileged EXEC Mode at Advanced User Level
This command mode is mainly designed for checking basic system settings, allowing users to change the
local terminal session settings and carrying out basic network connectivity verification. One limitation of
this command mode is that it cannot be used to display information related to security.
This command mode can be entered by logging in as an advanced user.
Privileged EXEC Mode at Power User Level
User logged into the switch in privileged EXEC mode at this level can execute fewer commands than
operator, including the configuration commands other than the operator level and administrator level
commands.
The method to enter privileged EXEC mode at power user level is to login to the switch with a user
account that has a privileged level of 8.
Privileged EXEC Mode at Operator Level
Users logged into the Switch in privileged EXEC mode at this level can change both local and global
terminal settings, monitor, and perform system administration tasks like clearing configuration settings
(except for security related information such as user accounts, SNMP account settings etc.)
The method to enter privileged EXEC mode at operator level is to login to the Switch with a user account
that has a privilege level of 12.
In the following example, the user enters privileged EXEC mode at power user level by logging in with a
user account called “power-user” that has a privilege level of 12:
Global Configuration Mode at Administrator
level For applying global settings on the entire Switch. In addition to applying global settings on the entire Switch,
the user can access other sub-configuration modes from
global configuration mode.
Interface Configuration Mode at
Administrator level For applying interface related settings.
VLAN Interface Configuration Mode For applying VLAN interface related settings.
VLAN Configuration Mode For applying settings to a VLAN.
IP Access-List Configuration Mode For specifying filtering criteria for an IP access list.
Command Mode & Privilege Level Purpose

DGS-3620 m/ mSW Rls. 1.02.000
CLI Reference Guide vii
Privileged EXEC Mode at Administrator Level
This command mode has a privilege level of 15. Users logged in with this command mode can monitor all
system information and change any system configuration settings mentioned in this Configuration Guide.
The method to enter privileged EXEC mode at administrator level is to login to the Switch with a user
account that has a privilege level of 15.
Global Configuration Mode
The primary purpose of global configuration mode is to apply global settings on the entire Switch. Global
configuration mode can be accessed at both power user and administrator level. However, security
related settings are not accessible at power user level. In addition to applying global settings on the entire
Switch, the user can also access other sub-configuration modes.
In order to access global configuration mode, the user must be logged in as an administrator or power
user and use the configure terminal command in privileged EXEC mode.
In the following example, the user is logged in as an Administrator in privileged EXEC mode and uses the
configure terminal command to access global configuration mode:
The exit command is used to exit global configuration mode and return to privileged EXEC mode.
The procedures to enter the different sub-configuration modes can be found in the related chapters in this
Configuration Guide. The command modes are used to configure the individual functions.
User Access Verification
Username: power-user
Password:
DGS-3620 Chassis-based High-Speed Switch
Command Line Interface
Firmware: 1.00.029
Copyright (c) 2010 D-Link Corporation. All rights reserved.
DGS-3620:oper#
DGS-3620:15#configure terminal
DGS-3620:15(config)#

DGS-3620 m/ mSW Rls. 1.02.000
CLI Reference Guide viii
Interface Configuration Mode
Interface configuration mode is used to configure the parameters for an interface or a range of interfaces.
An interface can be a physical port, VLAN, or other virtual interface. Thus, interface configuration mode is
distinguished further according to the type of interface. The command prompt for each type of interface is
slightly different.
VLAN Interface Configuration Mode
VLAN interface configuration mode is one of the available interface modes and is used to configure the
parameters of a VLAN interface.
To access VLAN interface configuration mode, use the following command in global configuration mode:
Command Explanation
DGS-3620:15(config)#interface
vlanVLAN-ID Enters VLAN interface configuration mode.

DGS-3620 m/ mSW Rls. 1.02.000
CLI Reference Guide 1
Table of Contents
Address Resolution Protocol (ARP) Commands......................................................................................1
Border Gateway Protocol (BGP) Commands......................................................................................... 13
Distance Vector Multicast Routing Protocol (DVMRP) Commands...................................................... 200
Internet Group Management Protocol (IGMP) Commands.................................................................. 207
Interface Commands............................................................................................................................ 223
IP Access List Commands.................................................................................................................... 227
IP Multicast (IPMC) Commands........................................................................................................... 232
IP Prefix List Commands...................................................................................................................... 243
IP Route Commands............................................................................................................................ 249
Multiprotocol Label Switching (MPLS) Commands .............................................................................. 264
Open Shortest Path First (OSPF) Commands ..................................................................................... 320
Protocol Independent Multicast (PIM) Commands............................................................................... 387
Routing Information Protocol (RIP) Commands................................................................................... 415
Route Map Commands......................................................................................................................... 439
Virtual LAN (VLAN) Commands........................................................................................................... 462
Virtual Private Wire Service (VPWS) Commands ................................................................................ 469
Virtual Private LAN Service (VPLS) Commands.................................................................................. 476
Virtual Routing and Forwarding Lite (VRF Lite) Commands ................................................................ 497
Virtual Router Redundancy Protocol (VRRP) Commands ................................................................... 508
List of Commands (Alphabetical).......................................................................................................... 524

DGS-3620 m/ mSW Rls. 1.02.000
CLI Reference Guide 1
Address Resolution Protocol (ARP) Commands
List of commands discussed in this chapter. Page
1-1 arp 2
1-2 arp timeout 3
1-3 arp gratuitous-send interval 4
1-4 ip proxy-arp 5
1-5 clear arp-cache 6
1-6 show arp 7
1-7 show arp counter 10
1-8 show arp timeout 11
1-9 show ip arp 12

DGS-3620 m/ mSW Rls. 1.02.000 arp
CLI Reference Guide 2
1-1 arp Use this command to add a permanent IP address and MAC address mapping to
the ARP cache table. Use nocommand toremove the IP-MAC address mapping.
arp [vrf <string 1-12>] ip-address mac-address
no arp [vrf <string 1-12>] ip-address
Default There is no static ARP entry in the ARP cache table.
Command Mode Global configuration
Usage Guideline This command adds a static ARP mapping entry to the system. If there existed
one dynamic ARP entry when create a static ARP entry for the same IP address,
it will cover this dynamic entry, for the priority of static entry is higher.
If there existed one static ARP entry for the specified IP address, executing this
command with different MAC address, new entry will cover the old one.
The no form of this command can deletestatic and dynamic entries. Local entries
can’t be removed.
Users can verify the settings by entering the show ip arp or show arp command.
Example The following is an example of setting an ARP static mapping record for a host in
the Ethernet:
Syntax Description
vrf <string 1-12> Specifies the VRF that the IP resides in. If no VRF name is specified, the global
instance will be used.
ip-address The IP address that corresponds to the MAC address.
mac-address 48 bit data link layer address.
Switch(config)# arp 33.1.1.33 0050.BA00.0736
Remove the static ARP entry with IP address 33.1.1.33 from the ARP cache
table.
Switch(config)# no arp 33.1.1.33

DGS-3620 m/ mSW Rls. 1.02.000 arp timeout
CLI Reference Guide 3
1-2 arp timeout Use this command to configure the timeout for the ARP static mapping record in
the ARP cache. The no form of this command restores it to the default
configuration.
arp timeout minutes
no arp timeout
Default The default timeout is 20 minutes
Command Mode Global configuration
Usage Guideline The ARP timeout setting is only applicable to the IP address and the MAC
address mapping that are learned dynamically. The shorter the timeout, the truer
the mapping table saved in the ARP cache, but the more network bandwidth
occupied by the ARP. Hence the advantages and disadvantages should be
weighted. Generally it is not necessary to configure the ARP timeout too short
unless there is a special requirement.
Users can verify the settings by entering the show arp timeout command.
Example The following is an example of setting the timeout for the dynamic ARP mapping
record to 120 minutes:
Syntax Description
minutes The timeout ranging 0 to 65535 minutes.
Switch(config)# arp timeout 120
Restore the timeout for the dynamic ARP mapping record to 20 minutes
Switch(config)# no arp timeout

DGS-3620 m/ mSW Rls. 1.02.000 arp gratuitous-send interval
CLI Reference Guide 4
1-3 arp gratuitous-send interval
Use this command to set the interval of sending the gratuitous ARP request
message on the interface. Use no command to disable this function on the
interface.
arp gratuitous-send interval seconds
no arp gratuitous-send
Default This function is disabled on the interface to send the gratuitous ARP request
regularly.
Command Mode Interface configuration mode
Usage Guideline If an interface of the switch is used as the gateway of its downlink devices and
counterfeit gateway behavior occurs in the downlink devices, you can configure
to send the gratuitous ARP request message regularly on this interface to notify
that the switch is the real gateway.
Users can verify the settings by entering the show ip interface command.
Example The following configuration sets to send one free ARP request to SVI 1 per
second:
The following configuration stops sending the free ARP request to SVI 1:
Syntax Description
seconds The time interval to send the free ARP request message in the range 1 to 3600
seconds.
Switch(config)# interface vlan 1
Switch(config-if)# arp gratuitous-send interval 1
Switch(config)# interface vlan 1
Switch(config-if)# no arp gratuitous-send

DGS-3620 m/ mSW Rls. 1.02.000 ip proxy-arp
CLI Reference Guide 5
1-4 ip proxy-arp Use this command to enable ARP proxy function on the interface. The no form of
this command disables ARP proxy function.
ip proxy-arp
no ip proxy-arp
Syntax None
Default This function is disabled by default.
Command Mode Interface configuration mode.
Usage Guideline Proxy ARP helps those hosts without routing message obtain MAC address of
other networks or subnet IP address. For example, a device receives an ARP
request. The IP addresses of request sender and receiver are in different
networks. However, the device that knows the routing of IP address of request
receiver sends ARP response, which is Ethernet MAC address of the device
itself.
Use show ip interface to see the current setting of ARP proxy.
Example The following is an example of how to enter the interface configuration mode to
enable arp proxy for the IP interface whose VID is 100:
Example The following is an example of how to disable arp proxy on this interface:
Switch(config)# interface vlan 100
Switch(config-if)# ip proxy-arp
Switch(config)# no ip proxy-arp

DGS-3620 m/ mSW Rls. 1.02.000 clear arp-cache
CLI Reference Guide 6
1-5 clear arp-cache
Use this command to remove a dynamic ARP mapping record from the ARP
cache table and clear an IP route cache table in the global configuration mode.
clear arp-cache [vrf <string 1-12>] [ip-address] [interface interface-name]
Default None
Command Mode Privileged mode
Usage Guideline This command can be used to refresh an ARP cache table.
Example The following is an example of removing all dynamic ARP mapping records:
Example The following is an example of removing dynamic ARP table entry 1.1.1.1:
Example The following is an example of removing dynamic ARP table entry on interface
SVI1:
Syntax Description
vrf <string 1-12> Specifies the VRF that the IP resides in. If no VRF name is specified, the global
instance will be used.
ip-address (Optional) Specify the IP address of the dynamic ARP entry
interface interface-
name (Optional) Specify the interface from which the dynamic ARP entry was learned
Switch# clear arp-cache
Switch# clear arp-cache 1.1.1.1
Switch# clear arp-cache interface Vlan1

DGS-3620 m/ mSW Rls. 1.02.000 show arp
CLI Reference Guide 7
1-6 show arp Use this command to show the Address Resolution Protocol (ARP) cache table.
show arp [vrf <string 1-12>] [ip-address [net-mask] | mac-address | {static | complete}]
Default All entries in the ARP cache table will be displayed if no option is specified.
Command Mode User mode or Privileged mode.
Usage Guideline Use this command to display the ARP cache table. Static and complete is
mutually exclusive with each other.
Example
Syntax Description
vrf <string 1-12> Specifies the VRF that the IP resides in. If no VRF name is specified, the global
instance will be used.
ip-address (Optional) Show the ARP entry of the specified IP address.
net-mask (Optional) Show the ARP entries of the network segment included within the
mask.
mac-address (Optional) Show the ARP entry of the specified MAC address
static (Optional) Specify to show all the static ARP entries.
complete (Optional) Specify to show all the resolved dynamic ARP entries.
Switch# show arp
ARP timeout is 20 minutes.
Interface IP Address MAC Address Type
------------- ---------------- ------------------ ---------------
System 10.0.0.0 FF-FF-FF-FF-FF-FF Local/Broadcast
System 10.90.90.90 00-12-21-12-21-11 Local
System 10.1.1.5 00-12-21-12-21-18 Static
System 10.1.1.8 00-12-21-12-21-48 Static
System 10.1.1.9 00-05-5D-A5-32-3F Dynamic
System 10.255.255.255 FF-FF-FF-FF-FF-FF Local/Broadcast
Total Entries: 6

DGS-3620 m/ mSW Rls. 1.02.000 show arp
CLI Reference Guide 8
Switch# show arp 10.1.1.9
ARP timeout is 20 minutes.
Interface IP Address MAC Address Type
------------- --------------- ----------------- ---------------
System 10.1.1.9 00-05-5D-A5-32-3F Dynamic
Total Entries: 1
Switch# show arp 10.1.0.0 255.255.0.0
ARP timeout is 20 minutes.
Interface IP Address MAC Address Type
------------- --------------- ----------------- ---------------
System 10.1.1.5 00-12-21-12-21-18 Static
System 10.1.1.8 00-12-21-12-21-48 Static
System 10.1.1.9 00-05-5D-A5-32-3F Dynamic
Total Entries: 3
Switch# show arp 10.1.0.0 255.255.0.0 static
ARP timeout is 20 minutes.
Interface IP Address MAC Address Type
------------- --------------- ----------------- ---------------
System 10.0.0.0 FF-FF-FF-FF-FF-FF Local/Broadcast
System 10.90.90.90 00-12-21-12-21-11 Local
System 10.1.1.5 00-12-21-12-21-18 Static
System 10.1.1.8 00-12-21-12-21-48 Static
System 10.255.255.255 FF-FF-FF-FF-FF-FF Local/Broadcast
Total Entries: 5

DGS-3620 m/ mSW Rls. 1.02.000 show arp
CLI Reference Guide 9
Switch# show arp 0005.5DA5.323F
ARP timeout is 20 minutes.
Interface IP Address MAC Address Type
------------- --------------- ----------------- ---------------
System 10.1.1.9 00-05-5D-A5-32-3F Dynamic
Total Entries: 1
Switch# show arp static
ARP timeout is 20 minutes.
Interface IP Address MAC Address Type
------------- --------------- ----------------- ---------------
System 10.0.0.0 FF-FF-FF-FF-FF-FF Local/Broadcast
System 10.90.90.90 00-12-21-12-21-11 Local
System 10.1.1.5 00-12-21-12-21-18 Static
System 10.1.1.8 00-12-21-12-21-48 Static
System 10.255.255.255 FF-FF-FF-FF-FF-FF Local/Broadcast
Total Entries: 5
Switch# show arp complete
ARP timeout is 20 minutes.
Interface IP Address MAC Address Type
------------- --------------- ----------------- ---------------
System 10.1.1.9 00-05-5D-A5-32-3F Dynamic
Total Entries: 1
Switch#

DGS-3620 m/ mSW Rls. 1.02.000 show arp counter
CLI Reference Guide 10
1-7 show arp counter
Use this command to display the number of ARP entries in the ARP cache table.
show arp counter [vrf <string 1-12>]
Default None.
Command Mode User mode or Privileged mode.
Usage Guideline Use this command to display the number of ARP entries in the ARP cache table.
Example
Syntax Description
vrf <string 1-12> Specifies the VRF that the IP resides in. If no VRF name is specified, the global
instance will be used.
Switch# show arp counter
Total ARP Entry Counter: 3
Switch#