Edge-Core ECS4120-28F User manual

CLI Reference Guide
www.edge-core.com
ECS4120-28F/28F-I
ECS4120-28T/28P
ECS4120-52T
28/52-Port Layer 2+
Gigabit Ethernet Switch
Software Release v1.0.2.25

CLI Reference Guide
ECS4120-28T Gigabit Ethernet Switch
L2+ Gigabit Ethernet Switch
with 24 10/100/1000BASE-T (RJ-45) Ports,
and 4 Gigabit SFP Ports
ECS4120-28F Gigabit Ethernet Switch
L2+ Gigabit Ethernet Switch
with 20 100/1000 SFP Ports,
4 10/100/1000 BASE-T (RJ-45) / 100/1000 SFP Combo Ports,
4 10 Gigabit SFP+ Ports , and DC Power Supply
(Operating Temperature: 0°C – 50°C)
ECS4120-28F-I Gigabit Ethernet Switch
L2+ Gigabit Ethernet Switch
with 20 100/1000 SFP Ports,
4 10/100/1000 BASE-T (RJ-45) / 100/1000 SFP Combo Ports,
4 10 Gigabit SFP+ Ports, and DC Power Supply
(Operating Temperature: -10°C – 65°C)
ECS4120-28P Gigabit Ethernet Switch
L2+ Gigabit Ethernet Switch
with 24 10/100/1000BASE-T (RJ-45) 802.3 af/at PoE Ports,
and 4 10-Gigabit SFP+ Ports (PoE Power Budget: 370W)
ECS4120-52T Gigabit Ethernet Switch
L2+ Gigabit Ethernet Switch
with 48 10/100/1000BASE-T (RJ-45) Ports,
and 4 Gigabit SFP Ports
E092017-CS-R02

– 3 –
How to Use This Guide
This guide includes detailed information on the switch software, including how to
operate and use the management functions of the switch. To deploy this switch
effectively and ensure trouble-free operation, you should first read the relevant
sections in this guide so that you are familiar with all of its software features.
Who Should Read This
Guide?
This guide is for network administrators who are responsible for operating and
maintaining network equipment. The guide assumes a basic working knowledge of
LANs (Local Area Networks), the Internet Protocol (IP), and Simple Network
Management Protocol (SNMP).
How This Guide is
Organized
This guide describes the switch’s command line interface (CLI). For more detailed
information on the switch’s key features refer to the Administrator’s Guide.
The guide includes these sections:
◆Section I “Getting Started” — Includes information on connecting to the switch
and basic configuration procedures.
◆Section II “Command Line Interface” — Includes all management options
available through the CLI.
◆Section III “Appendices” — Includes information on troubleshooting switch
management access.
Related
Documentation
This guide focuses on switch software configuration through the CLI.
For information on how to manage the switch through the Web management
interface, see the following guide:
Web Management Guide
Note: For a general description of switch features, refer to “Introduction” in the
Web Management Guide.
For information on how to install the switch, see the following guide:
Quick Start Guide

How to Use This Guide
– 4 –
For all safety information and regulatory statements, see the following documents:
Quick Start Guide
Safety and Regulatory Information
Conventions The following conventions are used throughout this guide to show information:
Note: Emphasizes important information or calls your attention to related features
or instructions.
Caution: Alerts you to a potential hazard that could cause loss of data, or damage
the system or equipment.
Revision History This section summarizes the changes in each revision of this guide.
Revision Date Change Description
v1.0.2.25 09/2017 Added:
◆ECS4120-28F-I
◆"ip dhcp l2 relay" on page 841
◆"ip dhcp l3 relay" on page 841
◆"ip dhcp snooping information option tr101 board-
id" on page 312
Updated:
◆"ip dhcp snooping information option remote-id"
on page 311
◆"ip dhcp snooping information option circuit-id" on
page 315
◆"ip dhcp relay information option" on page 843
◆"ip dhcp snooping max-number" on page 317
◆"efm oam critical-link-event" on page 816
Removed:
◆“Configuring Private VLANs”
v1.0.2.14 11/2016 Initial release

– 5 –
Contents
How to Use This Guide 3
Contents 5
Figures 37
Tables 39
Section I Getting Started 45
1 Initial Switch Configuration 47
Connecting to the Switch 47
Configuration Options 47
Connecting to the Console Port 48
Logging Onto the Command Line Interface 49
Setting Passwords 49
Remote Connections (Network Interface) 50
Configuring the Switch for Remote Management 51
Setting an IP Address 51
Enabling SNMP Management Access 57
Managing System Files 59
Upgrading the Operation Code 60
Saving or Restoring Configuration Settings 61
Automatic Installation of Operation Code and Configuration Settings 62
Downloading Operation Code from a File Server 62
Specifying a DHCP Client Identifier 65
Downloading a Configuration File Referenced by a DHCP Server 65
Setting the System Clock 67
Setting the Time Manually 68
Configuring SNTP 68
Configuring NTP 69

Contents
– 6 –
Section II Command Line Interface 71
2 Using the Command Line Interface 73
Accessing the CLI 73
Console Connection 73
Telnet Connection 73
Entering Commands 75
Keywords and Arguments 75
Minimum Abbreviation 75
Command Completion 75
Getting Help on Commands 76
Partial Keyword Lookup 78
Negating the Effect of Commands 78
Using Command History 78
Understanding Command Modes 78
Exec Commands 79
Configuration Commands 80
Command Line Processing 82
CLI Command Groups 83
3 General Commands 87
prompt 87
reload (Global Configuration) 88
enable 89
quit 90
show history 91
configure 91
disable 92
reload (Privileged Exec) 92
show reload 93
end 93
exit 93
4 System Management Commands 95
Device Designation 95

Contents
– 7 –
hostname 96
Banner Information 96
banner configure 97
banner configure company 98
banner configure dc-power-info 99
banner configure department 100
banner configure equipment-info 100
banner configure equipment-location 101
banner configure ip-lan 102
banner configure lp-number 102
banner configure manager-info 103
banner configure mux 104
banner configure note 104
show banner 105
System Status 105
show access-list tcam-utilization 106
show location-led status 107
show memory 107
show process cpu 108
show process cpu guard 108
show process cpu task 109
show running-config 110
show startup-config 112
show system 113
show tech-support 114
show users 115
show version 116
show watchdog 117
watchdog software 117
Fan Control 117
fan-speed force-full 118
Frame Size 118
jumbo frame 118
File Management 119

Contents
– 8 –
General Commands 121
boot system 121
copy 122
delete 125
dir 126
umount usbdisk 127
whichboot 128
Automatic Code Upgrade Commands 128
upgrade opcode auto 128
upgrade opcode path 129
upgrade opcode reload 130
show upgrade 131
TFTP Configuration Commands 131
ip tftp retry 131
ip tftp timeout 132
show ip tftp 132
Line 133
line 134
databits 134
exec-timeout 135
login 136
parity 137
password 137
password-thresh 138
silent-time 139
speed 140
stopbits 140
timeout login response 141
disconnect 142
terminal 142
show line 143
Event Logging 144
logging facility 144
logging history 145
logging host 146

Contents
– 9 –
logging on 146
logging trap 147
clear log 148
show log 148
show logging 149
SMTP Alerts 151
logging sendmail 151
logging sendmail host 151
logging sendmail level 152
logging sendmail destination-email 153
logging sendmail source-email 153
show logging sendmail 154
Time 154
SNTP Commands 155
sntp client 155
sntp poll 156
sntp server 157
show sntp 157
NTP Commands 158
ntp authenticate 158
ntp authentication-key 159
ntp client 160
ntp server 160
show ntp 161
Manual Configuration Commands 162
clock summer-time (date) 162
clock summer-time (predefined) 163
clock summer-time (recurring) 164
clock timezone 166
calendar set 166
show calendar 167
Time Range 168
time-range 168
absolute 169
periodic 170

Contents
– 10 –
show time-range 171
Switch Clustering 171
cluster 172
cluster commander 173
cluster ip-pool 174
cluster member 174
rcommand 175
show cluster 175
show cluster members 176
show cluster candidates 176
5 SNMP Commands 177
General SNMP Commands 179
snmp-server 179
snmp-server community 180
snmp-server contact 180
snmp-server location 181
show snmp 181
SNMP Target Host Commands 182
snmp-server enable traps 182
snmp-server host 184
snmp-server enable port-traps mac-notification 186
show snmp-server enable port-traps 186
SNMPv3 Commands 187
snmp-server engine-id 187
snmp-server group 188
snmp-server user 189
snmp-server view 191
show snmp engine-id 192
show snmp group 192
show snmp user 194
show snmp view 194
Notification Log Commands 195
nlm 195
snmp-server notify-filter 196

Contents
– 11 –
show nlm oper-status 197
show snmp notify-filter 198
Additional Trap Commands 198
memory 198
process cpu 199
process cpu guard 200
6 Remote Monitoring Commands 203
rmon alarm 204
rmon event 205
rmon collection history 206
rmon collection rmon1 207
show rmon alarms 208
show rmon events 208
show rmon history 209
show rmon statistics 209
7 Flow Sampling Commands 211
sflow owner 212
sflow polling instance 213
sflow sampling instance 214
show sflow 215
8 Authentication Commands 217
User Accounts and Privilege Levels 218
enable password 218
username 219
privilege 221
show privilege 221
Authentication Sequence 222
authentication enable 222
authentication login 223
RADIUS Client 224
radius-server acct-port 224
radius-server auth-port 225
radius-server host 225

Contents
– 12 –
radius-server key 226
radius-server retransmit 227
radius-server timeout 227
show radius-server 228
TACACS+ Client 228
tacacs-server host 229
tacacs-server key 229
tacacs-server port 230
tacacs-server retransmit 230
tacacs-server timeout 231
show tacacs-server 231
AAA 232
aaa accounting dot1x 232
aaa accounting exec 233
aaa accounting update 234
aaa authorization exec 235
aaa group server 236
server 236
accounting dot1x 237
accounting exec 237
authorization exec 238
show accounting 238
Web Server 239
ip http port 240
ip http server 240
ip http secure-port 241
ip http secure-server 241
Telnet Server 243
ip telnet max-sessions 243
ip telnet port 244
ip telnet server 244
telnet (client) 245
show ip telnet 245
Secure Shell 246
ip ssh authentication-retries 249

Contents
– 13 –
ip ssh server 249
ip ssh server-key size 250
ip ssh timeout 250
delete public-key 251
ip ssh crypto host-key generate 252
ip ssh crypto zeroize 252
ip ssh save host-key 253
show ip ssh 253
show public-key 254
show ssh 255
802.1X Port Authentication 255
General Commands 256
dot1x default 256
dot1x eapol-pass-through 257
dot1x system-auth-control 257
Authenticator Commands 258
dot1x intrusion-action 258
dot1x max-reauth-req 259
dot1x max-req 259
dot1x operation-mode 260
dot1x port-control 261
dot1x re-authentication 261
dot1x timeout quiet-period 262
dot1x timeout re-authperiod 262
dot1x timeout supp-timeout 263
dot1x timeout tx-period 263
dot1x re-authenticate 264
Information Display Commands 265
show dot1x 265
Management IP Filter 267
management 268
show management 269
PPPoE Intermediate Agent 270
pppoe intermediate-agent 270
pppoe intermediate-agent format-type 271

Contents
– 14 –
pppoe intermediate-agent port-enable 272
pppoe intermediate-agent port-format-type 272
pppoe intermediate-agent port-format-type remote-id 273
pppoe intermediate-agent trust 274
pppoe intermediate-agent vendor-tag strip 274
clear pppoe intermediate-agent statistics 275
show pppoe intermediate-agent info 275
show pppoe intermediate-agent statistics 276
9 General Security Measures 279
Port Security 280
mac-learning 280
port security 281
port security mac-address-as-permanent 283
show port security 283
Network Access (MAC Address Authentication) 285
network-access aging 286
network-access mac-filter 287
mac-authentication reauth-time 288
network-access dynamic-qos 288
network-access dynamic-vlan 289
network-access guest-vlan 290
network-access link-detection 291
network-access link-detection link-down 292
network-access link-detection link-up 292
network-access link-detection link-up-down 293
network-access max-mac-count 293
network-access mode mac-authentication 294
network-access port-mac-filter 295
mac-authentication intrusion-action 296
mac-authentication max-mac-count 296
clear network-access 297
show network-access 297
show network-access mac-address-table 298
show network-access mac-filter 299

Contents
– 15 –
Web Authentication 299
web-auth login-attempts 300
web-auth quiet-period 301
web-auth session-timeout 301
web-auth system-auth-control 302
web-auth 302
web-auth re-authenticate (Port) 303
web-auth re-authenticate (IP) 303
show web-auth 304
show web-auth interface 304
show web-auth summary 305
DHCPv4 Snooping 305
ip dhcp snooping 306
ip dhcp snooping information option 308
ip dhcp snooping information option encode no-subtype 309
ip dhcp snooping information option remote-id 311
ip dhcp snooping information option tr101 board-id 312
information policy 312
ip dhcp snooping limit rate 313
ip dhcp snooping verify mac address 314
ip dhcp snooping vlan 314
ip dhcp snooping information option circuit-id 315
ip dhcp snooping max-number 317
ip dhcp snooping trust 317
clear ip dhcp snooping binding 318
clear ip dhcp snooping database flash 319
ip dhcp snooping database flash 319
show ip dhcp snooping 320
show ip dhcp snooping binding 320
DHCPv6 Snooping 321
ipv6 dhcp snooping 321
ipv6 dhcp snooping option remote-id 324
ipv6 dhcp snooping option remote-id policy 325
ipv6 dhcp snooping vlan 326
ipv6 dhcp snooping max-binding 327

Contents
– 16 –
ipv6 dhcp snooping trust 327
clear ipv6 dhcp snooping binding 328
clear ipv6 dhcp snooping statistics 329
show ipv6 dhcp snooping 329
show ipv6 dhcp snooping binding 329
show ipv6 dhcp snooping statistics 330
IPv4 Source Guard 330
ip source-guard binding 331
ip source-guard 333
ip source-guard max-binding 334
ip source-guard mode 335
clear ip source-guard binding blocked 336
show ip source-guard 336
show ip source-guard binding 337
IPv6 Source Guard 338
ipv6 source-guard binding 338
ipv6 source-guard 340
ipv6 source-guard max-binding 341
show ipv6 source-guard 342
show ipv6 source-guard binding 343
ARP Inspection 343
ip arp inspection 344
ip arp inspection filter 345
ip arp inspection log-buffer logs 346
ip arp inspection validate 347
ip arp inspection vlan 348
ip arp inspection limit 349
ip arp inspection trust 349
show ip arp inspection configuration 350
show ip arp inspection interface 350
show ip arp inspection log 351
show ip arp inspection statistics 351
show ip arp inspection vlan 351
Denial of Service Protection 352
dos-protection land 352

Contents
– 17 –
dos-protection tcp-null-scan 353
dos-protection tcp-syn-fin-scan 353
dos-protection tcp-xmas-scan 354
show dos-protection 354
Port-based Traffic Segmentation 355
traffic-segmentation 355
traffic-segmentation session 356
traffic-segmentation uplink/downlink 357
traffic-segmentation uplink-to-uplink 358
show traffic-segmentation 359
10 Access Control Lists 361
IPv4 ACLs 361
access-list ip 362
permit, deny (Standard IP ACL) 363
permit, deny (Extended IPv4 ACL) 364
ip access-group 366
show ip access-group 367
show ip access-list 367
IPv6 ACLs 368
access-list ipv6 368
permit, deny (Standard IPv6 ACL) 369
permit, deny (Extended IPv6 ACL) 370
ipv6 access-group 371
show ipv6 access-list 372
show ipv6 access-group 372
MAC ACLs 373
access-list mac 373
permit, deny (MAC ACL) 374
mac access-group 376
show mac access-group 377
show mac access-list 377
ARP ACLs 378
access-list arp 378
permit, deny (ARP ACL) 379

Contents
– 18 –
show access-list arp 380
show arp access-list 380
ACL Information 381
clear access-list hardware counters 381
show access-group 382
show access-list 382
11 Interface Commands 385
Interface Configuration 387
interface 387
alias 387
capabilities 388
description 389
discard 390
flowcontrol 391
history 392
media-type 392
negotiation 393
shutdown 394
speed-duplex 395
switchport block 396
switchport mtu 397
clear counters 398
show discard 399
show interfaces brief 399
show interfaces counters 400
show interfaces history 404
show interfaces status 407
show interfaces switchport 408
Transceiver Threshold Configuration 410
transceiver-monitor 410
transceiver-threshold-auto 410
transceiver-threshold current 411
transceiver-threshold rx-power 412
transceiver-threshold temperature 413

Contents
– 19 –
transceiver-threshold tx-power 414
transceiver-threshold voltage 415
show interfaces transceiver 416
show interfaces transceiver-threshold 417
Cable Diagnostics 418
test cable-diagnostics 418
test loop internal 419
show cable-diagnostics 420
show loop internal 421
Power Savings 421
power-save 421
show power-save 423
12 Link Aggregation Commands 425
Manual Configuration Commands 427
port channel load-balance 427
channel-group 428
Dynamic Configuration Commands 429
lacp 429
lacp admin-key (Ethernet Interface) 430
lacp port-priority 431
lacp system-priority 432
lacp admin-key (Port Channel) 433
lacp timeout 434
Trunk Status Display Commands 435
show lacp 435
show port-channel load-balance 438
13 Power over Ethernet Commands 439
power mainpower maximum allocation 439
power inline 440
power inline maximum allocation 441
power inline priority 442
power inline time-range 443
show power inline status 443
show power inline time-range 444

Contents
– 20 –
show power mainpower 445
14 Port Mirroring Commands 447
Local Port Mirroring Commands 447
port monitor 447
show port monitor 449
RSPAN Mirroring Commands 449
rspan source 451
rspan destination 452
rspan remote vlan 453
no rspan session 454
show rspan 455
15 Congestion Control Commands 457
Rate Limit Commands 457
rate-limit 458
Storm Control Commands 459
switchport packet-rate 459
Automatic Traffic Control Commands 460
Threshold Commands 463
auto-traffic-control apply-timer 463
auto-traffic-control release-timer 464
auto-traffic-control 465
auto-traffic-control action 465
auto-traffic-control alarm-clear-threshold 466
auto-traffic-control alarm-fire-threshold 467
auto-traffic-control auto-control-release 468
auto-traffic-control control-release 469
SNMP Trap Commands 469
snmp-server enable port-traps atc broadcast-alarm-clear 469
snmp-server enable port-traps atc broadcast-alarm-fire 470
snmp-server enable port-traps atc broadcast-control-apply 470
snmp-server enable port-traps atc broadcast-control-release 471
snmp-server enable port-traps atc multicast-alarm-clear 471
snmp-server enable port-traps atc multicast-alarm-fire 472
snmp-server enable port-traps atc multicast-control-apply 472