Hirschmann RS20 series User manual

Technical Support
[email protected]
CLI L2E
Release 8.0 05/2013
Reference Manual
Command Line Interface
Industrial ETHERNET (Gigabit) Switch
RS20/RS30/RS40, MS20/MS30
L2E Rel. 8.0

The naming of copyrighted trademarks in this manual, even when not specially indicated, should
not be taken to mean that these names may be considered as free in the sense of the trademark
and tradename protection law and hence that they may be freely used by anyone.
© 2013 Hirschmann Automation and Control GmbH
Manuals and software are protected by copyright. All rights reserved. The copying, reproduction,
translation, conversion into any electronic medium or machine scannable form is not permitted,
either in whole or in part. An exception is the preparation of a backup copy of the software for
your own use. For devices with embedded software, the end-user license agreement on the enc-
losed CD applies
The performance features described here are binding only if they have been expressly
guaranteed in the contract. This publication has been created by Hirschmann Automation and
Control GmbH according to the best of our knowledge. Hirschmann reserves the right to change
the contents of this manual without prior notice. Hirschmann can give no guarantee in respect
of the correctness or accuracy of the details in this publication.
Hirschmann can accept no responsibility for damages, resulting from the use of the network
components or the associated operating software. In addition, we refer to the conditions of use
specified in the license contract.
Printed in Germany 4/30/13
Hirschmann Automation and Control GmbH
Stuttgarter Str. 45-51
72654 Neckartenzlingen
Germany
Tel.: [phone]-05/2013

Content
CLI L2E
Release 8.0 05/2013 3
Content
About this Manual 15
Maintenace 16
1 Command Structure 17
1.1 Format 18
1.1.1 Command 19
1.1.2 Parameters 19
1.1.3 Values 19
1.1.4 Conventions 21
1.1.5 Annotations 22
1.1.6 Special keys 23
1.1.7 Secrets in scripts 24
2 Quick Start up 25
2.1 Quick Starting the Switch 26
2.2 System Info and System Setup 27
3 Mode-based CLI 33
3.1 Mode-based Topology 34
3.2 Mode-based Command Hierarchy 35
3.3 Flow of Operation 37
3.4 “No” Form of a Command 39
3.4.1 Support for “No” Form 39
3.4.2 Behavior of Command Help ("?") 39
4 CLI Commands: Base 41
4.1 System Information and Statistics 42
4.1.1 show 42
4.1.2 show address-conflict 42
4.1.3 show arp switch 43
4.1.4 show bridge address-learning 43
4.1.5 show bridge address-relearn-detect 44
4.1.6 show bridge aging-time 44

Content
4CLI L2E
Release 8.0 05/2013
4.1.7 show bridge duplex-mismatch-detect 45
4.1.8 show bridge framesize 45
4.1.9 show bridge vlan-learning 45
4.1.10 bridge framesize 46
4.1.11 show config-watchdog 46
4.1.12 show device-status 47
4.1.13 show authentication 48
4.1.14 show eventlog 48
4.1.15 show interface 49
4.1.16 show interface ethernet 51
4.1.17 show interface switchport 58
4.1.18 show interface utilization 59
4.1.19 show logging 60
4.1.20 show mac-addr-table 61
4.1.21 show signal-contact 62
4.1.22 show slot 64
4.1.23 show running-config 65
4.1.24 show sysinfo 66
4.1.25 show temperature 68
4.1.26 utilization alarm-threshold 69
4.2 Management VLAN Commands 70
4.2.1 network mgmt_vlan 70
4.3 Class of Service (CoS) Commands 71
4.3.1 classofservice dot1p-mapping 72
4.3.2 classofservice ip-dscp-mapping 73
4.3.3 classofservice trust 74
4.3.4 show classofservice dot1p-mapping 75
4.3.5 show classofservice ip-dscp-mapping 76
4.3.6 show classofservice trust 77
4.3.7 vlan port priority all 77
4.3.8 vlan priority 78
4.4 Management Commands 79
4.4.1 transport input telnet 79
4.4.2 bridge address-learning 80
4.4.3 bridge address-relearn detect operation 80
4.4.4 bridge address-relearn detect threshold 81
4.4.5 bridge aging-time 82
4.4.6 bridge fast-link-detection 83
4.4.7 bridge duplex-mismatch-detect operation 83

Content
CLI L2E
Release 8.0 05/2013 5
4.4.8 bridge vlan-learning 84
4.4.9 ethernet-ip 84
4.4.10 network javascriptmode 85
4.4.11 network mgmt-access add 86
4.4.12 network mgmt-access delete 86
4.4.13 network mgmt-access modify 87
4.4.14 network mgmt-access operation 88
4.4.15 network mgmt-access status 88
4.4.16 network parms 89
4.4.17 network protocol 89
4.4.18 network priority 90
4.4.19 profinetio 91
4.4.20 serial timeout 92
4.4.21 set prompt 92
4.4.22 show ethernet-ip 93
4.4.23 show network 93
4.4.24 show network mgmt-access 95
4.4.25 show profinetio 96
4.4.26 show serial 96
4.4.27 show snmp-access 97
4.4.28 show snmpcommunity 98
4.4.29 show snmptrap 99
4.4.30 show telnet 100
4.4.31 show telnetcon 101
4.4.32 show trapflags 102
4.4.33 snmp-access global 103
4.4.34 snmp-access version 104
4.4.35 snmp-access version v3-encryption 105
4.4.36 snmp-server 106
4.4.37 snmp-server community 107
4.4.38 snmp-server contact 108
4.4.39 snmp-server community ipaddr 109
4.4.40 snmp-server community ipmask 110
4.4.41 snmp-server community mode 111
4.4.42 snmp-server community ro 112
4.4.43 snmp-server community rw 112
4.4.44 snmp-server location 112
4.4.45 snmp-server sysname 113
4.4.46 snmp-server enable traps 113
4.4.47 snmp-server enable traps chassis 114
4.4.48 snmp-server enable traps l2redundancy 115

Content
6CLI L2E
Release 8.0 05/2013
4.4.49 snmp-server enable traps linkmode 116
4.4.50 snmp-server enable traps multiusers 117
4.4.51 snmp-server enable traps port-sec 118
4.4.52 snmp-server enable traps stpmode 119
4.4.53 snmptrap 120
4.4.54 snmptrap ipaddr 121
4.4.55 snmptrap mode 122
4.4.56 snmptrap snmpversion 123
4.4.57 telnetcon maxsessions 124
4.4.58 telnetcon timeout 125
4.5 Syslog Commands 126
4.5.1 logging buffered 126
4.5.2 logging buffered wrap 127
4.5.3 logging cli-command 128
4.5.4 logging console 129
4.5.5 logging host 130
4.5.6 logging host reconfigure 131
4.5.7 logging host remove 131
4.5.8 logging snmp-requests get operation 131
4.5.9 logging snmp-requests set operation 132
4.5.10 logging snmp-requests get severity 132
4.5.11 logging snmp-requests set severity 133
4.5.12 logging syslog 133
4.5.13 logging syslog port 134
4.6 Device Configuration Commands 135
4.6.1 auto-disable reason 135
4.6.2 auto-disable timer 137
4.6.3 auto-negotiate 138
4.6.4 auto-negotiate all 139
4.6.5 cable-crossing 140
4.6.6 media-module 141
4.6.7 dip-switch operation 142
4.6.8 macfilter 143
4.6.9 macfilter adddest 144
4.6.10 macfilter adddest all 145
4.6.11 monitor session 146
4.6.12 monitor session mode 148
4.6.13 monitor session <session-id> source/destination 149
4.6.14 set igmp 150
4.6.15 set igmp 151

Content
CLI L2E
Release 8.0 05/2013 7
4.6.16 set igmp aging-time-unknown 151
4.6.17 set igmp automatic-mode 152
4.6.18 set igmp forward-all 153
4.6.19 set igmp forward-unknown 154
4.6.20 set igmp static-query-port 155
4.6.21 set igmp groupmembershipinterval 156
4.6.22 set igmp interfacemode 157
4.6.23 set igmp lookup-interval-unknown 157
4.6.24 set igmp lookup-resp-time-unknown 158
4.6.25 set igmp maxresponse 159
4.6.26 set igmp querier max-response-time 160
4.6.27 set igmp querier protocol-version 160
4.6.28 set igmp querier status 161
4.6.29 set igmp querier tx-interval 161
4.6.30 set igmp query-ports-to-filter 162
4.6.31 set pre-login-banner text 163
4.6.32 selftest ramtest 163
4.6.33 selftest reboot-on-hdxerror 164
4.6.34 selftest reboot-on-error 165
4.6.35 show auto-disable brief 166
4.6.36 show auto-disable reasons 167
4.6.37 show dip-switch 168
4.6.38 show igmpsnooping 169
4.6.39 show mac-filter-table igmpsnooping 170
4.6.40 show mac-filter-table multicast 171
4.6.41 show mac-filter-table static 172
4.6.42 show mac-filter-table staticfiltering 173
4.6.43 show mac-filter-table stats 174
4.6.44 show monitor session 175
4.6.45 show port 176
4.6.46 show rmon-alarm 177
4.6.47 show selftest 178
4.6.48 show storm-control 179
4.6.49 show storm-control limiters port 179
4.6.50 show vlan 180
4.6.51 show vlan brief 182
4.6.52 show vlan port 183
4.6.53 shutdown 184
4.6.54 shutdown all 185
4.6.55 snmp trap link-status 186
4.6.56 snmp trap link-status all 187

Content
8CLI L2E
Release 8.0 05/2013
4.6.57 spanning-tree bpdumigrationcheck 188
4.6.58 speed 189
4.6.59 storm-control broadcast 190
4.6.60 storm-control egress-limiting 190
4.6.61 storm-control ingress-limiting 191
4.6.62 storm-control ingress-mode 191
4.6.63 storm-control broadcast (port-related) 192
4.6.64 storm-control egress-limit 192
4.6.65 storm-control ingress-limit 193
4.6.66 storm-control ingress-mode 193
4.6.67 storm-control flowcontrol 194
4.6.68 storm-control flowcontrol per port 195
4.6.69 vlan 196
4.6.70 vlan0-transparent-mode 197
4.6.71 vlan acceptframe 198
4.6.72 vlan database 199
4.6.73 vlan ingressfilter 200
4.6.74 vlan name 201
4.6.75 vlan participation 202
4.6.76 vlan participation all 203
4.6.77 vlan port acceptframe all 204
4.6.78 vlan port ingressfilter all 205
4.6.79 vlan port pvid all 206
4.6.80 vlan port tagging all 207
4.6.81 vlan pvid 208
4.6.82 vlan tagging 209
4.7 User Account Management Commands 210
4.7.1 disconnect 210
4.7.2 show loginsession 211
4.7.3 show users 212
4.7.4 users defaultlogin 213
4.7.5 users login <user> 213
4.7.6 users access 214
4.7.7 users name 215
4.7.8 users passwd 216
4.7.9 users snmpv3 accessmode 217
4.7.10 users snmpv3 authentication 218
4.7.11 users snmpv3 encryption 219
4.8 System Utilities 220
4.8.1 address-conflict 220

Content
CLI L2E
Release 8.0 05/2013 9
4.8.2 boot skip-aca-on-boot 221
4.8.3 show boot skip-aca-on-boot 221
4.8.4 clear eventlog 222
4.8.5 traceroute 222
4.8.6 clear arp-table-switch 223
4.8.7 clear config 223
4.8.8 clear config factory 223
4.8.9 clear counters 224
4.8.10 clear hiper-ring 224
4.8.11 clear igmpsnooping 224
4.8.12 clear mac-addr-table 225
4.8.13 clear pass 225
4.8.14 clear signal-contact 226
4.8.15 clear traplog 226
4.8.16 clear ring-coupling 227
4.8.17 clear vlan 227
4.8.18 config-watchdog 228
4.8.19 copy 228
4.8.20 device-status connection-error 234
4.8.21 device-status monitor 235
4.8.22 logout 236
4.8.23 ping 236
4.8.24 signal-contact connection-error 237
4.8.25 signal-contact 237
4.8.26 temperature 239
4.8.27 reboot 240
4.8.28 show reboot 241
4.8.29 reload 242
4.8.30 show reload 243
4.9 LLDP - Link Layer Discovery Protocol 244
4.9.1 show lldp 244
4.9.2 show lldp config 244
4.9.3 show lldp config chassis 245
4.9.4 show lldp config chassis admin-state 245
4.9.5 show lldp config chassis notification-interval 245
4.9.6 show lldp config chassis re-init-delay 246
4.9.7 show lldp config chassis tx-delay 246
4.9.8 show lldp config chassis tx-hold-mult 246
4.9.9 show lldp config chassis tx-interval 247
4.9.10 show lldp config port 248

Content
10 CLI L2E
Release 8.0 05/2013
4.9.11 show lldp config port tlv 249
4.9.12 show lldp remote-data 250
4.9.13 lldp 252
4.9.14 lldp config chassis admin-state 253
4.9.15 lldp config chassis notification-interval 253
4.9.16 lldp config chassis re-init-delay 254
4.9.17 lldp config chassis tx-delay 254
4.9.18 lldp config chassis tx-hold-mult 255
4.9.19 lldp chassis tx-interval 255
4.9.20 clear lldp config all 256
4.9.21 lldp admin-state 256
4.9.22 lldp fdb-mode 257
4.9.23 lldp hm-mode 257
4.9.24 lldp max-neighbors 258
4.9.25 lldp notification 258
4.9.26 lldp tlv link-aggregation 258
4.9.27 lldp tlv mac-phy-config-state 259
4.9.28 lldp tlv max-frame-size 259
4.9.29 lldp tlv mgmt-addr 259
4.9.30 lldp tlv pnio 260
4.9.31 lldp tlv pnio-alias 260
4.9.32 lldp tlv pnio-mrp 260
4.9.33 lldp tlv port-desc 261
4.9.34 lldp tlv port-vlan 261
4.9.35 lldp tlv gmrp 261
4.9.36 lldp tlv igmp 262
4.9.37 lldp tlv portsec 262
4.9.38 lldp tlv ptp 262
4.9.39 lldp tlv protocol 263
4.9.40 lldp tlv sys-cap 263
4.9.41 lldp tlv sys-desc 263
4.9.42 lldp tlv sys-name 264
4.9.43 lldp tlv vlan-name 264
4.9.44 name 265
4.10 SNTP - Simple Network Time Protocol 266
4.10.1 show sntp 266
4.10.2 show sntp anycast 268
4.10.3 show sntp client 268
4.10.4 show sntp operation 269
4.10.5 show sntp server 270

Content
CLI L2E
Release 8.0 05/2013 11
4.10.6 show sntp status 270
4.10.7 show sntp time 271
4.10.8 no sntp 271
4.10.9 sntp anycast address 272
4.10.10 sntp anycast transmit-interval 272
4.10.11 sntp anycast vlan 273
4.10.12 sntp client accept-broadcast 273
4.10.13 sntp client disable-after-sync 274
4.10.14 sntp client offset 274
4.10.15 sntp client request-interval 275
4.10.16 no sntp client server 275
4.10.17 sntp client server primary 276
4.10.18 sntp client server secondary 277
4.10.19 sntp client threshold 278
4.10.20 sntp operation 279
4.10.21 sntp server disable-if-local 280
4.10.22 sntp time system 280
4.11 PoE - Power over Ethernet 281
4.11.1 show inlinepower 281
4.11.2 show inlinepower port 281
4.11.3 inlinepower (Global Config) 282
4.11.4 inlinepower (Interface Config) 283
4.11.5 clear inlinepower 283
5 CLI Commands: Switching 285
5.1 Spanning Tree Commands 287
5.1.1 show spanning-tree 287
5.1.2 show spanning-tree interface 290
5.1.3 show spanning-tree mst detailed 291
5.1.4 show spanning-tree mst port detailed 292
5.1.5 show spanning-tree mst port summary 295
5.1.6 show spanning-tree mst summary 296
5.1.7 show spanning-tree summary 297
5.1.8 show spanning-tree vlan 298
5.1.9 spanning-tree 299
5.1.10 spanning-tree auto-edgeport 300
5.1.11 spanning-tree bpduguard 301
5.1.12 spanning-tree configuration name 302
5.1.13 spanning-tree configuration revision 303
5.1.14 spanning-tree edgeport 304

Content
12 CLI L2E
Release 8.0 05/2013
5.1.15 spanning-tree forceversion 305
5.1.16 spanning-tree forward-time 306
5.1.17 spanning-tree guard loop 307
5.1.18 spanning-tree guard none 308
5.1.19 spanning-tree guard root 309
5.1.20 spanning-tree hello-time 310
5.1.21 spanning-tree hold-count 311
5.1.22 spanning-tree max-age 312
5.1.23 spanning-tree max-hops 313
5.1.24 spanning-tree mst 314
5.1.25 spanning-tree mst priority 316
5.1.26 spanning-tree mst vlan 317
5.1.27 spanning-tree mst instance 318
5.1.28 spanning-tree port mode 319
5.1.29 spanning-tree port mode all 320
5.1.30 spanning-tree stp-mrp-mode 321
5.1.31 spanning-tree tcnguard 322
5.2 MRP 323
5.2.1 show mrp 323
5.2.2 show mrp current-domain 324
5.2.3 mrp current-domain 325
5.2.4 mrp delete-domain 327
5.2.5 mrp new-domain 327
5.3 HIPER-Ring 328
5.3.1 show hiper-ring 329
5.3.2 hiper-ring 330
5.3.3 hiper-ring mode 330
5.3.4 hiper-ring port primary 331
5.3.5 hiper-ring port secondary 331
5.3.6 hiper-ring recovery-delay 332
5.4 Fast-HIPER-Ring 333
5.4.1 fast-hiper-ring 336
5.5 Redundant Coupling 338
5.5.1 show ring-coupling 339
5.5.2 ring-coupling 341
5.5.3 ring-coupling config 342
5.5.4 ring-coupling net-coupling 343
5.5.5 ring-coupling operation 343
5.5.6 ring-coupling port 344

Content
CLI L2E
Release 8.0 05/2013 13
5.5.7 ring-coupling redundancy-mode 344
5.6 Port Security 345
5.6.1 show port-sec mode 345
5.6.2 show port-sec port 345
5.6.3 port-sec mode 346
5.6.4 port-sec action 347
5.6.5 port-sec allowed-ip 348
5.6.6 port-sec allowed-ip add 348
5.6.7 port-sec allowed-ip remove 349
5.6.8 port-sec allowed-mac 349
5.6.9 port-sec allowed-mac add 350
5.6.10 port-sec allowed-mac remove 350
5.6.11 clear port-sec 351
5.7 DHCP Relay Commands 352
5.7.1 dhcp-relay 353
5.7.2 dhcp-relay 354
5.7.3 show dhcp-relay 355
6 CLI Commands: Security 357
6.1 Security Commands 359
6.1.1 users login 359
6.2 HTTP Commands 360
6.2.1 ip http secure-port 360
6.2.2 ip http secure-protocol 361
6.2.3 ip http server 362
6.2.4 show ip http 363
6.2.5 ip https server 364
6.2.6 ip https port 365
6.2.7 ip https certgen 365
6.2.8 show ip https 366
7 Appendix- VLAN Example 367
7.1 SOLUTION 1 369
7.2 SOLUTION 2 371

Content
14 CLI L2E
Release 8.0 05/2013
8 Glossary 373
9 Index 389
10 Further support 395

About this Manual
CLI L2E
Release 8.0 05/2013 15
About this Manual
The “GUI” reference manual contains detailed information on using the
graphical user interface (web-based interface) to operate the individual func-
tions of the device.
The "Command Line Interface" reference manual contains detailed informa-
tion on using the Command Line Interface to operate the individual functions
of the device.
The "Installation" user manual contains a device description, safety instruc-
tions, a description of the display, and the other information that you need to
install the device.
The "Basic Configuration" user manual contains the information you need to
start operating the device. It takes you step by step from the first startup op-
eration through to the basic settings for operation in your environment.
The "Redundancy Configuration" user manual contains the information you
need to select a suitable redundancy procedure and configure that proce-
dure.
The "Industry Protocols" user manual describes how the device is connected
by means of a communication protocol commonly used in the industry, such
as EtherNet/IP or PROFINET IO.
The HiVision Network Management Software provides you with additional
options for smooth configuration and monitoring:
DSimultaneous configuration of multiple devices
DGraphic interface with network layout
DAuto-topology recognition
DEvent log
DEvent handling
DClient/server structure
DBrowser interface
DActiveX control for SCADA integration
DSNMP/OPC gateway.

About this Manual
16 CLI L2E
Release 8.0 05/2013
Maintenace
Hirschmann are continually working on improving and developing their soft-
ware. You should regularly check whether there is a new version of the soft-
ware that provides you with additional benefits. You will find software
information and downloads on the product pages of the Hirschmann website.

Command Structure
CLI L2E
Release 8.0 05/2013 17
1 Command Structure
The Command Line Interface (CLI) syntax, conventions and terminology are
described in this section. Each CLI command is illustrated using the structure
outlined below.

Command Structure
18
1.1 Format
CLI L2E
Release 8.0 05/2013
1.1 Format
Commands are followed by values, parameters, or both.
UExample 1
network parms <ipaddr> <netmask> [gateway]
Dnetwork parms
is the command name.
D<ipaddr> <netmask>
are the required values for the command.
D[gateway]
is the optional value for the command.
UExample 2
snmp-server location <loc>
Dsnmp-server location
is the command name.
D<loc>
is the required parameter for the command.
UExample 3
clear vlan
Dclear vlan
is the command name.

Command Structure
CLI L2E
Release 8.0 05/2013
1.1 Format
19
1.1.1 Command
The text in courier font is to be typed exactly as shown.
1.1.2 Parameters
Parameters are order dependent.
Parameters may be mandatory values, optional values, choices, or a combi-
nation.
D<parameter>. The <> angle brackets indicate that a mandatory param-
eter is to be entered in place of the brackets and text inside them.
D[parameter]. The [] square brackets indicate that an optional parame-
ter may be entered in place of the brackets and text inside them.
Dchoice1 | choice2. The | indicates that only one of the parameters
should be entered.
DThe {} curly braces indicate that a parameter must be chosen from the list
of choices.
1.1.3 Values
macaddr The MAC address format is six hexadeci-
mal numbers separated by colons, for
example 00:06:29:32:81:40.
areaid Area IDs may be entered in dotted-decimal
notation (for example, 0.0.0.1). An area ID
of 0.0.0.0 is reserved for the backbone.
Area IDs have the same form as IP
addresses, but are distinct from IP
addresses. The IP network address of the

Command Structure
20
1.1 Format
CLI L2E
Release 8.0 05/2013
sub-netted network may be used for the
area ID.
slot/port Valid slot and port number separated by
forward slashes. For example, 1/1 repre-
sents slot number 1 and port number 1.
logical slot/port Logical slot and port number. This is appli-
cable in the case of a link-aggregation
(LAG) and vlan router interfaces (9/x). The
operator can use the logical slot/port to
configure the link-aggregation.