ICPDAS MSM-6226G User manual

MSM-6226G
GbE M anaged ETHERNET S WITCH
Console Manual

M ANAGEMENT G UIDE
MSM-6226G L2 GIGABIT ETHERNET S
WITCH
26 Port L2 Plus Managed Switch

A BOUT T HIS G UIDE
P URPOSE This guide gives specific information on how to operate and use
the management functions of the switch.
A UDIENCE The guide is intended for use by network administrators who are
responsible for operating and maintaining network equipment;
consequently, it assumes a basic working knowledge of general switch
functions, the Internet Protocol (IP , and Simple Network
Management Protocol (SNMP .
C ONVENTIONS The following conventions are used throughout this guide to
show information:
N OTE :Emphasizes important information or calls your attention to
related features or instructions.
C AUTION : Alerts you to a potential hazard that could cause loss of data, or
damage the system or equipment.
W ARNING : Alerts you to a potential hazard that could cause personal injury.
R ELATED P UBLICATIONS The following publication details the hardware features of the switch,
including the physical and performance-related characteristics, and how
to install the switch:
The Installation Guide
Also, as part of the switch’s software, there is an online web-based help
that describes all management related features.

Revision History
Rele
ase
Date
Revision
V1.0 07/29/2013
A1

C ONTENTS
ABOUT THIS GUIDE...........................................................................................................ii
Revision History.................................................................................................................. iii
CONTENTS........................................................................................................................iv
1 802.1X Commands of CLI.........................................................................................1
2 AAA of CLI...........................................................................................................11
3 Access Commands of CLI ......................................................................................22
4 Account Commands of CLI.....................................................................................25
5 ACL Commands of CLI........................................................................................27
6 Aggregation Commands of CLI...............................................................................35
7 Arp-inspection Commands of CLI........................................................................38
8 Auth Commands of CLI.........................................................................................41
9 Config-File Commands of CLI...............................................................................43
10 DHCP-Relay Commands of CLI...............................................................................44
11 DHCP SNOOPING Commands of CLI .......................................................................47
12 Diagnostic Commands of CLI...................................................................................50
13 EEE of CLI .................................................................................................................52
14 Event Commands of CLI.......................................................................................56
15 Firmware Commands of CLI.................................................................................59
16 GARP of CLI.........................................................................................................61
17 GVRP of CLI...........................................................................................................66
18 Https Commands of CLI......................................................................................72
19 IGMP Commands of CLI ..........................................................................................74
20 IP Commands of CLI ..............................................................................................82
21 IP-Source-Guard of CLI..............................................................................................86
22 IPV6 Commands of CLI..............................................................................................93
23 LACP Commands of CLI ..........................................................................................95
24 Limit-control Commands of CLI..................................................................................99
25 LLDP Commands of CLI.......................................................................................105
26 LLDP-MED of CLI............................................................................................113
27 MAC Commands of CLI........................................................................................135
28 Mirror Commands of CLI..........................................................................................141
29 MLD Commands of CLI............................................................................................143
30 MRP of CLI.............................................................................................................157
31 MSTP of CLI.............................................................................................................163

32 MVR of CLI...............................................................................................................185
33 MVRP of CLI ............................................................................................................191
34 Port Commands of CLI.........................................................................................196
35 Port-Security Commands of CLI.............................................................................207
36 Privilege Commands of CLI....................................................................................209
37 PVLAN Commands of CLI....................................................................................211
38 QoS Commands of CLI ..........................................................................................214
39 SMTP of CLI.........................................................................................................234
40 SNMP of CLI.........................................................................................................242
41 SSH of CLI .............................................................................................................254
42 SYSLOG of CLI ....................................................................................................256
43 SYSTEM of CLI...................................................................................................260
44 THERMAL of CLI..................................................................................................267
45 TIME of CLI.........................................................................................................270
46 VCL of CLI................................................................................................................277
47 VLAN of CLI..........................................................................................................286
48 VOICE-VLAN of CLI .............................................................................................296

1 802.1X Commands of CLI
Table 1: 802.1X Commands
Command F nction
agetime Configure the time in seconds between check for activity
on successfully authenticated MAC addresses
auto-logout Configure time of inactivity before automatic logout .
clear Clear 802.1X
statistics
eapol-timeout Configure the time between EAPOL retransmissions
exit Exit from current mode
guest-vlan Configure the Guest VLAN mode
help Show available commands
history Show a list of previously run commands
hold-time Configure the time in seconds before a MAC-address that
failed authentication gets a new authentication chance
logout Disconnect
mode Configure the 802.1X mode
port-guest-vlan Configure the Guest VLAN
mode of switch ports
port-radius-qos Configure the
RADIUS-assigned QoS mode of switch
port-radius-vlan Configure the
RADIUS-assigned VLAN mode of switch
port-state Configure the 802.1X port
state
quit Disconnect
radius-qos Configure the
RADIUS-assigned QoS mode
radius-vlan Configure the
RADIUS-assigned VLAN mode
reauth-period Configure the period

between reauthentications
reauthentication Configure the 802.1X
reauthentication mode
restart Restart 802.1X
authentication process
restore Restore running
configuration
save Save running
configuration
show Show 802.1X information
Agetime
Configure the time in seconds between check for activity
on successfully authenticated MAC addresses
S YNTAX
agetime <10-1000000>
Parameter
Time in seconds between checks for activity on a MAC address that succeeded
authentication
E XAMPLE
clear Clear 802.1X statistics
SYNTAX
Clear <port-list>
Parameter
Port list available value is from 1 to 10B format:1,3-5

E XAMPLE
eapol-timeout Configure the time between EAPOL retransmissions
S YNTAX
eapol-timeo t <1-65535>
Parameter
<1-65535> Time in seconds between EAPOL retransmissions
E XAMPLE
hold-time Configure the time in seconds before a MAC-address that lied
authentication gets a new authentication chance
S YNTAX
hold-time <10-1000000>
Paramete
<10-1000000> Hold time before MAC addresses that failed
authentication expire
EXAMPLE

mode
Configure the 802.1X mode
S YNTAX
mode <disable> <ensable>
Parameter
Disable Globally disable 802.1X operation mode
enable Globally enable 802.1X operation mode
E XAMPLE
port-guest-vlan Configure the Guest VLAN mode of switch ports
S YNTAX
port-g est-vlan <port-list> <disable> <ensable>

Parameter
Port list, available value is from 1 to 10B format:1,3-5 .
Disable Disable Guest VLAN
Enable Enable Guest VLAN
E XAMPLE
port-radius-qos
A constant that defines a nonzero number of
seconds
between periodic reauthentication of the
supplicant
S YNTAX
port-radi s-qos <port-list> <disable> <ensable>
Parameter
Port list, available value is from 1 to 10B format:1,3-5
Disable Disable RADIUS-assigned QoS
Enable Enable RADIUS-assigned QoS
E XAMPLE
port-radius-vlan Configure the RADIUS-assigned VLAN mode of switch ports
S YNTAX
port-radi s-vlan <port-list>
Parameter
Port list, available value is from 1 to 10B format:1,3-5

E XAMPLE
port-state Configure the 802.1X port state
S YNTAX
port-state <port-list> <force-auth> <force-unauth>
<mac-based> <multi> <port-based> <single>

Parameter
Port list, available value is from 1 to 10B format:1,3-5
force-a th Port access is allowed
force- na th Port access is not allowed
mac-based Switch authenticates on behalf of the client
m lti Multiple Host 802.1X Authentication
port-based Port-based 802.1X Authentication
single Single Host 802.1X Authentication
E XAMPLE
radius-qos
Configure the RADIUS-assigned QoS moder
S YNTAX
radi s-qos <disable> <ensable>
Parameter
Disable Disable RADIUS-assigned QoS
enable Enable RADIUS-assigned QoS
E XAMPLE

radius-vlan
Configure the RADIUS-assigned vlan mode
S YNTAX
radi s-vlan <disable> <ensable>
Parameter
disable Disable RADIUS-assigned vlan
enable Enable RADIUS-assigned vlan
E XAMPLE

2 AAA of CLI
Table : AAA Commands
Command F nction
acc-radius Configure RADIUS accounting Server
accounting Configure Accounting mode
authorization Configure Authorization mode
deadtime Configure server dead time
fallback-author Configure Authorization mode
radius Configure RADIUS authentication server
show Show AAA information
tacacs+ Configure TACACS+ authentication server
timeout Configure server response timeout
acc-radius
To configure the RADIUS accounting server parameter.
Syntax
acc-radi s <index> <enable/disable> <ip-hostname> <0-65535> <Line>
Parameter
<index> The RADIUS accounting Server index. The available value is from 1 to
5
<disable/enable> To enable or disable the RADIUS accounting service.
<ip-hostname> The RADIUS accounting server IP address or hostname.
<0-65535> The RADIUS accounting server UDP port. If the port is set to 0
(zero , then the default port (1813 is used.
<LINE> Secret shared with external accounting server. The Available value is up
to 29 characters long.
EXAMPLE

accounting
To enable or disable the RADIUS accounting operation mode.
Syntax
acco nting <enable/disable>
Parameter
<disable> Globally disable Accounting operation mode.
<enable> Globally enable Accounting operation mode.
EXAMPLE
N OTE :If you didn’t connect the RADIUS Server already then
the switch will show “Server disconnect”.

authorization
To configure (enable/disable RADIUS Authorization mode
Syntax
a thorization <enable/disable>
Parameter
<disable> Globally disable Authorization operation mode.
<enable> Globally enable Authorization operation mode.
EXAMPLE
deadtime
To configure the RADIUS server deadtime.
Syntax
deadtime <0-3600>
Parameter
<0-3600> Time that a server is considered dead if it doesn't answer a request.
The available value is from 0 to 3600 second
Default Setting
None
EXAMPLE
N OTE :If you didn’t connect the RADIUS Server already then
the switch will show “Server disconnect”.

fallback-author
To configure the fallback function of RADIUS authorization with
enable/disable if remote authorization fails.
Syntax
fallback-a thor <disable/ enable>
Parameter
<disable> Disable fallback function.
<enable> Enable fallback function if remote authorization fails.
EXAMPLE
N OTE :If you didn’t connect the RADIUS Server already then
the switch will show “Server disconnect”.
radius
To configure the RADIUS Server detail parameter
Syntax
radi s <index> <enable/disable> <ip-hostname> <0-65535> <Line>
Parameter
<index> The RADIUS accounting Server index. The available value is from 1 to
5
<disable/enable> To enable or disable the RADIUS accounting service.
<ip-hostname> The RADIUS accounting server IP address or hostname.
<0-65535> The RADIUS accounting server UDP port. If the port is set to 0
(zero , then the default port (1813 is used.
<LINE> Secret shared with external accounting server. The Available value is up
to 29 characters long.
EXAMPLE

N OTE :If you didn’t connect the RADIUS Server already then
the switch will show “Server disconnect”.
show
To display the RADIUS AAA information
Syntax
Show <confi >
Show <statistics> <1-5>
Parameter
<config> To show AAA configuration
<statistics> To show RADIUS statistics
<1-5> The RADIUS Server Index
EXAMPLE

tacacs+
To configure the TACACS+ authentication server detail parameter.
Syntax
tacacs+ <index> <enable/disable> <ip-hostname> <0-65535> <Line>
Parameter
<index> The TACACS+ authentication Server index. The available value is from
1 to 5
<disable/enable> To enable or disable the TACACS+ authentication service.
<ip-hostname> The TACACS+ authentication server IP address or hostname.
<0-65535> The TACACS+ authentication server UDP port. If the port is set to 0
(zero , then the default port (1813 is used.
<LINE> Secret shared with external accounting server. The Available value is up
to 29 characters long.
EXAMPLE
N OTE :If you didn’t connect the TACACS+ Server already
then the switch will show “Server disconnect”.