NETGEAR ProSafe GSM7228PS User manual

202-10530-03
May 2010
NETGEAR, Inc.
350 Plumeria Dr.
San Jose, CA 95124 USA
ProSafe 7200 Managed
Switches CLI Manual,
Software Version 8.0.3

ii
v1.0, May 2010
© 2010 by NETGEAR, Inc. All rights reserved.
Trademarks
NETGEAR and the NETGEAR logo are registered trademarks, and ProSafe is a trademark of NETGEAR, Inc.
Microsoft, Windows, and Windows NT are registered trademarks of Microsoft Corporation.
Other brand and product names are registered trademarks or trademarks of their respective holders. Portions of this
document are copyright Intoto, Inc.
May 2010
Statement of Conditions
In the interest of improving internal design, operational function, and/or reliability, NETGEAR reserves the right to
make changes to the products described in this document without notice.
NETGEAR does not assume any liability that may occur due to the use or application of the product(s) or circuit
layout(s) described herein.
EN 55 022 Declaration of Conformance
This is to certify that the ProSafe 7200 Series Stackable Managed Switches is shielded against the generation of radio
interference in accordance with the application of Council Directive 89/336/EEC, Article 4a. Conformity is declared by
the application of EN 55 022 Class B (CISPR 22).
Certificate of the Manufacturer/Importer
It is hereby certified that the ProSafe 7200 Series Stackable Managed Switches has been suppressed in accordance with
the conditions set out in the BMPT-AmtsblVfg 243/1991 and Vfg 46/1992. The operation of some equipment (for
example, test transmitters) in accordance with the regulations may, however, be subject to certain restrictions. Please
refer to the notes in the operating instructions.
The Federal Office for Telecommunications Approvals has been notified of the placing of this equipment on the market
and has been granted the right to test the series for compliance with the regulations.
Bestätigung des Herstellers/Importeurs
Es wird hiermit bestätigt, daß dasProSafe 7200 Series Stackable Managed Switches gemäß der im BMPT-AmtsblVfg
243/1991 und Vfg 46/1992 aufgeführten Bestimmungen entstört ist. Das vorschriftsmäßige Betreiben einiger Geräte
(z.B. Testsender) kann jedoch gewissen Beschränkungen unterliegen. Lesen Sie dazu bitte die Anmerkungen in der
Betriebsanleitung.
Das Bundesamt für Zulassungen in der Telekommunikation wurde davon unterrichtet, daß dieses Gerät auf den Markt
gebracht wurde und es ist berechtigt, die Serie auf die Erfüllung der Vorschriften hin zu überprüfen.
Voluntary Control Council for Interference (VCCI) Statement
This equipment is in the Class B category (information equipment to be used in a residential area or an adjacent area
thereto) and conforms to the standards set by the Voluntary Control Council for Interference by Data Processing
Equipment and Electronic Office Machines aimed at preventing radio interference in such residential areas. When used
near a radio or TV receiver, it may become the cause of radio interference. Read instructions for correct handling.

v1.0, May 2010
iii
Product and Publication Details
Model Number: GSM7228PS and GSM752PS
Publication Date: May 2010
Product Family: managed switch
Product Name: ProSafe 7200 Series Stackable Managed Switches
Home or Business Product: Business
Language: English
Publication Part Number: 202-10530-03
Publication Version Number 1.0

v1.0, May 2010
iv

ProSafe 7200 Managed Switches CLI Manual, Software Version 8.0.3
v
v1.0, May 2010
Contents
About This Manual
Audience ........................................................................................................................... ix
About the Software ........................................................................................................... ix
Scope.......................................................................................................................... x
Product Concept ......................................................................................................... x
Chapter 1
Using the Command-Line Interface
Command Syntax ...........................................................................................................1-1
Command Conventions ..................................................................................................1-2
Common Parameter Values ...........................................................................................1-3
Unit/Slot/Port Naming Convention ..................................................................................1-3
Using the “No” Form of a Command ..............................................................................1-4
Managed Switch Modules ..............................................................................................1-5
Command Modes ...........................................................................................................1-5
Command Completion and Abbreviation ........................................................................1-9
CLI Error Messages ........................................................................................................1-9
CLI Line-Editing Conventions .......................................................................................1-10
Using CLI Help .............................................................................................................1-11
Accessing the CLI .........................................................................................................1-12
Chapter 2
Stacking Commands
Dedicated Port Stacking .................................................................................................2-1
Front Panel Stacking Commands .................................................................................2-10

ProSafe 7200 Managed Switches CLI Manual, Software Version 8.0.3
vi
v1.0, May 2010
Chapter 3
Switching Commands
Port Configuration Commands .......................................................................................3-2
Spanning Tree Protocol (STP) Commands ..................................................................3-10
VLAN Commands .........................................................................................................3-30
Double VLAN Commands ............................................................................................3-45
Voice VLAN Commands ...............................................................................................3-47
Provisioning (IEEE 802.1p) Commands .......................................................................3-50
Protected Ports Commands .........................................................................................3-51
Private Group Commands ............................................................................................3-53
GARP Commands ........................................................................................................3-55
GVRP Commands ........................................................................................................3-58
GMRP Commands .......................................................................................................3-60
Port-Based Network Access Control Commands .........................................................3-63
Storm-Control Commands ............................................................................................3-77
Port-Channel/LAG (802.3ad) Commands ....................................................................3-89
Port Mirroring ..............................................................................................................3-112
Static MAC Filtering ....................................................................................................3-114
DHCP Snooping Configuration Commands ...............................................................3-119
Dynamic ARP Inspection Commands ........................................................................3-130
IGMP Snooping Configuration Commands ................................................................3-138
IGMP Snooping Querier Commands ..........................................................................3-147
Port Security Commands ............................................................................................3-153
LLDP (802.1AB) Commands ......................................................................................3-157
LLDP-MED Commands ..............................................................................................3-168
Denial of Service Commands .....................................................................................3-179
MAC Database Commands ........................................................................................3-191
ISDP Commands ........................................................................................................3-193

ProSafe 7200 Managed Switches CLI Manual, Software Version 8.0.3
vii
v1.0, May 2010
Chapter 4
Routing Commands
Address Resolution Protocol (ARP) Commands ............................................................4-1
IP Routing Commands ...................................................................................................4-8
Router Discovery Protocol Commands ........................................................................4-20
Virtual LAN Routing Commands................................................................................... 4-24
DHCP and BOOTP Relay Commands .........................................................................4-25
IP Helper Commands ...................................................................................................4-27
ICMP Throttling Commands .........................................................................................4-30
Chapter 5
Power Over Ethernet (PoE) Commands
Power Over Ethernet (PoE) Commands .........................................................................5-2
Chapter 6
Quality of Service (QoS) Commands
Class of Service (CoS) Commands ................................................................................6-2
Differentiated Services (DiffServ) Commands ................................................................6-8
DiffServ Class Commands ...........................................................................................6-10
DiffServ Policy Commands ...........................................................................................6-19
DiffServ Service Commands ........................................................................................6-25
DiffServ Show Commands ...........................................................................................6-26
MAC Access Control List (ACL) Commands ................................................................6-32
IP Access Control List (ACL) Commands .....................................................................6-37
IPv6 Access Control List (ACL) Commands .................................................................6-44
Auto-Voice over IP Commands ....................................................................................6-48
Chapter 7
Utility Commands
Auto Install Commands ..................................................................................................7-2

ProSafe 7200 Managed Switches CLI Manual, Software Version 8.0.3
viii
v1.0, May 2010
Dual Image Commands ..................................................................................................7-4
System Information and Statistics Commands ...............................................................7-6
Logging Commands .....................................................................................................7-18
System Utility and Clear Commands ............................................................................7-24
Simple Network Time Protocol (SNTP) Commands .....................................................7-34
DHCP Server Commands ............................................................................................7-40
DNS Client Commands ................................................................................................7-55
Packet Capture Commands .........................................................................................7-61
Serviceability Packet Tracing Commands ....................................................................7-63
Cable Test Command ...................................................................................................7-83
sFlow Commands......................................................................................................... 7-83
Software License Commands........................................................................................7-88
Chapter 8
Management Commands
Configuring the Switch Management CPU .....................................................................8-2
Network Interface Commands ........................................................................................8-4
Console Port Access Commands ...................................................................................8-8
Telnet Commands ........................................................................................................8-11
Secure Shell (SSH) Commands ...................................................................................8-16
Management Security Commands ...............................................................................8-19
Hypertext Transfer Protocol (HTTP) Commands .........................................................8-20
Access Commands .......................................................................................................8-28
User Account Commands .............................................................................................8-29
SNMP Commands ........................................................................................................8-40
RADIUS Commands .....................................................................................................8-52
TACACS+ Commands ..................................................................................................8-67
Configuration Scripting Commands ..............................................................................8-71
Pre-login Banner and System Prompt Commands .......................................................8-73
Chapter 9
Log Messages
Core ................................................................................................................................9-1
Utilities ............................................................................................................................9-4
Management ...................................................................................................................9-6
Switching ......................................................................................................................9-10

ProSafe 7200 Managed Switches CLI Manual, Software Version 8.0.3
ix
v1.0, May 2010
QoS ..............................................................................................................................9-16
Routing/IPv6 Routing ....................................................................................................9-17
Multicast ...................................................................................................................... 9-21
Stacking ........................................................................................................................9-23
Technologies ................................................................................................................9-23
O/S Support ..................................................................................................................9-26
Chapter 10
Captive Portal Commands
Capitve Portal Global Commands ................................................................................10-1
Captive Portal Configuration Commands .....................................................................10-5
Captive Portal Status Commands ..............................................................................10-14
Captive Portal Client Connection Commands ............................................................10-19
Captive Portal Interface Commands ...........................................................................10-23
Captive Portal Local User Commands .......................................................................10-24
Captive Portal User Group Commands ......................................................................10-31
Chapter 11
Command List

ProSafe 7200 Managed Switches CLI Manual, Software Version 8.0.3
x
v1.0, May 2010

-xi
v1.0, May 2010
About This Manual
This document describes command-line interface (CLI) commands you use to view and configure
7200 Series Switches software. You can access the CLI by using a direct connection to the serial
port or by using telnet or SSH over a remote network connection.
Audience
This document is for system administrators who configure and operate systems using 7200 Series
Switches software. It provides an understanding of the configuration options of the software.
Software engineers who integrate software into their hardware platform can also benefit from a
description of the configuration options.
This document assumes that the reader has an understanding of the software base and has read the
appropriate specification for the relevant networking device platform. It also assumes that the
reader has a basic knowledge of Ethernet and networking concepts.
Refer to the release notes for the application-level code. The release notes detail the platform-
specific functionality of the Switching, Routing, SNMP, Configuration, Management, and other
packages. The suite of features the packages support is not available on all the platforms to which
software has been ported.
About the Software
The software has two purposes:
• Assist attached hardware in switching frames, based on Layer 2, 3, or 4 information contained
in the frames.
• Provide a complete device management portfolio to the network administrator.
Note: This document contains both standalone and stacking commands.

ProSafe 7200 Managed Switches CLI Manual, Software Version 8.0.3
-xii
v1.0, May 2010
Scope
The software encompasses both hardware and software support. The software is partitioned to run
in the following processors:
• CPU – This code runs the networking device management portfolio and controls the overall
networking device hardware. It also assists in frame forwarding, as needed and specified. This
code is designed to run on multiple platforms with minimal changes from platform to
platform.
• Networking device processor – This code does the majority of the packet switching, usually at
wire speed. This code is platform dependent, and substantial changes might exist across
products.
Product Concept
Fast Ethernet and Gigabit Ethernet switching continues to evolve from high-end backbone
applications to desktop switching applications. The price of the technology continues to decline,
while performance and feature sets continue to improve. Devices that are capable of switching
Layers 2, 3, and 4 are increasingly in demand. The software provides a flexible solution to these
ever-increasing needs.
The exact functionality provided by each networking device on which the software base runs
varies depending upon the platform and requirements of the FASTPATH software.
The software includes a set of comprehensive management functions for managing both the
software and the network. You can manage the software by using one of the following three
methods:
• Command-Line Interface (CLI)
• Simple Network Management Protocol (SNMP)
• Web-based
Each of the management methods enables you to configure, manage, and control the software
locally or remotely using in-band or out-of-band mechanisms. Management is standards-based,
with configuration parameters and a private MIB providing control for functions not completely
specified in the MIBs.
Conventions, Formats, and Scope
The conventions, formats, and scope of this manual are described in the following paragraphs:

ProSafe 7200 Managed Switches CLI Manual, Software Version 8.0.3
-xiii
v1.0, May 2010
•Typographical Conventions.This manual uses the following typographical conventions::
•Formats.This manual uses the following formats to highlight special messages:
•Scope.This manual is written for the 7200 Series Switches.
Italic Emphasis, books, CDs, file and server names, extensions
Bold User input, IP addresses, GUI screen text
Fixed Command prompt, CLI text, code
italic URL links
Note: This format is used to highlight information of importance or special interest.
Tip: This format is used to highlight a procedure that will save time or resources.
Warning: Ignoring this type of note may result in a malfunction or damage to the
equipment.
Danger: This is a safety warning. Failure to take heed of this notice may result in
personal injury or death.
Product Version ProSafe 7200 Series Stackable Managed Switches
Manual Publication Date May 2010
Note: Product updates are available on the NETGEAR, Inc. website at
http://kbserver.netgear.com

ProSafe 7200 Managed Switches CLI Manual, Software Version 8.0.3
-xiv
v1.0, May 2010
How to Print This Manual
To print this manual, your computer must have the free Adobe Acrobat reader installed in order to
view and print PDF files. The Acrobat reader is available on the Adobe Web site at
http://www.adobe.com.
Revision History
Part Number Version
Number Date Description
202-10530-03 1.0 May 2010 Product update: New firmware and new user Interface

1-1
v1.0, May 2010
Chapter 1
Using the Command-Line Interface
The command-line interface (CLI) is a text-based way to manage and monitor the system. You can
access the CLI by using a direct serial connection or by using a remote logical connection with
telnet or SSH.
This chapter describes the CLI syntax, conventions, and modes. It contains the following sections:
•“Command Syntax” on page 1-1
•“Command Conventions” on page 1-2
•“Common Parameter Values” on page 1-3
•“Slot/Port Naming Convention” on page 1-3
•“Using the “No” Form of a Command” on page 1-4
•“Managed Switch Modules” on page 1-5
•“Command Modes” on page 1-5
•“Command Completion and Abbreviation” on page 1-9
•“CLI Error Messages” on page 1-9
•“CLI Line-Editing Conventions” on page 1-10
•“Using CLI Help” on page 1-11
•“Accessing the CLI” on page 1-12
Command Syntax
A command is one or more words that might be followed by one or more parameters. Parameters
can be required or optional values.
Some commands, such as show network or clear vlan, do not require parameters. Other
commands, such as network parms, require that you supply a value after the command. You
must type the parameter values in a specific order, and optional parameters follow required
parameters. The following example describes the network parms command syntax:
Format network parms <ipaddr> <netmask> [gateway]

ProSafe 7200 Managed Switches CLI Manual, Software Version 8.0.3
Using the Command-Line Interface 1-2
v1.0, May 2010
•network parms is the command name.
•<ipaddr> and <netmask> are parameters and represent required values that you must
enter after you type the command keywords.
•[gateway] is an optional parameter, so you are not required to enter a value in place of the parameter.
The CLI Command Reference lists each command by the command name and provides a brief
description of the command. Each command reference also contains the following information:
• Format shows the command keywords and the required and optional parameters.
• Mode identifies the command mode you must be in to access the command.
• Default shows the default value, if any, of a configurable setting on the device.
The show commands also contain a description of the information that the command shows.
Command Conventions
In this document, the command name is in bold font. Parameters are in italic font. You
must replace the parameter name with an appropriate value, which might be a name or number.
Parameters are order dependent.
The parameters for a command might include mandatory values, optional values, or keyword
choices. Table 1 describes the conventions this document uses to distinguish between value types.
Table 1. Parameter Conventions
Symbol Example Description
<> angle brackets <value> Indicates that you must enter a value in place of the
brackets and text inside them.
[] square brackets [value] Indicates an optional parameter that you can enter in
place of the brackets and text inside them.
{} curly braces {choice1 |
choice2} Indicates that you must select a parameter from the list of choices.
| Vertical bars choice1 | choice2 Separates the mutually exclusive choices.
[{}] Braces within
square brackets [{choice1 | choice2}] Indicates a choice within an optional element.

ProSafe 7200 Managed Switches CLI Manual, Software Version 8.0.3
Using the Command-Line Interface 1-3
v1.0, May 2010
Common Parameter Values
Parameter values might be names (strings) or numbers.To use spaces as part of a name parameter,
enclose the name value in double quotes. For example, the expression “System Name with
Spaces” forces the system to accept the spaces. Empty strings (““) are not valid user-defined
strings. Table 2 describes common parameter values and value formatting.
Slot/Port Naming Convention
Managed switch software references physical entities such as cards and ports by using a unit/slot/
port naming convention. The software also uses this convention to identify certain logical entities,
such as Port-Channel interfaces.
Table 2. Parameter Descriptions
Parameter Description
ipaddr This parameter is a valid IP address. You can enter the IP address in the following
formats:
a (32 bits)
a.b (8.24 bits)
a.b.c (8.8.16 bits)
a.b.c.d (8.8.8.8)
In addition to these formats, the CLI accepts decimal, hexadecimal and octal formats
through the following input formats (where nis any valid hexadecimal, octal or decimal
number):
0xn (CLI assumes hexadecimal format)
0n (CLI assumes octal format with leading zeros)
n (CLI assumes decimal format)
ipv6-address FE80:0000:0000:0000:020F:24FF:FEBF:DBCB, or
FE80:0:0:0:20F:24FF:FEBF:DBCB, or
FE80::20F24FF:FEBF:DBCB, or
FE80:0:0:0:20F:24FF:128:141:49:32
For additional information, refer to RFC 3513.
Interface or
unit/slot/port Valid slot and port number separated by forward slashes. For example, 0/1 represents slot number 0 and port number 1.
Logical Interface Represents a logical slot and port number. This is applicable in the case of a port-
channel (LAG). You can use the logical unit/slot/port to configure the port-channel.
Character strings Use double quotation marks to identify character strings, for example, “System Name
with Spaces”. An empty string (“”) is not valid.

ProSafe 7200 Managed Switches CLI Manual, Software Version 8.0.3
Using the Command-Line Interface 1-4
v1.0, May 2010
The slot number has two uses. In the case of physical ports, it identifies the card containing the
ports. In the case of logical and CPU ports it also identifies the type of interface or port.
The port identifies the specific physical port or logical interface being managed on a given slot.
Using the “No” Form of a Command
The no keyword is a specific form of an existing command and does not represent a new or
distinct command. Almost every configuration command has a no form. In general, use the no
form to reverse the action of a command or reset a value back to the default. For example, the no
Table 3. Type of Slots
Slot Type Description
Physical slot numbers Physical slot numbers begin with zero, and are allocated up to the maximum
number of physical slots.
Logical slot numbers Logical slots immediately follow physical slots and identify port-channel (LAG) or
router interfaces.
CPU slot numbers The CPU slots immediately follow the logical slots.
Table 4. Type of Ports
Port Type Description
Physical Ports The physical ports for each slot are numbered sequentially starting from zero.
Logical Interfaces Port-channel or Link Aggregation Group (LAG) interfaces are logical interfaces
that are only used for bridging functions.
VLAN routing interfaces are only used for routing functions.
Loopback interfaces are logical interfaces that are always up.
Tunnel interfaces are logical point-to-point links that carry encapsulated packets.
CPU ports CPU ports are handled by the driver as one or more physical entities located on
physical slots.
Note: In the CLI, loopback and tunnel interfaces do not use the unit/slot/port format. To
specify a loopback interface, you use the loopback ID. To specify a tunnel
interface, you use the tunnel ID.

ProSafe 7200 Managed Switches CLI Manual, Software Version 8.0.3
Using the Command-Line Interface 1-5
v1.0, May 2010
shutdown configuration command reverses the shutdown of an interface. Use the command
without the keyword no to re-enable a disabled feature or to enable a feature that is disabled by
default. Only the configuration commands are available in the no form.
Managed Switch Modules
Managed switch software consists of flexible modules that can be applied in various combinations
to develop advanced Layer 2/3/4+ products. The commands and command modes available on
your switch depend on the installed modules. Additionally, for some show commands, the output
fields might change based on the modules included in the software.
The software suite includes the following modules:
• Switching (Layer 2)
• Quality of Service
• Management (CLI, Web UI, and SNMP)
• IPv6 Management—Allows management of the device through an IPv6 through an IPv6
address without requiring the IPv6 Routing package in the system. The management address
can be associated with the network port (front-panel switch ports), a routine interface (port or
VLAN) and the Service port.
• Stacking
Not all modules are available for all platforms or software releases.
Command Modes
The CLI groups commands into modes according to the command function. Each of the command
modes supports specific software commands. The commands in one mode are not available until
you switch to that particular mode, with the exception of the User EXEC mode commands. You
can execute the User EXEC mode commands in the Privileged EXEC mode.
The command prompt changes in each command mode to help you identify the current mode.
Table 5 describes the command modes and the prompts visible in that mode.
Note: The command modes available on your switch depend on the software modules
that are installed. For example, a switch that does not support BGPv4 does not have
the Router BGPv4 Command Mode.

ProSafe 7200 Managed Switches CLI Manual, Software Version 8.0.3
Using the Command-Line Interface 1-6
v1.0, May 2010
Table 5. CLI Command Modes
Command Mode Prompt Mode Description
User EXEC Switch> Contains a limited set of commands to view
basic system information.
Privileged EXEC Switch# Allows you to issue any EXEC command, enter
the VLAN mode, or enter the Global
Configuration mode.
Global Config Switch (Config)# Groups general setup commands and permits
you to make modifications to the running
configuration.
VLAN Config Switch (Vlan)# Groups all the VLAN commands.
Interface Config Switch (Interface <unit/slot/port>)#
Switch (Interface Loopback <id>)#
Switch (Interface Tunnel <id>)#
Manages the operation of an interface and
provides access to the router interface
configuration commands.
Use this mode to set up a physical port for a
specific logical connection operation.
Line Config Switch (line)# Contains commands to configure outbound
telnet settings and console interface settings.
Policy Map
Config Switch (Config-policy-map)# Contains the QoS Policy-Map configuration commands.
Policy Class
Config Switch (Config-policy-class-map)# Consists of class creation, deletion, and matching commands. The class match
commands specify Layer 2, Layer 3, and
general match criteria.
Class Map Config Switch (Config-class-map)# Contains the QoS class map configuration
commands for IPv4.
Ipv6_Class-Map
Config Switch (Config-class-map)# Contains the QoS class map configuration commands for IPv6.
Router OSPF
Config Switch (Config-router)# Contains the OSPF configuration commands.
Router OSPFv3
Config Switch (Config rtr)# Contains the OSPFv3 configuration commands.
Router RIP Config Switch (Config-router)# Contains the RIP configuration commands.
Router BGP
Config Switch (Config-router)# Contains the BGP4 configuration commands.
MAC Access-list
Config Switch (Config-mac-access-list)# Allows you to create a MAC Access-List and to enter the mode containing MAC Access-List
configuration commands.