Ruijie RG-S2900G-E Series User manual

RG-S2900G-E Series Switch
RGOS Configuration Guide, Release 10.4(2b12)p1

·
Copyright Statement
Ruijie Networks©2017
Ruijie Networks reserves all copyrights of this document. Any reproduction, excerption, backup, modification,
transmission, translation or commercial use of this document or any portion of this document, in any form or by any means,
without the prior written consent of Ruijie Networks is prohibited.
Exemption Statement
This document is provided “as is”. The contents of this document are subject to change without any notice. Please obtain
the latest information through the Ruijie Networks website. Ruijie Networks endeavors to ensure content accuracy and will
not shoulder any responsibility for losses and damages caused due to content omissions, inaccuracies or errors.

·
Preface
Thank you for using our products. This manual matches the RGOS Release 10.4(2b12)p1.
Audience
This manual is intended for:
Network engineers
Technical support and servicing engineers
Network administrators
Obtaining Technical Assistance
Ruijie Networks Website: http://www.ruijienetworks.com/
Service Email: [email protected]
Technical Support: http://www.ruijienetworks.com/service.aspx
Technical Support Hotline: [phone]
Related Documents
Documents
Description
Command Reference
Describes the related configuration commands, including command modes,
parameter descriptions, usage guides, and related examples.
Hardware Installation and Reference
Guide
Describes the functional and physical features and provides the device
installation steps, hardware troubleshooting, module technical specifications,
and specifications and usage guidelines for cables and connectors.
Conventions
This manual uses the following conventions:
Convention
Description
boldface font
Commands, command options, and keywords are in boldface.
italic font
Arguments for which you supply values are in italics.
[ ]
Elements in square brackets are optional.
{ x | y | z }
Alternative keywords are grouped in braces and separated by vertical bars.
[ x | y | z ]
Optional alternative keywords are grouped in brackets and separated by
vertical bars.

·
Symbols
Means reader take note. Notes contain helpful suggestions or references.
Means reader be careful. In this situation, you might do something that could result in equipment damage or
loss of data.

System Configuration
1. Command Line Interface Configuration
2. Basic Switch Management Configuration
3. Configuring HTTP Service
4. LINE Mode Configuration
5. System Upgrade Configuration
6. File System Configuration
7. System Management Configuration
8. System Memory Display Configuration
9. Syslog Configuration
10.Configuring PoE
11.USB/SD Configuration
12.System Upgrade and Maintenance
13.Stack Management
14.Threshold Configuration
15.Configuring EEE
16.Device Management Configuration

Configuration Guide Command Line Interface Configuration
Command Line Interface Configuration
This chapter describes the method to use the command line interface(CLI). You can manage
network devices by the command line interface.
This chapter covers the following topics:
Command Mode
Getting Help
Abbreviating Commands
Using no and default Options
Understanding CLI Error Messages
Using History Commands
Using Editing Features
Filtering and Looking Up CLI Output Information
Using Command Alias
Accessing CLI
Command Mode
The management interface of Ruijie network devices falls into multiple modes. The command
mode you are working with determines the commands you can use.
To list the usable commands in each mode, enter a question mark (?) at the command prompt.
After setting up a session connection to the network device management interface, you enter in
the user EXEC mode first. In the user EXEC mode, only a few commands are usable with
limited functions, for example, command show. The command results are also not saved.
To use all commands, enter the privileged EXEC mode with the privileged password. Then you
can use all privileged commands and enter the global configuration mode.
Using commands in a configuration mode (for instance, global configuration or interface
configuration) will influence the current configuration. If you have saved the configuration
information, these commands will be saved and executed when the system restarts. To enter
any of the configuration modes, first enter the global configuration mode.
The following table lists the command modes, access methods, prompts, and exit methods.
Suppose the equipment is named "Ruijie" by default.
Summary of main command modes:
Command
mode
Access
method
Prompt
Exit or enter the next mode
Remark

Configuration Guide Command Line Interface Configuration
Command
mode
Access
method
Prompt
Exit or enter the next mode
Remark
User EXEC
Log in.
Ruijie>
Enter command exit to quit
this mode.
Enter command enable to
enter the privileged EXEC
mode.
Used for
basic test
and
showing
system
informatio
n
Privileged
EXEC
In the user
EXEC mode,
enter
command
enable .
Ruijie#
To return to the user EXEC
mode, enter command
disable.
To enter the global
configuration mode, enter
command configure.
Verify
settings.
This mode
is
password-
protected.
Global
configuratio
n
In the
privileged
EXEC mode,
enter
command
configure
terminal.
Ruijie
(config)
#
To return to the privileged
EXEC mode, enter
command end or exit or
press Ctrl+C.
To access the interface
configuration mode, enter
command interface with an
interface specified.
To access the VLAN
configuration mode, enter
command vlan vlan_id.
In this
mode, you
can
execute
command
s to
configure
global
parameter
s
influencing
the whole
switch.
Interface
configuratio
n
In the global
configuration
mode, enter
command
interface.
Ruijie
(config-i
f)#
To return to the privileged
EXEC mode, enter
command end or press
Ctrl+C. To return to the
global configuration mode,
enter command exit.
Moreover, you need specify
an interface in the interface
command.
Configure
various
interfaces
of the
equipment
in this
mode.
Config-vlan
(Vlan Mode)
In the global
configuration
mode, enter
command
vlan vlan-id.
Ruijie
(config-
vlan)#
To return to privileged EXEC
mode, enter command end
or press Ctrl+C.
To return to the global
configuration mode, enter
command exit.
Configure
VLAN
parameter
s in this
mode.

Configuration Guide Command Line Interface Configuration
Getting Help
To obtain a list of commands that are available for each command mode, enter a question
mark(?) at the command prompt. You can also obtain a list of command keywords beginning
with the same character or parameters of each command. See the following table.
Command
Description
Help
Obtain the brief description of the help system
under any command mode.
abbreviated-command-entry?
Obtain a list of commands that begin with a
particular character
string.(Do not leave a space between the
keyword and question mark.)
For example:
Ruijie# di?
dir disable
abbreviated-command-entry
<Tab>
Complete a partial command name.
For example:
Ruijie# show conf<Tab>
Ruijie# show configuration
Command ?
List a command's associated keywords.(Leave a
space between the keyword and question mark.)
For example:
Ruijie# show ?
command keyword ?
List a command's associated arguments.(Leave
a space between the keyword and question
mark.)
For example:
Ruijie(config)# snmp-server
community ?
WORD SNMP community string
Abbreviating Commands
To abbreviate a command, simply enter part of the command that can uniquely identify the
command.
For example, show configuration can be abbreviated as:
Ruijie# show config
If the entered command cannot be uniquely identified by the system, the system will prompt
"Ambiguous command:”.

Configuration Guide Command Line Interface Configuration
For example, when you want to view the information about access lists, the following command
is not complete.
Ruijie# show access
% Ambiguous command: "show access"
Using no and default Options
Almost all commands have the no option generally used to disable a feature or function or
perform a reversed action of the command. For example, the no shutdown command turns on
the interface, the opposite operation of the shutdown command. You can use the commands
without the no option to enable the features that have been disabled or are disabled by default.
Most configuration commands have the default option that restores the command setting to its
default. Most commands are disabled by default. In this case, the default and no options
generally serve the same purpose. However, some commands are enabled by default. In this
case, the default and no options serve different purposes, where the default option enables
the command and restores the arguments to the default settings.
Understanding CLI Error Messages
The following table lists the error prompt messages that may occur when you use the CLI to
manage equipments.
Common CLI error messages:
Error message
Meaning
How to obtain help
% Ambiguous
command: "show c"
The switch cannot identify the
unique command for you input
insufficient characters.
Re-input the command
with a question mark
following the ambiguous
word. The possible
keywords will be listed.
% Incomplete
command.
User has not input the required
keywords or arguments.
Re-input the command
with a space followed by a
question mark. The
possible keywords or
arguments will be
displayed.
% Invalid input
detected at „^‟
marker.
The symbol “^” will indicate the
position of the wrong words
when user inputs a wrong
command.
Input a question mark at
the command prompt to
show the allowed
keywords of the
command.

Configuration Guide Command Line Interface Configuration
Using Historical Commands
The system records the commands you have input recently, which is very useful when you
input a long and complex command again.
To re-execute the commands you have input from the historical records, perform the following
operations.
Operation
Result
Ctrl-P or Up
Allows you to browse the previous command in
the historical command records.
Ctrl-N or Down
Allows you to return to a more recent command in
the historical command records.
Note
Standards-based terminals like VT100 series support arrow
keys.
Using Editing Features
This section describes the editing functions that may be used for command line edit, including:
Edit Shortcut Keys
Sliding Window of Command Line
Editing Shortcut Keys
The following table lists the edit shortcut keys.
Function
Shortcut Key
Description
Move cursor in
an editing line
Left direction key or
Ctrl+B
Move the cursor to left by one
character.
Right direction key or
Ctrl+F
Move the cursor to right by one
character.
Ctrl+A
Move the cursor to the beginning of
the command line.
Ctrl+E
Move the cursor to the end of the
command line.
Delete the
entered
characters
Backspace
Delete the character to the left of the
cursor.
Delete
Delete the character where the
cursor is located.

Configuration Guide Command Line Interface Configuration
Function
Shortcut Key
Description
Scroll up by one
line or one page
Return
Scroll up the displayed contents by
one line and make the next line
appear. This is used only before the
end of the output.
Space
Scroll up the displayed contents by
one page and make the next page
appear. This is used only before the
end of the output.
Sliding Window of Command Line
You can use the sliding window to edit the commands that exceed the width of one line. When
the editing cursor closes to the right border, the whole command line will move to the left by 20
characters. In this case, the cursor can still be moved back to the previous character or the
beginning of the command line.
When editing a command line, you can move the cursor using the shortcut keys in the following
table:
Function
Shortcut key
Move the cursor to the left by one character
Left direction key or Ctrl+B
Move the cursor to the head of a line
Ctrl+A
Move the cursor to the right by one character
Right direction key or Ctrl+F
Move the cursor to the end of a line
Ctrl+E
For example, the contents of the mac-address-table static command may exceed the screen
width. When the cursor approaches the line end for the first time, the whole line move left by 20
characters, and the hidden beginning part is replaced by "$" on the screen. The line moves left
by 20 characters when the cursor reaches the right border.
mac-address-table static 00d0.f800.0c0c vlan 1 interface
$tatic 00d0.f800.0c0c vlan 1 interface fastEthernet
$tatic 00d0.f800.0c0c vlan 1 interface fastEthernet 0/1
Now you can press Ctrl+A to return to the beginning of the command line. In this case, the
hidden ending part is replaced by "$".
-address-table static 00d0.f800.0c0c vlan 1 interface $
Note
The default line width on the terminal is 80 characters.
Combined with historical commands, the sliding window enables you to invoke complicated
commands repeatedly. For details about shortcut keys, see Edit Shortcut Keys.

Configuration Guide Command Line Interface Configuration
Filtering and Looking UP CLI Output Information
Filtering and Looking Up the Information Outputted by
the Show Command
To look up the specified message in the information outputted by the show command, execute
the following command:
Command
Description
Ruijie# show any-command |
begin regular-expression
Look up the specified content from the information
outputted by the show command and output all
information of the first line that contains this content
and subsequent lines.
Caution
1.You can execute show command in any mode.
2.The information to be looked up is case sensitive, and the
following is the same.
To filter the specified content in the information outputted by the show command, execute the
following commands:
Command
Description
Ruijie# show any-command |
exclude regular-expression
Filter the content from the information outputted by
the show command and output other information
excluding the line that includes the specified
content.
Ruijie#show any-command |
include regular-expression
Filter the content from the information outputted by
the show command and output the line that
includes the specified content. Other information
will be filtered.
Note
To look up and filter the contents outputted by the show
command, it is necessary to input the pipeline sign (vertical line,
“|”) followed by lookup and filtration rules and contents (characters
or strings). The contents to be looked up and filtered are case
sensitive.
Using Command Alias
The system provides the command alias function. Any word can be specified as the alias of a
command. For example, you can define the word “mygateway” as the alias of “ip route 0.0.0.0
0.0.0.0 192.1.1.1”. Inputting this word is equal to inputting the whole string.

Configuration Guide Command Line Interface Configuration
You can use one word to replace one command by configuring an alias for the command. For
example, you can define an alias to represent the front part of one command, and then
continue to enter the following part.
The command that an alias represents must run under the mode you have defined in the
current system. In the global configuration mode, you can enter alias? to list all command
modes that can configure alias.
Ruijie(config)#alias ?
aaa-gs AAA server group mode
acl acl configure mode
bgp Configure bgp Protocol
config globle configure mode
......
An alias supports help information. An alias appears with an asterisk (*) before it in the
following format:
*command-alias=original-command
For example, in the EXEC mode, the alias “s” indicates the show command by default. Enter
“s?” to obtain the help information on the command and the aliases beginning with „s‟.
Ruijie#s?
*s=show show start-chat start-terminal-service
If the command that an alias represents has more than one word, the command will be
included by the quotation marks. As shown in the following example, configure the alias “sv” to
replace the show version command in the EXEC mode.
Ruijie#s?
*s=show *sv=”show version” show start-chat
start-terminal-service
An alias must begin with the first character of the command line entered without any blank
before it. As shown in the above example, the alias is invalid if you have inputted a blank before
the command.
Ruijie# s?
show start-chat start-terminal-service
An alias can also be used to get the help information on obtaining command parameters. For
example, the alias “ia" represents “ip address” in the interface configuration mode.
Ruijie(config-if)#ia ?
A.B.C.D IP address

Configuration Guide Command Line Interface Configuration
dhcp IP Address via DHCP
Ruijie(config-if)#ip address
Here lists the parameter information after the command “ip address”, and replaces the alias
with the actual command.
An alias must be inputted fully for use. Otherwise, it can not be identified.
Use the show aliases command to view the setting of aliases in the system.
Accessing CLI
Before using CLI, you need to use a terminal or PC to connect with the network device. Power
on the network device. After the initialization of hardware and software, you can use CLI. If the
network device is used for the first time, you can only connect the network device through the
serial port (Console), which is referred to as out-band management. In addition, you can
connect and manage the network device through Telnet virtual terminal by performing
corresponding configuraitons. In either case, you can access the command line interface.

Configuration Guide Basic Switch Management Configuration
Basic Switch Management
Configuration
Overview
This chapter describes how to manage our switches:
Command Authorization-based Access Control
Logon Authentication Control
System Time Configuration
Scheduled Restart
System Name and Command Prompt Configuration
Banner Configuration
System Information Displaying
Console Rate Configuration
Telnet Configuration
Connection Timeout Configuration
Commands Execution in Batch in the Executable File
Service Switch Configuration
Note
For more information about the usage and description of the CLI
commands mentioned in this chapter, see the Reference
Configuration of Switch Management Command.
Command Authorization-based Access Control
Overview
A simple way to manage the terminals‟access to a network is to use passwords
and assign privileged levels. Password restricts access to a network or network
devices. Privileged levels define the commands users can use after they have
logged in to a network device.
From the perspective of security, password is stored in the configuration file.
Password must be safe when the configuration file is transmitted, for example,
over TFTP, across a network. Password is encrypted before being stored into
the configuration file, and the clear text password is changed to the cipher text
password. The enable secret command uses a private encryption algorithm.

Configuration Guide Basic Switch Management Configuration
Configuring Default Password and
Privileged Level
No password at any level is configured by default. The default priviledged level
is 15.
Configuring/Changing the Passwords at
Different Levels
Our prodects provide the following commands for configuring or changing the
passwords at different levels.
Command
Purpose
Ruijie(config)# enable password
[level level] {password | encryption-type
encrypted-password}
Set a static password. You can only set
a level-15 password only when no
level-15 security password is
configured.
If a non- level -15 password is set, the
system will show a prompt and
automatically convert it into a security
password.
If you have set the same level-15 static
password as the level 15 security
password, the system will show a
warning message.
Ruijie(config)# enable secret [level
level] {encryption-type
encrypted-password}
Set the security password, which has
the same function but better password
encryption algorithm than the static
password. For the purpose of security, it
is recommended to use the security
password.
Ruijie# enable [level], and
Ruijie# disable [level]
Switch over between user levels. To
switch over from a lower level to a
higher level, you need to input the
password for the higher level.
During the process of setting a password, the keyword "level" is used to define
the password for a specified privileged level. After setting, it is only applicable
for the users who are at that level.
Configuring Multiple Privileged Levels
By default, the system has only two password-protected levels: normal user
(level 1) and privileged user (level 15). You can configure up to 16 hierarchical

Configuration Guide Basic Switch Management Configuration
levels of commands for each mode. By configuring different passwords at
different levels, you can use different sets of commands by different levels.
When no password is set for the privileged user level, you can enter the
privileged mode without password authentication. For security, you are
recommended to set the password for the privileged user level.
Configuring Command Authorization
To expand the usage range of a command, you can assign it to the users at
lower level. On contrary, to narrow the usage range of a command, you can
assign it to the users at higher level.
You can use the following commands to authorize users to use a command:
Command
Purpose
Ruijie# configure terminal
Enter the global configuration mode.
Ruijie(config)# privilege mode [all] {level
level | reset}command-string
Set the privileged level for a command.
mode –The CLI command mode at
which you are authorizing the
command. For example, config
indicates the global configuration mode,
exec indicates the privileged command
mode, and interface indicates the
interface configuration mode.
all –Change the privileges of all the
sub-commands of the specified
commands into the same level.
level level –Authorization level in the
range from 0 to 15. Level 1 is for the
normal user level. Level 15 is for the
privileged user level. You can switch
over between various levels by using
the enable/disable command.
command-string - The command to be
authorized.
To restore the configuration for a specified command, use the no privilege
mode [all]level level command in the global configuration mode.
Example of Command Authorization
Configuration
The following is the configuration process that sets the reload command and all
its sub-commands to be level 1, and brings level 1 into effective (by setting the
command as “test”):

Configuration Guide Basic Switch Management Configuration
Ruijie# configure terminal
Ruijie(config)# privilege exec all level 1 reload
Ruijie(config)# enable secret level 1 0 test
Ruijie(config)# end
Enter the level 1, you can see the command and its subcommands:
Ruijie# disable 1
Ruijie> reload ?
at reload at a specific time/date
cancel cancel pending reload scheme
in reload after a time interval
<cr>
The following is the configuration process that restores the privilege settings of
the reload command and all its sub-commands to the default value:
Ruijie# configure terminal
Ruijie(config)# privilege exec all reset reload
Ruijie(config)# end
Enter the level 1, the privilege setting for the command is removed.
Ruijie# disable 1
Ruijie> reload ?
% Unrecognized command.
Configuring Line Password Protection
Our products offer password authentication for remote logons (such as Telnet).
A password is required for the protection purpose. Execute the following
command in the line configuration mode:
Command
Purpose
Ruijie(config-line)# password password
Specify a line password.
Ruijie(config-line)# login
Enable the line password protection.
Note
If no logon authentication is configured, the password
authentication on line layer will be ignored even when the line
password is configured. The logon authentication will be
described in the next section.
Configuring the Password Security Policy
Ruijie‟s products support the configuration of password security policies for
local passwords of a device.A password security policy covers password length
check, strong password check, duplicate password check and password
lifecycle setting.The configuration of password security only takes effect on
global passwords (through the commands enable password and enable

Configuration Guide Basic Switch Management Configuration
secret) and local user passwords (through username), but not on the
passwords under line or remotely authenticated passwords.
Configuring the Password Length Check
The password length check limits the minimum length of the local password, so
passwords shorter than the minimum length are not permitted.
Command
Purpose
Ruijie(config)# password policy min-size
length
Set the minimum length of the password
length : the minimum length of the
password
Ruijie(config)# no password policy
min-size
Disable the password minimum length
check
If a password shorter than the minimum length exists before the minimum length is set,
the user will be prompted to change his/her password when logging in using that
password later.If the user makes no change, the current command can still be used.
If a password shorter than the minimum length is configured after the minimum
length has been configured, the configuration failure will be prompted.
Configuring the Strong Password Check
The strong password check is the check of the password strength to restrict the use of
weak passwords. A strong password must be composed of digits, lower case letters,
upper case letters and special symbols.
Command
Purpose
Ruijie# configure terminal
Enter the global configuration mode
Ruijie(config)# password policy strong
Enable the strong password check
If a weak password exists before the strong password check is configured, the user will
be prompted to change his/her password when logging in using that password later.If
the user makes no change, the current command can still be used.
If a weak password is configured after the strong password check has been configured,
“configuration failure” will be prompted.
Note
Special characters refer to the visible characters except digits,
lower case letters and upper case letters.Space and “?” cannot
be used as the special characters in a password.

Configuration Guide Basic Switch Management Configuration
Configuring the Duplicate Password Check
The duplicate password check restricts the reuse of the passwords that have
been configured recently.The recent use times is configured through the
command password policy no-repeat-times.
Command
Purpose
Ruijie(config)# password policy
no-repeat-times times
Restrict the reuse of the passwords that
have been configured for several times
recently
times: Passwords that have been
configured for several times recently
Ruijie(config)# no password policy
no-repeat-times
Remove the restriction to the reuse of
the passwords that have been
configured for several times recently
The duplicate password check is the recording of recently used passwords
based on the privilege level or user. The differences are as follows:
For passwords configured at different privilege levels, e.g. passwords
configured through the command enable password or enable secret, the
passwords used recently are recorded based on the privilege level.
For passwords configured by local users, e.g. user passwords configured
through the command username, the passwords used recently are
recorded based on a user.
Configuring the Password Lifecycle
The password lifecycle configuration is to set the valid lifetime of a password.
Command
Purpose
Ruijie# configure terminal
Enter the global configuration mode
Ruijie(config)# password policy
life-cycle days
Configure the password lifecycle
days: password lifecycle, in day
Ruijie(config)# no password policy
life-cycle
Remove the password lifecycle
The device checks whether the password used by the user has expired when
he/she uses the password to log in. If a password expires after its user has
logged in, the user will be prompted to change the password when logging in
with that password later.If the user makes no change, the current command
can still be used.