D-Link DES-3010FA-TAA CLI Guide
D-Link DES-3010FA-TAA - Switch 10/100MBPS Mgmt Manual
 |
UPC - 790069296505
View all D-Link DES-3010FA-TAA manuals
Add to My Manuals
Save this manual to your list of manuals |
D-Link DES-3010FA-TAA manual content summary:
- D-Link DES-3010FA-TAA | CLI Guide - Page 1
- D-Link DES-3010FA-TAA | CLI Guide - Page 2
Link DES-3010FA/GA CLI Reference Guide Table of Contents Section 1. Using the CLI...10 1.1 CLI Command Modes...10 1.1.1 Introduction...10 1.1.2 User EXEC Mode ...11 1.1.3 Privileged EXEC Mode ...11 1.1.4 Global Configuration Mode...12 1.1.5 Interface ...36 port security ...37 port security routed - D-Link DES-3010FA-TAA | CLI Guide - Page 3
Table of Contents show ports security ...45 Section 4. Clock...47 clock set ...47 clock source timer ...55 sntp broadcast client enable 56 sntp anycast client enable...57 sntp client enable (Interface 58 sntp unicast client enable...59 sntp unicast client poll ...60 sntp server ...61 show clock - D-Link DES-3010FA-TAA | CLI Guide - Page 4
D-Link DES-3010FA/GA CLI Reference Guide show interfaces configuration 86 show interfaces status ...87 show interfaces description 89 show interfaces counters ...90 port storm-control include-multicast 93 port storm-control broadcast enable 94 port storm-control broadcast rate 95 show ports - D-Link DES-3010FA-TAA | CLI Guide - Page 5
show management access-class 148 Section 13. PHY Diagnostics Commands 149 test copper-port tdr...149 show copper-ports tdr ...150 show copper-ports cable-length 151 show fiber-ports optical-transceiver 152 Section 14. Port Channel Commands 153 interface port-channel ...153 interface range port - D-Link DES-3010FA-TAA | CLI Guide - Page 6
D-Link DES-3010FA/GA CLI Reference Guide Section 15. Port Monitor Commands 157 port monitor...157 port monitor vlan-tagging ...158 show ports monitor...159 Section 16. QoS Commands 160 qos ...160 show qos...161 priority-queue out num-of-queues 162 rate-limit interface configuration 163 show qos - D-Link DES-3010FA-TAA | CLI Guide - Page 7
views...216 show snmp groups...217 show snmp filters ...219 show snmp users ...220 Section 20. Spanning-Tree Commands 221 spanning-tree ...221 spanning-tree -tree cost ...228 spanning-tree port-priority 229 spanning-tree portfast ...230 spanning-tree link-type...231 spanning-tree pathcost method - D-Link DES-3010FA-TAA | CLI Guide - Page 8
D-Link DES-3010FA/GA CLI Reference Guide name (mst)...242 revision (mst) ...243 show (mst) ...244 exit System Management 265 ping ...265 traceroute...267 reload ...269 hostname ...270 show users...271 show system ...272 show version ...273 show system id ...274 Section 23. User Interface 275 - D-Link DES-3010FA-TAA | CLI Guide - Page 9
internal-usage-vlan...306 show vlan ...307 show vlan internal usage ...308 show interfaces switchport 309 Section 25. Web Server...312 ip http server ...312 ip https server ...313 ip http port ...314 ip https port ...315 show ip http...316 Section 26. 802.1x Commands 317 aaa authentication dot1x - D-Link DES-3010FA-TAA | CLI Guide - Page 10
D-Link DES-3010FA/GA CLI Reference Guide dot1x timeout re-authperiod 321 dot1x re-authenticate ...322 dot1x timeout quiet-period 323 dot1x timeout tx-period ...324 dot1x max-req ...325 dot1x timeout supp-timeout 326 dot1x timeout server-timeout 327 show dot1x...328 show dot1x users ...331 show - D-Link DES-3010FA-TAA | CLI Guide - Page 11
navigate from one command mode to another. The standard order to access the modes is as follows: User EXEC mode, Privileged EXEC mode, Global Configuration mode, and Interface Configuration mode. The following figure illustrates the command mode access path. When starting a session, the initial mode - D-Link DES-3010FA-TAA | CLI Guide - Page 12
D-Link DES-3010FA/GA CLI Reference Guide The Global Configuration mode manages the device configuration on a global level. The Interface Configuration mode configures specific interfaces in the device. 1.1.2 User EXEC Mode After logging into the device, the user is automatically in User EXEC command - D-Link DES-3010FA-TAA | CLI Guide - Page 13
Privileged EXEC mode, the user can use one of interface mode, and are used to manage the member ports as a single entity. The interface port-channel Global Configuration mode command is used to enter the Port Channel Interface Configuration mode. • SSH Public Key-chain - Contains commands to manually - D-Link DES-3010FA-TAA | CLI Guide - Page 14
D-Link DES-3010FA/GA CLI Reference Guide • MAC Access-List - Configures conditions required to allow traffic based on MAC addresses. The mac access-list Global Configuration mode command is used to enter the MAC access-list configuration mode.. 1.2 Starting the CLI The device can be managed over a - D-Link DES-3010FA-TAA | CLI Guide - Page 15
interfaces status ethernet 8, show, interfaces and status are keywords, ethernet is an argument that specifies the interface type, and 8 specifies the port manually entered. To see what commands are available in each mode or within an interface internally managed Command recalled, reviewed, modified, - D-Link DES-3010FA-TAA | CLI Guide - Page 16
D-Link DES-3010FA/GA CLI Reference Guide 1.3.1.2 Negating the Effect of Commands For many configuration commands, the prefix keyword no can be entered to cancel the effect of a command or reset the configuration to the default value. This guide describes the negation effect for all applicable - D-Link DES-3010FA-TAA | CLI Guide - Page 17
or parameters and all is an option, the default for the command is all when no parameters are defined. For example, the command interface range port-channel has the option of either entering a range of channels, or selecting all. When the command is entered without a parameter, it automatically - D-Link DES-3010FA-TAA | CLI Guide - Page 18
D-Link DES-3010FA/GA CLI Reference Guide Section 2. AAA Commands aaa authentication login The aaa authentication . Uses the list of all RADIUS servers for authentication. Default Configuration The local user database is checked. This has the same effect as the command aaa authentication login - D-Link DES-3010FA-TAA | CLI Guide - Page 19
AAA Commands User Guidelines The default and optional list names created with the aaa authentication login command are used with the login authentication command. Create a list by entering - D-Link DES-3010FA-TAA | CLI Guide - Page 20
D-Link DES-3010FA/GA CLI Reference Guide aaa authentication enable The aaa authentication enable Global the command aaa authentication enable default enable none. Command Mode Global Configuration mode User Guidelines The default and optional list names created with the aaa authentication enable - D-Link DES-3010FA-TAA | CLI Guide - Page 21
AAA Commands Example The following example sets the enable password for authentication when accessing higher privilege levels. Console(config)# aaa authentication enable default enable Page 20 - D-Link DES-3010FA-TAA | CLI Guide - Page 22
D-Link DES-3010FA/GA CLI Reference Guide login authentication The login authentication Line Configuration mode command with the command aaa authentication login. Command Mode Line Configuration mode User Guidelines Changing login authentication from default to another value may disconnect the - D-Link DES-3010FA-TAA | CLI Guide - Page 23
. Default Configuration Uses the default set with the aaa authentication enable command. Command Mode Line Configuration mode User Guidelines There are no user guidelines for this command. Example The following example specifies the default authentication method when accessing a higher privilege - D-Link DES-3010FA-TAA | CLI Guide - Page 24
Link DES-3010FA/GA CLI Reference Guide ip http authentication The ip http authentication Global Configuration mode command specifies authentication methods for HTTP server users RADIUS servers for authentication. Default Configuration The local user database is checked. This has the same effect as - D-Link DES-3010FA-TAA | CLI Guide - Page 25
the local username database for authentication. Uses no authentication. Uses the list of all RADIUS servers for authentication. Default Configuration The local user database is checked. This has the same effect as the command ip https authentication local. Command Mode Global Configuration mode - D-Link DES-3010FA-TAA | CLI Guide - Page 26
D-Link DES-3010FA/GA CLI Reference Guide show authentication methods The show authentication methods Privileged EXEC mode command has no default configuration. Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command. Example The following example displays - D-Link DES-3010FA-TAA | CLI Guide - Page 27
password to be entered, copied from another device configuration. Default Configuration No password is defined. Command Mode Line Configuration mode User Guidelines If a password is defined as encrypted, the required password length is 32 characters. Example The following example specifies password - D-Link DES-3010FA-TAA | CLI Guide - Page 28
D-Link DES-3010FA/GA CLI Reference Guide enable password The enable password Global Configuration mode command sets a local password to control access to user and privilege levels. To remove the password requirement, use the no form of this command. Syntax enable password [level level] password [ - D-Link DES-3010FA-TAA | CLI Guide - Page 29
[level level] [encrypted] no username name Parameters • name - The name of the user (Range: 1- 20 characters). • password - The authentication password for the user (Range: 1-159 characters). • level - The user level (Range: 1-15). • encrypted - Encrypted password entered, copied from another device - D-Link DES-3010FA-TAA | CLI Guide - Page 30
D-Link DES-3010FA/GA CLI Reference Guide Section 3. Address Table Commands bridge address The bridge address Interface Configuration (VLAN) mode command adds a MAC-layer station source address to the bridge table. To delete the MAC address, use the no form of this command. Syntax bridge address mac- - D-Link DES-3010FA-TAA | CLI Guide - Page 31
is disabled. All multicast addresses are flooded to all ports. Command Mode Global Configuration mode User Guidelines If multicast routers exist on the VLAN, do not change the unregistered multicast addresses state to drop on the switch ports. If multicast routers exist on the VLAN and IGMP - D-Link DES-3010FA-TAA | CLI Guide - Page 32
D-Link DES-3010FA/GA CLI Reference Guide bridge multicast address The bridge multicast address Interface Configuration (VLAN) mode command registers a MAC-layer multicast address in the bridge table and statically adds ports to the group. To unregister the MAC address, use the no form of this - D-Link DES-3010FA-TAA | CLI Guide - Page 33
and no spaces; a hyphen is used to designate a range of port-channels. Default Configuration No forbidden addresses are defined. Command Modes Interface Configuration (VLAN) mode User Guidelines Before defining forbidden ports, the multicast group should be registered. Examples In this example, MAC - D-Link DES-3010FA-TAA | CLI Guide - Page 34
D-Link DES-3010FA/GA CLI Reference Guide bridge multicast forward-all The bridge multicast forward-all Interface Configuration (VLAN) mode command enables forwarding all multicast packets on a port. To restore the default configuration, use the no form of this command. Syntax bridge multicast - D-Link DES-3010FA-TAA | CLI Guide - Page 35
hyphen is used to designate a range of port-channels. Default Configuration This setting is disabled. Command Mode Interface Configuration (VLAN) mode User Guidelines IGMP snooping dynamically discovers multicast router ports. When a multicast router port is discovered, all the multicast packets are - D-Link DES-3010FA-TAA | CLI Guide - Page 36
D-Link DES-3010FA/GA CLI Reference Guide bridge aging-time The bridge aging-time Global Default Configuration The default setting is 300 seconds. Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command. Example In this example the bridge aging time is - D-Link DES-3010FA-TAA | CLI Guide - Page 37
from the forwarding database. Syntax clear bridge Default Configuration This command has no default configuration. Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command. Example In this example, the bridge tables are cleared. Console# clear bridge Page 36 - D-Link DES-3010FA-TAA | CLI Guide - Page 38
D-Link DES-3010FA/GA CLI Reference Guide port security The port security Interface Configuration mode command locks the port, thereby, blocking unknown traffic and preventing the port from learning new addresses. To return to the default configuration, use the no form of this command. Syntax port - D-Link DES-3010FA-TAA | CLI Guide - Page 39
security mode. The address is deleted if the port exits the security mode or is not a routed port. Example In this example, the MAC-layer address 66:66:66:66:66:66 is added to port 1. Console(config)# interface ethernet 1 Console(config-if)# port security routed secure-address 66:66:66:66:66:66 Page - D-Link DES-3010FA-TAA | CLI Guide - Page 40
D-Link DES-3010FA/GA CLI Reference Guide show bridge address-table Use the show bridge address-table Privileged EXEC command to view entries in the bridge-forwarding database. Syntax show bridge address-table [vlan vlan] [ethernet interface | port-channel port-channel-number] ] [address macaddress - D-Link DES-3010FA-TAA | CLI Guide - Page 41
a valid VLAN, such as VLAN 1. • interface - A valid Ethernet port. • port-channel-number - A valid port-channel number. Default Configuration This command has no default configuration. Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command. Example In this - D-Link DES-3010FA-TAA | CLI Guide - Page 42
D-Link DES-3010FA/GA CLI Reference Guide show bridge address-table count The show bridge address-table count Privileged EXEC mode command displays the number of addresses present in the Forwarding Database. Syntax show bridge address-table count [vlan vlan][ ethernet interface-number | port-channel - D-Link DES-3010FA-TAA | CLI Guide - Page 43
Configuration This command has no default configuration. Command Mode Privileged EXEC mode User Guidelines A MAC address can be displayed in IP format only if it :08 Type ------static static dynamic Ports ---------1, 2 1-3 5-7 Forbidden ports for multicast addresses: Vlan ---1 19 MAC Address 01:00:5e: - D-Link DES-3010FA-TAA | CLI Guide - Page 44
D-Link DES-3010FA/GA CLI Reference Guide Console# show bridge multicast address-table format ip Vlan ---1 18 19 IP/MAC Address 224-239.130|2.2.3 224-239.130|2.2.8 224-239.130|2.2.8 Type -----static static dynamic Ports --------1,2 1-3 5-7 Forbidden ports for multicast addresses: Vlan ---1 19 - D-Link DES-3010FA-TAA | CLI Guide - Page 45
Guidelines There are no user guidelines for this command. Example In this example, the multicast configuration for VLAN 1 is displayed. Console# show bridge multicast filtering 1 Filtering: Enabled VLAN: 1 Port ---1 2 3 Forward-Unregistered Static Status --------- --------- Forbidden Filter - D-Link DES-3010FA-TAA | CLI Guide - Page 46
D-Link DES-3010FA/GA CLI Reference Guide show ports security The show ports security Privileged EXEC mode command displays the port-lock status. Syntax show ports security [ethernet interface | port-channel port-channel-number] Parameters • interface - A valid Ethernet port. • port-channel-number - - D-Link DES-3010FA-TAA | CLI Guide - Page 47
Address Table Commands ch7 Disabled ch8 Disabled The following tables describes the fields shown above. Field Port Status Action Trap Frequency Description Port number Locked/Unlocked Action on violation Indicates if traps are sent in case of a violation Minimum time between consecutive traps - D-Link DES-3010FA-TAA | CLI Guide - Page 48
D-Link DES-3010FA/GA CLI Reference Guide Section 4. Clock clock set The clock set Privileged EXEC mode command manually sets command has no default configuration. Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command. Example The following example sets the - D-Link DES-3010FA-TAA | CLI Guide - Page 49
no clock source Parameters • sntp - SNTP servers Default Configuration No external clock source Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command. Examples The following example configures an external time source for the system clock. Console(config - D-Link DES-3010FA-TAA | CLI Guide - Page 50
D-Link DES-3010FA/GA CLI Reference Guide clock timezone The clock timezone Global Configuration mode Range: -12 - +13) Default Configuration Clock set to UTC. Command Mode Global Configuration mode User Guidelines The system internally keeps time in UTC, so this command is used only for display - D-Link DES-3010FA-TAA | CLI Guide - Page 51
clock summer-time The clock summer-time Global Configuration mode command configures the system to automatically switch to summer time (daylight saving time). To configure the software not to automatically switch to summer time, use the no form of this command. Syntax clock summer-time recurring - D-Link DES-3010FA-TAA | CLI Guide - Page 52
D-Link DES-3010FA/GA CLI Reference Guide User Guidelines In both the date and recurring forms of the command, the first part of the command specifies when summer time begins, and the second - D-Link DES-3010FA-TAA | CLI Guide - Page 53
: 1-4294967295) • value - Key value (Range: 1-8 characters) Default Configuration No authentication key is defined. Command Mode Global Configuration mode User Guidelines Multiple keys can be generated. Examples The following example defines the authentication key for SNTP. Console(config)# sntp - D-Link DES-3010FA-TAA | CLI Guide - Page 54
D-Link DES-3010FA/GA CLI Reference Guide sntp authenticate The sntp authenticate Global Configuration mode command no sntp authenticate Default Configuration No authentication Command Mode Global Configuration mode User Guidelines The command is relevant for both unicast and broadcast. Examples The - D-Link DES-3010FA-TAA | CLI Guide - Page 55
Key number of authentication key to be trusted. (Range: 1 - 4294967295) Default Configuration No keys are trusted. Command Mode Global Configuration mode User Guidelines The command is relevant for both received unicast and broadcast. If there is at least 1 trusted key, then unauthenticated messages - D-Link DES-3010FA-TAA | CLI Guide - Page 56
D-Link DES-3010FA/GA CLI Reference Guide sntp client poll timer The sntp client poll timer Global Configuration Polling interval is 1024 seconds. Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command. Examples The following example sets the polling - D-Link DES-3010FA-TAA | CLI Guide - Page 57
The SNTP broadcast client is disabled. Command Mode Global Configuration mode User Guidelines Use the sntp client enable (Interface) Interface Configuration mode command to enable the SNTP client on a specific interface. Examples The following example enables the SNTP broadcast clients. Console - D-Link DES-3010FA-TAA | CLI Guide - Page 58
D-Link DES-3010FA/GA CLI Reference Guide sntp anycast client enable The sntp anycast client enable Configuration mode User Guidelines Polling time is determined by the sntp client poll timer Global Configuration mode command. Use the sntp client enable (Interface) Interface Configuration mode - D-Link DES-3010FA-TAA | CLI Guide - Page 59
sntp client enable no sntp client enable Default Configuration The SNTP client is disabled on an interface. Command Mode Interface configuration (Ethernet, port-channel, VLAN) mode User Guidelines Use the sntp broadcast client enable Global Configuration mode command to enable broadcast clients - D-Link DES-3010FA-TAA | CLI Guide - Page 60
D-Link DES-3010FA/GA CLI Reference Guide sntp unicast client enable The sntp unicast client enable Global Default Configuration The SNTP unicast client is disabled. Command Mode Global Configuration mode User Guidelines Use the sntp server Global Configuration mode command to define SNTP servers. - D-Link DES-3010FA-TAA | CLI Guide - Page 61
. Syntax sntp unicast client poll no sntp unicast client poll Default Configuration Polling is disabled. Command Mode Global Configuration mode User Guidelines Polling time is determined by the sntp client poll timer Global Configuration mode command. Examples The following example enables polling - D-Link DES-3010FA-TAA | CLI Guide - Page 62
D-Link DES-3010FA/GA CLI Reference Guide sntp server The sntp server Global Configuration mode command (Range:1-4294967295) Default Configuration No servers are defined. Command Mode Global Configuration mode User Guidelines Up to 8 SNTP servers can be defined. Use the sntp unicast client - D-Link DES-3010FA-TAA | CLI Guide - Page 63
detail] Parameters • detail - Shows timezone and summertime configuration. Default Configuration This command has no default configuration. Command Mode User EXEC mode User Guidelines The symbol that precedes the show clock display indicates the following: Symbol * (blank) . Description Time is - D-Link DES-3010FA-TAA | CLI Guide - Page 64
D-Link DES-3010FA/GA CLI Reference Guide show sntp configuration The default configuration. Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command. Examples The following example Enabled Anycast Clients: Enabled Broadcast and Anycast Interfaces: 1, 3 Page 63 - D-Link DES-3010FA-TAA | CLI Guide - Page 65
configuration. Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command. Examples The -----7.33 8.98 Delay [mSec] -----117.79 189.19 Anycast server: Server Interface --------176.1.11.8 ------VLAN 118 Status Last response ----Up 9:53:21.789 PDT - D-Link DES-3010FA-TAA | CLI Guide - Page 66
D-Link DES-3010FA/GA CLI Reference Guide Section 5. Configuration and Image Files copy The copy Privileged EXEC command has no default configuration. Command Mode Privileged EXEC mode User Guidelines Up to five backup configuration files are supported on the device. The location of a file system - D-Link DES-3010FA-TAA | CLI Guide - Page 67
in the loaded configuration file are added to those in the running configuration file as if the commands were typed in the command-line interface (CLI). Thus, the resulting configuration file is a combination of the previous running configuration and the loaded configuration files with the loaded - D-Link DES-3010FA-TAA | CLI Guide - Page 68
D-Link DES-3010FA/GA CLI Reference Guide Example The following example copies system image file1 from the TFTP server 172.16.101.101 to a non-active image file. Console# copy tftp://172. - D-Link DES-3010FA-TAA | CLI Guide - Page 69
or Destination Represents the startup configuration file. Default Configuration This command has no default configuration. Command Mode Privileged EXEC mode User Guidelines *.sys, image file cannot be deleted. Examples The following example deletes file test from flash memory. Console# delete - D-Link DES-3010FA-TAA | CLI Guide - Page 70
D-Link DES-3010FA/GA CLI Reference Guide delete startup-config The delete startup-config Privileged EXEC mode command deletes the startup-config file. Syntax delete startup-config Default Configuration This command has no default configuration. Command Mode Privileged EXEC mode User Guidelines There - D-Link DES-3010FA-TAA | CLI Guide - Page 71
There are no user guidelines for this command. Examples The following example displays the contents of the running configuration file. Console# show running-config no spanning-tree interface ethernet 3 ip address 10.6.39.150 255.255.255.0 exit username ews password d41d8cd98f00b204e9800998ecf8427e - D-Link DES-3010FA-TAA | CLI Guide - Page 72
Link DES-3010FA/GA CLI Reference Guide show startup-config The show startup-config Privileged EXEC mode command displays the contents of the startup configuration file. Syntax show startup-config Default Configuration This command has no default configuration. Command Mode Privileged EXEC mode User - D-Link DES-3010FA-TAA | CLI Guide - Page 73
an Ethernet type interface. Syntax interface ethernet interface Parameters • interface - Valid Ethernet port. (Full syntax: port) Default Configuration This command has no default configuration. Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command - D-Link DES-3010FA-TAA | CLI Guide - Page 74
D-Link DES-3010FA/GA CLI Reference Guide interface range ethernet The interface range ethernet Global Configuration mode command configures multiple Ethernet type interfaces at the same time. Syntax interface range ethernet {port-range | all} Parameters • port-range - List of valid ports. Where more - D-Link DES-3010FA-TAA | CLI Guide - Page 75
) mode command disables an interface. To restart a disabled interface, use the no form of this command. Syntax shutdown no shutdown Default Configuration The interface is enabled. Command Mode Interface Configuration (Ethernet, port-channel) mode User Guidelines There are no user guidelines for this - D-Link DES-3010FA-TAA | CLI Guide - Page 76
D-Link DES-3010FA/GA CLI Reference Guide description The description Interface Configuration (Ethernet, port-channel) mode command adds a description to an interface. To remove the description, use the no form of this command. Syntax description string no description Parameters • string - Comment or - D-Link DES-3010FA-TAA | CLI Guide - Page 77
• 1000 - Forces 1000 Mbps operation. Default Configuration Maximum port capability Command Mode Interface Configuration (Ethernet, port-channel) mode User Guidelines The no speed command in a port-channel context returns each port in the port-channel to its maximum capability. Example The following - D-Link DES-3010FA-TAA | CLI Guide - Page 78
D-Link DES-3010FA/GA CLI Reference Guide duplex The duplex Interface Configuration (Ethernet) mode command configures the full/half duplex operation of a given Ethernet interface when not using auto-negotiation. To restore the default configuration, use the no form of this command. Syntax duplex { - D-Link DES-3010FA-TAA | CLI Guide - Page 79
Auto-negotiation is enabled. If unspecified, the default setting is to enable all capabilities of the port. Command Mode Interface Configuration (Ethernet, port-channel) mode User Guidelines If capabilities were specified when auto-negotiation was previously entered, not specifying capabilities when - D-Link DES-3010FA-TAA | CLI Guide - Page 80
Link DES-3010FA/GA CLI Reference Guide flowcontrol The flowcontrol Interface Configuration (Ethernet, port-channel) mode command configures flow control on a given interface is off. Command Mode Interface Configuration (Ethernet, port-channel) mode User Guidelines Negotiation should be enabled - D-Link DES-3010FA-TAA | CLI Guide - Page 81
no mdix Parameters • on - Manual mdix • auto - Automatic mdi/mdix Default Configuration The default setting is on. Command Mode Interface Configuration (Ethernet) mode User Guidelines Auto: All possibilities to connect a PC with cross or normal cables are supported and are automatically detected. On - D-Link DES-3010FA-TAA | CLI Guide - Page 82
Link DES-3010FA/GA CLI Reference Guide back-pressure The back-pressure Interface Configuration (Ethernet, port-channel) mode command enables back pressure on a given interface . Command Mode Interface Configuration (Ethernet, port-channel) mode User Guidelines There are no user guidelines for this - D-Link DES-3010FA-TAA | CLI Guide - Page 83
clear counters The clear counters User EXEC mode command clears statistics on an interface. Syntax clear counters [ethernet interface | port-channel port-channel-number] Parameters • interface - Valid Ethernet port. (Full syntax: port) • port-channel-number - Valid port-channel number. Default - D-Link DES-3010FA-TAA | CLI Guide - Page 84
D-Link DES-3010FA/GA CLI Reference Guide set interface active The set interface active Privileged EXEC mode command reactivates an interface that was shutdown. Syntax set interface active {ethernet interface | port-channel port-channel-number} Parameters • interface - Valid Ethernet port. (Full - D-Link DES-3010FA-TAA | CLI Guide - Page 85
interface | port-channel port-channel-number ] Parameters • interface - Valid Ethernet port. (Full syntax: port) • port-channel-number - Valid port-channel number. Default Configuration This command has no default configuration. Command Modes Privileged EXEC mode User Guidelines There are no user - D-Link DES-3010FA-TAA | CLI Guide - Page 86
D-Link DES-3010FA/GA CLI Reference Guide ch3 Enabled ch4 Enabled ch5 Enabled ch6 Enabled Page 85 - D-Link DES-3010FA-TAA | CLI Guide - Page 87
interface | port-channel port-channel-number ] Parameters • interface - Valid Ethernet port. (Full syntax: port) • port-channel-number - Valid port-channel number. Default Configuration This command has no default configuration. Command Modes Privileged EXEC mode User Guidelines There are no user - D-Link DES-3010FA-TAA | CLI Guide - Page 88
Link DES-3010FA/GA CLI Reference Guide show interfaces status The show interfaces status Privileged EXEC mode command displays the status of all configured interfaces. Syntax show interfaces status [ethernet interface| port-channel port-channel-number] Parameters • interface - A valid Ethernet port - D-Link DES-3010FA-TAA | CLI Guide - Page 89
Ethernet Configuration Commands ch1 Not Present ch2 Not Present ch3 Not Present ch4 Not Present ch5 Not Present ch6 Not Present Page 88 - D-Link DES-3010FA-TAA | CLI Guide - Page 90
D-Link DES-3010FA/GA CLI Reference Guide show interfaces description The show interfaces description Privileged EXEC mode command displays the description for all configured interfaces. Syntax show interfaces description [ethernet interface | port-channel port-channel-number] Parameters • interface - D-Link DES-3010FA-TAA | CLI Guide - Page 91
show interfaces counters The show interfaces counters User EXEC mode command displays traffic seen by the physical interface. Syntax show interfaces counters [ethernet interface | port-channel port-channel-number] Parameters • interface - A valid Ethernet port. (Full syntax: port) • port-channel - D-Link DES-3010FA-TAA | CLI Guide - Page 92
D-Link DES-3010FA/GA CLI Reference Guide 3 0 0 0 0 4 0 0 0 0 5 0 0 0 0 6 0 0 0 0 7 23739 0 0 0 The following example displays counters for Ethernet port 1. Console# show interfaces counters ethernet 1 Port -----1 InOctets ----------183892 InUcastPkts 0 InMcastPkts - D-Link DES-3010FA-TAA | CLI Guide - Page 93
an internal MAC sublayer receive error. Counted MAC Control frames received with an opcode indicating the PAUSE operation. Counted MAC Control frames transmitted on this interface with an opcode indicating the PAUSE operation. Page 92 - D-Link DES-3010FA-TAA | CLI Guide - Page 94
D-Link DES-3010FA/GA CLI Reference Guide port storm-control include-multicast The port storm-control include-multicast Interface Configuration (Ethernet) mode Interface Configuration (Ethernet) mode User Guidelines To control multicasts storms, use the port storm-control broadcast enable and port - D-Link DES-3010FA-TAA | CLI Guide - Page 95
storm-control broadcast enable Default Configuration Broadcast storm control is disabled. Command Modes Interface Configuration (Ethernet) mode User Guidelines Use the port storm-control broadcast rate Interface Configuration (Ethernet) mode command, to set the maximum allowable broadcast rate. Use - D-Link DES-3010FA-TAA | CLI Guide - Page 96
D-Link DES-3010FA/GA CLI Reference Guide port storm-control broadcast rate The port storm-control broadcast rate Interface Configuration (Ethernet) mode command configures the maximum broadcast rate. To return to the default configuration, use the no form of this command. Syntax port storm-control - D-Link DES-3010FA-TAA | CLI Guide - Page 97
storm-control [interface] Parameters • interface - A valid Ethernet port. (Full syntax: port) Default Configuration This command has no default configuration. Command Modes Privileged EXEC mode User Guidelines There are no user guidelines for this command. Example The following example displays - D-Link DES-3010FA-TAA | CLI Guide - Page 98
Link DES-3010FA/GA CLI Reference Guide Section 7. GVRP Commands gvrp enable (Global) GARP VLAN Registration Protocol (GVRP) is an industry-standard protocol designed to propagate VLAN information from device to device. With GVRP, a single device is manually User Guidelines There are no user - D-Link DES-3010FA-TAA | CLI Guide - Page 99
Mode Interface Configuration (Ethernet, port-channel) mode User Guidelines An access port does not dynamically join a VLAN because it is always a member in only one VLAN. Membership in an untagged VLAN is propagated in the same way as in a tagged VLAN. That is, the PVID is manually defined as - D-Link DES-3010FA-TAA | CLI Guide - Page 100
D-Link DES-3010FA/GA CLI Reference Guide garp timer The garp timer Interface Configuration (Ethernet, Port channel) mode command adjusts the values of the join, leave and leaveall timers of GARP applications. To return to the default configuration, use the no form of this command. Syntax garp timer - D-Link DES-3010FA-TAA | CLI Guide - Page 101
Default Configuration Dynamic VLAN creation or modification is enabled. Command Mode Interface Configuration (Ethernet, port-channel) mode User Guidelines This command forbids dynamic VLAN creation from the interface. The creation or modification of dynamic VLAN registration entries as a result - D-Link DES-3010FA-TAA | CLI Guide - Page 102
Link DES-3010FA/GA CLI Reference Guide gvrp registration-forbid The gvrp registration-forbid Interface Configuration (Ethernet, port-channel) mode command deregisters all dynamic VLANs on a port and prevents VLAN creation or registration on the port. To allow dynamic registration of VLANs on a port - D-Link DES-3010FA-TAA | CLI Guide - Page 103
| port-channel port-channel-number] Parameters • interface - A valid Ethernet port. (Full syntax: port) • port-channel-number - A valid port-channel number. Default Configuration This command has no default configuration. Command Mode Privileged EXEC mode User Guidelines There are no user guidelines - D-Link DES-3010FA-TAA | CLI Guide - Page 104
D-Link DES-3010FA/GA CLI Reference Guide show gvrp configuration The show gvrp configuration User EXEC mode command displays GVRP configuration information, including timer values, whether GVRP and dynamic VLAN creation is enabled, and which ports are running GVRP. Syntax show gvrp configuration [ - D-Link DES-3010FA-TAA | CLI Guide - Page 105
The show gvrp statistics User EXEC mode command displays GVRP statistics. Syntax show gvrp statistics [ethernet interface | port-channel port-channel-number] Parameters • interface - A valid Ethernet port. (Full syntax: port) • port-channel-number - A valid port-channel number. Default Configuration - D-Link DES-3010FA-TAA | CLI Guide - Page 106
D-Link DES-3010FA/GA CLI Reference Guide show gvrp error-statistics The show gvrp error-statistics User EXEC mode command displays GVRP error statistics. Syntax show gvrp error-statistics [ethernet interface | port-channel port-channel-number] Parameters • interface - A valid Ethernet port. (Full - D-Link DES-3010FA-TAA | CLI Guide - Page 107
The ip igmp snooping Global Configuration mode command enables Internet Group Management Protocol (IGMP) snooping. To disable IGMP snooping, use the no Configuration IGMP snooping is disabled. Command Mode Global Configuration mode User Guidelines IGMP snooping can only be enabled on static VLANs. - D-Link DES-3010FA-TAA | CLI Guide - Page 108
D-Link DES-3010FA/GA CLI Reference Guide ip igmp snooping (Interface) The ip igmp snooping Interface Configuration (VLAN) mode command enables Internet Group Management Protocol (IGMP) snooping on a specific VLAN. To disable IGMP snooping on a VLAN interface, use the no form of this command. Syntax - D-Link DES-3010FA-TAA | CLI Guide - Page 109
Interface Configuration (VLAN) mode command configures the host-timeout. If an IGMP report for a multicast group was not received for a host-time-out period from a specific port, this port out is 260 seconds. Command Mode Interface Configuration (VLAN) mode User Guidelines The timeout should be at - D-Link DES-3010FA-TAA | CLI Guide - Page 110
D-Link DES-3010FA/GA CLI Reference Guide ip igmp snooping mrouter-time-out The ip igmp snooping mrouter-time-out Interface Configuration (VLAN) mode command configures the mrouter-time-out. The ip igmp snooping mrouter-time-out Interface Configuration (VLAN) mode command is used for setting the - D-Link DES-3010FA-TAA | CLI Guide - Page 111
) • immediate-leave - Indicates that the port should be immediately removed from the members list after receiving IGMP Leave. Default Configuration The default leave-time-out configuration is 10 seconds. Command Mode Interface Configuration (VLAN) mode User Guidelines The leave timeout should be set - D-Link DES-3010FA-TAA | CLI Guide - Page 112
D-Link DES-3010FA/GA CLI Reference Guide show ip igmp snooping mrouter The show ip igmp snooping mrouter User EXEC mode command displays information on dynamically learned multicast router interfaces. Syntax show ip igmp snooping mrouter [interface vlan-id] Parameters • vlan-id - VLAN number. - D-Link DES-3010FA-TAA | CLI Guide - Page 113
IGMP snooping configuration. Syntax show ip igmp snooping interface vlan-id Parameters • vlan-id - VLAN number. Default Configuration This command has no default configuration. Command Mode User EXEC mode User Guidelines There are no user guidelines for this command. Example The following example - D-Link DES-3010FA-TAA | CLI Guide - Page 114
D-Link DES-3010FA/GA CLI Reference Guide show ip igmp snooping groups The show ip igmp snooping groups User EXEC mode command displays multicast groups learned |2.2.3 224-239.130|2.2.8 Querier ------Yes Yes Ports ---------1, 2 3-5 IGMP Reporters that are forbidden statically: Vlan IP - D-Link DES-3010FA-TAA | CLI Guide - Page 115
(Range: 8 -30) Default Configuration No IP address is defined for interfaces. Command Mode Interface Configuration (Ethernet, VLAN, port-channel) mode User Guidelines An IP address cannot be configured for a range of interfaces (range context). Example The following example configures VLAN 1 with IP - D-Link DES-3010FA-TAA | CLI Guide - Page 116
D-Link DES-3010FA/GA CLI Reference Guide ip address dhcp The ip address dhcp Interface Configuration (Ethernet, VLAN, port-channel) mode command acquires an IP address for an Ethernet interface from the Dynamic Host Configuration Protocol (DHCP) server. To deconfigure an acquired IP address, use the - D-Link DES-3010FA-TAA | CLI Guide - Page 117
- Valid IP address of the default gateway. Default Configuration No default gateway is defined. Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command. Example The following example defines default gateway 192.168.1.1. Console(config)# ip default-gateway - D-Link DES-3010FA-TAA | CLI Guide - Page 118
D-Link DES-3010FA/GA CLI Reference Guide show ip interface The show ip interface Privileged EXEC mode command displays the usability status of configured IP interfaces. Syntax show ip interface [ethernet interface-number | vlan vlan-id | port-channel port-channel number.] Parameters • interface- - D-Link DES-3010FA-TAA | CLI Guide - Page 119
• port-channel number. - Valid port-channel number. Default Configuration This command has no default configuration. Command Mode Global Configuration mode User Guidelines The software uses ARP cache entries to translate 32-bit IP addresses into 48-bit hardware addresses. Because most hosts support - D-Link DES-3010FA-TAA | CLI Guide - Page 120
D-Link DES-3010FA/GA CLI Reference Guide arp timeout The arp timeout Global Configuration mode - 40000000) Default Configuration The default timeout is 60000 seconds. Command Mode Global Configuration mode User Guidelines It is recommended not to set the timeout value to less than 3600. Example The - D-Link DES-3010FA-TAA | CLI Guide - Page 121
the ARP cache. Syntax clear arp-cache Default Configuration This command has no default configuration. Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command. Example The following example deletes all dynamic entries from the ARP cache. Console# clear arp - D-Link DES-3010FA-TAA | CLI Guide - Page 122
D-Link DES-3010FA/GA CLI Reference Guide show arp The show arp Privileged EXEC mode command displays entries in the ARP table. Syntax show arp Default Configuration This command has no default configuration. Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this - D-Link DES-3010FA-TAA | CLI Guide - Page 123
that separates an unqualified name from the domain name. (Range: 1-158 characters) Default Configuration A default domain name is not defined. Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command. Page 122 - D-Link DES-3010FA-TAA | CLI Guide - Page 124
D-Link DES-3010FA/GA CLI Reference Guide ip name-server The ip name-server Global Configuration server. Default Configuration No name server addresses are specified. Command Mode Global Configuration mode User Guidelines The preference of the servers is determined by the order in which they were - D-Link DES-3010FA-TAA | CLI Guide - Page 125
name Parameters • name - Name of the host (Range: 1-158 characters) • address - Associated IP address. Default Configuration No host is defined. Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command. Page 124 - D-Link DES-3010FA-TAA | CLI Guide - Page 126
D-Link DES-3010FA/GA CLI Reference Guide clear host The clear host Privileged EXEC mode command deletes entries This command has no default configuration. Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command. Examples The following example deletes all - D-Link DES-3010FA-TAA | CLI Guide - Page 127
be removed. (Range: 1-158 characters) • * - Removes all entries. Default Configuration This command has no default configuration. Command Mode Privileged EXEC mode User Guidelines This command deletes the host name-to-address mapping temporarily until the next renewal of the IP address. Examples The - D-Link DES-3010FA-TAA | CLI Guide - Page 128
D-Link DES-3010FA/GA CLI Reference Guide show hosts The show hosts Privileged EXEC mode command displays This command has no default configuration. Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command. Examples The following example displays host - D-Link DES-3010FA-TAA | CLI Guide - Page 129
system priority value. (Range: 1 - 65535) Default Configuration The default system priority is 1. Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command. Example The following example configures the system priority to 120. Console(config)# lacp system - D-Link DES-3010FA-TAA | CLI Guide - Page 130
D-Link DES-3010FA/GA CLI Reference Guide lacp port-priority The lacp port-priority Interface Configuration (Ethernet) mode command configures physical port priority. To return to the default configuration, use the no form of this command. Syntax lacp port-priority value no lacp port-priority - D-Link DES-3010FA-TAA | CLI Guide - Page 131
value. • short - Specifies the short timeout value. Default Configuration The default port timeout value is long. Command Mode Interface Configuration (Ethernet) mode User Guidelines There are no user guidelines for this command. Example The following example assigns a long administrative LACP - D-Link DES-3010FA-TAA | CLI Guide - Page 132
Link DES-3010FA/GA CLI Reference Guide show lacp ethernet The show lacp ethernet Privileged EXEC mode command displays LACP information for Ethernet ports. Syntax show lacp ethernet interface [parameters | statistics | protocol-state] Parameters • interface - Valid Ethernet port. (Full syntax: port - D-Link DES-3010FA-TAA | CLI Guide - Page 133
: expired: Partner system priority: system mac addr: port Admin key: port Oper key: port Oper number: port Admin priority: port Oper priority: port Oper timeout: LACP Activity: Aggregation: synchronization: collecting: distributing: expired: Port 1 LACP Statistics: LACP PDUs sent: LACP PDUs - D-Link DES-3010FA-TAA | CLI Guide - Page 134
D-Link DES-3010FA/GA CLI Reference Guide show lacp port-channel The show lacp port-channel Privileged EXEC mode command displays LACP information for a port-channel. Syntax show lacp port-channel [port_channel_number] Parameters • port_channel_number - Valid port-channel number. Default - D-Link DES-3010FA-TAA | CLI Guide - Page 135
secured remote console access (SSH). Default Configuration This command has no default configuration. Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command. Examples The following example configures the device as a virtual terminal for remote console - D-Link DES-3010FA-TAA | CLI Guide - Page 136
D-Link DES-3010FA/GA CLI Reference Guide speed The speed Line Configuration mode command sets Configuration The default speed is 9600 bps. Command Mode Line Configuration (console) mode. User Guidelines This command is available only on the line console. Examples The following example configures - D-Link DES-3010FA-TAA | CLI Guide - Page 137
additional time intervals in seconds. (Range: 0 - 59) Default Configuration The default configuration is 10 minutes. Command Mode Line Configuration mode User Guidelines To specify no timeout, enter the exec-timeout 0 command. Examples The following example configures the interval that the system - D-Link DES-3010FA-TAA | CLI Guide - Page 138
D-Link DES-3010FA/GA CLI Reference Guide history The history Line Configuration mode command enables the the command history function for the current terminal session, use the terminal history user EXEC mode command. Example The following example enables the command history function for telnet - D-Link DES-3010FA-TAA | CLI Guide - Page 139
default history buffer size is 10. Command Mode Line Configuration mode User Guidelines This command configures the command history buffer size for a size for the current terminal session, use the terminal history size User EXEC mode command. Example The following example changes the command history - D-Link DES-3010FA-TAA | CLI Guide - Page 140
D-Link DES-3010FA/GA CLI Reference Guide terminal history The terminal history user EXEC command enables the command history function for by the history line configuration command. Command Mode User EXEC mode User Guidelines There are no user guidelines for this command. Examples The following - D-Link DES-3010FA-TAA | CLI Guide - Page 141
its command history buffer. (Range: 10-216) Default Configuration The default command history buffer size is 10. Command Mode User EXEC mode User Guidelines The terminal history size user EXEC command configures the size of the command history buffer for the current terminal session. To change the - D-Link DES-3010FA-TAA | CLI Guide - Page 142
D-Link DES-3010FA/GA CLI Reference Guide show line The show line User EXEC mode command displays line parameters. Syntax show line [console | telnet | ssh] Parameters • console - Console terminal line. • telnet - Virtual terminal for remote console access (Telnet). • - D-Link DES-3010FA-TAA | CLI Guide - Page 143
Mode Global Configuration mode User Guidelines Use this command to configure a management access list. The management list cannot be updated or removed. Management ACL requires a valid management interface, which is a port, VLAN, or port-channnel with an IP address or console interface. Management - D-Link DES-3010FA-TAA | CLI Guide - Page 144
D-Link DES-3010FA/GA CLI Reference Guide The following example creates a management access list called mlist, configures all interfaces to be management interfaces except Ethernet interfaces 1 and 6 and makes the new access list the active list. Console(config)# management access-list mlist Console( - D-Link DES-3010FA-TAA | CLI Guide - Page 145
is set to deny. Command Mode Management Access-list Configuration mode User Guidelines Rules with Ethernet, VLAN and port-channel parameters are valid only if an IP address is defined on the appropriate interface. The system supports up to 128 management access rules. Example The following example - D-Link DES-3010FA-TAA | CLI Guide - Page 146
Link DES-3010FA/GA CLI Reference Guide deny (Management) The deny Management Access-List Configuration mode command defines a deny rule. Syntax deny [ethernet interface-number | vlan vlan-id | port-channel port-channel-number] deny ip-source ip-address [mask mask | prefix-length] [ethernet interface - D-Link DES-3010FA-TAA | CLI Guide - Page 147
specified, an empty access list is used. Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command. Example The following example configures an access list called mlist as the management access list. Console(config)# management access-class mlist Page 146 - D-Link DES-3010FA-TAA | CLI Guide - Page 148
D-Link DES-3010FA/GA CLI Reference Guide show management access-list The show management access-list Privileged EXEC mode command displays management access-lists. Syntax show management access-list [name] Parameters • name - Specifies the name of a management access list. (Range: 1 - 32 characters) - D-Link DES-3010FA-TAA | CLI Guide - Page 149
default configuration. Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command. Example The following example displays information about the active management access list. Console# show management access-class Management access-class is enabled, using access - D-Link DES-3010FA-TAA | CLI Guide - Page 150
D-Link DES-3010FA/GA CLI Reference Guide Section 13. PHY Diagnostics Commands test copper-port tdr The test copper-port tdr Privileged EXEC mode command uses Time Domain Reflectometry (TDR) technology to diagnose the quality and characteristics of a copper cable attached to a port. Syntax test - D-Link DES-3010FA-TAA | CLI Guide - Page 151
Reflectometry (TDR) test performed on copper ports. Syntax show copper-ports tdr [interface] Parameters • interface - A valid Ethernet port. (Full syntax: port) Default Configuration This command has no default configuration. Command Mode User EXEC mode User Guidelines The maximum length of the - D-Link DES-3010FA-TAA | CLI Guide - Page 152
D-Link DES-3010FA/GA CLI Reference Guide show copper-ports cable-length The show copper-ports cable-length User EXEC mode command displays the estimated copper cable length attached to a port. Syntax show copper-ports cable-length [interface] Parameters • interface - A valid Ethernet port. (Full - D-Link DES-3010FA-TAA | CLI Guide - Page 153
interface - A valid Ethernet port. (Full syntax: port) • detailed - Detailed diagnostics. Default Configuration This command has no default configuration. Command Mode Privileged EXEC mode User Guidelines To test optical transceivers, ensure a fiber link Supported, W - Warning, E - Error Page 152 - D-Link DES-3010FA-TAA | CLI Guide - Page 154
D-Link DES-3010FA/GA CLI Reference Guide Section 14. Port Channel Commands interface port-channel The interface port-channel Global Configuration mode command enters the interface configuration mode to configure a specific port-channel. Syntax interface port-channel port-channel-number Parameters • - D-Link DES-3010FA-TAA | CLI Guide - Page 155
command has no default configuration. Command Mode Global Configuration mode User Guidelines Commands under the interface range context are executed independently on each interface in the range. Example The following example groups port-channels 1, 2 and 6 to receive the same command. Console(config - D-Link DES-3010FA-TAA | CLI Guide - Page 156
D-Link DES-3010FA/GA CLI Reference Guide channel-group The channel-group Interface Configuration (Ethernet) mode command associates a port with a port-channel. To remove a port from a port-channel, use the no form of this command. Syntax channel-group port-channel-number mode {on | auto} no channel- - D-Link DES-3010FA-TAA | CLI Guide - Page 157
EXEC mode command displays port-channel information. Syntax show interfaces port-channel [port-channel-number] Parameters • port-channel-number - Valid port-channel number. Default Configuration This command has no default configuration. Command Mode Privileged EXEC mode User Guidelines There are no - D-Link DES-3010FA-TAA | CLI Guide - Page 158
D-Link DES-3010FA/GA CLI Reference Guide Section 15. Port Monitor Commands port monitor The port monitor Interface Configuration mode command starts a port monitoring session. To stop a port monitoring session, use the no form of this command. Syntax port monitor src-interface [rx | tx] no port - D-Link DES-3010FA-TAA | CLI Guide - Page 159
no form of this command. Syntax port monitor vlan-tagging no port monitor vlan-tagging Default Configuration Ingress mirrored packets are transmitted untagged. Command Mode Interface Configuration (Ethernet) mode User Guidelines There are no user guidelines for this command. Example The following - D-Link DES-3010FA-TAA | CLI Guide - Page 160
D-Link DES-3010FA/GA CLI Reference Guide show ports monitor The show ports monitor User EXEC mode command displays the port monitoring status. Syntax show ports monitor Default Configuration This command has no default configuration. Command Mode User EXEC mode User Guidelines There are no user - D-Link DES-3010FA-TAA | CLI Guide - Page 161
qos The qos Global Configuration mode command enables quality of service (QoS) on the device. To disable QoS on the QoS is disabled on the device. Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command. Example The following example enables QoS on - D-Link DES-3010FA-TAA | CLI Guide - Page 162
D-Link DES-3010FA/GA CLI Reference Guide show qos The show qos User EXEC mode command displays quality of service (QoS) for the device. Syntax show qos Default Configuration This command has no default configuration. Command Mode User EXEC mode User Guidelines There are no user guidelines for this - D-Link DES-3010FA-TAA | CLI Guide - Page 163
. The expedite queues would be the queues with higher indexes. (Range: 0-3) Default Configuration All queues are expedite queues. Command Mode Global Configuration mode User Guidelines When the specified number of expedite queues is 0, no SP is used and weights are defined as 1, 2, 4 and 8. When the - D-Link DES-3010FA-TAA | CLI Guide - Page 164
D-Link DES-3010FA/GA CLI Reference Guide rate-limit interface configuration The rate-limit interface configuration command limits the be enabled on a specific port only if port storm-control brodcast enable interface configuration command is not enabled on that port. Examples The following example - D-Link DES-3010FA-TAA | CLI Guide - Page 165
QoS Commands show qos interface The show qos interface User EXEC mode command displays interface QoS information. Syntax show qos interface [ethernet interface-number | vlan vlan-id | port-channel number] [ queueing | rate-limit] Parameters • interface-number - Valid Ethernet port number. • vlan-id - D-Link DES-3010FA-TAA | CLI Guide - Page 166
D-Link DES-3010FA/GA CLI Reference Guide 3 2 4 3 5 3 6 4 7 4 Switch> show qos interface 7 rate-limit Port rate-limit [kbps] 7 100 Page 165 - D-Link DES-3010FA-TAA | CLI Guide - Page 167
the specified queue. Command Mode Interface configuration (Ethernet, Port-Channel). Usage guidelines Use this command in interface configuration mode to active shaper on egress port or egress queue. For egress port, enter the interface configuration mode with the port number, and use traffic-shape - D-Link DES-3010FA-TAA | CLI Guide - Page 168
Link DES-3010FA/GA CLI Reference Guide wrr-queue cos-map The wrr-queue cos-map Global Configuration mode command maps Class of Service value 7 select queue 4 Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command. Example The following example maps CoS - D-Link DES-3010FA-TAA | CLI Guide - Page 169
The following table describes the default map. DSCP value Queue-ID 0-15 1 16-39 2 40-63 3 Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command. Example The following example maps DSCP values 33, 40 and 41 to queue 1. Console(config)# qos map dscp - D-Link DES-3010FA-TAA | CLI Guide - Page 170
D-Link DES-3010FA/GA CLI Reference Guide qos trust (Global) The qos trust Global Configuration Configuration mode User Guidelines Packets entering a quality of service (QoS) domain are classified at the edge of the QoS domain. When packets are classified at the edge, the switch port within the QoS - D-Link DES-3010FA-TAA | CLI Guide - Page 171
use the no form of this command. Syntax qos trust no qos trust Default Configuration qos trust is enabled on each port. Command Mode Interface Configuration (Ethernet, port-channel) mode User Guidelines There are no user guidelines for this command. Example The following example configures Ethernet - D-Link DES-3010FA-TAA | CLI Guide - Page 172
D-Link DES-3010FA/GA CLI Reference Guide qos cos The qos cos Interface Configuration (Ethernet, port-channel) mode command defines the default CoS value of a port. To return to the default configuration, use the no form of this command. Syntax qos cos default-cos no qos cos Parameters • default-cos - D-Link DES-3010FA-TAA | CLI Guide - Page 173
Indicates the DSCP to queue map. Default Configuration This command has no default configuration. Command Mode User EXEC mode User Guidelines There are no user guidelines for this command. Example The following example displays the DSCP port-queue map. Console> show qos map Dscp-queue map: d1 : d2 - D-Link DES-3010FA-TAA | CLI Guide - Page 174
DES-3010FA/GA CLI Reference Guide Section 17. Radius Commands radius-server host The radius-server host Global Configuration mode command specifies a RADIUS server host. To delete the specified RADIUS host, use the no form of this command. Syntax radius-server host {ip-address | hostname} [auth-port - D-Link DES-3010FA-TAA | CLI Guide - Page 175
Radius Commands Example The following example specifies a RADIUS server host with IP address 192.168.10.1, authentication request port number 20 and a 20-second timeout period. Console(config)# radius-server host 192.168.10.1 auth-port 20 timeout 20 Page 174 - D-Link DES-3010FA-TAA | CLI Guide - Page 176
D-Link DES-3010FA/GA CLI Reference Guide radius-server key The radius-server key Global Configuration mode key-string is an empty string. Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command. Example The following example sets the authentication and - D-Link DES-3010FA-TAA | CLI Guide - Page 177
. (Range: 1 - 10) Default Configuration The software searches the list of RADIUS server hosts 3 times. Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command. Example The following example configures the number of times the software searches the list of - D-Link DES-3010FA-TAA | CLI Guide - Page 178
D-Link DES-3010FA/GA CLI Reference Guide radius-server source-ip The radius-server source-ip Global address is the IP address of the outgoing IP interface. Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command. Example The following example configures - D-Link DES-3010FA-TAA | CLI Guide - Page 179
value in seconds. (Range: 1 - 30) Default Configuration The timeout value is 3 seconds. Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command. Example The following example configures the timeout interval to 5 seconds. Console(config)# radius-server - D-Link DES-3010FA-TAA | CLI Guide - Page 180
D-Link DES-3010FA/GA CLI Reference Guide radius-server deadtime The radius-server deadtime Global Default Configuration The deadtime setting is 0. Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command. Example The following example sets the deadtime to - D-Link DES-3010FA-TAA | CLI Guide - Page 181
Guidelines There are no user guidelines for this command. Examples The following example displays RADIUS server settings. Console# show radius-servers IP address --------172.16.1.1 172.16.1.2 Port Auth ---1645 1645 TimeOut ------Global 11 Retransmit ---------Global 8 DeadTime -----Global Global - D-Link DES-3010FA-TAA | CLI Guide - Page 182
D-Link DES-3010FA/GA CLI Reference Guide Section 18. RMON Commands show rmon statistics The show rmon statistics User EXEC mode command displays RMON Ethernet statistics. Syntax show rmon statistics {ethernet interface number | port-channel port-channel-number} Parameters • interface number - - D-Link DES-3010FA-TAA | CLI Guide - Page 183
RMON Commands The following table describes significant fields shown above: Field Octets Packets Broadcast Multicast CRC Align Errors Collisions Undersize Pkts Oversize Pkts Fragments Jabbers 64 Octets 65 to 127 Octets 128 to 255 Octets 256 to 511 Octets 512 to 1023 Octets 1024 to 1518 Octets - D-Link DES-3010FA-TAA | CLI Guide - Page 184
D-Link DES-3010FA/GA CLI Reference Guide rmon collection history The rmon collection history Interface Configuration (Ethernet, port-channel) mode command enables a Remote Monitoring (RMON) MIB history statistics group on an interface. To remove a specified RMON history statistics group, use the no - D-Link DES-3010FA-TAA | CLI Guide - Page 185
interface | port-channel port-channel-number] Parameters • interface - Valid Ethernet port. (Full syntax: port) • port-channel-number - Valid port-channel number. Default Configuration This command has no default configuration. Command Mode User EXEC mode User Interface Ethernet interface The - D-Link DES-3010FA-TAA | CLI Guide - Page 186
D-Link DES-3010FA/GA CLI Reference Guide show rmon history The show rmon history User EXEC mode command displays RMON Ethernet history statistics. Syntax show show rmon history 1 errors Sample Set: 1 Owner: Me Interface: 1 Interval: 1800 Requested samples: 50 Granted samples: 50 Page 185 - D-Link DES-3010FA-TAA | CLI Guide - Page 187
address. This number does not include packets addressed to the broadcast address. The best estimate of the mean physical layer network utilization on this interface during this sampling interval, in hundredths of a percent. The number of packets received during this sampling interval that had - D-Link DES-3010FA-TAA | CLI Guide - Page 188
D-Link DES-3010FA/GA CLI Reference Guide Fragments Jabbers Dropped Collisions The total number of packets received during this sampling interval that were less than 64 octets in length (excluding framing bits - D-Link DES-3010FA-TAA | CLI Guide - Page 189
. If unspecified, the name is an empty string. Default Configuration The type is absolute. The startup direction is rising-falling. Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command. Page 188 - D-Link DES-3010FA-TAA | CLI Guide - Page 190
D-Link DES-3010FA/GA CLI Reference Guide Example The user guidelines for this command. Example The following example displays the alarms table. Console> show rmon alarm-table Index ----1 2 3 OID 1.3.6.1.2.1.2.2.1.10.1 1.3.6.1.2.1.2.2.1.10.1 1.3.6.1.2.1.2.2.1.10.9 Owner ------CLI Manager - D-Link DES-3010FA-TAA | CLI Guide - Page 191
- Specifies the alarm index. (Range: 1 - 65535) Default Configuration This command has no default configuration. Command Mode User EXEC mode User Guidelines There are no user guidelines for this command. Example The following example displays RMON 1 alarms. Console> show rmon alarm 1 Alarm - D-Link DES-3010FA-TAA | CLI Guide - Page 192
D-Link DES-3010FA/GA CLI Reference Guide Interval Sample Type Startup Alarm Rising Threshold Falling Threshold Rising Event Falling Event Owner The interval in seconds over which the data is sampled and - D-Link DES-3010FA-TAA | CLI Guide - Page 193
This command has no default configuration. Command Mode Global Configuration mode User Guidelines If log is specified as the notification type, an trap is specified, an SNMP trap is sent to one or more management stations. Example The following example configures an event identified as index 10 and - D-Link DES-3010FA-TAA | CLI Guide - Page 194
Link DES-3010FA/GA CLI Reference Guide show rmon events The show rmon events User EXEC mode command displays the RMON event table. Syntax show rmon events Default Configuration This command has no default configuration. Command Mode User EXEC mode User Guidelines There are no user more management - D-Link DES-3010FA-TAA | CLI Guide - Page 195
• event - Specifies the event index. (Range: 0 - 65535) Default Configuration This command has no default configuration. Command Mode User EXEC mode User Guidelines There are no user guidelines for this command. Example The following example displays the RMON log table. Console> show rmon log - D-Link DES-3010FA-TAA | CLI Guide - Page 196
D-Link DES-3010FA/GA CLI Reference Guide The following table describes the significant fields shown in the display: Field Event Description Time Description An index that uniquely identifies the event. A comment describing this event. The time this entry was created. Page 195 - D-Link DES-3010FA-TAA | CLI Guide - Page 197
entries. (Range: 20-32767) Default Configuration History table size is 270. Log table size is 200. Command Mode Global Configuration mode User Guidelines The configured table size taskes effect after the device is rebooted. Example The following example configures the maximum RMON history table - D-Link DES-3010FA-TAA | CLI Guide - Page 198
Link DES-3010FA/GA CLI Reference Guide access. • ip-address - Specifies the IP address of the management station. • group-name - Specifies the name of a previously communities are defined. Command Mode Global Configuration mode User Guidelines The view-name parameter cannot be specified for - D-Link DES-3010FA-TAA | CLI Guide - Page 199
SNMP Commands Examples The following example defines community access string public to permit administrative access to SNMP protocol at an administrative station with IP address 192.168.1.20. Console(config)# snmp-server community public su 192.168.1.20 Page 198 - D-Link DES-3010FA-TAA | CLI Guide - Page 200
D-Link DES-3010FA/GA CLI Reference Guide snmp-server view The snmp-server view Global Configuration mode command creates or updates a Simple Network Management interface 1 in the MIB-II interface group. Console(config)# snmp-server view user-view system included Console(config)# snmp-server view user - D-Link DES-3010FA-TAA | CLI Guide - Page 201
Global Configuration mode command configures a new Simple Management Protocol (SNMP) group or a table that maps SNMP users to SNMP views. To remove a specified . Applicable only to the SNMP Version 3 security model. • name - Specifies the context of a packet. The following contexts is supported: - D-Link DES-3010FA-TAA | CLI Guide - Page 202
D-Link DES-3010FA/GA CLI Reference Guide snmp-server user The snmp-server user Global Configuration mode command configures a new SNMP Version 3 user. To remove a user, use the no form of this command. Syntax snmp-server user username groupname [remote engineid-string] [ auth-md5 password | auth-sha - D-Link DES-3010FA-TAA | CLI Guide - Page 203
SNMP Commands Examples The following example configures an SNMPv3 user John in group user-group. Console(config)# snmp-server user John user-group Page 202 - D-Link DES-3010FA-TAA | CLI Guide - Page 204
Link DES-3010FA/GA CLI Reference Guide snmp-server engineID local The snmp-server engineID local Global Configuration mode command specifies the Simple Network Management of the engine ID has the following important side-effect. A user's password (entered on the command line) is converted to an - D-Link DES-3010FA-TAA | CLI Guide - Page 205
SNMP Commands Examples The following example enables SNMPv3 on the device and sets the local engine ID of the device to the default value. Console(config) # snmp-server engineID local default Page 204 - D-Link DES-3010FA-TAA | CLI Guide - Page 206
D-Link DES-3010FA/GA CLI Reference Guide snmp-server enable traps The snmp-server enable traps Global Default Configuration SNMP traps are enabled. Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command. Examples The following example enables SNMP traps. - D-Link DES-3010FA-TAA | CLI Guide - Page 207
command creates or updates a Simple Network Management Protocol (SNMP) server filter entry. To exists. Command Mode Global Configuration mode User Guidelines This command can be entered multiple System 7) and all objects for interface 1 in the MIB-II interfaces group. Console(config)# snmp-server - D-Link DES-3010FA-TAA | CLI Guide - Page 208
D-Link DES-3010FA/GA CLI Reference Guide snmp-server host The snmp-server host Global Configuration mode command specifies the recipient of Simple Network Management Protocol Version 1 or Version 2 notifications. To remove the specified host, use the no form of this command. Syntax snmp-server host - D-Link DES-3010FA-TAA | CLI Guide - Page 209
specifies the recipient of Simple Network Management Protocol Version 3 notifications. To informs] {noauth | auth | priv} [udp-port port] [filter filtername] [timeout seconds] [retries retries] 158 characters) • username-Specifies the name of the user to use to generate the notification. (Range: - D-Link DES-3010FA-TAA | CLI Guide - Page 210
D-Link DES-3010FA/GA CLI Reference Guide snmp-server trap authentication The snmp-server trap authentication Global failed authentication traps are enabled. Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command. Examples The following example enables - D-Link DES-3010FA-TAA | CLI Guide - Page 211
describes system contact information. (Range: 0-160 characters) Default Configuration This command has no default configuration. Command Mode Global Configuration mode User Guidelines Do not include spaces in the text string or place text that includes spaces inside quotation marks. Examples The - D-Link DES-3010FA-TAA | CLI Guide - Page 212
D-Link DES-3010FA/GA CLI Reference Guide snmp-server location The snmp-server location Global Configuration mode Default Configuration This command has no default configuration. Command Mode Global Configuration mode User Guidelines Do not include spaces in the text string or place text that includes - D-Link DES-3010FA-TAA | CLI Guide - Page 213
Although the CLI can set any required configuration, there might be a situation where a SNMP user sets a MIB variable that does not have an equivalent command. In order to generate configuration files that support those situations, the snmp-server set command is used. This command is case-sensitive - D-Link DES-3010FA-TAA | CLI Guide - Page 214
Link DES-3010FA/GA CLI Reference Guide show snmp The show snmp Privileged EXEC mode command displays the SNMP status. Syntax show snmp Default Configuration This command has no default configuration. Command Mode Privileged EXEC mode User Guidelines There are no user 2 UDP Port ---162 162 Filter Name - D-Link DES-3010FA-TAA | CLI Guide - Page 215
192.122.173.42 Inform Bob Security Level ------Priv UDP Port ---162 Filter Name ------ TO Retries Sec --- ------15 3 SNMP protocol. Type of access - read-only, read-write, super access Management station IP Address. Targeted Recipient Statistics sent with the notification operation. SNMP - D-Link DES-3010FA-TAA | CLI Guide - Page 216
D-Link DES-3010FA/GA CLI Reference Guide show snmp engineid The show snmp engineID Privileged EXEC mode command displays the ID of the local Simple Network Management Protocol (SNMP) engine. Syntax show snmp engineID Default Configuration This command has no default configuration. Command Mode - D-Link DES-3010FA-TAA | CLI Guide - Page 217
the name of the view. (Range: 1-30) Default Configuration This command has no default configuration. Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command. Example The following example displays the configuration of views. Console# show snmp views Name - D-Link DES-3010FA-TAA | CLI Guide - Page 218
D-Link DES-3010FA/GA CLI Reference Guide show . Console# show snmp groups Name user-group managers-group managers-group Security Model Level ----- ----- use (v1, v2 or v3). Authentication of a packet with encryption. Applicable only to the SNMP v3 security model. Name of the view that enables - D-Link DES-3010FA-TAA | CLI Guide - Page 219
SNMP Commands Write Notify Name of the view that enables entering data and managing the contents of the agent. Name of the view that enables specifying an inform or a trap. Page 218 - D-Link DES-3010FA-TAA | CLI Guide - Page 220
D-Link DES-3010FA/GA CLI Reference Guide show snmp filters The show snmp filters Privileged EXEC mode This command has no default configuration. Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command. Example The following example displays the configuration - D-Link DES-3010FA-TAA | CLI Guide - Page 221
configuration. Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command. Example The following example displays the configuration of users. Console# show snmp users Name -----John John Group name -----------user-group user-group Auth Method --------md5 md5 - D-Link DES-3010FA-TAA | CLI Guide - Page 222
D-Link DES-3010FA/GA CLI Reference Guide Section 20. Spanning-Tree Commands spanning-tree The spanning-tree Configuration Spanning-tree is enabled. Command Modes Global Configuration mode User Guidelines There are no user guidelines for this command. Example The following example enables spanning - D-Link DES-3010FA-TAA | CLI Guide - Page 223
) is enabled. • mstp - Indicates that the Multiple Spanning Tree Protocol (RSTP) is enabled. Default Configuration RSTP is enabled. Command Modes Global Configuration mode User Guidelines In RSTP mode, the device uses STP when the neighbor device uses STP. In MSTP mode, the device uses RSTP when the - D-Link DES-3010FA-TAA | CLI Guide - Page 224
Link DES-3010FA/GA CLI Reference Guide spanning-tree forward-time The spanning-tree forward-time Global Configuration mode command configures the spanning-tree bridge forward time, which is the amount of time a port Command Modes Global Configuration mode User Guidelines When configuring the - D-Link DES-3010FA-TAA | CLI Guide - Page 225
: 1 - 10) Default Configuration The default hello time for IEEE Spanning Tree Protocol (STP) is 2 seconds. Command Modes Global Configuration mode User Guidelines When configuring the hello time, the following relationship should be kept: Max-Age >= 2*(Hello-Time + 1) Example The following example - D-Link DES-3010FA-TAA | CLI Guide - Page 226
D-Link DES-3010FA/GA CLI Reference Guide spanning-tree max-age The spanning-tree max- age for IEEE Spanning Tree Protocol (STP) is 20 seconds. Command Modes Global Configuration mode User Guidelines When configuring the maximum age, the following relationships should be kept: 2*(Forward-Time - - D-Link DES-3010FA-TAA | CLI Guide - Page 227
of 4096) Default Configuration The default bridge priority for IEEE Spanning Tree Protocol (STP) is 32768. Command Modes Global Configuration mode User Guidelines The bridge with the lowest priority is elected as the root bridge. Example The following example configures spanning tree priority to - D-Link DES-3010FA-TAA | CLI Guide - Page 228
D-Link DES-3010FA/GA CLI Reference Guide spanning-tree disable The spanning-tree disable Interface Configuration mode command disables spanning tree on a specific port. To enable spanning tree on a port, use the no form of this command. Syntax spanning-tree disable no spanning-tree disable Default - D-Link DES-3010FA-TAA | CLI Guide - Page 229
(100 Mbps) Ethernet (10 Mbps) Long 20,000 20,000 200,000 2,000,000 Short 4 4 19 100 Command Modes Interface Configuration (Ethernet, port-channel) mode User Guidelines The path cost method is configured using the spanning-tree pathcost method Global Configuration mode command. Example The - D-Link DES-3010FA-TAA | CLI Guide - Page 230
Link DES-3010FA/GA CLI Reference Guide spanning-tree port-priority The spanning-tree port-priority Interface Configuration mode command configures port priority. To return to the default configuration, use the no form of this command. Syntax spanning-tree port-priority priority no spanning-tree port - D-Link DES-3010FA-TAA | CLI Guide - Page 231
no spanning-tree portfast Default Configuration PortFast mode is disabled. Command Modes Interface Configuration (Ethernet, port-channel) mode User Guidelines This feature should be used only with interfaces connected to end stations. Otherwise, an accidental topology loop could cause a data - D-Link DES-3010FA-TAA | CLI Guide - Page 232
D-Link DES-3010FA/GA CLI Reference Guide spanning-tree link-type The spanning-tree link-type Interface Configuration mode command overrides the default link-type setting determined by the duplex mode of the port and enables Rapid Spanning Tree Protocol (RSTP) transitions to the forwarding state. To - D-Link DES-3010FA-TAA | CLI Guide - Page 233
path costs with a range of 1-200,000,000 . • short - Specifies port path costs with a range of 0-65,535. Default Configuration Short path cost method. Command Mode Global Configuration mode User Guidelines This command applies to all spanning tree instances on the device. The cost is set using the - D-Link DES-3010FA-TAA | CLI Guide - Page 234
D-Link DES-3010FA/GA CLI Reference Guide spanning-tree bpdu The spanning-tree bpdu Global Configuration mode command defines BPDU handling when the spanning tree is disabled globally or on a single interface. To return to the default configuration, use the no form of this command. Syntax spanning- - D-Link DES-3010FA-TAA | CLI Guide - Page 235
-protocols [ethernet interface | port-channel port-channel-number] Parameters • interface - A valid Ethernet port. • port-channel-number - A valid port-channel number. Default Configuration This command has no default configuration. Command Modes Privileged EXEC mode User Guidelines This feature - D-Link DES-3010FA-TAA | CLI Guide - Page 236
D-Link DES-3010FA/GA CLI Reference Guide spanning-tree guard root The spanning-tree guard root interface configuration command enables root guard on all spanning tree instances on that interface. Root guard restricts the interface to be the root port for the switch. To disable root guard on the - D-Link DES-3010FA-TAA | CLI Guide - Page 237
multiples of 4096). Default Configuration The default bridge priority for IEEE Spanning Tree Protocol (STP) is 32768. Command Mode Global Configuration mode User Guidelines The device with the lowest priority is selected as the root of the spanning tree. Example The following example configures the - D-Link DES-3010FA-TAA | CLI Guide - Page 238
Link DES-3010FA/GA CLI Reference Guide spanning-tree mst max-hops The spanning-tree mst priority Global Configuration mode command configures the number of hops in an MST region before the BDPU is discarded and the port Global Configuration mode User Guidelines There are no user guidelines for this - D-Link DES-3010FA-TAA | CLI Guide - Page 239
240 in multiples of 16) Default Configuration The default port priority for IEEE Multiple Spanning Tree Protocol (MSTP) is 128. Command Modes Interface Configuration (Ethernet, port-channel) mode User Guidelines There are no user guidelines for this command. Example The following example configures - D-Link DES-3010FA-TAA | CLI Guide - Page 240
D-Link DES-3010FA/GA CLI Reference Guide spanning-tree mst cost The spanning-tree mst cost Interface Configuration mode command configures the path cost for multiple spanning tree (MST) calculations. If a loop occurs, the spanning tree considers path cost when selecting an interface to put in the - D-Link DES-3010FA-TAA | CLI Guide - Page 241
Tree (MST) mode. Syntax spanning-tree mst configuration Default Configuration This command has no default configuration. Command Mode Global Configuration mode User Guidelines All devices in an MST region must have the same VLAN mapping, configuration revision number and name. Example The following - D-Link DES-3010FA-TAA | CLI Guide - Page 242
D-Link DES-3010FA/GA CLI Reference Guide instance (mst) The instance MST Configuration mode command maps VLANS common and internal spanning tree (CIST) instance (instance 0). Command Modes MST Configuration mode User Guidelines All VLANs that are not explicitly mapped to an MST instance are mapped to - D-Link DES-3010FA-TAA | CLI Guide - Page 243
Case-sensitive (Range: 1-32 characters). Default Configuration The default name is a bridge ID. Command Mode MST Configuration mode User Guidelines There are no user guidelines for this command. Example The following example defines the configuration name as region1. Console(config) # spanning-tree - D-Link DES-3010FA-TAA | CLI Guide - Page 244
D-Link DES-3010FA/GA CLI Reference Guide revision (mst) The revision MST configuration command defines the default configuration revision number is 0. Command Mode MST Configuration mode User Guidelines There are no user guidelines for this command. Example The following example sets the - D-Link DES-3010FA-TAA | CLI Guide - Page 245
pending-Indicates the pending region configuration. Default Configuration This command has no default configuration. Command Mode MST Configuration mode User Guidelines The pending MST region configuration takes effect only after exiting the MST configuration mode. Example The following example - D-Link DES-3010FA-TAA | CLI Guide - Page 246
D-Link DES-3010FA/GA CLI Reference Guide exit (mst) The exit MST Configuration mode command exits the MST configuration mode and applies all configuration changes. Syntax exit Default Configuration This command has no default configuration. Command Mode MST Configuration mode User Guidelines There - D-Link DES-3010FA-TAA | CLI Guide - Page 247
the configuration changes. Syntax abort Default Configuration This command has no default configuration. Command Mode MST Configuration mode User Guidelines There are no user guidelines for this command. Example The following example exits the MST configuration mode without saving changes. Console - D-Link DES-3010FA-TAA | CLI Guide - Page 248
Link DES-3010FA/GA CLI Reference Guide show spanning-tree The show spanning-tree Privileged EXEC mode command displays spanning-tree configuration. Syntax show spanning-tree [ethernet interface -number| port-channel port Privileged EXEC mode User Guidelines There are no user guidelines for this - D-Link DES-3010FA-TAA | CLI Guide - Page 249
Spanning-Tree Commands Console# show spanning-tree Spanning tree disabled (BPDU flooding) mode STP Default port cost method: short Root ID Priority 32768 Address 00:19:28:37:46:00 This switch is the root Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec Number of topology changes 0 last - D-Link DES-3010FA-TAA | CLI Guide - Page 250
D-Link DES-3010FA/GA CLI Reference Guide Section 21. Syslog Commands logging on The logging on on no logging on Default Configuration Logging is enabled. Command Mode Global Configuration mode User Guidelines The logging process controls the distribution of logging messages at various destinations, - D-Link DES-3010FA-TAA | CLI Guide - Page 251
use the no form of this command. Syntax logging {ip-address | hostname} [port port] [severity level] [facility facility] [description text] no logging {ip-address errors. The default facility is local7. Command Mode Global Configuration mode User Guidelines Up to 8 syslog servers can be used. If no - D-Link DES-3010FA-TAA | CLI Guide - Page 252
D-Link DES-3010FA/GA CLI Reference Guide logging console The logging console Global Configuration mode command limits messages severity level is informational. Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command. Example The following example limits - D-Link DES-3010FA-TAA | CLI Guide - Page 253
critical, errors, warnings, notifications, informational, debugging. Default Configuration The default severity level is informational. Command Mode Global Configuration mode User Guidelines All the syslog messages are logged to the internal buffer. This command limits the messages displayed to the - D-Link DES-3010FA-TAA | CLI Guide - Page 254
D-Link DES-3010FA/GA CLI Reference Guide logging buffered size The logging buffered size Global Default Configuration The default number of messages is 200. Command Mode Global Configuration mode User Guidelines This command takes effect only after Reset. Example The following example changes the - D-Link DES-3010FA-TAA | CLI Guide - Page 255
logging buffer. Syntax clear logging Default Configuration This command has no default configuration. Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command. Example The following example clears messages from the internal logging buffer. Console# clear - D-Link DES-3010FA-TAA | CLI Guide - Page 256
D-Link DES-3010FA/GA CLI Reference Guide logging file The logging file Global Configuration mode command limits syslog default severity level is errors. Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command. Example The following example limits syslog - D-Link DES-3010FA-TAA | CLI Guide - Page 257
logging file. Syntax clear logging file Default Configuration This command has no default configuration. Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command. Example The following example clears messages from the logging file. Console# clear logging file - D-Link DES-3010FA-TAA | CLI Guide - Page 258
D-Link DES-3010FA/GA CLI Reference Guide aaa logging The aaa logging Global Configuration mode command enables Default Configuration Logging AAA login events is enabled. Command Mode Global Configuration mode User Guidelines Other types of AAA events are not subject to this command. Example The - D-Link DES-3010FA-TAA | CLI Guide - Page 259
deletion and renaming operations. Default Configuration Logging file system events is enabled. Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command. Example The following example enables logging messages related to file copy operations. Console(config - D-Link DES-3010FA-TAA | CLI Guide - Page 260
D-Link DES-3010FA/GA CLI Reference Guide management logging The management logging global configuration command enables logging management access list (ACL) events. To disable logging management access list events, use the no form of this command. Syntax management logging deny no management logging - D-Link DES-3010FA-TAA | CLI Guide - Page 261
User Guidelines There are no user Application filtering control Application Event Status ----------- ----- ------ AAA Login Enabled File system Copy Enabled File system Delete-Rename Enabled Management ACL Deny Enabled Buffer log: 11-Aug-2004 15:41:43: %LINK-3-UPDOWN: Interface - D-Link DES-3010FA-TAA | CLI Guide - Page 262
D-Link DES-3010FA/GA CLI Reference Guide 11-Aug-2004 15:41:43: %LINK-3-UPDOWN: Interface Ethernet2, changed state to up 11-Aug-2004 15:41:43: %LINK-3-UPDOWN: Interface Ethernet, changed state to up 11-Aug-2004 15:41:43: %SYS-5-CONFIG_I: Configured from memory by console 11-Aug-2004 15:41:39: % - D-Link DES-3010FA-TAA | CLI Guide - Page 263
User Guidelines There are no user Application filtering control Application Event Status ----------- ----- ------ AAA Login Enabled File system Copy Enabled File system Delete-Rename Enabled Management ACL Deny Enabled Buffer log: 11-Aug-2004 15:41:43: %LINK-3-UPDOWN: Interface - D-Link DES-3010FA-TAA | CLI Guide - Page 264
D-Link DES-3010FA/GA CLI Reference Guide 11-Aug-2004 15:41:43: %LINK-3-UPDOWN: Interface Ethernet2, changed state to up 11-Aug-2004 15:41:43: %LINK-3-UPDOWN: Interface Ethernet3, changed state to up 11-Aug-2004 15:41:43: %SYS-5-CONFIG_I: Configured from memory by console 11-Aug-2004 15:41:39: % - D-Link DES-3010FA-TAA | CLI Guide - Page 265
There are no user guidelines for this command. Example The following example displays the settings of the syslog servers. Console# show syslog-servers Device Configuration IP address Port ------------ ---- 192.180.2.27 514 192.180.2.28 514 Severity Informational Warning Facility - D-Link DES-3010FA-TAA | CLI Guide - Page 266
D-Link DES-3010FA/GA CLI Reference Guide Section 22. System Management ping The ping User EXEC mode command sends ICMP echo request send is 4. Default timeout value is 2000 milliseconds. Command Mode User EXEC mode User Guidelines Press Esc to stop pinging. Following are examples of unsuccessful - D-Link DES-3010FA-TAA | CLI Guide - Page 267
=8 ms 64 bytes from 10.1.1.1: icmp_seq=3. time=7 ms ----10.1.1.1 PING Statistics---4 packets transmitted, 4 packets received, 0% packet loss round-trip (ms) min/avg/max = 7/8/11 System Management Page 266 - D-Link DES-3010FA-TAA | CLI Guide - Page 268
Link DES-3010FA/GA CLI Reference Guide traceroute The traceroute User packet. (Range:1-60) • ip-address - One of the device's interface addresses to use as a source address for the probes. The device source address to use. • tos - The Type-Of-Service byte in the IP Header of the packet. (Range: - D-Link DES-3010FA-TAA | CLI Guide - Page 269
System Management Examples The following example discovers the routes that packets will actually take when traveling to their set. Host unreachable. Network unreachable. Protocol unreachable. Source quench. Fragment reassembly time exceeded. Source route failed. Port unreachable. Page 268 - D-Link DES-3010FA-TAA | CLI Guide - Page 270
D-Link DES-3010FA/GA CLI Reference Guide reload The reload Privileged EXEC mode command reloads the operating system. Syntax reload Default Configuration This command has no default configuration. Command Mode Privileged EXEC mode User Guidelines Caution should be exercised when resetting the device - D-Link DES-3010FA-TAA | CLI Guide - Page 271
System Management hostname The hostname Global Configuration mode command specifies or modifies the device 1-158 characters) Default Configuration This command has no default configuration. Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command. Page 270 - D-Link DES-3010FA-TAA | CLI Guide - Page 272
D-Link DES-3010FA/GA CLI Reference Guide show users The show users User EXEC mode command displays information about the active users. Syntax show users Default Configuration This command has no default configuration. Command Mode User EXEC mode User Guidelines There are no user guidelines for this - D-Link DES-3010FA-TAA | CLI Guide - Page 273
System Management show system The show system User EXEC mode command displays system information. Syntax show system Default Configuration This command has no default configuration. Command Mode User EXEC mode User Guidelines There are no user guidelines for this command. Example The following - D-Link DES-3010FA-TAA | CLI Guide - Page 274
D-Link DES-3010FA/GA CLI Reference Guide show version The show version User EXEC mode command displays system version information. Syntax show version Default Configuration This command has no default configuration. Command Mode User EXEC mode User Guidelines There are no user guidelines for - D-Link DES-3010FA-TAA | CLI Guide - Page 275
id Default Configuration This command has no default configuration. Command Mode User EXEC mode User Guidelines There are no user guidelines for this command. Example The following example displays the system ID information. console# show system id Service tag : Serial number : Asset tag: Page 274 - D-Link DES-3010FA-TAA | CLI Guide - Page 276
D-Link DES-3010FA/GA CLI Reference Guide Section 23. User Interface enable The enable User EXEC mode command enters the Privileged EXEC mode. Syntax enable [privilege-level] Parameters • privilege-level - Privilege level to enter the system. (Range: 1 - 15) Default Configuration - D-Link DES-3010FA-TAA | CLI Guide - Page 277
to enter the system. (Range: 1 - 15) Default Configuration The default privilege level is 1. Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command. Example The following example return to Users EXEC mode. Console# disable Console> User Interface Page 276 - D-Link DES-3010FA-TAA | CLI Guide - Page 278
D-Link DES-3010FA/GA CLI Reference Guide login The login User EXEC mode command changes a login username. Syntax login Default Configuration This command has no default configuration. Command Mode User EXEC mode User Guidelines There are no user guidelines for this command. Example The following - D-Link DES-3010FA-TAA | CLI Guide - Page 279
User Interface configure The configure Privileged EXEC mode command enters the Global Configuration mode. Syntax configure Default Configuration This command has no default configuration. Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command. Example The - D-Link DES-3010FA-TAA | CLI Guide - Page 280
D-Link DES-3010FA/GA CLI Reference Guide exit (Configuration) The exit command exits any configuration mode to the next highest mode in the CLI mode hierarchy. Syntax exit Default Configuration This command has no default configuration. Command Mode All configuration modes User Guidelines There are - D-Link DES-3010FA-TAA | CLI Guide - Page 281
User Interface exit The exit Privileged/User EXEC mode command closes an active terminal session by logging off the device. Syntax exit Default Configuration This command has no default configuration. Command Mode Privileged and User EXEC modes User Guidelines There are no user guidelines for this - D-Link DES-3010FA-TAA | CLI Guide - Page 282
D-Link DES-3010FA/GA CLI Reference Guide end The end command ends the current configuration session and returns to the Privileged EXEC mode. Syntax end Default Configuration This command has no default configuration. Command Mode All configuration modes. User Guidelines There are no user guidelines - D-Link DES-3010FA-TAA | CLI Guide - Page 283
User Interface help The help command displays a brief description of the help system. Syntax help Default Configuration This command has no default configuration. Command Mode All command modes User Guidelines There are no user guidelines for this command. Example The following example describes the - D-Link DES-3010FA-TAA | CLI Guide - Page 284
D-Link DES-3010FA/GA CLI Reference Guide terminal data-dump The terminal data-dump User EXEC mode command enables dumping all the output of a show command without prompting. To disable dumping, use the no form of this command. Syntax terminal - D-Link DES-3010FA-TAA | CLI Guide - Page 285
User Interface show history The show history User EXEC mode command lists the commands entered in the current session. Syntax show history Default Configuration This command has no default configuration. Command Mode User EXEC mode The UserGuidelines buffer includes executed and unexecuted commands. - D-Link DES-3010FA-TAA | CLI Guide - Page 286
D-Link DES-3010FA/GA CLI Reference Guide show privilege The show privilege Privileged/User EXEC mode command displays the current privilege level. Syntax show privilege Default Configuration This command has no default configuration. Command Mode Privileged and User EXEC modes User Guidelines There - D-Link DES-3010FA-TAA | CLI Guide - Page 287
Configuration mode. Syntax vlan database Default Configuration This command has no default configuration. Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command. Example The following example enters the VLAN database mode. Console(config)# vlan database - D-Link DES-3010FA-TAA | CLI Guide - Page 288
D-Link DES-3010FA/GA CLI Reference Guide vlan Use the vlan VLAN Configuration mode command to create a VLAN This command has no default configuration. Command Mode VLAN Configuration mode User Guidelines There are no user guidelines for this command. Example The following example VLAN number 1972 - D-Link DES-3010FA-TAA | CLI Guide - Page 289
no default configuration. Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command. Example The following example configures VLAN 1 with IP address 131.108.1.27 and subnet mask 255.255.255.0. Console(config)# interface vlan 1 Console(config-if)# ip address - D-Link DES-3010FA-TAA | CLI Guide - Page 290
Link DES-3010FA/GA CLI Reference Guide interface range vlan The interface range vlan Global Configuration mode command enables simultaneously configuring multiple VLANs. Syntax interface mode User Guidelines Commands under the interface range context are executed independently on each interface in - D-Link DES-3010FA-TAA | CLI Guide - Page 291
VLAN. (Range: 1-32 characters) Default Configuration No name is defined. Command Mode Interface Configuration (VLAN) mode. Cannot be configured for a range of interfaces (range context). User Guidelines There are no user guidelines for this command. Example The following example gives VLAN number 19 - D-Link DES-3010FA-TAA | CLI Guide - Page 292
D-Link DES-3010FA/GA CLI Reference Guide private-vlan primary The private-vlan primary Interface Configuration mode command configures the primary PVLAN. To return to the default configuration, use the no form of this command. Syntax private-vlan primary no - D-Link DES-3010FA-TAA | CLI Guide - Page 293
Default Configuration No VLAN is configured. Command Mode Interface Configuration (VLAN) mode User Guidelines • This command creates an isolated VLAN and primary or community VLAN. • The command is not supported under the command interface range vlan. Example This example configures VLAN 20 as the - D-Link DES-3010FA-TAA | CLI Guide - Page 294
Link DES-3010FA/GA CLI Reference Guide private-vlan community The private-vlan community Interface association is configured. Command Mode Interface Configuration (VLAN) mode User Guidelines • This command creates • The command is not supported under the command interface range vlan. Example This - D-Link DES-3010FA-TAA | CLI Guide - Page 295
access mode, and belong to the default VLAN (whose VID=1). Command Mode Interface Configuration (Ethernet, port-channel) mode User Guidelines • A port cannot be defined as promiscuous or isolated if it is a member of a VLAN. • If a port is defined as promiscuous or isolated, it is no longer a member - D-Link DES-3010FA-TAA | CLI Guide - Page 296
D-Link DES-3010FA/GA CLI Reference Guide switchport access vlan The switchport access vlan Interface Configuration mode command configures the VLAN ID when the interface is in access mode. To return to the default configuration, use the no form of this command. Syntax switchport access vlan {vlan-id - D-Link DES-3010FA-TAA | CLI Guide - Page 297
of the primary VLAN. • cvlan - Specifies the ID of the community VLAN. Default Configuration The port is not a member of a PVLAN. Command Mode Interface Configuration (Ethernet, port-channel) mode User Guidelines • The community VLAN should be associated with the primary VLAN by using the switchport - D-Link DES-3010FA-TAA | CLI Guide - Page 298
D-Link DES-3010FA/GA CLI Reference Guide show vlan default configuration. Command Mode Privileged EXEC User Guidelines There are no user guidelines for this command. Example The 102, 103 Promiscuous ports: 2, 3 Isolated ports: 4, 5 Community --------102 103 Ports ----6, 7 2,4 Page 297 - D-Link DES-3010FA-TAA | CLI Guide - Page 299
A hyphen designates a range of IDs. Default Configuration This command has no default configuration. Command Mode Interface Configuration (Ethernet, port-channel) mode User Guidelines There are no user guidelines for this command. Example The following example adds VLANs 1, 2, 5 to 6 to the allowed - D-Link DES-3010FA-TAA | CLI Guide - Page 300
D-Link DES-3010FA/GA CLI Reference Guide switchport trunk native vlan The switchport trunk native vlan Interface Configuration mode command defines the native VLAN when the interface is in trunk mode. To return to the default configuration, use the no form of this command. Syntax switchport trunk - D-Link DES-3010FA-TAA | CLI Guide - Page 301
to a VLAN without specifying tagged or untagged, the default setting is tagged. Command Mode Interface Configuration (Ethernet, port-channel) mode User Guidelines This command enables changing the egress rule (e.g., from tagged to untagged) without first removing the VLAN from the list. Example - D-Link DES-3010FA-TAA | CLI Guide - Page 302
D-Link DES-3010FA/GA CLI Reference Guide switchport general pvid The switchport general pvid Interface Configuration mode command configures the PVID when the interface is in general mode. To return to the default configuration, use the no form of this command. Syntax switchport general pvid vlan-id - D-Link DES-3010FA-TAA | CLI Guide - Page 303
Ingress filtering is enabled. Command Mode Interface Configuration (Ethernet, port-channel) mode User Guidelines There are no user guidelines for this command. Example The following example disables port ingress filtering on Ethernet port 6. Console(config)# interface ethernet 6 Console(config-if - D-Link DES-3010FA-TAA | CLI Guide - Page 304
D-Link DES-3010FA/GA CLI Reference Guide switchport general acceptable-frame-type tagged-only The switchport general acceptable-frame-type tagged-only Interface Configuration mode command discards untagged frames at ingress. To return to the default configuration, use the no form of this command. - D-Link DES-3010FA-TAA | CLI Guide - Page 305
IDs with a comma and no spaces. A hyphen designates a range of IDs. Default Configuration All VLANs are allowed. Command Mode Interface Configuration (Ethernet, port-channel) mode User Guidelines This command can be used to prevent GVRP from automatically making the specified VLANs active on the - D-Link DES-3010FA-TAA | CLI Guide - Page 306
D-Link DES-3010FA/GA CLI Reference Guide switchport protected The switchport protected Interface Configuration mode command overrides the FDB decision and sends all Unicast, Multicast and Broadcast traffic to an uplink port. To return to the default configuration, use the no form of the command . - D-Link DES-3010FA-TAA | CLI Guide - Page 307
as the internal usage VLAN of an interface. Command Mode Interface Configuration (Ethernet, port-channel) mode User Guidelines An internal usage VLAN is required when an IP interface is configured on an Ethernet port or port-channel. This command enables the user to configure the internal usage VLAN - D-Link DES-3010FA-TAA | CLI Guide - Page 308
D-Link DES-3010FA/GA CLI Reference Guide show user guidelines for this command. Example The following example displays all VLAN information. Console# show vlan VLAN ---1 10 11 20 21 30 31 91 3978 Name ------default VLAN0010 VLAN0011 VLAN0020 VLAN0021 VLAN0030 VLAN0031 VLAN0011 Guest VLAN Ports - D-Link DES-3010FA-TAA | CLI Guide - Page 309
the device. Syntax show vlan internal usage Default Configuration This command has no default configuration. Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command. Example The following example displays VLANs used internally by the device. Console# show vlan - D-Link DES-3010FA-TAA | CLI Guide - Page 310
D-Link DES-3010FA/GA CLI Reference Guide show interfaces switchport The show interfaces switchport Privileged EXEC mode command displays the switchport configuration. Syntax show interfaces switchport {ethernet interface | port-channel port-channel-number} Parameters • interface - A valid Ethernet - D-Link DES-3010FA-TAA | CLI Guide - Page 311
72 VLAN0072 Egress rule ----------untagged tagged untagged untagged Forbidden VLANS: VLAN Name ---- ---- 73 out Console# show interface switchport ethernet 2 Port 2: VLAN Membership mode: General Operating parameters: PVID: 4095 (discard vlan) Ingress Filtering: Enabled Acceptable Frame - D-Link DES-3010FA-TAA | CLI Guide - Page 312
D-Link DES-3010FA/GA CLI Reference Guide Port 2 is statically confgiured to: Vlan Name ---- ------------ 8 VLAN0072 91 IP Telephony Egress rule ----------untagged tagged Forbidden VLANS: VLAN Name ---- ---- 73 out Port 7 VLAN Membership mode: Primary VLAN: 2921 Community VLAN: 2922 - D-Link DES-3010FA-TAA | CLI Guide - Page 313
of this command. Syntax ip http server no ip http server Default Configuration HTTP server is enabled. Command Mode Global Configuration mode User Guidelines Only a user with access level 15 can use the Web server. Example The following example enables configuring the device from a browser. Console - D-Link DES-3010FA-TAA | CLI Guide - Page 314
D-Link DES-3010FA/GA CLI Reference Guide ip https server The ip https server Global Configuration Default Configuration HTTPS server is enabled. Command Mode Global Configuration mode User Guidelines There are no user guidelines for this command. Example The following example enables configuring the - D-Link DES-3010FA-TAA | CLI Guide - Page 315
Server ip http port The ip http port Global Configuration mode command specifies the TCP port to be used by the Web browser interface. To return to the default configuration, use the no form of this command. Syntax ip http port port-number no ip http port Parameters • port-number - Port number for - D-Link DES-3010FA-TAA | CLI Guide - Page 316
D-Link DES-3010FA/GA CLI Reference Guide ip https port The ip https port Global Configuration mode command specifies the TCP port to be used by the Web browser interface. To return to the default configuration, use the no form of this command. Syntax ip https port port-number no ip https port - D-Link DES-3010FA-TAA | CLI Guide - Page 317
server configuration. Syntax show ip http Default Configuration This command has no default configuration. Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command. Example The following example displays the HTTP server configuration. Console# show ip http HTTP - D-Link DES-3010FA-TAA | CLI Guide - Page 318
Link DES-3010FA/GA CLI Reference Guide Section 26. 802.1x Commands aaa authentication dot1x The aaa authentication dot1x Global Configuration mode command specifies one or more authentication, authorization, and accounting (AAA) methods for use on interfaces User server must support MD-5 challenge - D-Link DES-3010FA-TAA | CLI Guide - Page 319
-auth-control no dot1x system-auth-control Default Configuration 802.1x is disabled globally. Command Modes Global Configuration mode User Guidelines There are no user guidelines for this command. Examples The following example enables 802.1x globally. Console(config)# dot1x system-auth-control Page - D-Link DES-3010FA-TAA | CLI Guide - Page 320
D-Link DES-3010FA/GA CLI Reference Guide dot1x port-control The dot1x port-control Interface Configuration mode command enables manually controlling the authorization state of the port. To return to the default configuration, use the no form of this command. Syntax dot1x port-control {auto | force- - D-Link DES-3010FA-TAA | CLI Guide - Page 321
re-authentication no dot1x re-authentication Default Configuration Periodic re-authentication is disabled. Command Mode Interface Configuration (Ethernet) User Guidelines There are no user guidelines for this command. Examples The following example enables periodic re-authentication of the client - D-Link DES-3010FA-TAA | CLI Guide - Page 322
D-Link DES-3010FA/GA CLI Reference Guide dot1x timeout re-authperiod The dot1x timeout re-authperiod Interface Configuration mode command sets the period is 3600 seconds. Command Mode Interface Configuration (Ethernet) mode User Guidelines There are no user guidelines for this command. Examples The - D-Link DES-3010FA-TAA | CLI Guide - Page 323
[ethernet interface] Parameters • interface - Valid Ethernet port. (Full syntax: port) Default Configuration This command has no default configuration. Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command. Examples The following command manually initiates - D-Link DES-3010FA-TAA | CLI Guide - Page 324
D-Link DES-3010FA/GA CLI Reference Guide dot1x timeout quiet-period The dot1x timeout quiet-period Interface Configuration mode command sets the as unreliable links or specific behavioral problems with certain clients and authentication servers. To provide a faster response time to the user, a - D-Link DES-3010FA-TAA | CLI Guide - Page 325
Timeout period is 30 seconds. Command Mode Interface Configuration (Ethernet) mode User Guidelines The default value of this command should be changed only to adjust for unusual circumstances, such as unreliable links or specific behavioral problems with certain clients. and authentication servers - D-Link DES-3010FA-TAA | CLI Guide - Page 326
D-Link DES-3010FA/GA CLI Reference Guide dot1x max-req The dot1x max-req Interface Interface Configuration (Ethernet) mode User Guidelines The default value of this command should be changed only to adjust for unusual circumstances, such as unreliable links or specific behavioral problems - D-Link DES-3010FA-TAA | CLI Guide - Page 327
timeout period is 30 seconds. Command Mode Interface configuration (Ethernet) mode User Guidelines The default value of this command should be changed only to adjust for unusual circumstances, such as unreliable links or specific behavioral problems with certain clients. and authentication servers - D-Link DES-3010FA-TAA | CLI Guide - Page 328
D-Link DES-3010FA/GA CLI Reference Guide dot1x timeout server-timeout The dot1x timeout server-timeout Interface Configuration mode command sets The timeout period is 30 seconds. Command Mode Interface configuration (Ethernet) mode User Guidelines The actual timeout can be determined by comparing - D-Link DES-3010FA-TAA | CLI Guide - Page 329
. Syntax show dot1x [ethernet interface] Parameters • interface - Valid Ethernet port. (Full syntax: port) Default Configuration This command has no default configuration. Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command. Example The following example - D-Link DES-3010FA-TAA | CLI Guide - Page 330
D-Link DES-3010FA/GA CLI Reference Guide Port ---3 Admin Mode ---------Auto Oper Mode --------Unauthorized Reauth Control in case the port control is auto. If the port is Authorized, it shows the username of the current user. If the port is unauthorized it shows the last user that was - D-Link DES-3010FA-TAA | CLI Guide - Page 331
to an EAP-request frame from the client before resending the request. Time in seconds the switch waits for a response from the authentication server before resending the request. The amount of time the user is logged in. The supplicant MAC address. The authentication method used to establish the - D-Link DES-3010FA-TAA | CLI Guide - Page 332
Link DES-3010FA/GA CLI Reference Guide show dot1x users The show dot1x users Privileged EXEC mode command displays active 802.1X authenticated users for the device. Syntax show dot1x users 3b89:3127 Console# show dot1x users username Bob Username: Bob Port Username 1 Bob Session Time - D-Link DES-3010FA-TAA | CLI Guide - Page 333
802.1x Commands The following table describes significant fields shown above: Field Port Username Session Time Authentication Method MAC Address Description The port number. The username representing the identity of the Supplicant. The period of time the Supplicant is connected to the system. - D-Link DES-3010FA-TAA | CLI Guide - Page 334
D-Link DES-3010FA/GA CLI Reference Guide show dot1x statistics The show dot1x statistics Privileged EXEC mode command displays 802.1X statistics for the specified interface. Syntax show dot1x statistics ethernet interface Parameters • interface - Valid Ethernet port. (Full syntax: port) Default - D-Link DES-3010FA-TAA | CLI Guide - Page 335
802.1x Commands The following table describes the significant fields shown in the display: Field EapolFramesRx EapolFramesTx EapolStartFramesRx EapolLogoffFramesRx EapolRespIdFramesRx EapolRespFramesRx EapolReqIdFramesTx EapolReqFramesTx InvalidEapolFramesRx EapLengthErrorFramesRx - D-Link DES-3010FA-TAA | CLI Guide - Page 336
D-Link DES-3010FA/GA CLI Reference Guide ADVANCED FEATURES dot1x auth-not-req The dot1x auth-not-req Interface Configuration mode Configuration Access is enabled. Command Mode Interface Configuration (VLAN) mode User Guidelines An access port cannot be a member in an unauthenticated VLAN. The - D-Link DES-3010FA-TAA | CLI Guide - Page 337
no dot1x multiple-hosts Default Configuration Multiple hosts are disabled. Command Mode Interface Configuration (Ethernet) mode User Guidelines This command enables the attachment of multiple clients to a single 802.1X-enabled port. In this mode, only one of the attached hosts must be successfully - D-Link DES-3010FA-TAA | CLI Guide - Page 338
Link DES-3010FA/GA CLI Reference Guide dot1x single-host-violation The dot1x single-host-violation Interface Configuration mode command configures the action to be taken, when a station whose MAC address is not the supplicant MAC address, attempts to access the interface address. The port is also - D-Link DES-3010FA-TAA | CLI Guide - Page 339
Configuration mode command to enable unauthorized users on an interface to access the guest VLAN. If the guest VLAN is defined and enabled, the port automatically joins the guest VLAN when the port is unauthorized and leaves it when the port becomes authorized. To be able to join or leave the - D-Link DES-3010FA-TAA | CLI Guide - Page 340
D-Link DES-3010FA/GA CLI Reference Guide dot1x guest-vlan enable The dot1x vlans guest-vlan enable Interface Configuration mode command enables unauthorized users on the interface access to the Guest VLAN. To disable access, use the no form of this command Syntax dot1x guest-vlan enable no dot1x - D-Link DES-3010FA-TAA | CLI Guide - Page 341
. Syntax show dot1x advanced [ethernet interface] Parameters • interface - Valid Ethernet port. (Full syntax: port) Default Configuration This command has no default configuration. Command Mode Privileged EXEC mode User Guidelines There are no user guidelines for this command. Examples The following - D-Link DES-3010FA-TAA | CLI Guide - Page 342
D-Link DES-3010FA/GA CLI Reference Guide Trap frequency: 100 Status: Single-host locked Violations since last trap: 9 Page 341 - D-Link DES-3010FA-TAA | CLI Guide - Page 343
: • Problem Management - Provides information about problem management with DES-3010FA/GA. • Troubleshooting Solutions - Provides a list of troubleshooting issues and solutions for using DES- 3010FA/GA. Problem Management Problem management includes isolating problems, quantifying the problems, and - D-Link DES-3010FA-TAA | CLI Guide - Page 344
Link DES-3010FA/GA CLI Reference Guide Problems Cannot connect to management using RS-232 serial connection Possible Cause Cannot connect to switch management the port LED is on the workstation Solution Be sure the terminal emulator program your technical support representative. Configure - D-Link DES-3010FA-TAA | CLI Guide - Page 345
Problems No connection and the port LED is off Possible Cause Incorrect ethernet cable, e.g., crossed rather than that all 10 Mbps connections use a Cat 5 cable Check the port LED or zoom screen in the NMS application, and change setting if necessary Copyright © 2005 April 22, 2005 CONFIDENTIAL - D-Link DES-3010FA-TAA | CLI Guide - Page 346
D-Link DES-3010FA/GA CLI Reference Guide Problems Add and Edit pages do not open. Lost password Possible Cause A pop-up blocker is enabled. Solution Disable pop-up blockers. The Password Recovery Procedure enables the user to set the password back to the default setting. The Password Recovery - D-Link DES-3010FA-TAA | CLI Guide - Page 347
Product Registration D-Link products can be registered online at http://support.dlink.com/register/. Product registration is entirely voluntary and failure to complete or return this form will not diminish your warranty rights. Copyright © 2005 April 22, - D-Link DES-3010FA-TAA | CLI Guide - Page 348
D-Link DES-3010FA/GA User Guide International Offices U.S.A 17595 Mt. Herrmann Street Fountain Valley, CA. 92708 TEL: 714-885-6000 Fax 866-743-4905 URL: www.dlink.com Canada 2180 Winston Park Drive Oakville, Ontario, L6H 5W1 Canada TEL: 1-905-8295033 FAX: 1-905-8295223 URL: www.dlink.ca Europe (U.
-
1 -
2 -
3 -
4 -
5 -
6 -
7 -
8
-
9
-
10
-
11
-
12
-
13
-
14
-
15
-
16
-
17
-
18
-
19
-
20
-
21
-
22
-
23
-
24
-
25
-
26
-
27
-
28
-
29
-
30
-
31
-
32
-
33
-
34
-
35
-
36
-
37
-
38
-
39
-
40
-
41
-
42
-
43
-
44
-
45
-
46
-
47
-
48
-
49
-
50
-
51
-
52
-
53
-
54
-
55
-
56
-
57
-
58
-
59
-
60
-
61
-
62
-
63
-
64
-
65
-
66
-
67
-
68
-
69
-
70
-
71
-
72
-
73
-
74
-
75
-
76
-
77
-
78
-
79
-
80
-
81
-
82
-
83
-
84
-
85
-
86
-
87
-
88
-
89
-
90
-
91
-
92
-
93
-
94
-
95
-
96
-
97
-
98
-
99
-
100
-
101
-
102
-
103
-
104
-
105
-
106
-
107
-
108
-
109
-
110
-
111
-
112
-
113
-
114
-
115
-
116
-
117
-
118
-
119
-
120
-
121
-
122
-
123
-
124
-
125
-
126
-
127
-
128
-
129
-
130
-
131
-
132
-
133
-
134
-
135
-
136
-
137
-
138
-
139
-
140
-
141
-
142
-
143
-
144
-
145
-
146
-
147
-
148
-
149
-
150
-
151
-
152
-
153
-
154
-
155
-
156
-
157
-
158
-
159
-
160
-
161
-
162
-
163
-
164
-
165
-
166
-
167
-
168
-
169
-
170
-
171
-
172
-
173
-
174
-
175
-
176
-
177
-
178
-
179
-
180
-
181
-
182
-
183
-
184
-
185
-
186
-
187
-
188
-
189
-
190
-
191
-
192
-
193
-
194
-
195
-
196
-
197
-
198
-
199
-
200
-
201
-
202
-
203
-
204
-
205
-
206
-
207
-
208
-
209
-
210
-
211
-
212
-
213
-
214
-
215
-
216
-
217
-
218
-
219
-
220
-
221
-
222
-
223
-
224
-
225
-
226
-
227
-
228
-
229
-
230
-
231
-
232
-
233
-
234
-
235
-
236
-
237
-
238
-
239
-
240
-
241
-
242
-
243
-
244
-
245
-
246
-
247
-
248
-
249
-
250
-
251
-
252
-
253
-
254
-
255
-
256
-
257
-
258
-
259
-
260
-
261
-
262
-
263
-
264
-
265
-
266
-
267
-
268
-
269
-
270
-
271
-
272
-
273
-
274
-
275
-
276
-
277
-
278
-
279
-
280
-
281
-
282
-
283
-
284
-
285
-
286
-
287
-
288
-
289
-
290
-
291
-
292
-
293
-
294
-
295
-
296
-
297
-
298
-
299
-
300
-
301
-
302
-
303
-
304
-
305
-
306
-
307
-
308
-
309
-
310
-
311
-
312
-
313
-
314
-
315
-
316
-
317
-
318
-
319
-
320
-
321
-
322
-
323
-
324
-
325
-
326
-
327
-
328
-
329
-
330
-
331
-
332
-
333
-
334
-
335
-
336
-
337
-
338
-
339
-
340
-
341
-
342
-
343
-
344
-
345
-
346
-
347
-
348
 |
 |
