TP-Link 10GE T1700G-28TQUN V1 CLI Reference Guide
TP-Link 10GE Manual
 |
View all TP-Link 10GE manuals
Add to My Manuals
Save this manual to your list of manuals |
TP-Link 10GE manual content summary:
- TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 1
T1700G-28TQ JetStream 24-Port Gigabit Stackable Smart Switch with 4 10GE SFP+ Slots REV1.0.2 1910011741 - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 2
COPYRIGHT & TRADEMARKS Specifications are subject to change without notice. is a registered trademark of TP-LINK TECHNOLOGIES CO., LTD. Other brands and product names are trademarks or registered trademarks of their respective holders. No part of the specifications may be reproduced - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 3
...14 1.4.1 Format Conventions 14 1.4.2 Special Characters 14 1.4.3 Parameter Format 14 Chapter 2 User Interface 15 2.1 enable ...15 2.2 service password-encryption 15 2.3 enable password...16 2.4 enable secret ...17 2.5 configure ...18 2.6 exit ...18 2.7 end ...19 2.8 show - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 4
4.5 switchport pvid ...27 4.6 show vlan summary 28 4.7 show vlan brief...28 4.8 show vlan...29 4.9 show interface switchport 29 Chapter 5 MAC-based VLAN Commands 31 5.1 mac-vlan mac-address 31 5.2 mac-vlan ...32 5.3 show mac-vlan...32 5.4 show mac-vlan interface 33 Chapter 6 - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 5
Chapter 9 User Management Commands 51 9.1 user name (password 51 9.2 user name (secret 52 9.3 user access-control ip-based 53 9.4 user access-control mac-based 54 9.5 user access-control port-based 55 9.6 telnet ...56 9.7 show user account-list 56 9.8 show user configuration - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 6
11.13 11.14 11.15 show ip dhcp snooping 77 show ip dhcp snooping interface 78 show ip dhcp snooping information interface 78 Chapter 12 ARP Inspection Commands 80 12.1 ip arp inspection(global 80 12.2 ip arp inspection trust 80 12.3 ip arp inspection(interface 81 12.4 ip arp inspection - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 7
address-table count 119 show mac address-table address 119 show mac address-table vlan 120 Chapter 18 System Configuration Commands 121 18.1 system-time manual 121 18.2 system-time ntp ...121 18.3 system-time dst predefined 123 18.4 system-time dst date 124 VI - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 8
141 show memory-utilization 142 Chapter 19 IPv6 Address Configuration Commands 143 19.1 ipv6 enable ...143 19.2 ipv6 address autoconfig 143 19.3 ipv6 address link-local 144 19.4 ipv6 address dhcp 145 19.5 ipv6 address ra ...145 19.6 ipv6 address eui-64 146 19.7 ipv6 address ...147 19.8 show - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 9
20.1 20.2 20.3 20.4 20.5 20.6 20.7 20.8 20.9 20.10 20.11 20.12 20.13 20.14 20.15 20.16 20.17 20.18 20.19 interface gigabitEthernet 148 interface range gigabitEthernet 148 interface ten-gigabitEthernet 149 interface range ten-gigabitEthernet 150 description ...151 shutdown ...151 flow-control - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 10
23.1 port isolation ...174 23.2 show port isolation interface 175 Chapter 24 Loopback Detection Commands 176 24.1 loopback-detection(global 176 24.2 loopback-detection interval 176 24.3 loopback-detection recovery-time 177 24.4 loopback-detection(interface 178 24.5 loopback-detection config - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 11
Chapter 26 MSTP Commands 200 26.1 26.2 26.3 26.4 26.5 26.6 26.7 26.8 26.9 26.10 26.11 26.12 26.13 26.14 26.15 26.16 26.17 26.18 26.19 26.20 26.21 26.22 26.23 26.24 26.25 26.26 26.27 debug spanning-tree 200 spanning-tree(global 201 spanning-tree(interface 201 spanning-tree common-config 202 - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 12
27.9 27.10 27.11 27.12 27.13 27.14 27.15 27.16 27.17 27.18 27.19 27.20 27.21 27.22 27.23 27.24 27.25 27.26 27.27 ip igmp snooping last-listener query-count 225 ip igmp snooping vlan-config 225 ip igmp snooping multi-vlan-config 227 ip igmp snooping querier vlan 228 ip igmp snooping querier vlan - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 13
258 snmp-server user...260 snmp-server community 261 snmp-server host...262 snmp-server engineID 264 snmp-server traps snmp 264 snmp-server traps link-status 265 snmp-server traps 266 snmp-server traps mac 267 snmp-server traps vlan 268 rmon history ...269 rmon event...270 rmon alarm...271 - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 14
29.27 show rmon statistics 278 Chapter 30 LLDP Commands 279 30.1 30.2 30.3 30.4 30.5 30.6 30.7 30.8 30.9 30.10 30.11 30.12 30.13 30.14 30.15 30.16 lldp ...279 lldp hold-multiplier 279 lldp timer ...280 lldp receive...281 lldp transmit ...282 lldp snmp-trap ...282 lldp tlv-select ...283 lldp med - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 15
32.11 32.12 32.13 32.14 32.15 32.16 32.17 32.18 32.19 show interface vlan 300 show ip interface...300 show ip interface brief 301 show ip route ...302 show ip route specify 302 show ip route summary 303 show ipv6 interface 304 show ipv6 route ...304 show ipv6 route summary 305 Chapter 33 SDM - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 16
Chapter 35 DHCP Relay Commands 325 35.1 service dhcp relay 325 35.2 ip helper-address ...325 35.3 ip dhcp relay information 326 35.4 ip dhcp relay information policy 326 35.5 ip dhcp relay - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 17
this Guide stands for T1700G-28TQ JetStream 24-Port Gigabit Stackable Smart Switch with 4 10GE SFP+ Slots without any explanation. Overview of this Guide Chapter about the commands used for configuring LAG (Link Aggregation Group) and LACP (Link Aggregation Control Protocol). Chapter 9: User - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 18
Chapter 12: ARP Inspection Commands Provide information about the commands used for protecting the switch from the ARP cheating or ARP Attack. Chapter 13: DoS Defend Command Provide information about the commands used for DoS defend and detecting the DoS attack. Chapter 14: System Log Commands - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 19
Chapter 26: MSTP Commands Provide information about the commands used for configuring the MSTP (Multiple Spanning Tree Protocol). Chapter 27: IGMP Snooping Commands Provide information about the commands used for configuring the IGMP Snooping (Internet Group Management Protocol Snooping). Chapter 28 - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 20
Chapter 1 Using the CLI 1.1 Accessing the CLI You can log on to the switch and access the CLI by logging on to the switch remotely by a Telnet or SSH connection through an Ethernet port. 1.1.1 Logon by Telnet To log on to the switch by a Telnet connection, please take the following steps: 1. Click - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 21
3. Type in the User name and Password (the factory default value for both of them are admin) and press the Enter button to enter User EXEC Mode , which is shown as Figure 1-3. Figure 1-3 Log in the Switch 4. Type in enable command to enter Privileged EXEC Mode. Figure 1-4 Enter into Priviledged EXEC - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 22
Figure 1-5 Enable SSH function Password Authentication Mode 1. Open the software to log on to the interface of PuTTY. Enter the IP address of the switch into Host Name field; keep the default value 22 in the Port field; select SSH as the Connection type. Figure 1-6 SSH Connection Config 6 - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 23
2. Click the Open button in the above figure to log on to the switch. Enter the login user name and password to log on the switch, and then enter enable to enter Privileged EXEC Mode, so you can continue to configure the switch. Figure 1-7 Log on the Switch Key Authentication Mode 1. Select the - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 24
2. After the key is successfully generated, please save the public key and private key to a TFTP server. Figure 1-9 Save the Generated Key 3. Log on to the switch by Telnet and download the public key file from the TFTP server to the switch, as the following figure shows: Figure 1-10 Download the - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 25
Note: 1. The key type should accord with the type of the key file. 2. The SSH key downloading can not be interrupted. 4. After the public key is downloaded, please log on to the interface of PuTTY and enter the IP address for login. Figure 1-11 SSH Connection Config 9 - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 26
Mode, Privileged EXEC Mode, Global Configuration Mode, Interface Configuration Mode and VLAN Configuration Mode. Interface Configuration Mode can also be divided into Interface Ethernet, Interface link-aggregation and some other modes, which is shown as the following diagram. 10 - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 27
The following table gives detailed information about the Accessing path, Prompt of each mode and how to exit the current mode and access the next mode. Mode Accessing Path Prompt Logout or Access the next mode User EXEC Mode Primary mode once it is connected with the switch. Privileged EXEC - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 28
Mode Accessing Path Prompt Logout or Access the next mode Interface Configuration Mode Interface Configuration Mode VLAN Configuration Mode Layer 2 Interface: Use the interface gigabitEthernet/ ten-gigabitEthernet port, interface port-channel lagid or interface range gigabitEthernet/ ten- - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 29
range gigabitEthernet/ten-gigabitEthernet: Configure parameters for several Ethernet ports. c). Interface link-aggregation: Configure parameters for a link-aggregation, such as broadcast storm. d). Interface range link-aggregation: Configure parameters for multi-trunks. e). Interface vlan: Configure - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 30
1.4 Conventions 1.4.1 Format Conventions The following conventions are used in this Guide: Items in square brackets [ ] are optional Items in braces { } are required Alternative items are grouped in braces and separated by vertical bars. For example: speed { - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 31
have set the password to access Privileged EXEC Mode from User EXEC Mode: T1700G-28TQ>enable Password: T1700G-28TQ# 2.2 service password-encryption Description The service password-encryption command is used to encrypt the password when the password is defined or when the configuration is written - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 32
Privilege Requirement Only Admin level users have access to these commands. Example Enable the global encryption function: T1700G-28TQ(config)# service password-encryption 2.3 enable password Description The enable password command is used to set or change the password for users to access Privileged - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 33
User Guidelines If the password you configured here is unencrypted and the global encryption function is enabled in service password-encryption, the password in the configuration file will be displayed in the symmetric encrypted form. Example Set the super password as "admin" and unencrypted - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 34
Privilege Requirement Only Admin level users have access to these commands. User Guidelines If both the enable password and enable secret are defined, you must enter the password set in enable secret. Example Set the secret password as "admin" and unencrypted to access Privileged EXEC Mode from User - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 35
Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Return to Global Configuration Mode from Interface Configuration Mode, and then return to Privileged EXEC Mode: T1700G-28TQ(config-if)# exit T1700G-28TQ(config)#exit T1700G-28TQ# 2.7 end Description The - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 36
Privilege Requirement None. Example Show the commands you have entered in the current mode: T1700G-28TQ (config)# show history 1 show history 2.9 clear history Description The clear history command is used to clear the commands you have entered in the current mode, therefore these commands will not - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 37
Chapter 3 Stack The stack technology is to connect multiple stackable devices through their StackWise ports, forming a stack which works as a unified system and presents as a single entity to the network. This chapter describes how to manage the switch stacks. 3.1 switch priority Description The - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 38
Syntax swtich unitid renumber { newid | auto-numbering } Parameter unitid -- Specify the member to be renumbered. newid -- Specify the new stack member number for the stack member. auto-numbering -- The specified member will obtain its stack number through auto-numbering. Command Mode Global - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 39
can configure the stack unit number and its switch type which is not currently the stack member. The information of the provisioned member is manually created, or created/updated by the switch member when it joins the stack. The provisioned configuration retains in the stack when the stack member - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 40
Privilege Requirement Only Admin level users have access to these commands. Example Create a provisioned switch whose stack member number is 2 and device type is T1700G-28TQRev1: T1700G-28TQ(config)# switch 2 provision T1700G-28TQRev1 3.5 show switch Description The show switch command is used to - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 41
Chapter 4 IEEE 802.1Q VLAN Commands VLAN (Virtual Local Area Network) technology is developed for the switch to divide the LAN into multiple logical LANs flexibly. Hosts in the same VLAN can communicate with each other, regardless of their physical locations. VLAN can enhance performance by - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 42
Syntax interface vlan vlan-id no interface vlan vlan-id Parameter vlan-id -- Specify IEEE 802.1Q VLAN ID, ranging from 1 to 4094. Command Mode Global Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Create VLAN Interface - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 43
4.4 switchport general allowed vlan Description The switchport general allowed vlan command is used to add the desired General port to IEEE 802.1Q VLAN and specify the port's type. To delete the corresponding VLAN(s), please use no switchport general allowed vlan command. Syntax switchport general - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 44
Parameter vlan-id -- VLAN ID, ranging from 1 to 4094. Command Mode Interface Configuration Mode (interface gigabitEthernet / interface range gigabitEthernet / interface ten-gigabitEthernet / interface range ten-gigabitEthernet / interface port-channel / interface range port-channel) Privilege - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 45
Syntax show vlan brief Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the brief information of IEEE 802.1Q VLAN: T1700G-28TQ(config)# show vlan brief 4.8 show vlan Description The show vlan command is used to display the information of IEEE - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 46
Syntax show interface switchport [ gigabitEthernet port | ten-gigabitEthernet port | port-channel lagid ] Parameter port -- The port number. lagid -- The ID of the LAG. Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the VLAN configuration - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 47
Power User level users have access to these commands. Example Create VLAN 2 with the MAC address 00:11:11:01:01:12 and the name "TP": T1700G-28TQ(config)#mac-vlan mac-address 00:11:11:01:01:12 vlan 2 description - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 48
5.2 mac-vlan Description The mac-vlan command is used to enable a port for the MAC-based VLAN feature. Only the port is enabled can the configured MAC-based VLAN take effect. To disable the MAC-based VLAN function, please use no mac-vlan command. All the ports are disabled by default. Syntax mac- - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 49
Privilege Requirement None. Parameter mac-addr -- MAC address, in the format of XX:XX:XX:XX:XX:XX. vlan-id -- Specify IEEE 802.1Q VLAN ID, ranging from 1 to 4094. Example Display the information of all the MAC-based VLAN entry: T1700G-28TQ(config)#show mac-vlan all 5.4 show mac-vlan interface - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 50
Chapter 6 Protocol VLAN Commands Protocol-based VLAN (Virtual Local Area Network) is the way to classify VLANs based on Protocols. A Protocol corresponds to a VLAN ID. The untagged packets and the priority-tagged packets matching the protocol template will be tagged with this VLAN ID. 6.1 protocol- - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 51
Ethernet protocol type is 0x2024: T1700G-28TQ(config)#protocol-vlan template name TP frame ether_2 ether-type 2024 6.2 protocol-vlan vlan Description The protocol-vlan vlan command is used to create a Protocol-based VLAN. To delete a Protocol-based - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 52
6.3 protocol-vlan group Description The protocol-vlan group command is used to add the port to a specified protocol group. To remove the port from this protocol group, please use no protocol-vlan group command. Syntax protocol-vlan group index no protocol-vlan group index Command Mode Interface - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 53
Privilege Requirement None. Example Display the information of the Protocol-based VLAN templates: T1700G-28TQ(config)# show protocol-vlan template 6.5 show protocol-vlan vlan Description The show protocol-vlan vlan command is used to display the information about Protocol-based VLAN entry. Syntax - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 54
Chapter 7 Voice VLAN Commands Voice VLANs are configured specially for voice data stream. By configuring Voice VLANs and adding the ports with voice devices attached to voice VLANs, you can perform QoS-related configuration for voice data, ensuring the transmission priority of voice data stream and - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 55
Syntax voice vlan aging time no voice vlan aging Parameter time -- Aging time (in minutes) to be set for the Voice VLAN. It ranges from 1 to 43200 minutes and the default value is 1440 minutes. Command Mode Global Configuration Mode Privilege Requirement Only Admin, Operator and Power User level - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 56
Global Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Create a Voice VLAN OUI described as TP-Phone with the OUI address 00:11:11:11:11:11 and the mask address FF:FF:FF:00:00:00: T1700G-28TQ(config)#voice - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 57
is used to configure the Voice VLAN mode for the Ethernet port. Syntax switchport voice vlan mode { manual | auto } Parameter manual | auto -- Port mode. Command Mode Interface Configuration Mode (interface gigabitEthernet / interface range gigabitEthernet / interface ten-gigabitEthernet / interface - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 58
Command Mode Interface Configuration Mode (interface gigabitEthernet / interface range gigabitEthernet / interface ten-gigabitEthernet / interface range ten-gigabitEthernet) Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Enable port 1/0/3 - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 59
7.8 show voice vlan oui Description The show voice vlan oui command is used to display the configuration information of Voice VLAN OUI. Syntax show voice vlan oui Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 60
Example Display the Voice VLAN configuration information of all ports and LAGs: T1700G-28TQ(config)# show voice vlan switchport Display the Voice VLAN configuration information of port 1/0/2: T1700G-28TQ(config)# show voice vlan switchport gigabitEthernet 1/0/2 44 - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 61
aggregation and disaggregation by exchanging LACP packets with its partner. The switch can dynamically group similarly configured ports into a single logical link, which will highly extend the bandwidth and flexibly balance the load. 8.1 channel-group Description The channel-group command is used to - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 62
Example Add ports 2-4 to EtherChannel Group 1 and enable the static LAG: T1700G-28TQ(config)# interface range gigabitEthernet 1/0/2-4 T1700G-28TQ(config-if-range)# channel-group 1 mode on 8.2 port-channel load-balance Description The port-channel load-balance command is used to configure the - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 63
Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Configure the Aggregate Arithmetic for LAG as "src-dst-ip": T1700G-28TQ(config)# port-channel load-balance src-dst-ip 8.3 lacp system-priority Description The lacp system-priority command is - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 64
Syntax lacp port-priority pri no lacp port-priority Parameter pri -- The port priority, ranging from 0 to 65535. It is 32768 by default. Command Mode Interface Configuration Mode (interface gigabitEthernet / interface range gigabitEthernet / interface ten-gigabitEthernet / interface range ten- - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 65
detail -- The detailed information of EtherChannel. summary -- The EtherChannel information in summary. Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the detailed information of EtherChannel Group 1: T1700G-28TQ(config)# show etherchannel 1 - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 66
Syntax show lacp [ channel-group-num ] { internal | neighbor } Parameter channel-group-num -- The EtherChannel Group number, ranging from 1 to 6. By default, it is empty, and will display the information of all LACP groups. internal -- The internal LACP information. neighbor -- The neighbor LACP - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 67
Chapter 9 User Management Commands User Manage Commands are used to manage the user's logging information by Web, Telnet or SSH, so as to protect the settings of the switch from being randomly changed. 9.1 user name (password) Description The user name command is used to add a new user or modify the - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 68
have access to these commands. User Guidelines If the password you configured here is unencrypted and the global encryption function is enabled in service password-encryption, the password in the configuration file will be displayed in the symmetric encrypted form. Example Add and enable a new admin - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 69
the the settings of different functions without the right to edit or modify. It is "admin" by default. 0 -- Specify the encryption type. 0 indicates that an unencrypted password will follow. By default, the encryption type is 0. password --Users' login password, a string from 1 to 31 alphanumeric - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 70
no user access-control Parameter ip-addr -- The source IP address. Only the users within the IP-range you set here are allowed to access the switch. ip-mask --The subnet mask of the IP address. [ snmp ] [ telnet ] [ ssh ] [ http ] [ https ] [ ping ] [ all ] -- Specify the access interface. These - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 71
Command Mode Global Configuration Mode Privilege Requirement Only Admin and Operator level users have access to these commands. Example Configure that only the user whose MAC address is 00:00:13:0A:00:01 is allowed to access the switch: T1700G-28TQ(config)# user access-control mac-based 00:00:13:0A: - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 72
T1700G-28TQ(config)# user access-control port-based interface gigabitEthernet 1/0/2 9.6 telnet Description The telnet enable command is used to enable the Telnet function. To disable the Telnet function, please use the telnet disable command. This function is enabled by default. Syntax telnet enable - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 73
Example Display the information of the current users: T1700G-28TQ(config)# show user account-list 9.8 show user configuration Description The show user configuration command is used to display the security configuration information of the user authentication information and the access interface. - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 74
Example Display whether the Telnet function is enabled: T1700G-28TQ(config)# show telnet-status 58 - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 75
Chapter 10 HTTP and HTTPS Commands With the help of HTTP (HyperText Transfer Protocol) or HTTPS (Hyper Text Transfer Protocol over Secure Socket Layer), you can manage the switch through a standard browser. HTTP is the protocol to exchange or transfer hypertext. SSL (Secure Sockets Layer), a - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 76
10.2 ip http max-users Description The ip http max-users command is used to configure the maximum number of users that are allowed to connect to the HTTP server. To cancel this limitation, please use no ip http max-users command. Syntax ip http max-users admin-num guest-num no ip http max-users - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 77
Parameter time --The timeout time, ranging from 5 to 30 in minutes. By default, the value is 10. Command Mode Global Configuration Mode Privilege Requirement Only Admin and Operator level users have access to these commands. Example Configure the timeout time of the HTTP server connection as 15 - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 78
the SSL protocol version. To restore to the default SSL version, please use no ip http secure-protocol command. By default, the switch supports SSLv3 and TLSv1. Syntax ip http secure-protocol { [ ssl3 ] [ tls1 ] } no ip http secure-protocol Parameter ssl3 -- The SSL 3.0 protocol. tls1 -- The TLS - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 79
-sha ] [ des-cbc-sha ] -- Specify the encryption algorithm and the digest algorithm to use on an SSL connection. By default, the switch supports all these ciphersuites. Command Mode Global Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 80
Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Configure the maximum number of the Admin and Guest users logging on to the HTTPS server as 5 and 3: T1700G-28TQ(config)# ip http secure-max-users 5 3 10.8 ip http secure-session timeout - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 81
to 25 characters. The Certificate must be BASE64 encoded. ip-addr -- The IP address of the TFTP server. Both IPv4 and IPv6 addresses are supported, for example 192.168.0.1 or fe80::1234. Command Mode Global Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 82
to 25 characters. The Key must be BASE64 encoded. ip-addr -- The IP address of the TFTP server. Both IPv4 and IPv6 addresses are supported, for example 192.168.0.1 or fe80::1234. Command Mode Global Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 83
10.11 show ip http configuration Description The show ip http configuration command is used to display the configuration information of the HTTP server, including status, session timeout, access-control, max-user number and the idle-timeout, etc. Syntax show ip http configuration Command Mode - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 84
source binding Description The ip source binding command is used to bind the IP address, MAC address, VLAN ID and the Port number together manually. You can manually bind the IP address, MAC address, VLAN ID and the Port number together in the condition that you have got the related information of - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 85
these commands. Example Bind an ACL entry with the IP 192.168.0.1, MAC 00:00:00:00:00:01, VLAN ID 2 and the Port number 1/0/5 manually. And then enable the entry for the ARP detection: T1700G-28TQ(config)#ip source binding host1 192.168.0.1 00:00:00:00:00:01 vlan - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 86
Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Enable the DHCP Snooping function globally: T1700G-28TQ(config)#ip dhcp snooping 11.3 ip dhcp snooping vlan Description The ip dhcp snooping vlan command is used to enable DHCP Snooping - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 87
11.4 ip dhcp snooping information option Description The ip dhcp snooping information option command is used to enable the Option 82 function of DHCP Snooping. To disable the Option 82 function, please use no ip dhcp snooping information option command. Syntax ip dhcp snooping information option no - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 88
Parameter strategy -- The operations for Option 82 field of the DHCP request packets from the Host, including three types: keep: Indicates to keep the Option 82 field of the packets. It is the default option; replace: Indicates to replace the Option 82 field of the packets with the switch defined - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 89
Command Mode Interface Configuration Mode (interface gigabitEthernet / interface range gigabitEthernet / interface ten-gigabitEthernet / interface range ten-gigabitEthernet) Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Configure the - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 90
Example Enable and configure the customized sub-option Circuit ID for the Option 82 as "tplink" on port 1/0/1: T1700G-28TQ(config)#interface gigabitEthernet 1/0/1 T1700X-16TS(config-if)#ip dhcp snooping information circuit-id tplink 11.8 ip dhcp snooping trust Description The ip dhcp snooping trust - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 91
mac-verify command. There are two fields of the DHCP packet containing the MAC address of the Host. The MAC Verify feature is to compare the two fields and discard the packet if the two fields are different. Syntax ip dhcp snooping mac-verify no ip dhcp snooping mac-verify Command Mode Interface - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 92
Command Mode Interface Configuration Mode (interface gigabitEthernet / interface range gigabitEthernet / interface ten-gigabitEthernet / interface range ten-gigabitEthernet) Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Set the Flow - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 93
Example Configure the rate limit of DHCP Decline packets as 20 packets per second on Gigabit Ethernet port 1/0/2: T1700G-28TQ(config)#interface gigabitEthernet 1/0/2 T1700G-28TQ(config-if)#ip dhcp snooping decline 20 11.12 show ip source binding Description The show ip source binding command is used - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 94
Example Display the running status of DHCP Snooping: T1700G-28TQ#show ip dhcp snooping 11.14 show ip dhcp snooping interface Description The show ip dhcp snooping interface command is used to display the DHCP Snooping configuration of a desire Ethernet port/LAG or of all Ethernet ports/LAGs. Syntax - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 95
Syntax show ip dhcp snooping information interface [ gigabitEthernet port | ten-gigabitEthernet port | port-channel lagid ] Parameters port -- The Ethernet port number. port-channel-id -- The ID of the port channel. Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 96
unnecessary as the Trusted Port. To clear the Trusted Port list, please use no ip arp detection trust command .The specific ports, such as up-linked port, routing port and LAG port, should be set as Trusted Port. To ensure the normal communication of the switch, please configure the ARP Trusted - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 97
Syntax ip arp inspection trust no ip arp inspection trust Command Mode Interface Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Configure the Gigabit Ethernet ports 1/0/2-5 as the Trusted Port: T1700G-28TQ(config)# - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 98
Example Enable the arp defend function for the Gigabit Ethernet ports 1/0/2-6: T1700G-28TQ(config)#interface range gigabitEthernet 1/0/2-6 T1700G-28TQ(config-if-range)#ip arp inspection 12.4 ip arp inspection limit-rate Description The ip arp inspection limit-rate command is used to configure the - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 99
12.5 ip arp inspection recover Description The ip arp inspection recover command is used to restore a port to the ARP transmit status from the ARP filter status. Syntax ip arp inspection recover Command Mode Interface Configuration Mode Privilege Requirement Only Admin, Operator and Power User level - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 100
12.7 show ip arp inspection interface Description The show ip arp inspection interface command is used to display the interface configuration of ARP detection. Syntax show ip arp inspection interface [ gigabitEthernet port | ten-gigabitEthernet port ] Parameter port --The Ethernet port number. - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 101
Privilege Requirement None. Example Display the number of the illegal ARP packets received: T1700G-28TQ(config)#show ip arp inspection statistics 12.9 clear ip arp inspection statistics Description The clear ip arp inspection statistics command is used to clear the statistic of the illegal ARP - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 102
) Attack is to occupy the network bandwidth maliciously by the network attackers or the evil programs sending a lot of service requests to the Host. With the DoS Defend enabled, the switch can analyze the specific field of the received packets and provide the defend measures - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 103
Syntax ip dos-prevent type { land | scan-synfin | xma-scan | null-scan | port-less-1024 | blat | ping-flood | syn-flood | win-nuke } no ip dos-prevent type { land | scan-synfin | xma-scan | null-scan | port-less-1024 | blat | ping-flood | syn-flood | win-nuke } Parameter land -- Land attack. scan- - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 104
Syntax show ip dos-prevent Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the DoS information of the detected DoS attack globally: T1700G-28TQ(config)#show ip dos-prevent 88 - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 105
Chapter 14 System Log Commands The log information will record the settings and operation of the switch respectively for you to monitor operation status and diagnose malfunction. 14.1 logging buffer Description The logging buffer command is used to store the system log messages to an internal buffer - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 106
Syntax logging buffer level level no logging buffer level Parameter level -- Severity level of the log information output to each channel. There are 8 severity levels marked with values 0-7. The smaller value has the higher priority. Only the log with the same or smaller severity level value will be - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 107
Example Enable the log file flash function: T1700G-28TQ(config)#logging file flash 14.4 logging file flash frequency Description The logging file flash frequency command is used to specify the frequency to synchronize the system log file in the log buffer to the flash. To resume the default - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 108
14.5 logging file flash level Description The logging file flash level command is used to specify the system log message severity level. Messages with a severity level equal to or higher than this value will be stored to the flash. To restore to the default level, please use no logging file flash - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 109
no logging host index idx Parameter idx -- The index of the log host. The switch supports 4 log hosts at most. host-ip -- The IP for the log host. level -- The severity level of the log information sent to each log host. - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 110
T1700G-28TQ(config)# no logging monitor 14.8 logging monitor level Description The logging monitor level command is used to limit messages logged to the terminal devices. System logs no higher than the set threshold level will be displayed on the terminal devices. To restore the threshold level to - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 111
Parameter buffer | flash -The output channels: buffer and flash. Clear the information of the two channels, by default. Command Mode Global Configuration Mode Privilege Requirement Only Admin and Operator level users have access to these commands. Example Clear the information in the log file: - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 112
Syntax show logging loghost [ index ] Parameter index --The index of the log host whose configuration will be displayed, ranging from 1 to 4. Display the configuration of all the log hosts by default. Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 113
14.13 show logging flash Description The show logging flash command is used to display the log information in the log file according to the severity level. Syntax show logging flash [ level level ] Parameter level -- Severity level. There are 8 severity levels marked with values 0-7. The information - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 114
Chapter 15 SSH Commands SSH (Security Shell) can provide the unsecured remote management with security and powerful authentication to ensure the security of the management information. 15.1 ip ssh server Description The ip ssh server command is used to enable SSH function. To disable the SSH - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 115
Command Mode Global Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Enable SSH v2: T1700G-28TQ(config)# ip ssh version v2 15.3 ip ssh algorithm Description The ip ssh algorithm command is used to configure the algorithm - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 116
15.4 ip ssh timeout Description The ip ssh timeout command is used to specify the idle-timeout time of SSH. To restore to the factory defaults, please use no ip ssh timeout command. Syntax ip ssh timeout value no ip ssh timeout Parameter value -- The Idle-timeout time. During this period, the system - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 117
must be in the range of 512 to 3072 bits. ip-addr -- The IP address of the TFTP server. Both IPv4 and IPv6 addresses are supported, for example 192.168.0.1 or fe80::1234. Command Mode Global Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 118
T1700G-28TQ(config)# ip ssh download v1 ssh-key ip-address fe80::1234 15.7 remove public-key Description The remove public-key command is used to remove the SSH public key from the switch. Syntax remove public-key { v1 | v2 } Parameter v1 | v2 -- Select the type of SSH public key, v1 represents SSH - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 119
the physical access to the network based on the authentication status of the supplicant. It is usually an 802.1X-supported network device, such as this TP-LINK switch. It acts as an intermediary (proxy) between the supplicant and the authentication server, requesting identity information from the - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 120
the handshake feature. The handshake feature is used to detect the connection status between the TP-LINK 802.1x supplicant and the switch. Please disable the handshake feature if you are using a non-TP-LINK 802.1x-compliant client software. This feature is enabled by default. Syntax dot1x handshake - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 121
pap: EAP termination mode. IEEE 802.1X authentication system uses extensible authentication protocol (EAP) to exchange information between the switch and the client. The EAP packets are terminated at the switch and repackaged in the Password Authentication Protocol (PAP) packets, and then - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 122
Command Mode Global Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Enable the Guest VLAN function for VLAN 5: T1700G-28TQ(config)#dot1x guest-vlan 5 16.5 dot1x quiet-period Description The dot1x quiet-period command is - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 123
16.6 dot1x timeout supplicant-timeout Description The dot1x timeout supplicant-timeout command is used to configure the supplicant timeout. To restore to the default, please use no dot1x timeout supplicant-timeout command. Syntax dot1x timeout supplicant-timeout time no dot1x timeout supplicant- - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 124
Parameter times -- The maximum transfer times of the repeated authentication request, ranging from 1 to 9 in times. By default, the value is 3. Command Mode Global Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 125
T1700G-28TQ(config-if)#dot1x 16.9 dot1x guest-vlan(interface) Description The dot1x guest-vlan command is used to enable the guest VLAN function for a specified port. To disable the Guest VLAN function for a specified port, please use no dot1x guest-vlan command. Please ensure that the Control Type - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 126
no dot1x port-control Parameter auto | authorized-force | unauthorized-force -- The Control Mode for the port. auto: In this mode, the port will normally work only after passing the 802.1X Authentication. authorized-force: In this mode, the port can work normally without passing the 802.1X - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 127
Parameter mac-based | port-based --The control type for the port. mac-based: Any client connected to the port should pass the 802.1X authentication for access. port-based: All the clients connected to the port can access the network on the condition that any one of the clients has passed the 802.1X - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 128
16.13 show dot1x interface Description The show dot1x interface command is used to display all ports or the specified port's configuration information of 802.1X. Syntax show dot1x interface [ gigabitEthernet port | ten-gigabitEthernet port ] Parameter port -- The Ethernet port number. If not - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 129
MAC address entry. To remove the corresponding entry, please use no mac address-table static command. The static address can be added or removed manually, independent of the aging time. In the stable networks, the static MAC address entries can facilitate the switch to reduce broadcast packets and - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 130
filtering command. The filtering address function is to forbid the undesired package to be forwarded. The filtering address can be added or removed manually, independent of the aging time. Syntax mac address-table filtering mac-addr vid vid no mac address-table filtering {[ mac-addr ] [ vid vid - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 131
Parameter mac-addr -- The MAC address to be filtered. vid -- The corresponding VLAN ID of the MAC address. It ranges from 1 to 4094. Command Mode Global Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Add a filtering - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 132
out of the influence of the aging time and can only be deleted manually. The learned entries will be cleared after the switch is rebooted. When be out of the influence of the aging time and can only be deleted manually too. However, the learned entries will be saved even the switch is rebooted - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 133
Parameter dynamic | static | filtering -- The type of your desired entry. By default all the entries are displayed. Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the information of all address entries: T1700G-28TQ(config)# show mac address- - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 134
Parameter all -- Displays the security information of all the Ethernet ports. port -- The Ethernet port number. Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the security configuration of all ports: T1700G-28TQ(config)# show mac address- - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 135
17.9 show mac address-table count Description The show mac address-table count command is used to display the total amount of MAC address table. Syntax show mac address-table count [ vlan vlan-id ] Parameter vlan-id -- Specify the VLAN which the MAC entries belong to. Command Mode Privileged EXEC - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 136
Example Display the information of the MAC address 00:00:00:00:23:00 in VLAN 1: T1700G-28TQ(config)#show mac address-table address 00:00:00:00:23:00 vid 1 17.11 show mac address-table vlan Description The show mac address-table vlan command is used to display the MAC address configuration of the - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 137
Requirement Only Admin and Operator level users have access to these commands. Example Configure the system mode as manual, and the time is 12/20/2010 17:30:35 T1700G-28TQ(config)# system-time manual 12/20/2010-17:30:35 18.2 system-time ntp Description The system-time ntp command is - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 138
UTC-11:00 -- TimeZone for Coordinated Universal Time-11. UTC-10:00 -- TimeZone for Hawaii. UTC-09:00 -- TimeZone for Alaska. UTC-08:00 -- TimeZone for Pacific Time(US Canada). UTC-07:00 -- TimeZone for Mountain Time(US Canada). UTC-06:00 -- TimeZone for Central Time(US Canada). UTC-05:00 -- - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 139
Privilege Requirement Only Admin and Operator level users have access to these commands. Example Configure the system time mode as NTP, the time zone is UTC-12:00, the primary NTP server is 133.100.9.2 and the secondary NTP server is 139.78.100.163, the fetching-rate is 11 hours: T1700G-28TQ(config - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 140
T1700G-28TQ(config)#system-time dst predefined USA 18.4 system-time dst date Description The system-time dst date command is used to configure the one-off daylight saving time. The start date is in the current year by default. The time range of the daylight saving time must shorter than one year, - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 141
Privilege Requirement Only Admin and Operator level users have access to these commands. Example Configure the daylight saving time from zero clock, Apr 1st to zero clock Oct 1st and the offset is 30 minutes in 2015: T1700G-28TQ(config)# system-time dst date Apr 1 00:00 2015 Oct 1 00:00 2015 30 18.5 - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 142
offset -- The number of minutes to add during the daylight saving time. It is 60 minutes by default. Command Mode Global Configuration Mode Privilege Requirement Only Admin and Operator level users have access to these commands. Example Configure the daylight saving time from 2:00am, the first - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 143
Syntax contact-info [ contact_info ] no contact-info Parameter contact_info -- Contact Information. It consists of 32 characters at most. It is "www.tp-link.com" by default. Command Mode Global Configuration Mode Privilege Requirement Only Admin and Operator level users have access to these commands - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 144
Configure the system contact information as www.tp-link.com: T1700G-28TQ(config)# contact-info www.tp-link.com 18.9 ip address Description This ip address command is used to configure the IP address and IP subnet mask for the specified interface manually. The interface type includes: routed port - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 145
18.10 ip address-alloc Description The IP address-alloc command is used to enable the DHCP Client function or the BOOTP Protocol. When this function is enabled, the specified interface will obtain IP from DHCP Server or BOOTP server. To disable the IP obtaining function on the specified interface, - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 146
18.11 reset Description The reset command is used to reset the switch's software. After resetting, all configuration of the switch will restore to the factory defaults and your current settings will be lost. Syntax reset Command Mode Privileged EXEC Mode Privilege Requirement Only Admin level users - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 147
startup-config tftp ip-address ip-addr filename name Parameter ip-addr -- IP Address of the TFTP server. Both IPv4 and IPv6 addresses are supported, for example 192.168.0.1 or fe80::1234. name -- Specify the name for the configuration file which would be backup. Command Mode Privileged EXEC Mode - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 148
tftp startup-config ip-address ip-addr filename name Parameter ip-addr -- IP Address of the TFTP server. Both IPv4 and IPv6 addresses are supported, for example 192.168.0.1 or fe80::1234. name -- Specify the name for the configuration file which would be downloaded. Command Mode Privileged EXEC Mode - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 149
18.16 boot application Description The boot application command is used to configure the image file as startup image or backup image. Syntax boot application filename { image1 | image 2 } { startup | backup } [ unitid ] no boot application Parameter image1 | image2 -- Specify the image file to be - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 150
Syntax firmware upgrade ip-address ip-addr filename name Parameter ip-addr -- IP Address of the TFTP server. Both IPv4 and IPv6 addresses are supported, for example 192.168.0.1 or fe80::1234. name -- Specify the name for the firmware file. Command Mode Privileged EXEC Mode Privilege Requirement Only - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 151
. ip_addr -- The IP address of the destination node for ping test. If the parameter ip/ipv6 is not selected, both IPv4 and IPv6 addresses are supported, for example 192.168.0.100 or fe80::1234. -n count -- The amount of times to send test data during Ping testing. It ranges from 1 to 10 - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 152
should be IPv6. ip_addr -- The IP address of the destination device. If the parameter ip/ipv6 is not selected, both IPv4 and IPv6 addresses are supported, for example 192.168.0.100 or fe80::1234. maxHops -- The maximum number of the route hops the test data can pass though. It ranges from - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 153
Example Test the connectivity between the switch and the network device with the IP 192.168.0.131. If the destination device has not been found after 20 maxHops, the connection between the switch and the destination device is failed to establish: T1700G-28TQ# tracert 192.168.0.131 20 Test the - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 154
Syntax show image-info Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement Only Admin level users have access to these commands. Example Display the system image files' information: T1700G-28TQ# show image-info 18.23 show boot Description The show boot command is used - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 155
Syntax show running-config Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement Only Admin level users have access to these commands. Example Display the system current operating configuration: T1700G-28TQ# show running-config 18.25 show startup-config Description The - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 156
Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the time information of the switch T1700G-28TQ# show system-time 18.27 show system-time dst Description The show system-time dst command is used to display the DST (Daylight Saving Time) - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 157
Ethernet Port., which facilitates you to check the connection status of the cable connected to the switch, locate and diagnose the trouble spot of the network. Syntax show cable-diagnostics interface { gigabitEthernet port | ten-gigabitEthernet port } Parameter port -- The number of the port - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 158
Privilege Requirement None. Example Display the CPU utilization information of the switch: T1700G-28TQ# show cpu-utilization 18.31 show memory-utilization Description The show memory-utilization command is used to display the system's memory utilization in the last 5 seconds/1minute/5minutes. Syntax - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 159
Description This command is used to enable the automatic configuration of the ipv6 link-local address. The switch has only one ipv6 link-local address, which can be configured automatically or manually. The general ipv6 link-local address has the prefix as fe80::/10. IPv6 routers cannot forward - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 160
address is in EUI-64 format. To verify the uniqueness of the link-local address, the manually configured ipv6 link-local address will be deleted when the autoconfigured ipv6 link-local address takes effect. Syntax ipv6 address autoconfig Configuration Mode Interface Configuration Mode Privilege - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 161
T1700G-28TQ(config)# interface vlan 1 T1700G-28TQ(config-if)# ipv6 address fe80::1234 link-local 19.4 ipv6 address dhcp Description The ipv6 address dhcp command is used to enable the DHCPv6 Client function. When this function is enabled, the - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 162
1: T1700G-28TQ(config)# interface vlan 1 T1700G-28TQ(config-if)# ipv6 address ra 19.6 ipv6 address eui-64 Description This command is used to manually configure a global IPv6 address with an extended unique identifier (EUI) in the low-order 64 bits on the interface. Specify only the network prefix - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 163
19.7 ipv6 address Description This command is used to manually configure a global IPv6 address on the interface. To remove a the configured ipv6 information of the management interface, including ipv6 function status, link-local address and global address, ipv6 multicast groups etc. Syntax show ipv6 - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 164
Chapter 20 Ethernet Configuration Commands Ethernet Configuration Commands can be used to configure the Bandwidth Control, Negotiation Mode and Storm Control for Ethernet ports. 20.1 interface gigabitEthernet Description The interface gigabitEthernet command is used to enter the Interface - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 165
Command Mode Global Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. User Guidelines Command in the Interface Range gigabitEthernet Mode is executed independently on all ports in the range. It does not affect the execution on the - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 166
T2700G-28TQ(config)#interface ten-gigabitEthernet 1/0/25 20.4 interface range ten-gigabitEthernet Description The interface range ten-gigabitEthernet command is used to enter the interface range ten-gigabitEthernet Configuration Mode and configure multiple Ten Gigabit Ethernet ports at the same time - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 167
20.5 description Description The description command is used to add a description to the Ethernet port. To clear the description of the corresponding port, please use no description command. Syntax description string no description Parameter string -- Content of a port description, ranging from 1 to - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 168
Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Disable port 1/0/3: T1700G-28TQ(config)# interface gigabitEthernet 1/0/3 T1700G-28TQ(config-if)# shutdown 20.7 flow-control Description The flow-control command is used to enable the flow- - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 169
Syntax duplex { auto | full | half } no duplex Parameter auto | full | half -- The duplex mode of the Ethernet port. There are three options: auto-negotiation mode, full-duplex mode and half-duplex mode. By default the Gigabit Ethernet port is auto-negotiation mode. Command Mode Interface - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 170
Example Allow jumbo frame on port 1/0/3: T1700G-28TQ(config)# interface gigabitEthernet 1/0/3 T1700G-28TQ(config-if)# jumbo 20.10 speed Description The speed command is used to configure the Speed Mode for an Ethernet port. To return to the default configuration, please use no speed command. Syntax - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 171
Syntax storm-control pps no storm-control pps Command Mode Interface Configuration Mode (interface gigabitEthernet / interface range gigabitEthernet / interface ten-gigabitEthernet / interface range ten-gigabitEthernet / interface port-channel / interface range port-channel) Privilege Requirement - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 172
rate -- Specify the bandwidth for receiving packets on the port. The specified type of packet traffic exceeding the bandwidth will be discarded. For kbps, the rate ranges from 1 to 10000000 kbps. For ratio, the rate ranges from 1 to 100 percent. For pps, the rate ranges from 1-1488000Kbps per second - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 173
Command Mode Interface Configuration Mode (interface gigabitEthernet / interface range gigabitEthernet / interface ten-gigabitEthernet / interface range ten-gigabitEthernet / interface port-channel / interface range port-channel) Privilege Requirement Only Admin, Operator and Power User level users - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 174
20.15 show interface status Description The show interface status command is used to display the connection status of the Ethernet port/LAG. Syntax show interface status [ gigabitEthernet port ] [ ten-gigabitEthernet port ] [ port-channel lagid ] Parameter port -- The Ethernet port number. lagid -- - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 175
Privilege Requirement None. Example Display the statistics information of all Ethernet ports and LAGs: T1700G-28TQ(config)# show interface counters Display the statistics information of port 1/0/2: T1700G-28TQ(config)# show interface counters gigabitEthernet 1/0/2 20.17 show interface configuration - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 176
20.18 show storm-control Description The show storm-control command is used to display the storm-control information of Ethernet ports. Syntax show storm-control interface [ gigabitEthernet port-list ] [ ten-gigabitEthernet port ] [ port-channel lag-list ] Parameter port-list --The list of Ethernet - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 177
Privilege Requirement None. Example Display the bandwidth-limit information of port 1/0/4: T1700G-28TQ(config)# show bandwidth interface gigabitEthernet 1/0/4 161 - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 178
experience of a better quality. 21.1 qos Description The qos command is used to configure CoS (Class of Service) based on port. To return to the default configuration, please use no qos command. Syntax qos cos-id no qos Parameter cos-id -- The priority - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 179
21.2 qos dscp Description The qos dscp command is used to enable the mapping relation between DSCP Priority and CoS value. To disable the mapping relation, please use no qos dscp command. Syntax qos dscp no qos dscp Command Mode Global Configuration Mode Privilege Requirement Only Admin, Operator - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 180
Parameter tag/cos-id -- The 8 priority levels defined by IEEE 802.1P or the priority level the packets with tag are mapped to, which ranges from CoS 0 to CoS 7. tc-id -- The egress queue the packets with tag are mapped to. It ranges from 0 to 7, which represents TC0 toTC7 respectively. Command Mode - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 181
Parameter dscp-list -- List of DSCP value. One or several DSCP values can be typed using comma to separate. Use a hyphen to designate a range of values, for instance, 1,4-7,11 indicates choosing 1,4,5,6,7,11. The DSCP value ranges from 0 to 63. cos-id -- The priority level the packets with tag are - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 182
Parameter sp -- Strict-Priority Mode. In this mode, the queue with higher priority will occupy the whole bandwidth. Packets in the queue with lower priority are sent only when the queue with higher priority is empty. wrr -- Weight Round Robin Mode. In this mode, packets in all the queues are sent in - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 183
queues and scheduling algorithms you set. On this switch, the priority levels are labeled as TC0, TC1, TC2, TC3, TC4, TC5,TC6 and TC7. Syntax qos queue weight { tc-id } { weight-value } Parameter tc-id -- The ID of the TC queue, ranging from 0 to 7. weight-value -- Configure the weight value of the - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 184
21.7 show qos interface Description The show qos interface command is used to display the configuration of QoS based on port priority. Syntax show qos interface [ gigabitEthernet port-list ] [ ten-gigabitEthernet port-list ] [ port-channel lag-list ] Parameter port-list --The list of Ethernet ports. - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 185
Example Display the configuration of IEEE 802.1P Priority and the mapping relation between cos-id and tc-id: T1700G-28TQ# show qos cos-map 21.9 show qos dscp-map Description The show qos dscp-map command is used to display the configuration of DSCP Priority. Syntax show qos dscp-map Command Mode - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 186
21.11 show qos status Description The show qos status command is used to display the status of IEEE 802.1P priority and DSCP priority. Syntax show qos status Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the status of IEEE 802.1P priority - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 187
, the monitoring port is connected to data diagnose device, which is used to analyze the monitored packets for monitoring and troubleshooting the network. 22.1 monitor session destination interface Description The monitor session destination interface command is used to configure the monitoring - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 188
T1700G-28TQ(config)# no monitor session 1 destination interface gigabitEthernet 1/0/2 Delete the monitor session 1: T1700G-28TQ(config)# no monitor session 1 22.2 monitor session source interface Description The monitor session source interface command is used to configure the monitored port. To - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 189
monitoring port and monitored ports are in the same VLAN or not is not demanded strictly. 4. The monitoring port cannot be link-aggregation member. Example Create monitor session 1, then configure port 1/0/4, 1/0/5, 1/0/7 as monitored port and enable ingress monitoring: T1700G-28TQ(config)# monitor - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 190
Chapter 23 Port Isolation Commands Port Isolation provides a method of restricting traffic flow to improve the network security by forbidding the port to forward packets to the ports that are not on its forwarding port list. 23.1 port isolation Description The port isolation command is used to - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 191
T1700G-28TQ(config-if)# no port isolation 23.2 show port isolation interface Description The show port isolation interface command is used to display the forward port list of a port/LAG. Syntax show port isolation interface [ gigabitEthernet port | ten-gigabitEthernet port | port-channel lagid ] - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 192
Chapter 24 Loopback Detection Commands With loopback detection feature enabled, the switch can detect loops using loopback detection packets. When a loop is detected, the switch will display an alert or further block the corresponding port according to the configuration. 24.1 loopback-detection( - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 193
Command Mode Global Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Specify the interval-time as 50 seconds: T1700G-28TQ(config)# loopback-detection interval 50 24.3 loopback-detection recovery-time Description The - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 194
by which the switch copes with the detected loops. Syntax loopback-detection config [ process-mode { alert | port-based }] [ recovery-mode { auto | manual }] Parameter process-mode -- The mode how the switch processes the detected loops. Alert: When a loop is detected, display an alert. Port based - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 195
User level users have access to these commands. Example Configure the loopback detection process-mode as port-based and recovery-mode as manual for port 2: T1700G-28TQ(config)# interface gigabitEthernet 1/0/2 T1700G-28TQ(config-if)# loopback-detection config process-mode port-based recovery-mode - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 196
T1700G-28TQ(config-if)# loopback-detection recover 24.7 show loopback-detection global Description The show loopback-detection global command is used to display the global configuration of loopback detection function such as loopback detection global status, loopback detection interval and loopback - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 197
Example Display the configuration of loopback detection function and the status of all ports: T1700G-28TQ# show loopback-detection interface Display the configuration of loopback detection function and the status of port 5: T1700G-28TQ# show loopback-detection interface gigabitEthernet 1/0/5 181 - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 198
Chapter 25 ACL Commands 25.1 time-range Description The time-range command is used to add Time-Range. To delete the corresponding Time-Range, please use no time-range command. A time-range based ACL enables you to implement ACL control over packets by differentiating the time-ranges. A time-range - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 199
Parameter start-date -- The start date in Absoluteness Mode, in the format of MM/DD/YYYY. By default, it is 01/01/1970. end-date -- The end date in Absoluteness Mode, in the format of MM/DD/YYYY. By default, it is 12/31/2099. The Absoluteness Mode will be disabled if the start date and end date are - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 200
represents every day; weekend represents weekend and weekdays represents working day. By default, the Periodic Mode is disabled. time-slice -- Create the time-slice, in the format of HH:MM-HH:MM. Command Mode Time-range Configuration Mode Privilege Requirement Only Admin, Operator and Power User - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 201
25.5 holiday(global) Description The holiday command is used to define a holiday. To delete the corresponding holiday, please use no holiday command. Syntax holiday name start-date start-date end-date end-date no holiday Parameter name -- The holiday name, ranging from 1 to 16 characters. start-date - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 202
Command Mode Global Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Create a standard-IP ACL whose ID is 523: T1700G-28TQ (config)# access-list create 523 25.7 mac access-list Description The mac access-list command is - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 203
Standard-IP ACLs analyze and process data packets based on a series of match conditions, which can be the source IP addresses and destination IP addresses carried in the packets. Syntax access-list standard acl-id rule rule-id { deny | permit } [[ sip source-ip ] smask source-ip-mask] [[ dip - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 204
25.9 access-list extended Description The access-list extended command is used to add Extended-IP ACL rule. To delete the corresponding rule, please use no access-list extended command. Syntax access-list extended acl-id rule rule-id { deny | permit } [[ sip source-ip ] smask source-ip-mask ] [[ dip - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 205
T1700G-28TQ(config)# access-list extended 2220 rule 10 permit sip 192.168.0.100 smask 255.255.255.0 25.10 access-list ipv6 Description The access-list ipv6 command is used to add IPv6 ACL rule. To delete the corresponding rule, please use no access-list ipv6 command. Standard-IP ACLs analyze and - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 206
Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. User Guidelines Before binding an IPv6 ACL to a VLAN or interface, you should configure the SDM template as "enterpriseV6" and save your configurations. For more information about SDM configuration, - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 207
Command Mode Mac Access-list Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Create a MAC ACL whose ID is 20, and add Rule 10 for it. In the rule, the source MAC address is 00:01:3F:48:16:23, the source MAC address mask - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 208
25.13 access-list policy action Description The access-list policy action command is used to add ACLs and create actions for the policy. To set the detailed configuration of actions for a policy, please use access-list policy action command to access Action Configuration Mode. To delete the - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 209
Command Mode Action Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Edit the actions for policy1. Forward the data packets matching ACL 120 in the policy to Gigabit Ethernet port 2: T1700G-28TQ(config)#access-list policy - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 210
25.16 s-mirror Description The s-mirror command is used to configure Stream Mirror function of policy action to the specified port. Syntax s-mirror interface { gigabitEthernet port } Parameter port -- The Mirror Port number of Stream Mirror. Command Mode Action Configuration Mode Privilege - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 211
Command Mode Action Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Edit the actions for policy1. For the data packets matching ACL 120, specify the DSCP region as 30 and local priority 2: T1700G-28TQ(config)#access-list - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 212
25.19 access-list bind acl(vlan) Description The access-list bind acl command is used to bind an ACL to the specified VLAN. To cancel the bind relation, please use no access-list bind acl command. Syntax access-list bind acl acl-id no access-list bind acl acl-id Parameter acl-id -- The ID of the ACL - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 213
Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Bind policy1 to port 1/0/2: T1700G-28TQ(config)# interface gigabitEthernet 1/0/2 T1700G-28TQ(config-if)# access-list bind policy1 25.21 access-list bind(vlan) Description The access-list bind - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 214
Parameter acl-id -- The ID of the ACL selected to display the configuration. Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the configuration of the MAC ACL whose ID is 20: T1700G-28TQ(config)# show access-list 20 25.23 show access-list - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 215
Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the configuration of Policy bind: T1700G-28TQ(config)# show access-list bind 199 - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 216
Tree Protocol), compatible with both STP and RSTP and subject to IEEE 802.1s, can disbranch a ring network. STP is to block redundant links and backup links as well as optimize paths. 26.1 debug spanning-tree Description The debug spanning-tree command is used to enable debuggning of spanning-tree - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 217
Privilege Requirement Only Admin level users have access to these commands. Example Display all the spanning-tree debug messages: T1700G-28TQ# debug spanning-tree all 26.2 spanning-tree(global) Description The spanning-tree command is used to enable STP function globally. To disable the STP function - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 218
Command Mode Interface Configuration Mode (interface gigabitEthernet / interface range gigabitEthernet / interface ten-gigabitEthernet / interface range ten-gigabitEthernet / interface port-channel / interface range port-channel) Privilege Requirement Only Admin, Operator and Power User level users - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 219
without waiting for forward delay. point-to-point -- The P2P link status, with auto, open and close options. By default, the option is auto. If the two ports in the P2P link are root port or designated port, they can transit their states to forwarding rapidly - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 220
Parameter stp --Spanning Tree Protocol, the default value. rstp --Rapid Spanning Tree Protocol mstp --Multiple Spanning Tree Protocol Command Mode Global Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Configure the - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 221
26.7 instance Description The instance command is used to configure the VLAN-Instance mapping. To remove the VLAN-instance mapping or disable the corresponding instance, please use no instance command. When an instance is disabled, the related mapping VLANs will be removed. Syntax instance instance- - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 222
Syntax name name Parameters name -- The region name, used to identify MST region. It ranges from 1 to 32 characters. Command Mode MST Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Configure the region name of MST as " - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 223
26.10 spanning-tree mst instance Description The spanning-tree mst instance command is used to configure the priority of MST instance. To return to the default value of MST instance priority, please use no spanning-tree mst instance command. Syntax spanning-tree mst instance instance-id priority pri - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 224
Parameter instance-id -- Instance ID, ranging from 1 to 8. pri -- Port Priority, which must be multiple of 16 ranging from 0 to 240. By default, it is 128. Port Priority is an important criterion on determining if the port will be chosen as the root port by the device connected to this port. cost -- - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 225
Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Configure the bridge priority as 4096: T1700G-28TQ(config)# spanning-tree priority 4096 26.13 spanning-tree tc-defend Description The spanning-tree tc-defend command is used to configure the - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 226
15 by default. Otherwise, 2 * (Forward Delay - 1) >= Max Age. hello-time --Hello Time, which is the interval to send BPDU packets, and used to test the links. Hello Time ranges from 1 to 10 in seconds and it is 2 by default. Otherwise, 2 * (Hello Time + 1) - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 227
26.15 spanning-tree hold-count Description The spanning-tree hold-count command is used to configure the maximum number of BPDU packets transmitted per Hello Time interval. To return to the default configurations, please use no spanning-tree hold-count command. Syntax spanning-tree hold-count value - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 228
Command Mode Global Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Configure the max-hops of STP as 30: T1700G-28TQ(config)# spanning-tree max-hops 30 26.17 spanning-tree bpdufilter Description The spanning-tree - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 229
to enable the Loop Protect function for a port. Loop Protect is to prevent the loops in the network brought by recalculating STP because of link failures and network congestions. To disable the Loop Protect function, please use no spanning-tree guard loop command. Syntax spanning-tree guard loop no - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 230
Command Mode Interface Configuration Mode (interface gigabitEthernet / interface range gigabitEthernet / interface ten-gigabitEthernet / interface range ten-gigabitEthernet) Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Enable the Loop - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 231
26.21 spanning-tree guard tc Description The spanning-tree guard tc command is used to enable the TC Protect of Spanning Tree function for a port. To disable the TC Protect of Spanning Tree function, please use no spanning-tree guard tc command. A switch removes MAC address entries upon receiving TC - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 232
Command Mode Interface Configuration Mode (interface gigabitEthernet / interface range gigabitEthernet / interface ten-gigabitEthernet / interface range ten-gigabitEthernet) Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Enable mcheck for - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 233
Syntax show spanning-tree bridge [ forward-time | hello-time | hold-count | max-age | max-hops | mode | priority | state ] Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the bridge parameters: T1700G-28TQ(config)# show spanning-tree bridge 26 - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 234
T1700G-28TQ(config)# show spanning-tree interface gigabitEthernet 1/0/2 mode 26.26 show spanning-tree interface-security Description The show spanning-tree interface-security command is used to display the protect information of all ports or a specified port. Syntax show spanning-tree interface- - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 235
Syntax show spanning-tree mst { configuration [ digest ] | instance instance-id [ interface [ gigabitEthernet port | ten-gigabitEthernet port | port-channel lagid ] ] } Parameter instance-id -- Instance ID desired to show, ranging from 1 to 8. port -- The Ethernet port number. lagid -- The ID of the - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 236
Chapter 27 IGMP Snooping Commands IGMP Snooping (Internet Group Management Protocol Snooping) is a multicast control mechanism running on Layer 2 switch. It can effectively prevent multicast groups being broadcasted in the network. 27.1 ip igmp snooping(global) Description The ip igmp snooping - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 237
Command Mode Interface Configuration Mode (interface gigabitEthernet / interface range gigabitEthernet / interface ten-gigabitEthernet / interface range ten-gigabitEthernet) Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Enable IGMP - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 238
27.4 ip igmp snooping mtime Description The ip igmp snooping mtime command is used to specify member port aging time globally. The default aging time is 260 seconds. To restore the default timer, please use no ip igmp snooping mtime command. Syntax ip igmp snooping mtime mtime no ip igmp snooping - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 239
Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Enable the IGMP report suppression function: T1700G-28TQ(config)# ip igmp snooping report-suppression 27.6 ip igmp snooping immediate-leave Description The ip igmp snooping immediate-leave - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 240
Syntax ip igmp snooping drop-unknown no ip igmp snooping drop-unknown Command Mode Global Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Specify the operation to process unknown multicast as discard: T1700G-28TQ(config - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 241
27.9 ip igmp snooping last-listener query-count Description The ip igmp snooping last-listener query-count command is used to specify the numbers of Specific Query Message to be sent. The default value is 2. To restore the default number, please use no ip igmp snooping last-listener query-count - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 242
no ip igmp snooping vlan-config vlan-id-list [ rtime router-time | mtime member-time | rport interface { gigabitEthernet port-list | ten-gigabitEthernet port-list | port-channel lagid } ] no ip igmp snooping vlan-config vlan-id-list static ip interface { gigabitEthernet port-list | ten- - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 243
T1700G-28TQ(config)# ip igmp snooping vlan-config 2 static 225.0.0.1 interface gigabitEthernet 1/0/1-3 27.11 ip igmp snooping multi-vlan-config Description The ip igmp snooping multi-vlan-config command is used to create Multicast VLAN. To delete the corresponding Multicast VLAN, please use no ip - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 244
Example Enable Multicast VLAN 3, and configure Router Port Time as 100 seconds, Member Port Time 100 seconds, and Static Router Port port 1/0/3: T1700G-28TQ(config)# ip igmp snooping multi-vlan-config 3 rtime 100 T1700G-28TQ(config)# ip igmp snooping multi-vlan-config 3 mtime 100 T1700G-28TQ(config - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 245
return to the default configuration, please use no ip igmp snooping querier vlan command. Syntax ip igmp snooping querier vlan vlan-id { query-interval interval | max-response-time response-time | general-query source-ip ip-addr } no ip igmp snooping querier vlan vlan-id { query-interval | max- - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 246
forwarding table. To remove the maximum group limitation and return to the default of no limitation on the specified port, please use the no ip igmp snooping max-groups command. To return to the default action of dropping the report, please use the no ip igmp snooping max-groups action command. - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 247
27.15 ip igmp profile Description The ip igmp profile command is used to create the configuration profile. To delete the corresponding profile, please use no ip igmp profile command. Syntax ip igmp profile id no ip igmp profile id Parameter id -- Specify the id of the configuration profile, ranging - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 248
T1700G-28TQ(config)# ip igmp profile 1 T1700G-28TQ(config-igmp-profile)#deny 27.17 permit Description The permit command is used to configure the filtering mode of profile as permit. Syntax permit Command Mode Profile Configuration Mode Privilege Requirement Only Admin, Operator and Power User level - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 249
Command Mode Profile Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Configure one of the filter multicast address entry as range 225.1.1.1 to 226.3.2.1 in profile 1: T1700G-28TQ(config)# ip igmp profile 1 T1700G-28TQ( - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 250
27.20 clear ip igmp snooping statistics Description The clear ip igmp snooping statistics command is used to clear the statistics of the IGMP packets. Syntax clear ip igmp snooping statistics Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement Only Admin, Operator and - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 251
Syntax show ip igmp snooping interface [ gigabitEthernet port-list | ten-gigabitEthernet port-list ] { basic-config | max-groups | packet-stat } show ip igmp snooping interface [ port-channel [ lag-list ] ] { basic-config | max-groups } Parameter port-list -- The list of Ethernet ports. basic-config - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 252
Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the IGMP snooping configuration information of VLAN 2: T1700G-28TQ# show ip igmp snooping vlan 2 27.24 show ip igmp snooping multi-vlan Description The show ip igmp snooping multi-vlan command is - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 253
Parameter vlan-id --The VLAN ID selected to display the information of all multicast items. multicast_addr -- IP address of the multicast group. count-- The numbers of all multicast groups. dynamic-- Display dynamic multicast groups. dynamic count-- The numbers of all dynamic multicast groups. - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 254
27.26 show ip igmp snooping querier Description The show ip igmp snooping querier command is used to display the Querier configuration of VLAN. Syntax show ip igmp snooping querier [ vlan vlan-id ] Parameter vlan-id --The VLAN ID selected to display, ranging from 1 to 4094. Command Mode Privileged - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 255
Chapter 28 MLD Snooping Commands MLD Snooping (Multicast Listener Discovery Snooping) is a multicast control mechanism running on Layer 2 switch. It can effectively prevent multicast groups being broadcasted in the IPv6 network. 28.1 ipv6 mld snooping(global) Description The ipv6 mld snooping - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 256
Privilege Requirement Only Admin and Operator level users have access to these commands. Example Enable MLD Snooping on port 1/0/3: T1700G-28TQ(config)# interface gigabitEthernet 1/0/3 T1700G-28TQ(config-if)# ipv6 mld snooping 28.3 ipv6 mld snooping rtime Description The ipv6 mld snooping rtime - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 257
Parameter mtime -- Specify the aging time in seconds, ranging from 60 to 600. The default aging time is 260 seconds. Command Mode Global Configuration Mode Privilege Requirement Only Admin and Operator level users have access to these commands. Example Specify MLD Snooping member port aging time as - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 258
28.6 ipv6 mld snooping immediate-leave Description The ipv6 mld snooping immediate-leave command is used to configure the Fast Leave function for port. To disable the Fast Leave function, please use no ipv6 mld snooping immediate-leave command. Syntax ipv6 mld snooping immediate-leave no ipv6 mld - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 259
28.8 ipv6 mld snooping last-listener query-inteval Description The ipv6 mld snooping last-listener query-inteval command is used to specify the interval to send Specific Query Message. The default value is 1 second. To restore the default interval, please use no ipv6 mld snooping last-listener query - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 260
Example Specify the number of Specific Query Message to 3: T1700G-28TQ(config)# ipv6 mld snooping last-listener query-count 3 28.10 ipv6 mld snooping vlan-config Description The ipv6 mld snooping vlan-config command is used to enable VLAN MLD Snooping function or to modify MLD Snooping parameters, - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 261
ip -- The static multicast IP address. Command Mode Global Configuration Mode Privilege Requirement Only Admin and Operator level users have access to these commands. Example Enable the MLD Snooping function and modify Router Port Time as 300 seconds, Member Port Time as 200 seconds for VLAN 1-3, - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 262
Parameter vlan-id -- The ID of the multicast VLAN desired to create or modify, ranging from 2 to 4094. If not specified, the default multicast VLAN will be selected. router-time -- Router Port Time. Within this time, if the switch does not receive MLD query message from the router port, it will - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 263
Parameter vlan-id -- The VLAN that enables the MLD querier function, ranging from 1 to 4094. Command Mode Global Configuration Mode Privilege Requirement Only Admin and Operator level users have access to these commands. Example Enable MLD Querier function on VLAN 2: T1700G-28TQ(config)# ipv6 mld - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 264
Privilege Requirement Only Admin and Operator level users have access to these commands. Example For VLAN 2, specify its query-interval as 200 seconds, and the response-time as 20 seconds: T1700G-28TQ(config)#ipv6 mld snooping querier vlan 2 query-interval 200 T1700G-28TQ(config)#ipv6 mld snooping - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 265
Command Mode Interface Configuration Mode (interface gigabitEthernet / interface range gigabitEthernet / interface ten-gigabitEthernet / interface range ten-gigabitEthernet) Privilege Requirement Only Admin and Operator level users have access to these commands. Example Specify the maximum numbers - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 266
28.16 deny Description The deny command is used to configure the filtering mode of profile as deny. Syntax deny Command Mode Profile Configuration Mode Privilege Requirement Only Admin and Operator level users have access to these commands. Example Configure the filtering mode of profile 1 as deny: - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 267
28.18 range Description The range command is used to configure the range of the profile's filtering multicast address. To delete the corresponding filtering multicast address, please use no range command. A profile contains 16 filtering IP-range entries at most. Syntax range start-ip end-ip no range - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 268
Command Mode Interface Configuration Mode (interface gigabitEthernet / interface range gigabitEthernet / interface ten-gigabitEthernet / interface range ten-gigabitEthernet) Privilege Requirement Only Admin and Operator level users have access to these commands. Example Bind profile 1 to interface - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 269
Privilege Requirement None. Example Display the global configuration of MLD Snooping: T1700G-28TQ(config)# show ipv6 mld snooping 28.22 show ipv6 mld snooping interface Description The show ipv6 mld snooping interface command is used to display the port configuration of MLD snooping. Syntax show - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 270
28.23 show ipv6 mld snooping vlan Description The show ipv6 mld snooping vlan command is used to display VLAN information of MLD Snooping. Syntax show ipv6 mld snooping vlan [ vlan-id ] Parameter vlan-id -- The VLAN ID selected to display, ranging from 1 to 4094. Command Mode Privileged EXEC Mode - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 271
28.25 show ipv6 mld snooping groups Description The show ipv6 mld snooping groups command is used to display multicast groups. Syntax show ipv6 mld snooping groups [ vlan { vlan-id } ] [ ipv6_multicast_addr | count | dynamic | dynamic count | static | static count ] Parameter vlan-id --The VLAN ID - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 272
Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display all Querier information: T1700G-28TQ(config)# show ipv6 mld snooping querier 28.27 show ipv6 mld profile Description The show ipv6 mld profile command is used to display the configuration - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 273
Chapter 29 SNMP Commands SNMP (Simple Network Management Protocol) functions are used to manage the network devices for a smooth communication, which can facilitate the network administrators to monitor the network nodes and implement the proper operation. 29.1 snmp-server Description The snmp- - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 274
Parameter name -- The entry name of View, ranging from 1 to 16 characters. Each View includes several entries with the same name. mib-oid -- MIB Object ID. It is the Object Identifier (OID) for the entry of View, ranging from 1 to 61 characters. include | exclude -- View Type, with include and - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 275
Parameter name --The SNMP Group name, ranging from 1 to 16 characters. The Group Name, Security Model and Security Level compose the identifier of the SNMP Group. These three items of the Users in one group should be the same. smode -- Security Model, with v1、v2c and v3 options. They represent SNMP - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 276
29.4 snmp-server user Description The snmp-server user command is used to add User. To delete the corresponding User, please use no snmp-server user command. The User in an SNMP Group can manage the switch via the management station software. The User and its Group have the same security level and - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 277
emode -- The Privacy Mode of the SNMP v3 User, with none and DES options. None indicates no privacy method is used, and DES indicates DES encryption method is used. By default, the Privacy Mode is "none". encrypt-pwd -- Privacy Password, ranging from 1 to 16 characters. The question marks and spaces - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 278
retries ] [ timeout timeout ] no snmp-server host ip user-name Parameter ip -- The IP Address of the management Host. Both IPv4 and IPv6 addresses are supported, for example 192.168.0.100 or fe80::1234. udp-port -- UDP port, which is used to send notifications. The UDP port functions with the IP - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 279
has a higher security than the trap type and resend and timeout need to be configured if you select this option. You can only select the trap type in Security Model v1. By default, the type of the notifications is "trap". retries -- The amount of times the switch retries an inform request, ranging - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 280
29.7 snmp-server engineID Description The snmp-server engineID command is used to configure the local and remote engineID of the switch. To restore to the default setting, please use no snmp-server engineID command. Syntax snmp-server engineID { [ local local-engineID ] [ remote remote-engineID ] } - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 281
. Example Enable SNMP standard linkup trap for the switch: T1700G-28TQ(config)# snmp-server traps snmp linkup 29.9 snmp-server traps link-status Description The snmp-server traps link-status command is used to enable SNMP link status trap for the specified port. To disable the sending of SNMP - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 282
level users have access to these commands. Example Enable SNMP link status trap for port 1/0/3: T1700G-28TQ(config)# interface gigabitEthernet 1/0/3 T1700G-28TQ(config-if)# snmp-server traps link-status 29.10 snmp-server traps Description The snmp-server traps - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 283
spanning-tree -- Enable spanning-tree trap. It is sent when the port forwarding status changes or the port receives TCN packet or packet with TC flag. memory -- Enable memory trap. It is sent when CPU usage exceeds 80%. Command Mode Global Configuration Mode Privilege Requirement Only Admin level - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 284
Privilege Requirement Only Admin level users have access to these commands. Example Enable all SNMP extended MAC address-related traps for the switch: T1700G-28TQ(config)# snmp-server traps mac Enable new MAC address trap only for the switch: T1700G-28TQ(config)# snmp-server traps mac new 29.12 snmp - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 285
29.13 rmon history Description The rmon history command is used to configure the history sample entry. To return to the default configuration, please use no rmon history command. RMON (Remote Monitoring), basing on SNMP architecture, functions to monitor the network. History Group is one of the - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 286
29.14 rmon event Description The rmon event command is used to configure the entries of SNMP-RMON Event. To return to the default configuration, please use no rmon event command. Event Group, as one of the commonly used RMON Groups, is used to define RMON events. Alarms occur when an event is - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 287
29.15 rmon alarm Description The rmon alarm command is used to configure SNMP-RMON Alarm Management. To return to the default configuration, please use no rmon alarm command. Alarm Group is one of the commonly used RMON Groups. RMON alarm management allows monitoring the specific alarm variables. - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 288
the entries of SNMP-RMON statistics. To delete the corresponding entry, please use no rmon statistics command. The maximum supported entries are 1000. Syntax rmon statistics index interface { gigabitEthernet port | ten-gigabitEthernet port } [ owner owner-name] [ status { underCreation | valid - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 289
Parameter index -- The index number of the statistics entry, ranging from 1 to 65535, in the format of 1-3,5. port -- The statistics port number, in the format of 1/0/1. owner-name -- The creator of the event entry, ranging from 1 to 16 characters. By default, it is "monitor". status -- The status - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 290
29.18 show snmp-server view Description The show snmp-server view command is used to display the View table. Syntax show snmp-server view Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement Only Admin level users have access to these commands. Example Display the View - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 291
Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement Only Admin level users have access to these commands. Example Display the User table: T1700G-28TQ# show snmp-server user 29.21 show snmp-server community Description The show snmp-server community command is used to - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 292
Example Display the Host table: T1700G-28TQ# show snmp-server host 29.23 show snmp-server engineID Description The show snmp-server engineID command is used to display the engineID of the SNMP. Syntax show snmp-server engineID Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 293
Privilege Requirement Only Admin level users have access to these commands. Example Display the configuration of all history sample entries: T1700G-28TQ# show rmon history 29.25 show rmon event Description The show rmon event command is used to display the configuration of SNMP-RMON Event. Syntax - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 294
Parameter index -- The index number of the entry selected to display the configuration, ranging from 1 to 12, in the format of 1-3, 5. You can select more than one entry for each command. By default, the configuration of all Alarm Management entries is displayed. Command Mode Privileged EXEC Mode - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 295
Chapter 30 LLDP Commands LLDP function enables network devices to advertise their own device information periodically to neighbors on the same LAN. The information of the LLDP devices in the LAN can be stored by its neighbor in a standard MIB, so it is possible for the information to be accessed by - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 296
Parameter multiplier -- Configure the Hold Multiplier parameter. It ranges from 2 to 10. By default, it is 4. Command Mode Global Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Specify Hold Multiplier as 5: T1700G-28TQ( - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 297
fast-count -- When the port's LLDP state transforms from Disable (or Rx_Only) to Tx&Rx (or Tx_Only), the fast start mechanism will be enabled, that is, the transmit interval will be shorten to a second, and several LLDPDUs will be sent out (the number of LLDPDUs equals this parameter). The value - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 298
30.5 lldp transmit Description The lldp transmit command is used to enable the designated port to transmit LLDPDU. To disable the function, please use no lldp transmit command. Syntax lldp transmit no lldp transmit Command Mode Interface Configuration Mode (interface gigabitEthernet / interface - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 299
-select { [ port-description ] [ system-capability ] [ system-description ] [ system-name ] [ management-address ] [ port-vlan ] [ protocol-vlan ] [ vlan-name ] [ link-aggregation ] [ mac-phy-cfg ] [ max-frame-size ] [ power ] [ all ] } no lldp tlv-select { [ port-description ] [ system-capability - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 300
30.8 lldp med-fast-count Description The lldp med-fast-count command is used to configure the number of the LLDP-MED frames that will be sent out. When LLDP-MED fast start mechanism is activated, multiple LLDP-MED frames will be transmitted based on this parameter. The default value is 4. To return - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 301
Command Mode Interface Configuration Mode (interface gigabitEthernet / interface range gigabitEthernet / interface ten-gigabitEthernet / interface range ten-gigabitEthernet / interface port-channel / interface range port-channel) Privilege Requirement Only Admin, Operator and Power User level users - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 302
box post-office-box ] [ additional additional ] [ country-code country-code ] [ what { dhcp-server | endpoint | switch } ] ] } Parameter emergency-number -- Emergency Call Service ELIN identifier, which is used during emergency call setup to a traditional CAMA or ISDN trunk-based PSAP. The length of - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 303
T2700-28TQ(config-if)# lldp med-location civic-address language English city London 30.12 show lldp Description The show lldp command is used to display the global configuration of LLDP. Syntax show lldp Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 304
Example Display the LLDP configuration of Gigabit Ethernet port 1/0/1: T1700G-28TQ#show lldp interface gigabitEthernet 1/0/1 30.14 show lldp local-information interface Description The show lldp local-information interface command is used to display the LLDP information of the corresponding port. By - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 305
Parameters port -- The Ethernet port number. Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the neighbor information of Gigabit Ethernet port 1/0/1: T1700G-28TQ#show lldp neighbor-information interface gigabitEthernet 1/0/1 30.16 show lldp - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 306
contains two types of ARP entries: dynamic and static. An ARP dynamic entry is automatically created and maintained by ARP. A static ARP entry is manually configured and maintained. 31.1 arp Description This arp command is used to add a static ARP entry. To delete the specified ARP entry, please use - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 307
31.2 clear arp-cache Description This clear arp-cache command is used to clear all the dynamic ARP entries. Syntax clear arp-cache Command Mode Privileged EXEC Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Clear all the dynamic ARP - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 308
Example Configure the ARP aging time as 60 seconds on interface 1/0/1: T1700G-28TQ(config)# interface gigabitEthernet 1/0/1 T1700G-28TQ(config-if)# arp timeout 60 31.4 show arp Description This show arp command is used to display the active ARP entries. If no parameter is speicified, all the active - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 309
Parameter port -- Specify the number of the routed port. lagid -- Specify the ID of the LAG. id -- Specify the VLAN interface ID. Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the ARP entry associated with VLAN interface 2 : T1700G-28TQ( - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 310
Chapter 32 Static Routes Commands 32.1 interface vlan Description This interface vlan command is used to create the VLAN interface. To delete the specified VLAN interface, please use the no interface vlan command. Syntax interface vlan { vid } no interface vlan { vid } Parameter vid -- The ID of the - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 311
Command Mode Global Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Create the loopback interface 1: T1700G-28TQ(config)# interface loopback 1 32.3 switchport Description This switchport command is used to switch the - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 312
Syntax interface range port-channel port-channel-list Parameter port-channel-list -- The list of the port-channel interface, ranging from 1 to 14, in the format of 1-3, 5. Command Mode Global Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 313
32.6 shutdown Description This shutdown command is used to shut down the specified interface. The interface type include: routed port, port-channel interface, loopback interface and VLAN interface. To enable the specified interface, please use the no shutdown command. Syntax shutdown no shutdown - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 314
distance -- The distance metric of this route, ranging from 1 to 255. The smaller the distance is, the higher the priority is. Command Mode Global Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Create a static route - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 315
T1700G-28TQ(config-if)# description system-if 32.9 ipv6 routing Description This ipv6 routing command is enale the IPv6 routing feature globally. To diable IPv6 routing, please use the no ipv6 routing command. Syntax ipv6 routing no ipv6 routing Command Mode Global Configuration Mode Privilege - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 316
Command Mode Global Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Create a static route with the destination network IP address as 3200::/64 and the next-hop address as 3100::1234: T1700G-28TQ(config)# ipv6 route 3200 - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 317
Syntax show ip interface [ gigabitEthernet port | ten-gigabitEthernet port | port-channel lagid | loopback id | vlan vlan-id ] Parameter port -- The port number. lagid -- The ID of the LAG. Member ports in this LAG should all be routed ports. id -- The loopback interface ID. vlan-id -- The VLAN - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 318
32.14 show ip route Description This show ip route command is used to display the route entries of the specified type. Syntax show ip route [ static | connected ] Parameter static | connected -- Specify the route type. If not specified, all types of route entries will be displayed. static: The - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 319
Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the shortest route to 192.168.0.100: T1700G-28TQ(config)# show ip route specify 192.168.0.100 Look up the route entry with the destination as 192.168.0.0/24: T1700G-28TQ(config)# show ip route - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 320
ipv6 interface Description This command is used to display the configured IPv6 information of the management interface, including ipv6 function status, link-local address and global address, IPv6 multicast groups etc. Syntax show ipv6 interface Command Mode Privileged EXEC Mode and Any Configuration - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 321
Example Display the IPv6 static routes: T1700G-28TQ(config)# show ipv6 route static 32.19 show ipv6 route summary Description This show ipv6 route summary command is used to display the summary information of the IPv6 route entries classified by their sources. Syntax show ipv6 route summary Command - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 322
prefer Description The sdm prefer command is used to configure the SDM template. The SDM template is used to allocate system resources to best support the features being used in your application. To return to use the default template, please use the sdm prefer default command. The template change - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 323
33.2 show sdm prefer Description The show sdm prefer command is used to display resource allocation of the current SDM template in use, or the SDM templates that can be used. Syntax show sdm prefer { used | default | enterpriseV4 | enterpriseV6 } Parameter used -- Display the resource allocation of - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 324
:Telnet, SSH and HTTP. Authentication Method List A method list describes the authentication methods and their sequence to authenticate a user. The switch supports Login List for users to gain access to the switch, and Enable List for normal users to gain administrative privileges. RADIUS/TACACS - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 325
34.2 tacacas-server host Description The tacacs-server host command is used to configure a new TACACS+ server. To delete the specified TACACS+ server, please use no tacacs-server host command. Syntax tacacs-server host ip-address [ port port-id ] [ timeout time ] [ key { [ 0 ] string | 7 encryped- - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 326
Example Configure a TACACS+ server with the IP address as 1.1.1.1, TCP port as 1500, timeout as 6 seconds, and the unencrypted key string as 12345. T1700G-28TQ(config)# tacacs-server host 1.1.1.1 port 1500 timeout 6 key 12345 34.3 show tacacs-server Description This show ip tacacs-server command is - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 327
auth-port port-id -- Specify the UDP destination port for authentication requests. By default it is 1812. acct-port port-id -- Specify the UDP destination port for accouting requests. By deault it is 1813. time -- Specify the time in seconds the switch waits for the server's response before it times - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 328
34.5 show radius-server Description This show radius-server command is used to display the summary information of the RADIUS servers. Syntax show radius-server Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement Only Admin level users have access to these commands. - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 329
Privilege Requirement Only Admin level users have access to these commands. Example Create a RADIUS server group with the name radius1: T1700G-28TQ(config)# aaa group radius radius1 34.7 server Description This server command is used to add the existing server in the defined server group. To remove - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 330
Syntax show aaa group [ group-name ] Parameter group-name -- Specify the server group name. Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement Only Admin level users have access to these commands. Example Display the information of all the server groups: T1700G-28TQ( - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 331
Command Mode Global Configuration Mode Privilege Requirement Only Admin level users have access to these commands. User Guidelines By default the login authentication method list is "default" with "local" as method1. Example Configure a login authentication method list "list1" with the priority1 - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 332
authentication dot1x default { method } no aaa authentication dot1x default Parameter method -- Specify the method name. Only RADIUS server group is supported, and the default method is server group "radius". Command Mode Global Configuration Mode Privilege Requirement Only Admin level users have - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 333
aaa accounting dot1x default { method } no aaa accounting dot1x default Parameter method -- Specify the method name. Only RADIUS server group is supported, and the default method is server group "radius". Command Mode Global Configuration Mode Privilege Requirement Only Admin level users have access - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 334
Privilege Requirement Only Admin level users have access to these commands. Example Display the information of all the authentication method lists: T1700G-28TQ(config)# show aaa authentication 34.14 show aaa accounting Description This show aaa accounting command is used to display the summary - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 335
Command Mode Global Configuration Mode Privilege Requirement Only Admin level users have access to these commands. Example Enter the telnet terminal line configuration mode: T1700G-28TQ(config)#line telnet 34.16 login authentication(telnet) Description The login authentication command is used to - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 336
34.17 line ssh Description The line ssh command is used to enter the Line Configuration Mode to configure the ssh terminal line to which you want to apply the authentication list. Syntax line ssh Command Mode Global Configuration Mode Privilege Requirement Only Admin level users have access to these - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 337
Example Configure the login authentication method list on the ssh terminal line as "list1": T1700G-28TQ(config)# line ssh T1700G-28TQ(config-line)# login authentication list1 34.19 enable authentication(telnet) Description The enable authentication command is used to apply the privilege - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 338
Syntax enable authentication { method-list } no enable authentication Parameter method-list -- Specify the enable method list on the ssh terminal line. It is "default" by default, which contains the method "none". Command Mode Line Configuration Mode Privilege Requirement Only Admin level users have - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 339
Privilege Requirement Only Admin level users have access to these commands. Example Configure the login authentication method list on the HTTP access as "list1": T1700G-28TQ(config)# ip http login authentication list1 34.22 ip http enable authentication Description The ip http enable authentication - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 340
Syntax show aaa global Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement Only Admin level users have access to these commands. Example Display the AAA function's global status and each application's method list: T1700G-28TQ(config)# show aaa global 324 - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 341
Requirement Only Admin, Operator and Power User level users have access to these commands. Example Enable DHCP Relay function globally: T1700G-28TQ(config)# service dhcp relay 35.2 ip helper-address Description The ip helper-address command is used to add DHCP Server address to the Layer 3 interface - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 342
(config-if)# ip helper-address 192.168.2.1 35.3 ip dhcp relay information Description The ip dhcp relay information command is used to enable option 82 support in DHCP Relay. To disable this function, please use no ip dhcp relay information command. Syntax ip dhcp relay information no ip dhcp relay - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 343
Syntax ip dhcp relay information policy { drop | keep | replace } no ip dhcp relay information policy Parameter drop | keep | replace --The operations for Option 82 field of the DHCP request packets from the Host. The default operation is keep. drop: Discard the packet with the Option 82 field. keep - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 344
Admin, Operator and Power User level users have access to these commands. Example Specify the circuit ID as "TP-LINK": T1700G-28TQ(config)# ip dhcp relay information circuit-id TP-LINK 35.7 ip dhcp relay information remote-id Description The ip dhcp relay information remote-id command is used to - TP-Link 10GE | T1700G-28TQUN V1 CLI Reference Guide - Page 345
Example Specify the remote ID as "TP-LINK": T1700G-28TQ(config)# ip dhcp relay information remote-id TP-LINK 35.8 show ip dhcp relay Description The show ip dhcp relay command is used to display the global status and Option 82 configuration of DHCP
-
1 -
2 -
3 -
4 -
5 -
6 -
7 -
8
-
9
-
10
-
11
-
12
-
13
-
14
-
15
-
16
-
17
-
18
-
19
-
20
-
21
-
22
-
23
-
24
-
25
-
26
-
27
-
28
-
29
-
30
-
31
-
32
-
33
-
34
-
35
-
36
-
37
-
38
-
39
-
40
-
41
-
42
-
43
-
44
-
45
-
46
-
47
-
48
-
49
-
50
-
51
-
52
-
53
-
54
-
55
-
56
-
57
-
58
-
59
-
60
-
61
-
62
-
63
-
64
-
65
-
66
-
67
-
68
-
69
-
70
-
71
-
72
-
73
-
74
-
75
-
76
-
77
-
78
-
79
-
80
-
81
-
82
-
83
-
84
-
85
-
86
-
87
-
88
-
89
-
90
-
91
-
92
-
93
-
94
-
95
-
96
-
97
-
98
-
99
-
100
-
101
-
102
-
103
-
104
-
105
-
106
-
107
-
108
-
109
-
110
-
111
-
112
-
113
-
114
-
115
-
116
-
117
-
118
-
119
-
120
-
121
-
122
-
123
-
124
-
125
-
126
-
127
-
128
-
129
-
130
-
131
-
132
-
133
-
134
-
135
-
136
-
137
-
138
-
139
-
140
-
141
-
142
-
143
-
144
-
145
-
146
-
147
-
148
-
149
-
150
-
151
-
152
-
153
-
154
-
155
-
156
-
157
-
158
-
159
-
160
-
161
-
162
-
163
-
164
-
165
-
166
-
167
-
168
-
169
-
170
-
171
-
172
-
173
-
174
-
175
-
176
-
177
-
178
-
179
-
180
-
181
-
182
-
183
-
184
-
185
-
186
-
187
-
188
-
189
-
190
-
191
-
192
-
193
-
194
-
195
-
196
-
197
-
198
-
199
-
200
-
201
-
202
-
203
-
204
-
205
-
206
-
207
-
208
-
209
-
210
-
211
-
212
-
213
-
214
-
215
-
216
-
217
-
218
-
219
-
220
-
221
-
222
-
223
-
224
-
225
-
226
-
227
-
228
-
229
-
230
-
231
-
232
-
233
-
234
-
235
-
236
-
237
-
238
-
239
-
240
-
241
-
242
-
243
-
244
-
245
-
246
-
247
-
248
-
249
-
250
-
251
-
252
-
253
-
254
-
255
-
256
-
257
-
258
-
259
-
260
-
261
-
262
-
263
-
264
-
265
-
266
-
267
-
268
-
269
-
270
-
271
-
272
-
273
-
274
-
275
-
276
-
277
-
278
-
279
-
280
-
281
-
282
-
283
-
284
-
285
-
286
-
287
-
288
-
289
-
290
-
291
-
292
-
293
-
294
-
295
-
296
-
297
-
298
-
299
-
300
-
301
-
302
-
303
-
304
-
305
-
306
-
307
-
308
-
309
-
310
-
311
-
312
-
313
-
314
-
315
-
316
-
317
-
318
-
319
-
320
-
321
-
322
-
323
-
324
-
325
-
326
-
327
-
328
-
329
-
330
-
331
-
332
-
333
-
334
-
335
-
336
-
337
-
338
-
339
-
340
-
341
-
342
-
343
-
344
-
345
 |
 |
T1700G-28TQ
JetStream 24-Port Gigabit Stackable
Smart Switch with 4 10GE SFP+ Slots
REV1.0.2
1910011741