TP-Link T1600G-18TSTL-SG2216 T1600G-18TSUN V1 CLI Reference Guide Guide
TP-Link T1600G-18TSTL-SG2216 Manual
View all TP-Link T1600G-18TSTL-SG2216 manuals
Add to My Manuals
Save this manual to your list of manuals |
TP-Link T1600G-18TSTL-SG2216 manual content summary:
- TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 1
CLI Reference Guide T1600G Series Switches T1600G-18TS T1600G-28TS (TL-SG2424) / T1600G-52TS (TL-SG2452) T1600G-28PS (TL-SG2424P) / T1600G-52PS (TL-SG2452P) 1910012176 REV2.1.0 June 2017 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 2
COPYRIGHT & TRADEMARKS Specifications are subject to change without notice. is a registered trademark of TP-Link Technologies Co., Ltd. Other brands and product names are trademarks or registered trademarks of their respective holders. No part of the specifications may be reproduced in any form - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 3
...13 1.4.1 Format Conventions ...13 1.4.2 Special Characters ...14 1.4.3 Parameter Format...14 Chapter 2 User Interface 15 2.1 enable ...15 2.2 service password-encryption 15 2.3 enable password...16 2.4 enable secret ...17 2.5 configure...18 2.6 exit...19 2.7 end ...19 2.8 history...20 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 4
4.2 mac-vlan ...29 4.3 show mac-vlan...29 4.4 show mac-vlan interface...30 Chapter 5 Protocol-based VLAN Commands 31 5.1 protocol-vlan template (For T1600G-18TS only 31 5.2 protocol-vlan template (For other switches 32 5.3 protocol-vlan vlan...33 5.4 protocol-vlan group...33 5.5 show protocol- - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 5
8.6 telnet ...54 8.7 show user account-list...54 8.8 show user configuration...55 8.9 show telnet-status...55 Chapter 9 HTTP and HTTPS Commands 57 9.1 9.2 9.3 9.4 9.5 9.6 9.7 9.8 9.9 9.10 9.11 9.12 9.13 9.14 ip http server ...57 ip http max-users (For T1600G-18TS only 58 ip http max-users (For - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 6
11.10 11.11 11.12 11.13 11.14 11.15 ip dhcp snooping limit rate ...79 ip dhcp snooping decline rate 80 show ip source binding...81 show ip dhcp snooping...81 show ip dhcp snooping interface 82 show ip dhcp snooping information interface 82 Chapter 12 ARP Inspection Commands 84 12.1 12.2 12.3 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 7
Chapter 15 System Log Commands 106 15.1 15.2 15.3 15.4 15.5 15.6 15.7 15.8 15.9 15.10 15.11 15.12 15.13 logging buffer...106 logging buffer level...106 logging file flash ...107 logging file flash frequency ...108 logging file flash level ...109 logging host index ...109 logging monitor ...110 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 8
.20 18.21 18.22 18.23 18.24 18.25 18.26 18.27 18.28 18.29 18.30 18.31 system-time manual ...134 system-time ntp ...134 system-time dst predefined 136 system-time dst date ...137 system-time dst recurring ...138 hostname...139 location...140 contact - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 9
18.32 show memory-utilization ...156 Chapter 19 IPv6 Address Configuration Commands 157 19.1 19.2 19.3 19.4 19.5 19.6 19.7 19.8 ipv6 enable...157 ipv6 address autoconfig...157 ipv6 address link-local ...158 ipv6 address dhcp ...159 ipv6 address ra ...159 ipv6 address eui-64 ...160 ipv6 address - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 10
21.6 21.7 21.8 21.9 21.10 21.11 21.12 21.13 21.14 qos queue dscp-map (For T1600G-18TS only 181 qos queue dscp-map (For other switches 182 qos queue mode ...183 qos queue weight ...184 show qos interface...185 show qos cos-map...186 show qos dscp-map ...186 show qos queue mode...187 show qos - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 11
25.10 25.11 25.12 25.13 25.14 25.15 access-list bind acl(vlan) ...206 access-list bind(interface) ...207 access-list bind(vlan)...208 show access-list ...208 show access-list policy ...209 show access-list bind...209 Chapter 26 MSTP Commands 210 26.1 26.2 26.3 26.4 26.5 26.6 26.7 26.8 26.9 26.10 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 12
27.3 27.4 27.5 27.6 27.7 27.8 27.9 27.10 27.11 27.12 27.13 27.14 27.15 27.16 27.17 27.18 27.19 27.20 27.21 27.22 27.23 27.24 27.25 27.26 27.27 27.28 27.29 27.30 27.31 27.32 ip igmp snooping rtime ...230 ip igmp snooping mtime ...231 ip igmp snooping report-suppression 231 ip igmp snooping - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 13
28.7 28.8 28.9 28.10 28.11 28.12 28.13 28.14 28.15 28.16 28.17 28.18 28.19 28.20 28.21 28.22 28.23 28.24 28.25 28.26 28.27 28.28 28.29 28.30 ipv6 mld snooping drop-unknown 255 ipv6 mld snooping last-listener query-inteval 256 ipv6 mld snooping last-listener query-count 256 ipv6 mld snooping vlan - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 14
29.13 29.14 29.15 29.16 29.17 29.18 29.19 29.20 29.21 29.22 29.23 29.24 29.25 29.26 rmon event ...285 rmon alarm ...286 rmon statistics ...288 show snmp-server...288 show snmp-server view...289 show snmp-server group...289 show snmp-server user...290 show snmp-server community 290 show snmp-server - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 15
31.4 31.5 31.6 31.7 31.8 31.9 31.10 31.11 31.12 31.13 31.14 31.15 31.16 31.17 31.18 31.19 interface range port-channel 309 description ...309 shutdown ...310 interface port-channel ...311 ip route ...311 ipv6 routing ...312 ipv6 route...313 show interface vlan ...313 show ip interface...314 show - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 16
enable authentication 337 show aaa global ...338 Chapter 34 DHCP Relay Commands 339 34.1 34.2 34.3 34.4 34.5 34.6 34.7 34.8 34.9 34.10 service dhcp relay ...339 ip helper-address...339 ip dhcp relay information ...340 ip dhcp relay information policy 341 ip dhcp relay information custom 341 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 17
35.18 show power holiday ...357 35.19 show power time-range...358 XVI - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 18
model in the example commands. Some models featured in this guide may be unavailable in your country or region. For local sales information, visit http ://www.tp-link.com. Overview of this Guide Chapter 1: Using the CLI Provide information about how to use the CLI, - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 19
Chapter 11: Binding Table Commands Provide information about the commands used for binding the IP address, MAC address, VLAN and the connected Port number of the Host together. Chapter 12: ARP Inspection Commands Provide information about the commands used for protecting the switch from the ARP - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 20
Chapter 25: ACL Commands Provide information about the commands used for configuring the ACL (Access Control List). Chapter 26: MSTP Commands Provide information about the commands used for configuring the MSTP (Multiple Spanning Tree Protocol). Chapter 27: IGMP Snooping Commands Provide information - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 21
Chapter 1 Using the CLI 1.1 Accessing the CLI You can log on to the switch and access the CLI by logging on to the switch remotely by a Telnet or SSH connection through an Ethernet port. 1.1.1 Logon by Telnet To log on to the switch by a Telnet connection, please take the following steps: 1. Click - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 22
3. Type in the login username and password (both admin by default). Press Enter and you will enter User EXEC Mode. Figure 1-2 Log in the Switch 4. Type in enable command and you will enter Privileged EXEC Mode. By default no password is needed. Later you can set a password for users who want to - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 23
Figure 1-4 Enable SSH function Password Authentication Mode 1. Open the software to log on to the interface of PuTTY. Enter the IP address of the switch into Host Name field; keep the default value 22 in the Port field; select SSH as the Connection type. Figure 1-5 SSH Connection Config 6 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 24
2. Click the Open button in the above figure to log on to the switch. Enter the login user name and password to log on the switch, and then enter enable to enter Privileged EXEC Mode, so you can continue to configure the switch. Figure 1-6 Log on the Switch Key Authentication Mode 1. Select the - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 25
2. After the key is successfully generated, please save the public key and private key to a TFTP server. Figure 1-8 Save the Generated Key 3. Log on to the switch by Telnet and download the public key file from the TFTP server to the switch, as the following figure shows: Figure 1-9 Download the - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 26
Note: 1. The key type should accord with the type of the key file. 2. The SSH key downloading can not be interrupted. 4. After the public key is downloaded, please log on to the interface of PuTTY and enter the IP address for login. Figure 1-10 SSH Connection Config 9 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 27
5. Click Browse to download the private key file to SSH client software and click Open. Figure 1-11 Download the Private Key 6. After successful authentication, please enter the login user name. If you log on to the switch without entering password, it indicates that the key has been successfully - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 28
Interface Configuration Mode can also be divided into Interface Ethernet, Interface link-aggregation and some other modes, which is shown as the following diagram. The following table gives detailed information about the Accessing path, Prompt of each mode and how to exit the current mode and - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 29
Mode Accessing Path Prompt Logout or Access the next mode Layer 3 Interface: Use the no switchport command to enter Routed Port mode from Interface Configuration mode. Interface Configuration Mode Use the interface vlan vlan-id command to enter VLAN Interface mode from Global Configuration - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 30
, you are required to enter it to access Privileged EXEC mode. 1.4 Conventions 1.4.1 Format Conventions The following conventions are used in this Guide: Items in square brackets [ ] are optional Items in braces { } are required Alternative items are grouped in braces and separated by vertical - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 31
Normal Font indicates a constant (several options are enumerated and only one can be selected). For example: mode {dynamic | static | permanent} Italic Font indicates a variable (an actual value must be assigned). For example: bridge aging-time aging-time 1.4.2 Special Characters You should pay - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 32
set the password to access Privileged EXEC Mode from User EXEC Mode: T1600G-52TS>enable Enter password: T1600G-52TS# 2.2 service password-encryption Description The service password-encryption command is used to encrypt the password when the password is defined or when the configuration is written - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 33
Mode Privilege Requirement Only Admin level users have access to these commands. Example Enable the global encryption function: T1600G-52TS(config)# service password-encryption 2.3 enable password Description The enable password command is used to set or change the password for users to access - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 34
have access to these commands. User Guidelines If the password you configured here is unencrypted and the global encryption function is enabled in service password-encryption, the password in the configuration file will be displayed in the symmetric encrypted form. Example Set the super password as - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 35
encrypted password is configured, you should use the corresponding unencrypted password if you re-enter this mode. Command Mode Global Configuration Mode Privilege Requirement Only Admin level users have access to these commands. User Guidelines If both the enable password and enable secret are - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 36
2.6 exit Description The exit command is used to return to the previous Mode from the current Mode. Syntax exit Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Return to Global Configuration Mode from Interface Configuration Mode, and then return to - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 37
2.8 history Description The history command is used to show the latest 20 commands you entered in the current mode since the switch is powered. Syntax history Command Mode Privileged EXEC Mode and any Configuration Mode Privilege Requirement None. Example Show the commands you have entered in the - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 38
T1600G-52TS(config)#history clear 21 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 39
Chapter 3 IEEE 802.1Q VLAN Commands VLAN (Virtual Local Area Network) technology is developed for the switch to divide the LAN into multiple logical LANs flexibly. Hosts in the same VLAN can communicate with each other, regardless of their physical locations. VLAN can enhance performance by - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 40
3.2 interface vlan Description The interface vlan command is used to create VLAN Interface and enter Interface VLAN Mode. To delete VLAN Interface, please use no interface vlan command. Syntax interface vlan vlan-id no interface vlan vlan-id Parameter vlan-id -- Specify IEEE 802.1Q VLAN ID, ranging - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 41
Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Specify the name of VLAN 2 as "group1": T1600G-52TS(config)# vlan 2 T1600G-52TS(config-vlan)# name group1 3.4 switchport general allowed vlan Description The switchport general allowed vlan - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 42
3.5 switchport pvid Description The switchport pvid command is used to configure the PVID for the switch ports. Syntax switchport pvid vlan-id Parameter vlan-id -- VLAN ID, ranging from 1 to 4094. Command Mode Interface Configuration Mode (interface gigabitEthernet / interface range gigabitEthernet - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 43
Example Display the summarized information of IEEE 802.1Q VLAN: T1600G-52TS(config)# show vlan summary 3.7 show vlan brief Description The show vlan brief command is used to display the brief information of IEEE 802.1Q VLAN. Syntax show vlan brief Command Mode Privileged EXEC Mode and Any - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 44
Privilege Requirement None. Example Display the information of vlan 5: T1600G-52TS(config)# show vlan id 5 3.9 show interface switchport Description The show interface switchport command is used to display the IEEE 802.1Q VLAN configuration information of the specified port/LAG. Syntax show - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 45
Chapter 4 MAC-based VLAN Commands MAC VLAN (Virtual Local Area Network) is the way to classify the VLANs based on MAC Address. A MAC address is relative to a single VLAN ID. The untagged packets and the priority-tagged packets coming from the MAC address will be tagged with this VLAN ID. 4.1 mac- - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 46
4.2 mac-vlan Description The mac-vlan command is used to enable a port for the MAC-based VLAN feature. Only the port is enabled can the configured MAC-based VLAN take effect. To disable the MAC-based VLAN function, please use no mac-vlan command. All the ports are disabled by default. Syntax mac- - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 47
Privilege Requirement None. Parameter mac-addr -- MAC address, in the format of XX:XX:XX:XX:XX:XX. vlan-id -- Specify IEEE 802.1Q VLAN ID, ranging from 1 to 4094. Example Display the information of all the MAC-based VLAN entry: T1600G-52TS(config)#show mac-vlan all 4.4 show mac-vlan interface - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 48
the Protocol-based VLAN Template , which contains 8 characters at most. ether-type type -- Specify the Ethernet type. It should be 4 hexadecimal numbers. The supported frame type is Ethernet II, and cannot be configured. template-idx -- The number of the Protocol-based VLAN Template. You can get the - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 49
T1600G-18TS(config)#protocol-vlan template name TP ether-type 2024 5.2 protocol-vlan template (For other switches) Description The protocol-vlan template command is used to create Protocol-based VLAN template. To delete Protocol-based VLAN template, please use no protocol-vlan template command. - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 50
5.3 protocol-vlan vlan Description The protocol-vlan vlan command is used to create a Protocol-based VLAN entry. To delete a Protocol-based VLAN entry, please use no protocol-vlan vlan command. Syntax protocol-vlan vlan vlan-id template template-idx no protocol-vlan vlan group-idx Parameter vlan-id - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 51
Syntax protocol-vlan group index no protocol-vlan group index Parameter index -- Specify the protocol group ID. Command Mode Interface Configuration Mode (interface gigabitEthernet / interface range gigabitEthernet / interface port-channel / interface range port-channel) Privilege Requirement Only - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 52
5.6 show protocol-vlan vlan Description The show protocol-vlan vlan command is used to display the information about Protocol-based VLAN entry. Syntax show protocol-vlan vlan Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display information of the - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 53
Chapter 6 Voice VLAN Commands Voice VLANs are configured specially for voice data stream. By configuring Voice VLANs and adding the ports with voice devices attached to voice VLANs, you can perform QoS-related configuration for voice data, ensuring the transmission priority of voice data stream and - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 54
Syntax voice vlan aging time no voice vlan aging Parameter time -- Aging time (in minutes) to be set for the Voice VLAN. It ranges from 1 to 43200 minutes and the default value is 1440 minutes. Command Mode Global Configuration Mode Privilege Requirement Only Admin, Operator and Power User level - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 55
Example Configure the priority of the Voice VLAN as 5: T1600G-52TS(config)# voice vlan priority 5 6.4 voice vlan mac-address Description The voice vlan mac-address command is used to create Voice VLAN OUI. To delete the specified Voice VLAN OUI, please use no voice vlan mac-address command. Syntax - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 56
is used to configure the Voice VLAN mode for the Ethernet port. Syntax switchport voice vlan mode { manual | auto } Parameter manual | auto -- Port mode. Command Mode Interface Configuration Mode (interface gigabitEthernet / interface range gigabitEthernet / interface port-channel / interface - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 57
Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Enable port 1/0/3 for the Voice VLAN security feature: T1600G-52TS(config)# interface gigabitEthernet 1/0/3 T1600G-52TS(config-if)# switchport voice vlan security 6.7 show voice vlan - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 58
Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Display the configuration information of Voice VLAN OUI: T1600G-52TS(config)# show voice vlan oui 6.9 show voice vlan switchport - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 59
Chapter 7 Etherchannel Commands Etherchannel Commands are used to configure LAG and LACP function. LAG (Link Aggregation Group) is to combine a number of ports together to make a single high-bandwidth data path, which can highly extend the bandwidth. The bandwidth of the LAG is the sum of bandwidth - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 60
Example Add ports 2-4 to EtherChannel Group 1 and enable the static LAG: T1600G-52TS(config)# interface range gigabitEthernet 1/0/2-4 T1600G-52TS(config-if-range)# channel-group 1 mode on 7.2 port-channel load-balance Description The port-channel load-balance command is used to configure the - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 61
Command Mode Global Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Configure the Aggregate Arithmetic for LAG as "src-dst-ip": T1600G-52TS(config)# port-channel load-balance src-dst-ip 7.3 lacp system-priority - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 62
7.4 lacp port-priority Description The lacp port-priority command is used to configure the LACP port priority for specified ports. To return to the default configurations, please use no lacp port-priority command. Syntax lacp port-priority pri no lacp port-priority Parameter pri -- The port priority - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 63
Parameter channel-group-num -- The EtherChannel Group number, ranging from 1 to 14. By default, it is empty, and will display the information of all EtherChannel Groups. detail -- The detailed information of EtherChannel. summary -- The EtherChannel information in summary. Command Mode Privileged - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 64
7.7 show lacp Description The show lacp command is used to display the LACP information for a specified EtherChannel Group. Syntax show lacp [ channel-group-num ] { internal | neighbor } Parameter channel-group-num -- The EtherChannel Group number, ranging from 1 to 14. By default, it is empty, and - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 65
Example Display the LACP system priority: T1600G-52TS(config)# show lacp sys-id 48 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 66
Chapter 8 User Management Commands User Manage Commands are used to manage the user's logging information by Web, Telnet or SSH, so as to protect the settings of the switch from being randomly changed. 8.1 user name (password) Description The user name command is used to add a new user or modify the - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 67
have access to these commands. User Guidelines If the password you configured here is unencrypted and the global encryption function is enabled in service password-encryption, the password in the configuration file will be displayed in the symmetric encrypted form. Example Add and enable a new admin - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 68
the the settings of different functions. "user" means that you can only view some of the the settings of different functions without the right to edit or modify. It is "admin" by default. 0 -- Specify the encryption type. 0 indicates that an unencrypted password will follow. By default, the - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 69
Syntax user access-control ip-based { ip-addr ip-mask } [ snmp ] [ telnet ] [ ssh ] [ http ] [ https ] [ ping ] [ all ] no user access-control [ ip-based index id ] Parameter ip-addr -- The source IP address. Only the users within the IP-range you set here are allowed for login. 5 IP-based entries - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 70
Parameter mac-addr -- The source MAC address. Only the user with this MAC address is allowed to login. [ snmp ] [ telnet ] [ ssh ] [ http ] [ https ] [ ping ] [ all ] -- Specify the access interface. These interfaces are enabled by default. Command Mode Global Configuration Mode Privilege - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 71
Privilege Requirement Only Admin and Operator level users have access to these commands. Example Configure that only the users connected to ports 2-6 are allowed to login: T1600G-52TS(config)# user access-control port-based interface gigabitEthernet 1/0/2-6 8.6 telnet Description The telnet enable - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 72
Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement Only Admin level users have access to these commands. Example Display the information of the current users: T1600G-52TS(config)# show user account-list 8.8 show user configuration Description The show user - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 73
Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display whether the Telnet function is enabled: T1600G-52TS(config)# show telnet-status 56 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 74
Chapter 9 HTTP and HTTPS Commands With the help of HTTP (HyperText Transfer Protocol) or HTTPS (Hyper Text Transfer Protocol over Secure Socket Layer), you can manage the switch through a standard browser. HTTP is the protocol to exchange or transfer hypertext. SSL (Secure Sockets Layer), a security - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 75
9.2 ip http max-users (For T1600G-18TS only) Description The ip http max-users command is used to configure the maximum number of users that are allowed to connect to the HTTP server. To cancel this limitation, please use no ip http max-users command. Syntax ip http max-users admin-num operator-num - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 76
9.3 ip http max-users (For other switches) Description The ip http max-users command is used to configure the maximum number of users that are allowed to connect to the HTTP server. To cancel this limitation, please use no ip http max-users command. Syntax ip http max-users admin-num guest-num no ip - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 77
no ip http session timeout Parameter time --The timeout time, ranging from 5 to 30 in minutes. By default, the value is 10. Command Mode Global Configuration Mode Privilege Requirement Only Admin and Operator level users have access to these commands. Example Configure the timeout time of the HTTP - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 78
-protocol ssl3 9.7 ip http secure-ciphersuite Description The ip http secure-ciphersuite command is used to configure the cipherSuites over the SSL connection supported by the switch. To restore to the default ciphersuite types, please use no ip http secure-ciphersuite command. Syntax ip http secure - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 79
-sha ] [ des-cbc-sha ] -- Specify the encryption algorithm and the digest algorithm to use on an SSL connection. By default, the switch supports all these ciphersuites. Command Mode Global Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 80
poweruser-num-- The maximum number of the users logging on to the HTTPS server as Power User, ranging from 0 to 15.The total number of users should be less than 16. user-num-- The maximum number of the users logging on to the HTTPS server as User, ranging from 0 to 15.The total number of users - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 81
Command Mode Global Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Configure the maximum number of the Admin and Guest users logging on to the HTTPs server as 5 and 3: T1600G-52TS(config)# ip http secure-max-users 5 3 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 82
to 25 characters. The Certificate must be BASE64 encoded. ip-addr -- The IP address of the TFTP server. Both IPv4 and IPv6 addresses are supported, for example 192.168.0.1 or fe80::1234. Command Mode Global Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 83
to 25 characters. The Key must be BASE64 encoded. ip-addr -- The IP address of the TFTP server. Both IPv4 and IPv6 addresses are supported, for example 192.168.0.1 or fe80::1234. Command Mode Global Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 84
9.13 show ip http configuration Description The show ip http configuration command is used to display the configuration information of the HTTP server, including status, session timeout, access-control, max-user number and the idle-timeout, etc. Syntax show ip http configuration Command Mode - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 85
contains two types of ARP entries: dynamic and static. An ARP dynamic entry is automatically created and maintained by ARP. A static ARP entry is manually configured and maintained. 10.1 arp Description This arp command is used to add a static ARP entry. To delete the specified ARP entry, please use - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 86
10.2 clear arp-cache Description This clear arp-cache command is used to clear all the dynamic ARP entries. Syntax clear arp-cache Command Mode Privileged EXEC Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Clear all the dynamic ARP - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 87
Example Configure the ARP aging time as 60 seconds on interface 1/0/1: T1600G-52TS(config)# interface gigabitEthernet 1/0/1 T1600G-52TS(config-if)# arp timeout 60 10.4 show arp Description This show arp command is used to display the active ARP entries. If no parameter is speicified, all the active - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 88
Parameter port -- Specify the number of the routed port. port-channel-id -- Specify the ID of the port channel. id -- Specify the VLAN interface ID. Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the ARP entry associated with VLAN interface 2 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 89
source binding Description The ip source binding command is used to bind the IP address, MAC address, VLAN ID and the Port number together manually. You can manually bind the IP address, MAC address, VLAN ID and the Port number together in the condition that you have got the related information of - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 90
these commands. Example Bind an ACL entry with the IP 192.168.0.1, MAC 00:00:00:00:00:01, VLAN ID 2 and the Port number 5 manually. And then enable the entry for the ARP detection: T1600G-52TS(config)#ip source binding host1 192.168.0.1 00:00:00:00:00:01 vlan - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 91
Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Enable the DHCP Snooping function globally: T1600G-52TS(config)#ip dhcp snooping 11.3 ip dhcp snooping vlan Description The ip dhcp snooping vlan command is used to enable DHCP Snooping - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 92
11.4 ip dhcp snooping information option Description The ip dhcp snooping information option command is used to enable the Option 82 function of DHCP Snooping. To disable the Option 82 function, please use no ip dhcp snooping information option command. Syntax ip dhcp snooping information option no - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 93
Parameter strategy -- The operations for Option 82 field of the DHCP request packets from the Host, including three types: keep: Indicates to keep the Option 82 field of the packets. It is the default option; replace: Indicates to replace the Option 82 field of the packets with the switch defined - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 94
Command Mode Interface Configuration Mode (interface gigabitEthernet / interface range gigabitEthernet / interface port-channel / interface range port-channel) Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Configure the customized sub- - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 95
Example Enable and configure the customized sub-option Circuit ID for the Option 82 as "tplink" on port 1/0/1: T1600G-52TS(config)#interface gigabitEthernet 1/0/1 T1600G-52TS(config-if)#ip dhcp snooping information circuit-id tplink 11.8 ip dhcp snooping trust Description The ip dhcp snooping trust - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 96
containing the MAC address of the Host. The MAC Verify feature is to compare the two fields and discard the packet if the two fields are different. Syntax ip dhcp snooping mac-verify no ip dhcp snooping mac-verify Command Mode Interface Configuration Mode (interface gigabitEthernet / interface range - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 97
Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Set the Flow Control of GigabitEthernet port 2 as 20 pps: T1600G-52TS(config)#interface gigabitEthernet 1/0/2 T1600G-52TS(config-if)#ip dhcp snooping limit rate 20 11.11 ip dhcp snooping - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 98
T1600G-52TS(config-if)#ip dhcp snooping decline 20 11.12 show ip source binding Description The show ip source binding command is used to display the IP-MAC-VIDPORT binding table. Syntax show ip source binding Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 99
11.14 show ip dhcp snooping interface Description The show ip dhcp snooping interface command is used to display the DHCP Snooping configuration of a desired Gigabit Ethernet port/port channel or of all Ethernet ports/port channels. Syntax show ip dhcp snooping interface [ gigabitEthernet port | - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 100
Parameters port -- The Ethernet port number. port-channel-id -- The ID of the port channel. Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the DHCP snooping option 82 configuration of all Ethernet ports and port channels: T1600G-52TS#show ip - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 101
Chapter 12 ARP Inspection Commands ARP (Address Resolution Protocol) Detect function is to protect the switch from the ARP cheating, such as the Network Gateway Spoofing and Man-In-The-Middle Attack, etc. 12.1 ip arp inspection(global) Description The ip arp inspection command is used to enable the - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 102
Syntax ip arp inspection trust no ip arp inspection trust Command Mode Interface Configuration Mode (interface gigabitEthernet / interface range gigabitEthernet) Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Configure the Gigabit - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 103
Example Enable the arp defend function for the Gigabit Ethernet ports 1/0/2-6: T1600G-52TS(config)#interface range gigabitEthernet 1/0/2-6 T1600G-52TS(config-if-range)#ip arp inspection 12.4 ip arp inspection limit-rate Description The ip arp inspection limit-rate command is used to configure the - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 104
12.5 ip arp inspection recover Description The ip arp inspection recover command is used to restore a port to the ARP transmit status from the ARP filter status. Syntax ip arp inspection recover Command Mode Interface Configuration Mode (interface gigabitEthernet / interface range gigabitEthernet) - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 105
Example Display the ARP detection configuration globally: T1600G-52TS(config)#show ip arp inspection 12.7 show ip arp inspection interface Description The show ip arp inspection interface command is used to display the interface configuration of ARP detection. Syntax show ip arp inspection interface - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 106
Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the number of the illegal ARP packets received: T1600G-52TS(config)#show ip arp inspection statistics 12.9 clear ip arp inspection statistics Description The clear ip arp inspection statistics - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 107
) Attack is to occupy the network bandwidth maliciously by the network attackers or the evil programs sending a lot of service requests to the Host. With the DoS Defend enabled, the switch can analyze the specific field of the received packets and provide the defend measures - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 108
Syntax ip dos-prevent type { land | scan-synfin | xma-scan | null-scan | port-less-1024 | blat | ping-flood | syn-flood | win-nuke | smurf | ping-of-death } no ip dos-prevent type { land | scan-synfin | xma-scan | null-scan | port-less-1024 | blat | ping-flood | syn-flood | win-nuke | smurf | ping- - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 109
System bugs, which will cause the host with a blue screen. smurf -- The attacker broadcasts large numbers of Internet Control Message Protocol (ICMP) packets with the intended victim's spoofed source IP to a computer network using an IP broadcast address. Most devices on a network will respond to - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 110
IP address of the SYN packet are set to be the IP address of the host, the host will be trapped in an endless circle of building the initial connection. scan-synfin --The attacker sends the packet with its SYN field and the FIN field set to 1. The SYN field is used to request initial connection - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 111
T1600G-52TS(config)#ip dos-prevent type land 13.4 show ip dos-prevent Description The show ip dos-prevent command is used to display the DoS information of the detected DoS attack, including enable/disable status, the DoS Defend Type, the count of the attack, etc. Syntax show ip dos-prevent Command - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 112
LAN. Authenticator: controls the physical access to the network based on the authentication status of the supplicant. It is usually an 802.1X-supported network device, such as this TP-Link switch. It acts as an intermediary (proxy) between the supplicant and the authentication server, requesting - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 113
14.2 dot1x handshake Description The dot1x handshake command is used enable the handshake feature. The handshake feature is used to detect the connection status between the TP-Link 802.1x supplicant and the switch. Please disable the handshake feature if you are using a non-TP-Link 802.1x-compliant - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 114
pap: EAP termination mode. IEEE 802.1X authentication system uses extensible authentication protocol (EAP) to exchange information between the switch and the client. The EAP packets are terminated at the switch and repackaged in the Password Authentication Protocol (PAP) packets, and then - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 115
Example Enable the enable the IEEE 802.1X accounting function globally: T1600G-52TS(config)#dot1x accounting 14.5 dot1x guest-vlan(global) Description The dot1x guest-vlan command is used to enable the Guest VLAN function globally. To disable the Guest VLAN function, please use no dot1x guest-vlan - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 116
Syntax dot1x quiet-period [ time ] no dot1x quiet-period Parameter time -- The length of the quiet-period time. If one user's authentication fails, its subsequent IEEE 802.1x authentication requests will not be processed during the quiet-period time. It ranges from 1 to 999 seconds and the default - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 117
Command Mode Global Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Configure the supplicant timeout value as 5 seconds: T1600G-52TS(config)#dot1x timeout supplicant-timeout 5 14.8 dot1x max-reauth-req Description The - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 118
14.9 dot1x Description The dot1x command is used to enable the IEEE 802.1X function for a specified port. To disable the IEEE 802.1X function for a specified port, please use no dot1x command. Syntax dot1x no dot1x Command Mode Interface Configuration Mode (interface gigabitEthernet / interface - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 119
Command Mode Interface Configuration Mode (interface gigabitEthernet / interface range gigabitEthernet) Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Enable the Guest VLAN function for Gigabit Ethernet port 1/0/2: T1600G-52TS(config)# - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 120
Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Configure the Control Mode for Gigabit Ethernet port 20 as "authorized-force": T1600G-52TS(config)#interface gigabitEthernet 1/0/20 T1600G-52TS(config-if)#dot1x port-control authorized-force - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 121
Example Configure the Control Type for Gigabit Ethernet port 20 as "port-based": T1600G-52TS(config)#interface gigabitEthernet 1/0/20 T1600G-52TS(config-if)#dot1x port-method port-based 14.13 show dot1x global Description The show dot1x global command is used to display the global configuration of - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 122
Privilege Requirement None. Example Display the configuration information of 801.X for Gigabit Ethernet port 20: T1600G-52TS(config)#show dot1x interface gigabitEthernet 1/0/20 Display the configuration information of 801.X for all Ethernet ports: T1600G-52TS(config)#show dot1x interface 105 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 123
Chapter 15 System Log Commands The log information will record the settings and operation of the switch respectively for you to monitor operation status and diagnose malfunction. 15.1 logging buffer Description The logging buffer command is used to store the system log messages to an internal buffer - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 124
Syntax logging buffer level level no logging buffer level Parameter level -- Severity level of the log information output to each channel. There are 8 severity levels marked with values 0-7. The smaller value has the higher priority. Only the log with the same or smaller severity level value will be - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 125
Privilege Requirement Only Admin and Operator level users have access to these commands. Example Enable the log file flash function: T1600G-52TS(config)#logging file flash 15.4 logging file flash frequency Description The logging file flash frequency command is used to specify the frequency to - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 126
15.5 logging file flash level Description The logging file flash level command is used to specify the system log message severity level. Messages will a severity level equal to or higher than this value will be stored to the flash. To restore to the default level, please use no logging file flash - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 127
Syntax logging host index idx host-ip level no logging host index idx Parameter idx -- The index of the log host. The switch supports 4 log hosts at most. host-ip -- The IP for the log host. level -- The severity level of the log information sent to each log host. - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 128
Example Disable logging to the terminal devices: T1600G-52TS(config)# no logging monitor 15.8 logging monitor level Description The logging monitor level command is used to limit messages logged to the terminal devices. System logs no higher than the set threshold level will be displayed on the - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 129
15.9 clear logging Description The clear logging command is used to clear the information in the log buffer and log file. Syntax clear logging [ buffer | flash ] Parameter buffer | flash -The output channels: buffer and flash. Clear the information of the two channels, by default. Command Mode - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 130
Example Display the configuration of the Local Log: T1600G-52TS(config)# show logging local-config 15.11 show logging loghost Description The show logging loghost command is used to display the configuration of the log host. Syntax show logging loghost [ index ] Parameter index --The index of the - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 131
Parameter level -- Severity level. There are 8 severity levels marked with values 0-7. The information of levels with priority not lower than the select level will display. Display all the log information in the log buffer by default. Command Mode Privileged EXEC Mode and Any Configuration Mode - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 132
Chapter 16 SSH Commands SSH (Security Shell) can provide the unsecured remote management with security and powerful authentication to ensure the security of the management information. 16.1 ip ssh server Description The ip ssh server command is used to enable SSH function. To disable the SSH - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 133
Parameter v1 | v2 -- The SSH protocol version to be enabled. They represent SSH v1 and SSH v2 respectively. Command Mode Global Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Enable SSH v2: T1600G-52TS(config)# ip ssh - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 134
16.4 ip ssh timeout Description The ip ssh timeout command is used to specify the idle-timeout time of SSH. To restore to the factory defaults, please use ip ssh timeout command. Syntax ip ssh timeout value no ip ssh timeout Parameter value -- The Idle-timeout time. During this period, the system - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 135
must be in the range of 512 to 3072 bits. ip-addr -- The IP address of the TFTP server. Both IPv4 and IPv6 addresses are supported, for example 192.168.0.1 or fe80::1234. Command Mode Global Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 136
Example Download an SSH-1 type key file named ssh-key from TFTP server with the IP address 192.168.0.148: T1600G-52TS(config)# ip ssh download v1 ssh-key ip-address 192.168.0.148 Download an SSH-1 type key file named ssh-key from TFTP server with the IP address fe80::1234: T1600G-52TS(config)# ip - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 137
Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the global configuration of SSH: T1600G-52TS(config)# show ip ssh 120 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 138
MAC address entry. To remove the corresponding entry, please use no mac address-table static command. The static address can be added or removed manually, independent of the aging time. In the stable networks, the static MAC address entries can facilitate the switch to reduce broadcast packets and - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 139
filtering command. The filtering address function is to forbid the undesired package to be forwarded. The filtering address can be added or removed manually, independent of the aging time. Syntax mac address-table filtering mac-addr vid vid no mac address-table filtering {[ mac-addr ] [ vid vid - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 140
vid -- The corresponding VLAN ID of the MAC address. It ranges from 1 to 4094. Command Mode Global Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Add a filtering address entry of which VLAN ID is 1 and MAC address is 00 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 141
out of the influence of the aging time and can only be deleted manually. The learned entries will be cleared after the switch is rebooted. When be out of the influence of the aging time and can only be deleted manually too. However, the learned entries will be saved even the switch is rebooted. - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 142
• forward: The packets will be forward but not be learned when learned MAC number exceeds the the maximum MAC address number on this port. • drop: The packets will be dropped when learned MAC number exceeds the the maximum MAC address number on this port. • disable: The MAC address threshold on this - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 143
exceed-max-learned enable | disable -- Enable/Disable the MAC address threshold notification on this port. With this feature enabled, a SNMP notification is generated and sent to the network management system (NMS) when the MAC address threshold limit on this port is reached or exceeded. To - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 144
number -- Configure the threshold of the MAC address table in this VLAN. It ranges from 0 to 16383. forward | drop | disable -- Choose the mode when learned MAC number exceeds the threshold of the MAC address table in this VLAN. • Drop: The packets will be dropped when learned MAC number exceeds the - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 145
Example Display the information of all address entries: T1600G-52TS(config)# show mac address-table 17.9 clear mac address-table Description The show mac address-table command is used to clear the specified address entries. Syntax clear mac address-table { dynamic | static | filtering } Parameter - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 146
Example Display the Aging Time of the MAC address: T1600G-52TS(config)# show mac address-table aging-time 17.11 show mac address-table max-mac-count Description The show mac address-table max-mac-count interface gigabitEthernet command is used to display the security configuration of all ports or - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 147
Syntax show mac address-table interface { gigabitEthernet port | port-channel port-channel-id } Parameter port -- The Ethernet port number. port-channel-id -- The ID of the port channel. Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 148
17.14 show mac address-table address Description The show mac address-table address command is used to display the information of the specified MAC address. Syntax show mac address-table address mac-addr [ interface { gigabitEthernet port | port-channel port-channel-id } | vid vlan-id ] Parameter - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 149
Privilege Requirement None. Example Display the MAC address configuration of vlan 1: T1600G-52TS(config)# show mac address-table vlan 1 17.16 show mac address-table notification Description The show mac address-table notification command is used to display the MAC notificaiton configuration globally - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 150
Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the MAC address security configuration of VLAN 1: T1600G-52TS(config)# show mac address-table security vid 1 133 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 151
switch, upgrade the switch system and other operations. 18.1 system-time manual Description The system-time manual command is used to configure the system time manually. Syntax system-time manual time Parameter time -- Set the date and time manually, MM/DD/YYYY-HH:MM:SS. The valid value of the year - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 152
The detailed information that each time-zone means are displayed as follow: UTC-12:00 -- TimeZone for International Date Line West. UTC-11:00 -- TimeZone for Coordinated Universal Time-11. UTC-10:00 -- TimeZone for Hawaii. UTC-09:00 -- TimeZone for Alaska. UTC-08:00 -- TimeZone for Pacific Time - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 153
backup-ntp-server -- The IP address for the Secondary NTP Server. fetching-rate -- Specify the rate fetching time from NTP server. Command Mode Global Configuration Mode Privilege Requirement Only Admin and Operator level users have access to these commands. Example Configure the system time mode as - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 154
Privilege Requirement Only Admin and Operator level users have access to these commands. Example Configure the daylight saving time as USA standard: T1600G-52TS(config)#system-time dst predefined USA 18.4 system-time dst date Description The system-time dst date command is used to configure the one- - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 155
Command Mode Global Configuration Mode Privilege Requirement Only Admin and Operator level users have access to these commands. Example Configure the daylight saving time from zero clock, Apr 1st to zero clock Oct 1st and the offset is 30 minutes in 2015: T1600G-52TS(config)# system-time dst date - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 156
etime -- The end moment of the daylight saving time, HH:MM. offset -- The number of minutes to add during the daylight saving time. It is 60 minutes by default. Command Mode Global Configuration Mode Privilege Requirement Only Admin and Operator level users have access to these commands. Example - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 157
18.7 location Description The location command is used to configure the system location. To clear the system location information, please use no location command. Syntax location [ location ] no location Parameter location -- Device Location. It consists of 32 characters at most. It is "SHENZHEN" by - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 158
ip address Description This ip address command is used to configure the IP address and IP subnet mask for the specified interface manually. The interface type includes: routed port, port-channel interface, loopback interface and VLAN interface. Syntax ip address { ip-addr } { mask } [ secondary ] no - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 159
18.10 ip address-alloc Description The IP address-alloc command is used to enable the DHCP Client function or the BOOTP Protocol. When this function is enabled, the specified interface will obtain IP from DHCP Server or BOOTP server. To disable the IP obtaining function on the specified interface, - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 160
18.11 reset Description The reset command is used to reset the switch's software. After resetting, all configuration of the switch will restore to the factory defaults and your current settings will be lost. Syntax reset Command Mode Privileged EXEC Mode Privilege Requirement Only Admin level users - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 161
18.13 reboot-schedule Description This reboot-schedule command is used to configure the switch to reboot at a certain time point. To delete the reboot schedule settings, please use the reboot-schedule cancel command. Syntax reboot-schedule at time [ date ] [ save_before_reboot ] reboot-schedule in - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 162
startup-config tftp ip-address ip-addr filename name Parameter ip-addr -- IP Address of the TFTP server. Both IPv4 and IPv6 addresses are supported, for example 192.168.0.1 or fe80::1234. name -- Specify the name for the configuration file which would be backup. Command Mode Privileged EXEC Mode - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 163
tftp startup-config ip-address ip-addr filename name Parameter ip-addr -- IP Address of the TFTP server. Both IPv4 and IPv6 addresses are supported, for example 192.168.0.1 or fe80::1234. name -- Specify the name for the configuration file which would be downloaded. Command Mode Privileged EXEC Mode - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 164
18.17 boot application Description The boot application command is used to configure the image file as startup image or backup image. Syntax boot application filename { image1 | image 2 } { startup | backup } no boot application Parameter image1 | image2 -- Specify the image file to be configured. - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 165
Syntax firmware upgrade ip-address ip-addr filename name Parameter ip-addr -- IP Address of the TFTP server. Both IPv4 and IPv6 addresses are supported, for example 192.168.0.1 or fe80::1234. name -- Specify the name for the firmware file. Command Mode Privileged EXEC Mode Privilege Requirement Only - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 166
. ip_addr -- The IP address of the destination node for ping test. If the parameter ip/ipv6 is not selected, both IPv4 and IPv6 addresses are supported, for example 192.168.0.100 or fe80::1234. -n count -- The amount of times to send test data during Ping testing. It ranges from 1 to 10 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 167
should be IPv6. ip_addr -- The IP address of the destination device. If the parameter ip/ipv6 is not selected, both IPv4 and IPv6 addresses are supported, for example 192.168.0.100 or fe80::1234. maxHops -- The maximum number of the route hops the test data can pass though. It ranges from - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 168
Test the connectivity between the switch and the network device with the IP fe80::1234. If the destination device has not been found after 20 maxHops, the connection between the switch and the destination device is failed to establish: T1600G-52TS# tracert fe80::1234 20 18.22 show system-info - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 169
Example Display the system image files' information: T1600G-52TS# show image-info 18.24 show boot Description The show boot command is used to display the boot configuration of the system. Syntax show boot Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement Only Admin - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 170
Example Display the system current operating configuration: T1600G-52TS# show running-config 18.26 show startup-config Description The show startup-config command is used to display the current configuration saved in the switch. These configuration settings will not be lost the next time you reboot - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 171
T1600G-52TS# show system-time 18.28 show system-time dst Description The show system-time dst command is used to display the DST information of the switch. Syntax show system-time dst Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the DST - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 172
of the connected Ethernet Port., which facilitates you to check the connection status of the cable connected to the switch, locate and diagnose the trouble spot of the network. Syntax show cable-diagnostics interface gigabitEthernet port Parameter port -- The number of the port which is selected for - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 173
Example Display the CPU utilization information of the switch: T1600G-52TS# show cpu-utilization 18.32 show memory-utilization Description The show memory-utilization command is used to display the current system's memory utilization in the last 5 seconds/1minute/5minutes. Syntax show memory- - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 174
enable the automatic configuration of the ipv6 link-local address. The switch has only one ipv6 link-local address, which can be configured automatically or manually. The general ipv6 link-local address 157 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 175
links. The autuconfigured ipv6 link-local address is in EUI-64 format. To verify the uniqueness of the link-local address, the manually configured ipv6 link-local address will be deleted when the autoconfigured ipv6 link-local address takes effect. Syntax ipv6 address autoconfig Configuration Mode - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 176
Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Configure the link-local address as fe80::1234 on the VLAN interface 1: T1600G-52TS(config)# interface vlan 1 T1600G-52TS(config-if)# ipv6 address fe80::1234 link-local 19.4 ipv6 address dhcp - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 177
1: T1600G-52TS(config)# interface vlan 1 T1600G-52TS(config-if)# ipv6 address ra 19.6 ipv6 address eui-64 Description This command is used to manually configure a global IPv6 address with an extended unique identifier (EUI) in the low-order 64 bits on the interface. Specify only the network prefix - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 178
-52TS(config)# interface vlan 1 T1600G-52TS(config-if)# ipv6 address 3ffe::/64 eui-64 19.7 ipv6 address Description This command is used to manually configure a global IPv6 address on the interface. To remove a global IPv6 address from the interface, please use no ipv6 address command. Syntax ipv6 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 179
19.8 show ipv6 interface Description This command is used to display the configured ipv6 information of the management interface, including ipv6 function status, link-local address and global address, ipv6 multicast groups etc. Syntax show ipv6 interface Command Mode Privileged EXEC Mode and Any - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 180
Chapter 20 Ethernet Configuration Commands Ethernet Configuration Commands can be used to configure the Bandwidth Control, Negotiation Mode and Storm Control for Ethernet ports. 20.1 interface gigabitEthernet Description The interface gigabitEthernet command is used to enter the Interface - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 181
Syntax interface range gigabitEthernet port-list Parameter port-list -- The list of Ethernet ports. Command Mode Global Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. User Guidelines Command in the Interface Range - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 182
Command Mode Interface Configuration Mode (interface gigabitEthernet / interface range gigabitEthernet / interface port-channel / interface range port-channel) Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Add a description Port_5 to - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 183
20.5 flow-control Description The flow-control command is used to enable the flow-control function for a port. To disable the flow-control function for this corresponding port, please use no flow-control command. With the flow-control function enabled, the Ingress Rate and Egress Rate can be - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 184
these commands. Example Allow jumbo frame on port 1/0/3: T1600G-52TS(config)# interface gigabitEthernet 1/0/3 T1600G-52TS(config-if)# jumbo 20.8 jumbo-size Note: Only T1600G-18TS supports this command. 167 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 185
Description The jumbo-size command is used to specify the size of jumbo frames. Syntax jumbo-size size Parameter size -- The value of jumbo frames. It ranges from 1518 to 9216 bytes, and the default is 1518 bytes. Command Mode Global Configuration Mode Privilege Requirement Only Admin, Operator and - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 186
T1600G-52TS(config)# interface gigabitEthernet 1/0/3 T1600G-52TS(config-if)# speed 100 20.10 storm-control pps Note: T1600G-18TS doesn't support this command. Description The storm-control pps command is used to configure the storm control mode as pps(packets per second) on an interface. To - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 187
Syntax storm-control { broadcast | multicast | unicast } { kbps | ratio } { rate } no storm-control { broadcast | multicast | unicast } Parameter broadcast | multicast | unicast -- Enable broadcast/multicast/unicast storm control on the interface. kbps | ratio -- Specify the storm control type. kbps - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 188
Parameter broadcast | multicast | unicast -- Enable broadcast/multicast/unicast storm control on the interface. kbps | ratio | pps -- Specify the storm control type. kbps: Specify the threshold in kbits per second. ratio: Specify the threshold as a percentage of the bandwidth. pps: Specify the - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 189
Parameter ingress-rate -- Specify the bandwidth for receiving packets. Range: 1-1000000Kbps for the gigaport. egress-rate -- Specify the bandwidth for sending packets. Range: 1-1000000Kbps for the gigaport. Command Mode Interface Configuration Mode (interface gigabitEthernet / interface range - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 190
Example Clear the statistic information of all ports and port channels: T1600G-52TS(config)# clear counters 20.15 show interface status Description The show interface status command is used to display the connection status of the Ethernet port/port channel. Syntax show interface status [ - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 191
port-channel-id -- The ID of the port channel. Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the statistics information of all Ethernet ports and port channels: T1600G-52TS(config)# show interface counters Display the statistics information - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 192
20.18 show storm-control Description The show storm-control command is used to display the storm-control information of Ethernet ports. Syntax show storm-control interface [ gigabitEthernet port-list ] [ port-channel port-channel-id-list ] Parameter port-list --The list of Ethernet ports. port- - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 193
Privilege Requirement None. Example Display the bandwidth-limit information of port 1/0/4: T1600G-52TS(config)# show bandwidth interface gigabitEthernet 1/0/4 176 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 194
of a better quality. 21.1 qos (For T1600G-18TS only) Description The qos command is used to configure CoS (Class of Service) based on port. To return to the default configuration, please use no qos command. Syntax qos tc-id no qos Parameter tc-id -- The priority - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 195
Description The qos command is used to configure CoS (Class of Service) based on port. To return to the default configuration, please T1600G-52TS(config-if)# qos 3 21.3 qos cos Note: Only T1600G-18TS supports this command. Description The qos cos command is used to enable the mapping relation - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 196
Syntax qos cos no qos cos Command Mode Global Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. User Guidelines IEEE 802.1P gives the Pri field in IEEE 802.1Q tag a recommended definition. When the mapping relation between IEEE - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 197
datagram will be classified into the egress queue based on the mapping relation between DSCP priority and CoS value. Example Enable the mapping relation between DSCP Priority and CoS value: T1600G-52TS(config)# qos dscp 21.5 qos queue cos-map Description The qos queue cos-map command is used to - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 198
Example Map CoS 5 to TC 2: T1600G-52TS(config)# qos queue cos-map 5 2 21.6 qos queue dscp-map (For T1600G-18TS only) Description The qos queue dscp-map command is used to configure the mapping relation between DSCP Priority and the CoS value. To return to the default configuration, please use no qos - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 199
Example Map DSCP values 10-12 to TC 2: T1600G-18TS(config)# qos queue dscp-map 10-12 2 21.7 qos queue dscp-map (For other switches) Description The qos queue dscp-map command is used to configure the mapping relation between DSCP Priority and the CoS value. To return to the default configuration, - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 200
Example Map DSCP values 10-12 to CoS 2: T1600G-52TS(config)# qos queue dscp-map 10-12 2 21.8 qos queue mode Description The qos queue mode command is used to configure the Schedule Mode. To return to the default Equal-Mode, please use no qos queue mode command. When the network is congested, the - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 201
equ -- Equal-Mode. In this mode, all the queues occupy the bandwidth equally. The weight value ratio of all the queues is 1:1:1:1:1:1:1:1 Command Mode Global Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Specify the - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 202
weight values of TC0, TC1, TC2, TC3, TC4, TC5 and TC6 are 1, 2, 4, 8, 16, 32 and 64 respectively, while the value of TC7 is 0 and non-configurable. Command Mode Global Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 203
Display the configuration of QoS for ports 1/0/1-4: T1600G-52TS# show qos interface gigabitEthernet 1/0/1-4 21.11 show qos cos-map Description The show qos cos-map command is used to display the configuration of IEEE 802.1P Priority and the mapping relation between cos-id and tc-id. Syntax show qos - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 204
21.13 show qos queue mode Description The show qos queue mode command is used to display the schedule rule of the egress queues. Syntax show qos queue mode Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the schedule rule of the egress queues: - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 205
, the monitoring port is connected to data diagnose device, which is used to analyze the monitored packets for monitoring and troubleshooting the network. 22.1 monitor session destination interface Description The monitor session destination interface command is used to configure the monitoring - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 206
T1600G-52TS(config)# no monitor session 1 destination interface gigabitEthernet 1/0/2 Delete the monitor session 1: T1600G-52TS(config)# no monitor session 1 22.2 monitor session source interface Description The monitor session source interface command is used to configure the monitored port. To - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 207
3. Whether the monitoring port and monitored ports are in the same VLAN or not is not demanded strictly. 4. The monitoring port and monitored ports cannot be link-aggregation member. Example Create monitor session 1, then configure port 4, 5, 7 as monitored port and enable ingress monitoring: T1600G - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 208
Chapter 23 Port Isolation Commands Port Isolation provides a method of restricting traffic flow to improve the network security by forbidding the port to forward packets to the ports that are not on its forwarding port list. 23.1 port isolation Description The port isolation command is used to - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 209
23.2 show port isolation interface Description The show port isolation interface command is used to display the forward port list of a port/port channel. Syntax show port isolation interface [ gigabitEthernet port | port-channel port-channel-id ] Parameter port -- The number of Ethernet port you - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 210
Chapter 24 Loopback Detection Commands With loopback detection feature enabled, the switch can detect loops using loopback detection packets. When a loop is detected, the switch will display an alert or further block the corresponding port according to the configuration. 24.1 loopback-detection ( - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 211
Command Mode Global Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Specify the interval-time as 50 seconds: T1600G-52TS(config)# loopback-detection interval 50 24.3 loopback-detection recovery-time Description The - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 212
the ports by which the switch copes with the detected loops. Syntax loopback-detection config process-mode { alert | port-based } recovery-mode { auto | manual } Parameter alert -- When a loop is detected, the switch will send a trap message and generate an entry on the log file. It is the default - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 213
User level users have access to these commands. Example Configure the loopback detection process-mode as port-based and recovery-mode as manual for port 2: T1600G-52TS(config)# interface gigabitEthernet 1/0/2 T1600G-52TS(config-if)# loopback-detection config process-mode port-based recovery-mode - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 214
24.7 show loopback-detection global Description The show loopback-detection global command is used to display the global configuration of loopback detection function such as loopback detection global status, loopback detection interval and loopback detection recovery time. Syntax show loopback- - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 215
Privilege Requirement None. Example Display the configuration of loopback detection function and the status of all ports: T1600G-52TS# show loopback-detection interface Display the configuration of loopback detection function and the status of port 5: T1600G-52TS# show loopback-detection interface - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 216
Chapter 25 ACL Commands ACL (Access Control List) is used to filter data packets by configuring a series of match conditions, operations and time ranges. It provides a flexible and secured access control policy and facilitates you to control the network security. 25.1 access-list create Description - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 217
Syntax mac access-list access-list-num no mac access-list access-list-num Parameter access-list-num -- ACL ID, ranging from 0 to 499. Command Mode Global Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Create a MAC ACL - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 218
destination-ip-mask -- The destination IP address mask. It is required if you typed the destination IP address. Command Mode Global Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Create a Standard-IP ACL whose ID is 520 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 219
destination-ip -- The destination IP address contained in the rule. destination-ip-mask -- The destination IP address mask. It is required if you typed the destination IP address. s-port -- The source port number. d-port -- The destination port number. protocol -- Configure the value of the matching - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 220
-ip-mask -- The destination IP address mask. It is required if you typed the destination IP address. (Note: T1600G-18TS doesn't support s-port and d-port setting.) s-port -- The source port number. d-port -- The destination port number. Command Mode Global Configuration Mode Privilege Requirement - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 221
25.6 rule Description The rule command is used to configure MAC ACL rule. To delete the corresponding rule, please use no rule command. Syntax rule rule-id { deny | permit } [[ smac source-mac ] smask source-mac-mask ] [[ dmac destination-mac ] dmask destination-mac-mask ] no rule rule-id Parameter - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 222
25.7 access-list policy name Description The access-list policy name command is used to add Policy. To delete the corresponding Policy, please use no access-list policy name command. A Policy is used to control the data packets those match the corresponding ACL rules. Syntax access-list policy name - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 223
Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Add ACL whose ID is 120 for policy1: T1600G-52TS(config)# access-list policy action policy1 120 25.9 access-list bind acl(interface) Description The access-list bind acl command is used to - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 224
Syntax access-list bind acl acl-id no access-list bind acl acl-id Parameter acl-id -- The ID of the ACL desired to bind. Command Mode Interface VLAN Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Bind ACL 100 to VLAN 2: T1600G-52TS( - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 225
T1600G-52TS(config-if)# access-list bind policy1 25.12 access-list bind(vlan) Description The access-list bind command is used to bind a policy to a VLAN. To cancel the bind relation, please use no access-list bind command. Syntax access-list bind policy-name no access-list bind policy-name - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 226
Example Display the configuration of the MAC ACL whose ID is 20: T1600G-52TS(config)# show access-list 20 25.14 show access-list policy Description The show access-list policy command is used to display the information of a specified policy. Syntax show access-list policy name Parameter name -- The - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 227
Chapter 26 MSTP Commands MSTP (Multiple Spanning Tree Protocol), compatible with both STP and RSTP and subject to IEEE 802.1s, can disbranch a ring network. STP is to block redundant links and backup links as well as optimize paths. 26.1 debug spanning-tree Description The debug spanning-tree - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 228
Privilege Requirement Only Admin level users have access to these commands. Example Display all the spanning-tree debug messages: T1600G-52TS# debug spanning-tree all 26.2 spanning-tree (global) Description The spanning-tree command is used to enable STP function globally. To disable the STP - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 229
Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Enable the STP function for port 1/0/2: T1600G-52TS(config)# interface gigabitEthernet 1/0/2 T1600G-52TS(config-if)# spanning-tree 26.4 spanning-tree common-config Description The spanning- - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 230
default, it is automatic. It ranges from o to 2000000. By default, it is 0 which is mean auto. portfast -- Enable/ Disable Edge Port. By default, it is disabled. The edge port can transit its state from blocking to forwarding rapidly without waiting for forward delay. point-to-point -- The P2P link - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 231
Command Mode Global Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Configure the spanning-tree mode as mstp: T1600G-52TS(config)# spanning-tree mode mstp 26.6 spanning-tree mst configuration Description The spanning- - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 232
please use no instance command. When an instance is disabled, the related mapping VLANs will be removed. Syntax instance instance-id vlan vlan-id no instance instance-id [ vlan vlan-id ] Parameters instance-id -- Instance ID, ranging from 1 to 8. vlan-id -- The VLAN ID selected to mapping with the - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 233
Parameters name -- The region name, used to identify MST region. It ranges from 1 to 32 characters. Command Mode MST Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Configure the region name of MST as "region1": T1600G- - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 234
26.10 spanning-tree mst instance Description The spanning-tree mst instance command is used to configure the priority of MST instance. To return to the default value of MST instance priority, please use no spanning-tree mst instance command. Syntax spanning-tree mst instance instance-id priority pri - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 235
no spanning-tree mst instance instance-id Parameter instance-id -- Instance ID, ranging from 1 to 8. pri -- Port Priority, which must be multiple of 16 ranging from 0 to 240. By default, it is 128. Port Priority is an important criterion on determining if the port will be chosen as the root port by - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 236
Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Configure the bridge priority as 4096: T1600G-52TS(config)# spanning-tree priority 4096 26.13 spanning-tree timer Description The spanning-tree timer command is used to configure forward-time - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 237
T1600G-52TS(config)# spanning-tree timer forward-time 16 hello-time 3 max-age 22 26.14 spanning-tree hold-count Description The spanning-tree hold-count command is used to configure the maximum number of BPDU packets transmitted per Hello Time interval. To return to the default configurations, - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 238
Parameter value -- The maximum number of hops that occur in a specific region before the BPDU is discarded, ranging from 1 to 40 in hop. By default, it is 20. Command Mode Global Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 239
26.17 spanning-tree bpduguard Description The spanning-tree bpduguard command is used to enable the BPDU protect function for a port. With the BPDU protect function enabled, the port will set itself automatically as ERROR-PORT when it receives BPDU packets, and the port will disable the forwarding - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 240
Command Mode Interface Configuration Mode (interface gigabitEthernet / interface range gigabitEthernet / interface port-channel / interface range port-channel) Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Enable the Loop Protect - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 241
26.20 spanning-tree guard tc Description The spanning-tree guard tc command is used to enable the TC Protect of Spanning Tree function for a port. To disable the TC Protect of Spanning Tree function, please use no spanning-tree guard tc command. A switch removes MAC address entries upon receiving TC - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 242
Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Enable mcheck for port 2: T1600G-52TS(config)# interface gigabitEthernet 1/0/2 T1600G-52TS(config-if)# spanning-tree mcheck 26.22 show spanning-tree active Description The show spanning-tree - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 243
Privilege Requirement None. Example Display the bridge parameters: T1600G-52TS(config)# show spanning-tree bridge 26.24 show spanning-tree interface Description The show spanning-tree interface command is used to display the spanning-tree information of all ports or a specified port. Syntax show - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 244
26.25 show spanning-tree interface-security Description The show spanning-tree interface-security command is used to display the protect information of all ports or a specified port. Syntax show spanning-tree interface-security [ gigabitEthernet port | port-channel port-channel-id ] [ bpdufilter | - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 245
Parameter instance-id -- Instance ID desired to show, ranging from 1 to 8. port -- The Ethernet port number. port-channel-id -- The ID of the port channel. Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the region information and mapping - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 246
Chapter 27 IGMP Snooping Commands IGMP Snooping (Internet Group Management Protocol Snooping) is a multicast control mechanism running on Layer 2 switch. It can effectively prevent multicast groups being broadcasted in the network. 27.1 ip igmp snooping (global) Description The ip igmp snooping - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 247
Command Mode Interface Configuration Mode (interface gigabitEthernet / interface range gigabitEthernet / interface port-channel / interface range port-channel) Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Enable IGMP Snooping function - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 248
27.4 ip igmp snooping mtime Description The ip igmp snooping mtime command is used to specify member port aging time globally. The default aging time is 260 seconds. To restore the default timer, please use no ip igmp snooping mtime command. Syntax ip igmp snooping mtime mtime no ip igmp snooping - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 249
Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Enable the IGMP report suppression function: T1600G-52TS(config)# ip igmp snooping report-suppression 27.6 ip igmp snooping immediate-leave Description The ip igmp snooping immediate-leave - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 250
Syntax ip igmp snooping drop-unknown no ip igmp snooping drop-unknown Command Mode Global Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Specify the operation to process unknown multicast as discard: T1600G-52TS(config - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 251
27.9 ip igmp snooping last-listener query-count Description The ip igmp snooping last-listener query-count command is used to specify the numbers of Specific Query Message to be sent. The default value is 2. To restore the default number, please use no ip igmp snooping last-listener query-count - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 252
no ip igmp snooping vlan-config vlan-id-list [ rtime router-time | mtime member-time | rport interface { gigabitEthernet port-list | port-channel port-channel-id } ] no ip igmp snooping vlan-config vlan-id-list static ip interface { gigabitEthernet port-list | port-channel port-channel-id } - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 253
T1600G-52TS(config)# ip igmp snooping vlan-config 2 static 225.0.0.1 interface gigabitEthernet 1/0/1-3 27.11 ip igmp snooping vlan-config (router-port-forbidden) Description This command is used to forbid the specified ports as being router ports in the specified VLAN(s). To delete the forbidden - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 254
27.12 ip igmp snooping multi-vlan-config Description The ip igmp snooping multi-vlan-config command is used to create Multicast VLAN. To delete the corresponding Multicast VLAN, please use no ip igmp snooping multi-vlan-config command. To restore the default values, please use no ip igmp snooping - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 255
T1600G-52TS(config)# ip igmp snooping multi-vlan-config 3 rtime 100 T1600G-52TS(config)# ip igmp snooping multi-vlan-config 3 mtime 100 T1600G-52TS(config)# ip igmp snooping multi-vlan-config 3 rport interface gigabitEthernet 1/0/3 27.13 ip igmp snooping multi-vlan-config (router-port-forbidden) - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 256
27.14 ip igmp snooping multi-vlan-config (source-ip-replace) Description This command is used to replace the multicast source IP address of the IGMP packets in the specified multicast VLAN. To delete the forbidden router ports, please use no ip igmp snooping multi-vlan-config replace-sourceip - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 257
no ip igmp snooping querier vlan vlan-id Parameter vlan-id - VLAN ID, ranging from 1 to 4094. Command Mode Global Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Enable the IGMP Snooping Querier function of VLAN 1: - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 258
Command Mode Global Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example For VLAN 2, specify its query-interval as 200 seconds, and the response-time as 20 seconds: T1600G-52TS(config)#ip igmp snooping querier vlan 2 query- - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 259
replace -- When the number of the dynamic multicast groups that a port joins has exceeded the max-group, the newly joined multicast group will replace an existing multicast group with the lowest multicast group address. Command Mode Interface Configuration Mode (interface gigabitEthernet / interface - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 260
User Guidelines The IGMP Authentication feature will take effect only when AAA function is enabled and the RADIUS server is configured. For how to enable AAA function and configure RADIUS server, please refer to aaa enable and radius-server host. Example Enable IGMP authentication on port 1/0/3: - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 261
Syntax ip igmp profile id no ip igmp profile id Parameter id -- Specify the id of the configuration profile, ranging from 1 to 999. Command Mode Global Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Create the profile - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 262
27.22 permit Description The permit command is used to configure the filtering mode of profile as permit. Syntax permit Command Mode Profile Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Configure the filtering mode of - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 263
Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Configure one of the filter multicast address entry as range 225.1.1.1 to 226.3.2.1 in profile 1: T1600G-52TS(config)# ip igmp profile 1 T1600G-52TS(config-igmp-profile)#range 225.1.1.1 226 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 264
Syntax clear ip igmp snooping statistics Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Clear the statistics of the IGMP packets: T1600G-52TS(config)# clear ip igmp snooping - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 265
show ip igmp snooping interface [ port-channel [ port-channel-id ] ] { basic-config | max-groups } Parameter port -- The Ethernet port number. port-list -- The list of Ethernet ports. basic-config | max-groups | packet-stat -- The related configuration information selected to display. Command Mode - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 266
Privilege Requirement None. Example Display the IGMP snooping configuration information of VLAN 2: T1600G-52TS# show ip igmp snooping vlan 2 27.29 show ip igmp snooping multi-vlan Description The show ip igmp snooping multi-vlan command is used to display the Multicast VLAN configuration. Syntax - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 267
count-- The numbers of all multicast groups. dynamic-- Display dynamic multicast groups. dynamic count-- The numbers of all dynamic multicast groups. static-- Display static multicast groups. static count-- The numbers of all static multicast groups. Command Mode Privileged EXEC Mode and Any - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 268
Syntax show ip igmp snooping querier [ vlan vlan-id ] Parameter vlan-id --The VLAN ID selected to display, ranging from 1 to 4094. Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display all Querier information: T1600G-52TS(config)# show ip igmp - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 269
Chapter 28 MLD Snooping Commands MLD Snooping (Multicast Listener Discovery Snooping) is a multicast control mechanism running on Layer 2 switch. It can effectively prevent multicast groups being broadcasted in the IPv6 network. 28.1 ipv6 mld snooping (global) Description The ipv6 mld snooping - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 270
Privilege Requirement Only Admin and Operator level users have access to these commands. Example Enable MLD Snooping on port 1/0/3: T1600G-52TS(config)# interface gigabitEthernet 1/0/3 T1600G-52TS(config-if)# ipv6 mld snooping 28.3 ipv6 mld snooping rtime Description The ipv6 mld snooping rtime - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 271
Parameter mtime -- Specify the aging time in seconds, ranging from 60 to 600. The default aging time is 260 seconds. Command Mode Global Configuration Mode Privilege Requirement Only Admin and Operator level users have access to these commands. Example Specify MLD Snooping member port aging time as - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 272
28.6 ipv6 mld snooping immediate-leave Description The ipv6 mld snooping immediate-leave command is used to configure the Fast Leave function for port. To disable the Fast Leave function, please use no ipv6 mld snooping immediate-leave command. Syntax ipv6 mld snooping immediate-leave no ipv6 mld - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 273
28.8 ipv6 mld snooping last-listener query-inteval Description The ipv6 mld snooping last-listener query-inteval command is used to specify the interval to send Specific Query Message. The default value is 1 second. To restore the default interval, please use no ipv6 mld snooping last-listener query - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 274
Privilege Requirement Only Admin and Operator level users have access to these commands. Example Specify the number of Specific Query Message to 3: T1600G-52TS(config)# ipv6 mld snooping last-listener query-count 3 28.10 ipv6 mld snooping vlan-config Description The ipv6 mld snooping vlan-config - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 275
port-channel-id -- The ID of the port channels. ip -- The static multicast IP address. Command Mode Global Configuration Mode Privilege Requirement Only Admin and Operator level users have access to these commands. Example Enable the MLD Snooping function and modify Router Port Time as 300 seconds, - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 276
Parameter vlan-id-list -- The ID list of the VLAN desired to modify configuration, ranging from 1 to 4094, in the format of 1-3, 5. port-list -- Forbid the specified ports as being router ports. Packets sent from multicast routers to these ports will be discarded. port-channel-id -- Forbid the - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 277
router-time -- Router Port Time. Within this time, if the switch does not receive IGMP query message from the router port, it will consider this port is not a router port any more. Router Port Time ranges from 60 to 600 in seconds. By default, it is 0 and the global router-time will be used. member- - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 278
no ipv6 mld snooping multi-vlan-config router-port-forbidd [ interface { gigabitEthernet port-list | port-channel port-channel-id } ] Parameter vlan-id-- The ID of the multicast VLAN. port-list -- Forbid the specified ports as being router ports. Packets sent from multicast routers to these ports - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 279
Privilege Requirement Only Admin level users have access to these commands. Example Replace the source IP address of the MLD packets in multicast VLAN 1 as fe80::02ff:ffff:fe00:0001: T1600G-52TS(config)# ipv6 mld snooping multi-vlan-config 1 replace-sourceip fe80::02ff:ffff:fe00:0001 28.15 ipv6 mld - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 280
return to the default configuration, please use no ipv6 mld snooping querier vlan command. Syntax ipv6 mld snooping querier vlan vlan-id { query-interval interval | max-response-time response-time | general-query source-ip ip-addr } no ipv6 mld snooping querier vlan vlan-id { query-interval | max- - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 281
receives an MLD report message and the maximum number of entries is in the forwarding table. To remove the maximum group limitation and return to the default of no limitation on the specified port, please use the no ipv6 mld snooping max-groups command. To return to the default action of dropping - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 282
28.18 ipv6 mld profile Description The ipv6 mld profile command is used to create the configuration profile. To delete the corresponding profile, please use no ipv6 mld profile command. Syntax ipv6 mld profile id no ipv6 mld profile id Parameter id -- Specify the id of the configuration profile, - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 283
T1600G-52TS(config)# ipv6 mld profile 1 T1600G-52TS(config-igmp-profile)#deny 28.20 permit Description The permit command is used to configure the filtering mode of profile as permit. Syntax permit Command Mode Profile Configuration Mode Privilege Requirement Only Admin and Operator level users have - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 284
Command Mode Profile Configuration Mode Privilege Requirement Only Admin and Operator level users have access to these commands. Example Configure one of the filter multicast address entry as range ff80::1234 to ff80::1235 in profile 1: T1600G-52TS(config)# ipv6 mld profile 1 T1600G-52TS(config-igmp - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 285
Syntax clear ipv6 mld snooping statistics Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Clear the statistics of the MLD packets: T1600G-52TS(config)# clear ipv6 mld snooping - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 286
show ipv6 mld snooping interface [ port-channel [ port-channel-id ] ] { basic-config | max-groups } Parameter port -- The Ethernet port number. port-list -- The list of Ethernet ports. basic-config | max-groups | packet-stat -- The related configuration information selected to display. Command Mode - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 287
Privilege Requirement None. Example Display all of the VLAN information: T1600G-52TS(config)# show ipv6 mld snooping vlan 28.27 show ipv6 mld snooping multi-vlan Description The show ipv6 mld snooping multi-vlan command is used to display the Multicast VLAN configuration. Syntax show ipv6 mld - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 288
dynamic count-- The numbers of all dynamic multicast groups. static-- Display static multicast groups. static count-- The numbers of all static multicast groups. Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display all of the multicast groups: - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 289
Syntax show ipv6 mld profile [ id ] Parameter id -- Specify the ID of the profile, ranging from 1 to 999. Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the configuration information of all profiles: T1600G-52TS(config)# show ipv6 mld profile - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 290
Chapter 29 SNMP Commands SNMP (Simple Network Management Protocol) functions are used to manage the network devices for a smooth communication, which can facilitate the network administrators to monitor the network nodes and implement the proper operation. 29.1 snmp-server Description The snmp- - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 291
Parameter name -- The entry name of View, ranging from 1 to 16 characters. Each View includes several entries with the same name. mib-oid -- MIB Object ID. It is the Object Identifier (OID) for the entry of View, ranging from 1 to 61 characters. include | exclude -- View Type, with include and - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 292
Parameter name --The SNMP Group name, ranging from 1 to 16 characters. The Group Name, Security Model and Security Level compose the identifier of the SNMP Group. These three items of the Users in one group should be the same. smode -- Security Model, with v1, v2c and v3 options. They represent SNMP - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 293
29.4 snmp-server user Description The snmp-server user command is used to add User. To delete the corresponding User, please use no snmp-server user command. The User in an SNMP Group can manage the switch via the management station software. The User and its Group have the same security level and - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 294
emode -- The Privacy Mode of the SNMP v3 User, with none and DES options. None indicates no privacy method is used, and DES indicates DES encryption method is used. By default, the Privacy Mode is "none". encrypt-pwd -- Privacy Password, ranging from 1 to 16 characters. The question marks and spaces - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 295
retries ] [ timeout timeout ] no snmp-server host ip user-name Parameter ip -- The IP Address of the management Host. Both IPv4 and IPv6 addresses are supported, for example 192.168.0.100 or fe80::1234. udp-port -- UDP port, which is used to send notifications. The UDP port functions with the IP - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 296
type has a higher security than the trap type and resend and timeout need to be configured if you select this option. You can only select the trap type in Security Model v1. By default, the type of the notifications is "trap". retries -- The amount of times the switch retries an inform request, - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 297
29.7 snmp-server engineID Description The snmp-server engineID command is used to configure the local and remote engineID of the switch. To restore to the default setting, please use no snmp-server engineID command. Syntax snmp-server engineID { [ local local-engineID ] [ remote remote-engineID ] } - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 298
disable the sending of SNMP standard traps, please use no snmp-server traps snmp command. Syntax snmp-server traps snmp [ linkup | linkdown | warmstart | coldstart | auth-failure ] no snmp-server traps snmp [ linkup | linkdown | warmstart | coldstart | auth-failure ] Parameter linkup -- Enable - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 299
Command Mode Interface Configuration Mode (interface gigabitEthernet / interface range gigabitEthernet) Privilege Requirement Only Admin level users have access to these commands. Example Enable SNMP link status trap for port 3: T1600G-52TS(config)# interface gigabitEthernet 1/0/3 T1600G-52TS(config - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 300
lldp topologychange -- a notification generated by the local device to sense the change in the topology that indicates a new remote device attached to a local port, or a remote device disconnected or moved from one port to another. loopback-detection -- Enable loopback-detection trap. It is sent - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 301
Command Mode Global Configuration Mode Privilege Requirement Only Admin level users have access to these commands. Example Enable all SNMP extended VLAN-related traps for the switch: T1600G-52TS(config)# snmp-server traps vlan Enable VLAN-created trap only for the switch: T1600G-52TS(config)# snmp- - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 302
Command Mode Global Configuration Mode Privilege Requirement Only Admin level users have access to these commands. Example Configure the sample port as Gi1/0/2 and the sample interval as 100 seconds for the entry 1-3: T1600G-52TS(config)# rmon history 1-3 interface gigabitEthernet 1/0/2 interval 100 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 303
Command Mode Global Configuration Mode Privilege Requirement Only Admin level users have access to these commands. Example Configure the user name of entry 1, 2, 3 and 4 as user1, the description of the event as description1, the type of event as log and the owner of the event as owner1: T1600G-52TS - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 304
options, absolute and delta. Absolute indicates comparing the values directly with the thresholds at the end of the sampling interval. Delta indicates subtracting the last sampled value from the current value, and then comparing the difference in the values with the threshold. By default, the Sample - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 305
to configure the entries of SNMP-RMON statistics. To delete the corresponding entry, please use no rmon statistics command. The maximum supported entries are 1000. Syntax rmon statistics index interface gigabitEthernet port [ owner owner-name] [ status { underCreation | valid }] no rmon statistics - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 306
Syntax show snmp-server Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement Only Admin level users have access to these commands. Example Display SNMP configuration globally: T1600G-52TS# show snmp-server 29.17 show snmp-server view Description The show snmp-server - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 307
Privilege Requirement Only Admin level users have access to these commands. Example Display the Group table: T1600G-52TS# show snmp-server group 29.19 show snmp-server user Description The show snmp-server user command is used to display the User table. Syntax show snmp-server user Command Mode - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 308
T1600G-52TS# show snmp-server community 29.21 show snmp-server host Description The show snmp-server host command is used to display the Host table. Syntax show snmp-server host Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement Only Admin level users have access to - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 309
29.23 show rmon history Description The show rmon history command is used to display the configuration of the history sample entry. Syntax show rmon history [ index ] Parameter index -- The index number of the entry selected to display the configuration, ranging from 1 to 12, in the format of 1-3, - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 310
Privilege Requirement Only Admin level users have access to these commands. Example Display the Event configuration of entry1-4: T1600G-52TS# show rmon event 1-4 29.25 show rmon alarm Description The show rmon alarm command is used to display the configuration of the Alarm Management entry. Syntax - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 311
Parameter index -- The index number of the statistics entry selected to display the configuration, ranging from 1 to 65535. By default, the configuration of all statistics entries is displayed. Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement Only Admin level users - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 312
Chapter 30 LLDP Commands LLDP function enables network devices to advertise their own device information periodically to neighbors on the same LAN. The information of the LLDP devices in the LAN can be stored by its neighbor in a standard MIB, so it is possible for the information to be accessed by - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 313
Parameter multiplier -- Configure the Hold Multiplier parameter. It ranges from 2 to 10. By default, it is 4. Command Mode Global Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Specify Hold Multiplier as 5: T1600G-52TS( - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 314
fast-count -- When the port's LLDP state transforms from Disable (or Rx_Only) to Tx&Rx (or Tx_Only), the fast start mechanism will be enabled, that is, the transmit interval will be shorten to a second, and several LLDPDUs will be sent out (the number of LLDPDUs equals this parameter). The value - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 315
30.5 lldp transmit Description The lldp transmit command is used to enable the designated port to transmit LLDPDU. To disable the function, please use no lldp transmit command. Syntax lldp transmit no lldp transmit Command Mode Interface Configuration Mode (interface gigabitEthernet / interface - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 316
Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Enable the SNMP notification for Gigabit Ethernet port 1/0/1: T1600G-52TS(config)#interface gigabitEthernet 1/0/1 T1600G-52TS(config-if)#lldp snmp-trap 30.7 lldp tlv-select Description The - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 317
30.8 lldp management address Description The lldp management address command is used to configure the port's management address to be included in management address TLV. The NMS uses management addresses to identify the devices. To delete the port's management address, please use no lldp management - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 318
Parameter count -- Configure the Fast Start Count parameter. It ranges from 1 to 10. By default, it is 4. Command Mode Global Configuration Mode Privilege Requirement Only Admin and Operator level users have access to these commands. Example Specify Fast Start Count as 5: T1600G-52TS(config)# lldp - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 319
30.11 lldp med-tlv-select Description The lldp med-tlv-select command is used to configure LLDP-MED TLVs to be included in outgoing LLDPDU for the corresponding port. To exclude LLDP-MED TLVs, please use no lldp med-tlv-select command. By default, All TLVs are included in outgoing LLDPDU. Syntax - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 320
box post-office-box ] [ additional additional ] [ country-code country-code ] [ what { dhcp-server | endpoint | switch } ] ] } Parameter emergency-number -- Emergency Call Service ELIN identifier, which is used during emergency call setup to a traditional CAMA or ISDN trunk-based PSAP. The length of - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 321
Example Display the global configuration of LLDP: T1600G-52TS#show lldp 30.14 show lldp interface Description The show lldp interface command is used to display LLDP configuration of the corresponding port. By default, the LLDP configuration of all the ports will be displayed. Syntax show lldp - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 322
Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the LLDP information of Gigabit Ethernet port 1/0/1: T1600G-52TS#show lldp local-information interface gigabitEthernet 1/0/1 30.16 show lldp neighbor-information interface Description The show - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 323
corresponding port. By default, the LLDP statistic information of all the ports will be displayed. Syntax show lldp traffic interface [ gigabitEthernet port ] Parameters port -- The Ethernet port number. Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 324
Chapter 31 Static Routes Commands 31.1 interface vlan Description This interface vlan command is used to create the VLAN interface. To delete the specified VLAN interface, please use the no interface vlan command. Syntax interface vlan { vid } no interface vlan { vid } Parameter vid -- The ID of the - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 325
Parameter id -- The ID of the loopback interface, ranging from 1 to 64. Command Mode Global Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Create the loopback interface 1: T1600G-52TS(config)# interface loopback 1 31.3 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 326
31.4 interface range port-channel Description This interface range port-channel command is used to create multiple port-channel interfaces. Syntax interface range port-channel port-channel-list Parameter port-channel-list -- The list of the port-channel interface, ranging from 1 to 14, in the format - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 327
Command Mode Interface Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Add a description system-if to the routed port 1/0/9 : T1600G-52TS(config)# interface gigabitEthernet 1/0/9 T1600G-52TS(config-if)# no switchport - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 328
31.7 interface port-channel Description This interface port-channel command is used to create the port-channel interface. To delete the specified port-channel interface, please use the no interface port-channel command. Syntax interface port-channel { port-channel-id } no interface port-channel { - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 329
next-hop-address -- The address of the next-hop. distance -- The distance metric of this route, ranging from 1 to 255. The smaller the distance is, the higher the priority is. Command Mode Global Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 330
31.10 ipv6 route Description This ipv6 route command is configure the IPv6 static route. To clear the corresponding entry, please use the no ipv6 route command. Syntax ipv6 route { ipv6-dest-address } { next-hop-address } [ distance ] no ipv6 route { ipv6-dest-address } { next-hop-address } - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 331
Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the information of VLAN 2: T1600G-52TS(config)#show interface vlan 2 31.12 show ip interface Description This show ip interface command is used to display the detailed information of the - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 332
31.13 show ip interface brief Description This show ip interface brief command is used to display the summary information of the Layer 3 interfaces. Syntax show ip interface brief Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the summary - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 333
Example Display the static routes: T1600G-52TS(config)# show ip route static 31.15 show ip route specify Description This show ip route specify command is used to display the valid routing information to the specified IP address or network segments. Syntax show ip route specify { ip } [ mask ] [ - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 334
31.16 show ip route summary Description This show ip route summary command is used to display the summary information of the route entries classified by their sources. Syntax show ip route summary Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 335
31.18 show ipv6 route Description This show ipv6 route command is used to display the IPv6 route entries of the specified type. Syntax show ipv6 route [ static | connected ] Parameter static | connected -- Specify the route type. If not specified, all types of route entries will be displayed. static - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 336
Example Display the summary information of IPv6 route entries: T1600G-52TS(config)# show ipv6 route summary 319 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 337
prefer Description The sdm prefer command is used to configure the SDM template. The SDM template is used to allocate system resources to best support the features being used in your application. To return to use the default template, please use the sdm prefer default command. The template change - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 338
32.2 show sdm prefer Description The show sdm prefer command is used to display resource allocation of the current SDM template in use, or the SDM templates that can be used. Syntax show sdm prefer { used | default | enterpriseV4 | enterpriseV6 } Parameter used -- Display the resource allocation of - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 339
Telnet, SSH and HTTP. Authentication Method List A method list describes the authentication methods and their sequence to authenticate a user. The switch supports Login List for users to gain access to the switch, and Enable List for normal users to gain administrative privileges. RADIUS/TACACS - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 340
Example Enable the AAA function globally: T1600G-52TS(config)# aaa enable 33.2 tacacas-server host Description The tacacs-server host command is used to configure a new TACACS+ server. To delete the specified TACACS+ server, please use no tacacs-server host command. Syntax tacacs-server host ip- - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 341
User Guidelines The TACACS+ servers you configured are added in the server group "tacacs" by default. Example Configure a TACACS+ server with the IP address as 1.1.1.1, TCP port as 1500, timeout as 6 seconds, and the unencrypted key string as 12345. T1600G-52TS(config)# tacacs-server host 1.1.1.1 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 342
Syntax radius-server host ip-address [ auth-port port-id ] [ acct-port port-id ] [ timeout time ] [ retransmit number ] [ key { [ 0 ] string | 7 encrypted-string } ] no radius-server host ip-address Parameter ip-address -- Specify the IP address of the RADIUS server. auth-port port-id -- Specify the - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 343
Example Configure a RADIUS server with the IP address as 1.1.1.1, authentication port as 1200, timeout as 6 seconds, retransmit times as 3, and the unencrypted key string as 12345. T1600G-52TS(config)# radius-server host 1.1.1.1 auth-port 1200 timeout 6 retransmit 3 key 12345 33.5 show radius-server - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 344
Syntax aaa group { radius | tacacs } group-name no aaa group { radius | tacacs } group-name Parameter radius | tacacs -- Specify the server group type as RADIUS or TACACS+. group-name -- Specify the server group name. Command Mode Global Configuration Mode Privilege Requirement Only Admin level - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 345
T1600G-52TS(config)# aaa group radius radius1 T1600G-52TS(aaa-group)# server 1.1.1.1 33.8 show aaa group Description This show aaa group command is used to display the summary information of the AAA groups. All the servers in this group will be listed if you specify the group name. Syntax show aaa - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 346
Parameter method-list -- Specify the method list name. method1, method2, method3, method4 -- Specify the authentication methods in order. The next authentication method is tried only if the previous method does not respond, not if it fails. The preset methods include radius, tacacs, local and none. - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 347
Parameter method-list -- Specify the method list name. method1, method2, method3, method4 -- Specify the authentication methods in order. The next authentication method is tried only if the previous method does not respond, not if it fails. The preset methods include radius, tacacs, local and none. - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 348
accounting dot1x default { method } no aaa accounting dot1x default Parameter method -- Sp+ecify the method name. Only RADIUS server group is supported, and the default method is server group "radius". Command Mode Global Configuration Mode Privilege Requirement Only Admin level users have access to - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 349
33.13 show aaa authentication Description This show aaa authentication command is used to display the summary information of the authentication login, enable and dot1x metheod list. Syntax show aaa authentication [ login | enable | dot1x ] Parameter login | enable | dot1x -- Specify the method list - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 350
Example Display the information of the default 802.1X accounting method list: T1600G-52TS(config)# show aaa accounting 33.15 line telnet Description The line telnet command is used to enter the Line Configuration Mode to configure the telnet terminal line to which you want to apply the - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 351
Command Mode Line Configuration Mode Privilege Requirement Only Admin level users have access to these commands. Example Configure the login authentication method list on the telnet terminal line as "list1": T1600G-52TS(config)#line telnet T1600G-52TS(config-line)# login authentication list1 33.17 - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 352
Syntax login authentication { method-list } no login authentication Parameter method-list -- Specify the login method list on the ssh terminal line. It is "default" by default, which contains the method "local". Command Mode Line Configuration Mode Privilege Requirement Only Admin level users have - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 353
Privilege Requirement Only Admin level users have access to these commands. Example Configure the enable authentication method list on the telnet terminal line as "list2": T1600G-52TS(config)#line telnet T1600G-52TS(config-line)# enable authentication list2 33.20 enable authentication (ssh) - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 354
33.21 ip http login authentication Description The ip http login authentication command is used to apply the login authentication method list to users accessing through HTTP. To restore to the default authentication method list, please use the no ip http login authentication command. Syntax ip http - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 355
Parameter method-list -- Specify the enable method list on the HTTP access. It is "default" by default, which contains the method "none". Command Mode Line Configuration Mode Privilege Requirement Only Admin level users have access to these commands. Example Configure the enable authentication - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 356
Requirement Only Admin, Operator and Power User level users have access to these commands. Example Enable DHCP Relay function globally: T1600G-52TS(config)# service dhcp relay 34.2 ip helper-address Description The ip helper-address command is used to add DHCP Server address to the Layer 3 interface - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 357
(config-if)# ip helper-address 192.168.2.1 34.3 ip dhcp relay information Description The ip dhcp relay information command is used to enable option 82 support in DHCP Relay. To disable this function, please use no ip dhcp relay information command. Syntax ip dhcp relay information no ip dhcp relay - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 358
34.4 ip dhcp relay information policy Description The ip dhcp relay information policy command is used to specify the operation for the Option 82 field of the DHCP request packets from the Host. To restore to the default option, please use no ip dhcp relay information policy command. Syntax ip dhcp - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 359
no ip dhcp relay information custom Command Mode Global Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Enable the switch to customize the option 82 field: T1600G-52TS(config)# ip dhcp relay information custom 34.6 ip - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 360
as "TP-Link": T1600G-52TS(config)# ip dhcp relay information remote-id TP-Link 34.8 ip dhcp relay default-interface Note: Only T1600G-18TS supports this command. Description The ip dhcp relay default-interface command is used to configure default relay agent interface. When the switch works at DHCP - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 361
interface: T1600G-52TS(config)# interface vlan 1 T1600G-52TS(config-if)# ip dhcp relay default-interface 34.9 ip dhcp relay vlan Note: Only T1600G-18TS supports this command. Description The ip dhcp relay vlan command is used to add DHCP server address to specified VLAN. If there is an IP interface - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 362
Example Add DHCP server address 192.168.2.1 to VLAN 1: T1600G-52TS(config)# ip dhcp relay vlan 1 helper-address 192.168.2.1 34.10 show ip dhcp relay Description The show ip dhcp relay command is used to display the global status and Option 82 configuration of DHCP Relay. Syntax show ip dhcp relay - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 363
Chapter 35 PoE Commands Note: Only T1600G-28PS/T1600G-52PS supports PoE function. PoE (Power over Ethernet) technology describes a system to transmit electrical power along with data to remote devices over standard twisted-pair cable in - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 364
Syntax power inline disconnect-method {deny-next-port|deny-low-priority} Parameter deny-next-port -- When the supply power exceeds the power limit, the PD linked to the next port will be disconnected. deny-low priority -- When the supply power exceeds the power limit, the PD linked to the port with - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 365
power the port in the profile can supply, with five options: "power-limit", "auto", "class1", "class2", "class3" and "class4". "Power-limit" indicates you can manually enter a value ranging from 1 to 300. The value is in the unit of 0.1 watt. For instance, if you want to configure the max power as - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 366
Command Mode Global Configuration Mode Privilege Requirement None. Example Create a PoE time-range named "tRange1" for the switch: T1600G-52PS(config)# power time-range tRange1 35.5 power holiday Description The power holiday command is used to create PoE holiday for the switch. To delete the - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 367
35.6 absolute Description The absolute command is used to create an absolute mode time-range for the PoE time-range of the switch. The switch will supply power when the specified absolute time occurs. To delete the corresponding absolute mode time-range configuration, please use no absolute command. - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 368
Syntax periodic { [ week-date week-day ] [ time-slice1 time-slice ] [ time-slice2 time-slice ] [ time-slice3 time-slice ] [ time-slice4 time-slice ] } no periodic [ week-date | time-slice ] Parameter week-day -- Periodic Mode, with "1-7", "daily", "off-day" and "working-day" options. "1-7" should be - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 369
power the port in the profile can supply, with five options: "power-limit", "auto", "class1", "class2", "class3" and "class4". "Power-limit" indicates you can manually enter a value ranging from 1 to 300. The value is in the unit of 0.1 watt. For instance, if you want to configure the max power as - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 370
T1600G-52PS(config-if)# power inline consumption 50 35.10 power inline priority Description The power inline priority command is used to configure the PoE priority for the corresponding port Syntax power inline priority { low | middle | high } Parameter priority -- The PoE priority of the port. The - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 371
Command Mode Interface Configuration Mode (interface gigabitEthernet / interface range gigabitEthernet) Privilege Requirement None. Example Enable the PoE feature for port 2: T1600G-52PS(config)# interface gigabitEthernet 1/0/2 T1600G-52PS(config-if)# power inline supply enable 35.12 power inline - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 372
35.13 power inline time-range Description The power inline time-range command is used to bind a PoE time-range to the corresponding port. To cancel the bind relation, please use no power inline time-range command. Syntax power inline time-range name no power inline time-range Parameter name -- The - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 373
T1600G-52PS# show power inline 35.15 show power inline configuration interface Description The show power inline configuration interface command is used to display the PoE configuration of the certain port. Syntax show power inline configuration interface [ gigabitEthernet port ] Parameter port -- - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 374
Example Display the PoE information of all ports: T1600G-52PS# show power inline information interface 35.17 show power profile Description The show power profile command is used to display the defined PoE profile. Syntax show power profile Command Mode Privileged EXEC Mode and Any Configuration - TP-Link T1600G-18TSTL-SG2216 | T1600G-18TSUN V1 CLI Reference Guide Guide - Page 375
35.19 show power time-range Description The show power time-range command is used to display the configuration of PoE time-range. Syntax show power time-range Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the configuration of PoE time-range:
CLI Reference Guide
T1600G Series Switches
T1600G-18TS
T1600G-28TS (TL-SG2424) / T1600G-52TS (TL-SG2452)
T1600G-28PS (TL-SG2424P) / T1600G-52PS (TL-SG2452P)
1910012176 REV2.1.0
June 2017