TP-Link T1600G-28TS T1600G-18TSUN V2 CLI Reference Guide Guide
TP-Link T1600G-28TS Manual
View all TP-Link T1600G-28TS manuals
Add to My Manuals
Save this manual to your list of manuals |
TP-Link T1600G-28TS manual content summary:
- TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 1
CLI Reference Guide Jetstream Smart Switches 1910012776 REV4.3.0 June 2020 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 2
COPYRIGHT & TRADEMARKS Specifications are subject to change without notice. is a registered trademark of TP-Link Technologies Co., Ltd. Other brands and product names are trademarks or registered trademarks of their respective holders. No part of the specifications may be reproduced - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 3
2.3 2.4 2.5 2.6 2.7 2.8 2.9 2.10 enable ...16 service password-encryption 16 enable password...17 enable secret ...18 configure...19 show user configuration...26 Chapter 4 System Configuration Commands 27 4.1 system-time manual ...27 4.2 system-time ntp ...27 4.3 system-time dst predefined ...29 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 4
...41 copy tftp startup-config...41 copy backup-config tftp...42 copy backup-config startup-config 43 copy running-config backup-config 43 copy tftp backup-config...44 boot application ...44 boot config...45 remove backup-image...46 firmware upgrade...46 ping ...47 tracert ...48 show system-info - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 5
counters...71 show interface status...71 show interface counters ...72 show interface configuration...73 Chapter 9 Port Isolation Commands 74 9.1 port isolation...74 9.2 show port isolation interface ...75 Chapter 10 Loopback Detection Commands 76 10.1 10.2 loopback-detection (global)...76 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 6
detection (interface 78 loopback-detection config process-mode 78 loopback-detection recover channel-group ...82 port-channel load-balance...83 lacp system-priority...84 lacp port-priority ...85 show vlan 97 Chapter 13 IEEE 802.1Q VLAN Commands 98 13.1 13.2 13.3 13.4 13.5 13.6 vlan - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 7
validation 120 ip igmp snooping vlan-config 120 ip igmp snooping vlan-config (immediate-leave 122 ip igmp snooping vlan-config (report-suppression 122 ip igmp snooping vlan-config (router-ports-forbidden 123 ip igmp snooping vlan-config (rport interface 124 ip igmp snooping vlan-config (static - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 8
ipv6 mld snooping vlan-config 138 ipv6 mld snooping vlan-config (immediate-leave 139 ipv6 mld snooping vlan-config (report-suppression 140 ipv6 mld snooping vlan-config (router-ports-forbidden 141 ipv6 mld snooping vlan-config (rport interface 142 ipv6 mld snooping vlan-config (static 142 ipv6 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 9
mvr mode...155 mvr querytime...156 mvr vlan ...157 mvr (interface) ...157 mvr type ...158 mvr immediate ...159 mvr vlan (group)...159 show mvr ...160 show ) ...164 spanning-tree (interface) ...164 spanning-tree common-config 165 spanning-tree mode ...166 spanning-tree mst configuration 167 instance - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 10
interface 194 show lldp traffic interface ...194 Chapter 22 Static Routes Commands 196 22.1 22.2 22.3 22.4 22.5 22.6 22.7 22.8 22.9 ip routing...196 interface vlan...196 interface loopback ...197 switchport ...197 interface range port-channel 198 description ...199 shutdown ...199 interface - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 11
22.17 22.18 22.19 22.20 ipv6 routing ...201 ipv6 route...202 show interface vlan ...203 show ip interface...203 show ip interface brief...204 show ip route...204 show ip route specify ...205 show ip route summary ...206 show ipv6 interface...206 show ipv6 route ...207 show ipv6 route summary ...207 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 12
239 show ip dhcp server manual-binding 239 show ip dhcp server binding 240 clear ip dhcp server statistics 240 clear ip dhcp server binding 241 Chapter 26 DHCP Relay Commands 242 26.1 26.2 26.3 26.4 26.5 26.6 26.7 26.8 service dhcp relay ...242 ip dhcp relay hops ...242 ip dhcp relay - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 13
ip dhcp relay default-interface 248 ip dhcp relay vlan ...249 show ip dhcp relay...249 Chapter 27 DHCP L2 Relay Commands 251 27.1 27.2 27.3 27.4 27.5 27.6 27.7 27.8 27.9 ip dhcp l2relay...251 ip dhcp l2relay vlan...251 ip dhcp l2relay information...252 ip show qos port-priority interface 264 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 14
33 HTTP and HTTPS Commands 289 33.1 33.2 33.3 33.4 33.5 33.6 33.7 33.8 ip http server ...289 ip http port...290 ip http max-users...290 ip http session timeout ...291 ip http secure-server...292 ip http secure-port ...292 ip http secure-protocol...293 ip http secure-ciphersuite ...294 XIII - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 15
ip ssh server ...300 ip ssh port...300 ip ssh version ...301 ip ssh algorithm ...302 ip ssh timeout...302 ip ssh max-client ...303 ip ssh download...304 remove public-key...304 show ip enable...316 aaa authentication dot1x default 317 aaa accounting dot1x default 318 show aaa authentication ...318 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 16
(telnet 322 enable authentication (ssh) ...323 ip http login authentication...323 ip http enable authentication 324 show aaa global ...325 -vlan ...333 dot1x timeout quiet-period ...334 dot1x timeout supp-timeout 335 dot1x max- req ...336 dot1x ...336 dot1x port-control...337 dot1x port-method - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 17
IMPB Commands 365 41.1 41.2 41.3 41.4 41.5 41.6 41.7 ip source binding ...365 ip dhcp snooping ...366 ip dhcp snooping vlan ...367 ip dhcp snooping max-entries 367 show ip source binding ...368 show ip dhcp snooping...369 show ip dhcp snooping interface 369 Chapter 42 IPv6 IMPB Commands 371 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 18
ipv6 dhcp snooping interface 377 show ipv6 nd snooping...378 Chapter 43 IP Verify Source Commands 379 43.1 43.2 43.3 43.4 ip verify source ...379 ip verify source logging ...380 show ip verify source...380 show ip verify source interface 381 Chapter 44 IPv6 Verify Source Commands 382 44 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 19
47.3 show ip dos-prevent...400 Chapter 48 DLDP Commands 402 48.1 48.2 48.3 48.4 48.5 48.6 dldp (global) ...402 dldp vlan...416 snmp-server traps security...417 snmp-server traps acl ...418 snmp-server traps ip ...418 snmp-server traps power (Only for Certain Devices 419 snmp-server traps link - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 20
.12 51.13 ip arp inspection...439 ip arp inspection validate ...439 ip arp inspection vlan...440 ip arp inspection vlan logging 441 ip arp inspection trust ...442 ip arp inspection limit-rate...442 ip arp inspection burst-interval 443 ip arp inspection recover ...444 show ip arp inspection ...444 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 21
52.7 show ipv6 nd detection vlan 451 Chapter 53 System Log Commands 452 53.1 53.2 53.3 53.4 53.5 53.6 53 457 logging monitor ...458 logging monitor level ...458 clear logging ...459 show logging local-config...460 show logging loghost ...460 show logging buffer ...461 show logging flash...461 XX - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 22
Guide stands for JetStream Gigabit Smart Switch without any explanation. Some models featured in this guide may be unavailable in your country or region. For local sales information, visit https://www.tp-link.com. Overview of this Guide IP, reboot and reset the switch, upgrade the switch Port - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 23
about the commands used for configuring LAG (Link Aggregation Group) and LACP (Link Aggregation Control Protocol). Chapter 12: MAC Address Commands Provide information about the commands used for Address configuration. Chapter 13: IEEE 802.1Q VLAN Commands Provide information about the commands used - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 24
Control. Chapter 30: Voice VLAN Commands Provide information about the commands used for configuring Voice VLAN. Chapter 31 Auto VoIP Commands . Chapter 38 Port Security Commands Provide information about the commands used for configuring Port Security. Chapter 39: Port Mirroring Commands Provide - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 25
the commands used for binding the IP address, MAC address, VLAN and the connected Port number of the Host together. 48: DLDP Commands Provide information about the commands used for configuring the DLDP (Device Link about the commands used for protecting the switch from the ARP cheating or ARP Attack - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 26
1 Using the CLI 1.1 Accessing the CLI You can log on to the switch and access the CLI by logging on to the switch remotely by a Telnet or SSH connection through an Ethernet port. 1.1.1 Logon by Telnet To log on to the switch by a Telnet connection, please take the following steps: 1. Click Start and - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 27
to set up an SSH connection: Password Authentication Mode: It requires username and password, which are both admin by default. Key Authentication Mode: It requires a public key for the switch and a private key for the SSH client software. You can generate the public key and the private key through - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 28
and devices. Figure 1-4 Enable SSH function ■ Password Authentication Mode 1. Open the software to log on to the interface of PuTTY. Enter the IP address of the switch into Host Name field; keep the default value 22 in the Port field; select SSH as the Connection type. Figure 1-5 SSH Connection - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 29
, and then enter enable to enter Privileged EXEC Mode, so you can continue to configure the switch. Figure 1-6 Log on the Switch ■ Key Authentication Mode 2. Select the key type and key length, and generate SSH key. Figure 1-7 Generate SSH Key Note: 1. The key length is in the - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 30
the key is successfully generated, please save the public key and private key to a TFTP server. Figure 1-8 Save the Generated Key 4. Log on to the switch by Telnet and download the public key file from the TFTP server to the switch, as the following figure shows: Figure 1-9 Download the Public Key 9 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 31
Note: 1. The key type should accord with the type of the key file. 2. The SSH key downloading can not be interrupted. 5. After the public key is downloaded, please log on to the interface of PuTTY and enter the IP address for login. Figure 1-10 SSH Connection Config 10 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 32
password, it indicates that the key has been successfully downloaded. Figure 1-12 Log on the Switch 1.2 CLI Command Modes The CLI is divided into different command modes: User EXEC Mode, Privileged EXEC Mode, Global Configuration Mode, Interface Configuration Mode and VLAN Configuration Mode. 11 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 33
the interface gigabitEthernet port, interface Interface Configuration Mode port-channel port-channel-id or interface range gigabitEthernet port-list command to enter this mode from Global Configuration mode. Switch> Switch# Switch(config)# Switch(config-if)# or Switch(config-if-range)# Use - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 34
Port mode from Interface Configuration mode. Interface Configuration Mode Use the interface vlan vlan-id command to enter VLAN Interface mode. Prompt Switch (config-if)# or Switch(config-if-range)# Switch (config-vlan)# Logout or Access the next mode Use the switchport command to switch to the - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 35
link-aggregation: Configure parameters for multi-trunks. e). Interface vlan: Configure parameters for the vlan-port. • VLAN Configuration Mode: In this mode, users can create a VLAN and add a specified port to the VLAN mode by using the enable command. In default case, no password is needed. In - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 36
1.4.2 Format Conventions The following conventions are used in this Guide: • Items in square brackets [ ] are optional • Items xx:xx. • One or several values can be typed for a port-list or a vlan-list using comma to separate. Use a hyphen to designate a range of values, for instance - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 37
None. Example If you have set the password to access Privileged EXEC Mode from User EXEC Mode: Switch>enable Enter password: Switch# 2.2 service password-encryption Description The service password-encryption command is used to encrypt the password when the password is defined or when the - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 38
commands. Example Enable the global encryption function: Switch(config)# service password-encryption 2.3 enable password Description The enable password digits and 17 kinds of special characters. The special characters are By default, it is empty. 7 -- Indicates a symmetric encrypted password with - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 39
encryption function is enabled in service password-encryption, the password in Privileged EXEC Mode from User EXEC Mode: Switch(config)#enable password 0 admin 2.4 enable secret Description of special characters. The special characters are By default, it is empty. The password in the configuration - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 40
as "admin" and unencrypted to access Privileged EXEC Mode from User EXEC Mode. The password will be displayed in the encrypted form. Switch(config)#enable secret 0 admin 2.5 configure Description The configure command is used to access Global Configuration Mode from Privileged EXEC Mode. Syntax - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 41
None. Example Return to Global Configuration Mode from Interface Configuration Mode, and then return to Privileged EXEC Mode: Switch (config-if)# exit Switch (config)#exit Switch# 2.7 end Description The end command is used to return to Privileged EXEC Mode. Syntax end Command Mode Privileged - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 42
Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Disable the pause function for the screen display: Switch (config)#no clipaging 2.9 history Description The history command is used to show the latest 20 commands you entered in the current mode - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 43
Requirement Only Admin, Operator and Power User level users have access to these commands. Example Clear the commands you have entered in the current mode: Switch (config)#history clear 22 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 44
Web, Telnet or SSH, so as to protect the settings of the switch from being randomly changed. 3.1 user name (password) Description The user name without the right to edit or modify. It is "admin" by default. For more details about privilege restrictions, please refer to the Privilege Requirement - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 45
is unencrypted and the global encryption function is enabled in service password-encryption, the password in the configuration file will be user named "tplink", of which the password is "admin" and unencrypted: Switch(config)#user name tplink privilege admin password 0 admin 3.2 user name (secret) - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 46
is "admin" by default. 0 -- Specify the encryption type. 0 indicates that an unencrypted password will follow. By default, the encryption type is "admin". The password will be displayed in the encrypted form. Switch (config)#user name tplink privilege admin secret 0 admin 3.3 show user account-list - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 47
Privilege Requirement Only Admin level users have access to these commands. Example Display the information of the current users: Switch (config)# show user account-list 3.4 show user configuration Description The show user configuration command is used to display the security configuration - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 48
the time is 12/20/2010 17:30:35 Switch (config)# system-time manual 12/20/2010-17:30:35 4.2 system-time ntp Description The system-time ntp command is used to configure the time zone and the IP address for the NTP Server. The switch will get UTC automatically if it has connected to - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 49
:30 -- TimeZone for Tehran. UTC+04:00 -- TimeZone for Moscow, St.Petersburg, Volgograd, Tbilisi, Port Louis. UTC+04:30 -- TimeZone for Kabul. UTC+05:00 -- TimeZone for Islamabad, Karachi, Tashkent :00 -- TimeZone for Nuku'alofa, Samoa. ntp-server -- The IP address for the Primary NTP Server. 28 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 50
The IP address for server is 139.78.100.163, the fetching-rate is 11 hours: Switch(config)# system-time ntp UTC-12:00 133.100.9.2 139.79.100. are 4 options which are USA, Australia, Europe and New-Zealand respectively. The default value is Europe. Following are the time ranges of each option: USA -- - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 51
commands. Example Configure the daylight saving time as USA standard: Switch(config)#system-time dst predefined USA 4.4 system-time dst date Description -off daylight saving time. The start date is in the current year by default. The time range of the daylight saving time must shorter than one year, - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 52
commands. Example Configure the daylight saving time from zero clock, Apr 1st to zero clock Oct 1st and the offset is 30 minutes in 2015: Switch(config)# system-time dst date Apr 1 00:00 2015 Oct 1 00:00 2015 30 4.5 system-time dst recurring Description The system-time dst recurring command is - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 53
from 1 to 32 characters. By default, it is the device name, for example "T1600G-28TS". Command Mode Global Configuration Mode Privilege Requirement Only Admin and Operator level users have access to these commands. Example Configure the system name as TPLINK: Switch(config)# hostname TPLINK 32 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 54
default. Command Mode Global Configuration Mode Privilege Requirement Only Admin and Operator level users have access to these commands. Example Configure the system location as SHENZHEN: Switch(config characters at most. It is "www.tp-link.com" by default. Command Mode Global Configuration Mode 33 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 55
as www.tp-link.com: Switch(config)# contact-info www.tp-link.com 4.9 led (Only for Certain Devices) Note: Only certain devices support this command. Description The led command is used to control the LEDs. Syntax led {on | off} Parameter on | off-- The LEDs are configured as on or off. By default - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 56
access to these commands. Example Create the VLAN interface 2 with the primary IP address as 192.168.1.1/24 and secondary IP address as 192.168.2.1/24: Switch (config)# interface vlan 2 Switch (config-if)# ip address 192.168.1.1 255.255.255.0 Switch (config-if)# ip address 192.168.2.1 255.255.255 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 57
Lay 3 routed port 1/0/1: Switch (config)# interface gigabitEthernet 1/0/1 Switch (config-if)# no switchport Switch (config-if)# ip address-alloc dhcp Disable the IP address obtaining function on the VLAN interface 2: Switch (config)# interface vlan 2 Switch (config-if)# no ip address 4.12 controller - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 58
support this command. Description If your switch and IP address is 192.168.1.1: Switch (config)# controller inform-url 192.168.1.1 4.14 reset Description The reset command is used to reset the switch's software. After resetting, all configuration of the switch will restore to the factory defaults - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 59
of the switch except its IP address: Switch # reset except-ip 4.15 service reset-disable Description The service reset-disable command is used to disable the reset function of the console port or reset button. To enable the reset function, use no service reset-disable command. By default, the reset - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 60
] reboot-schedule in interval [ save_before_reboot ] reboot-schedule cancel Parameter time -- Specify the time point for the switch to reboot, in the format of hh:mm. date -- Specify the date for the switch to reboot, in the format of DD:MM:YYYY. The date should be within 30 days. save_before_reboot - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 61
point the next day. Example Specify the switch to save the configuration files and reboot in 200 minutes: Switch (config)# reboot-schedule in 200 save_before_reboot 4.18 copy running-config startup-config Description The copy running-config startup-config command is used to save the current settings - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 62
The copy tftp startup-config command is used to download the configuration file to the switch from TFTP server. Syntax copy tftp startup-config ip-address ip-addr filename name Parameter ip-addr -- IP Address of the TFTP server. Both IPv4 and IPv6 addresses are supported, for example 192.168 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 63
is used to export the backup configuration file of the switch to TFTP server. Syntax copy backup-config tftp ip-address ip-addr filename name Parameter ip-addr -- IP Address of the TFTP server. Both IPv4 and IPv6 addresses are supported, for example 192.168.0.1 or fe80::1234. name -- Specify the - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 64
commands. Example Replace the startup configuration file using the backup configuration file.: Switch # copy backup-config startup-config 4.23 copy running-config backup-config Description The copy running-config backup-config tftp command is used to save the current running configuration as the - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 65
config ip-address ip-addr filename name Parameter ip-addr -- IP Address of the TFTP server. Both IPv4 and IPv6 addresses are supported config.cfg from the TFTP server with the IP 192.168.0.148: Switch # copy tftp backup-config ip-address 192.168.0.148 filename config By default, the image1.bin is the - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 66
startup image: Switch (config)# boot application filename image2 startup 4.26 boot config Description The boot config command is config filename { config1 | config 2 } { startup | backup } no boot application Parameter config1 | config2 -- Specify the configuration file to be configured. By default - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 67
Backup Image, and user can choose whether to reboot the switch with the Backup Image. Syntax firmware upgrade tftp ip-address ip-addr filename name Parameter ip-addr -- IP Address of the TFTP server. Both IPv4 and IPv6 addresses are supported, for example 192.168.0.1 or fe80::1234. name -- Specify - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 68
! Reboot with the backup image? (Y/N): y Upgrade the switch's backup iamge file with the file firmware.bin in the TFTP server with the IP address fe80::1234, but do not reboot the switch: Switch # firmware upgrade tftp ip-address fe80::1234 filename firmware.bin It will only upgrade the backup image - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 69
request packets. It ranges from 100 to 1000 milliseconds. By default, this value is 1000. Command Mode Privileged EXEC Mode Privilege Requirement None. Example To test the connectivity between the switch and the network device with the IP 192.168.0.131, please specify the count (-l) as 512 bytes - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 70
has not been found after 20 maxHops, the connection between the switch and the destination device is failed to establish: Switch # tracert 192.168.0.131 20 Test the connectivity between the switch and the network device with the IP fe80::1234. If the destination device has not been found after - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 71
Mode and Any Configuration Mode Privilege Requirement Only Admin level users have access to these commands. Example Display the system image files' information: Switch# show image-info 4.33 show boot Description The show boot command is used to display the boot configuration of the system. Syntax - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 72
| ten-gigabitEthernet} port} ] show running-config [all | | [exclude keyword] [include keyword ] | interface {fastEthernet |gigabitEthernet | ten-gigabitEthernet} port ] Parameter unit-- Specify the unit number of a switch to show the unit's operating configurations. By default, it is 1. all - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 73
EXEC Mode and Any Configuration Mode Privilege Requirement Only Admin level users have access to these commands. Example Display the saved configuration: Switch# show startup-config 4.36 show system-time Description The show system-time command is used to display the time information of the - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 74
connection status of the cable connected to the switch, locate and diagnose the trouble spot of the network. Syntax show cable-diagnostics interface { fastEthernet port | gigabitEthernet port | ten-gigabitEthernet port } Parameter port -- The number of the port which is selected for Cable test. 53 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 75
Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Show the cable-diagnostics of port 3: Switch# show cable-diagnostics interface gigabitEthernet 1/0/3 4.40 show cpu-utilization Description The show cpu-utilization command is used to display the system's - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 76
Mode Privilege Requirement None. Example Display the memory utilization information of the switch: Switch# show memory-utilization 4.42 show controller (Only for Certain Devices) Note: Only certain devices support this command. Description The show controller command is used to display the - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 77
Requirement Only Admin, Operator and Power User level users have access to these commands. Example Enable EEE on port 1/0/1: Switch(config)#interface gigabitEthernet 1/0/1 Switch(config-if)#eee 5.2 show interface eee Description The show interface eee command is used to display the EEE configuration - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 78
Privilege Requirement None. Example Display the EEE configuration of each port Switch# show interface eee 57 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 79
resources on the switch for different uses. 6.1 sdm prefer Description The sdm prefer command is used to configure the SDM template. The SDM template is used to allocate system resources to best support the features being used in your application. To return to use the default template, please use - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 80
use, or the SDM templates that can be used. Syntax show sdm prefer { used | default | enterpriseV4 | enterpriseV6 } Parameter used -- Display the resource allocation of the template currently in use use, and the template that will become active after a reboot: Switch(config)#show sdm prefer used 59 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 81
it to a PoE port or an ACL rule. 7.1 time-range Description The time-range command is used to create time-range entry for the switch and enter Time- . Example Create a time-range named "tRange1" for the switch: Switch(config)# time-range tRange1 7.2 absolute Description The absolute command is used - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 82
level users have access to these commands. Example Create an absolute time-range for the switch and specify the date extending from May 5th, 2017 through Oct. 5th, 2017: Switch(config)#time-range tRange1 Switch(config-time-range)#absolute from 05/05/2017 to 10/05/2017 7.3 periodic Description The - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 83
level users have access to these commands. Example Configure the time-range tSeg1 with time from 8:30 to 12:00 at weekends: Switch(config)#time-range tSeg1 Switch(config -time-range)#periodic start 08:30 end 12:00 day-of-the-week 6-7 7.4 holiday (time-range mode) Description The holiday command is - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 84
to these commands. Example Create a holiday named "holiday1" and configure the start date as October 1st and the end date as October 3rd: Switch(config)# holiday holiday1 start-date 10/01 end-date 10/03 7.6 show holiday Description The show holiday command is used to display the defined holiday - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 85
Example Display the defined holiday: Switch# show holiday 7.7 show time-range Description The show time-range command is used to display the defined Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the defined time-range: Switch# show time-range 64 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 86
User level users have access to these commands. Example To enter the Interface gigabitEthernet Configuration Mode and configure port 2: Switch(config)# interface gigabitEthernet 1/0/2 8.2 interface range gigabitEthernet Description The interface range gigabitEthernet command is used to enter the - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 87
. Example To enter the Interface range gigabitEthernet Configuration Mode, and configure ports 1, 2, 3, 6, 7 and 9 at the same time by adding them to one port-list: Switch(config)# interface range gigabitEthernet 1/0/1-3,1/0/6-7,1/0/9 8.3 description Description The description command is used to - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 88
Only Admin, Operator and Power User level users have access to these commands. Example Add a description Port_5 to port 1/0/5: Switch(config)# interface gigabitEthernet 1/0/5 Switch(config-if)# description Port_5 8.4 shutdown Description The shutdown command is used to disable an Ethernet - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 89
Enable the flow-control function for port 1/0/3: Switch(config)# interface gigabitEthernet 1/0/3 Switch(config-if)# flow-control 8.6 duplex Description The duplex command is used to configure the Duplex Mode for an Ethernet port. To return to the default configuration, please use no duplex command - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 90
users have access to these commands. Example Globally configure the size of jumbo frames as 9216: Switch(config)# jumbo-size 9216 8.8 speed Description The speed command is used to configure the Speed Mode for an Ethernet port. To return to the default configuration, please use no speed command. 69 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 91
speed mode of the Ethernet port. There are four options: 10Mbps, 100Mbps, 1000Mbps and Auto negotiation mode (default). Command Mode Interface Configuration Mode the Speed Mode as 100Mbps for port 1/0/3: Switch(config)# interface gigabitEthernet 1/0/3 Switch(config-if)# speed 100 8.9 serdes-mode - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 92
Requirement Only Admin and Operator level users have access to these commands. Example Clear the statistic information of all ports and port channels: Switch(config)# clear counters 8.11 show interface status Description The show interface status command is used to display the connection status - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 93
Mode Privilege Requirement None. Example Display the connection status of all ports and port channels: Switch(config)# show interface status Display the connection status of port 1/0/1: Switch(config)# show interface status gigabitEthernet 1/0/1 8.12 show interface counters Description The show - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 94
EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the configurations of all Ethernet ports and port channels: Switch(config)# show interface configuration Display the configurations of port 1/0/2: Switch(config)# show interface configuration gigabitEthernet 1/0/2 73 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 95
of port 1/0/5: Switch(config)# interface gigabitEthernet 1/0/5 Switch(config-if)# port isolation gi-forward-list 1/0/1-2,1/0/4 po-forward-list 2 Set all Ethernet ports and port channels to forward list of port 1/0/2, namely restore to the default setting: Switch(config)# interface gigabitEthernet - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 96
Switch(config-if)# no port isolation 9.2 show port isolation interface Description The show port isolation interface command is used to display the forward port list of a port/port channel. Syntax show port isolation interface [fastEthernet port | gigabitEthernet port | ten-gigabitEthernet port | - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 97
function globally: Switch(config)# loopback-detection switch ports to network, aiming at detecting network loops periodically. Syntax loopback-detection interval interval-time Parameter interval-time -- The interval of sending loopback detection packets. It ranges from 1 to 1000 seconds. By default - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 98
time after which the blocked port would automatically recover to default, this value is 90. Command Mode Global Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Configure the recovery-time as 70 seconds: Switch(config - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 99
is Port Based or VLAN Based. Syntax loopback-detection config process-mode { alert | port-based | vlan-based } recovery-mode { auto | manual } Parameter alert -- When a loop is detected, the switch will send a trap message and generate an entry on the log file. It is the default setting. port-based - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 100
Configure the loopback detection process-mode as port-based, and configure the recovery mode as manual for port 2: Switch(config)# interface gigabitEthernet 1/0/2 Switch(config-if)# loopback-detection config process-mode port-based recovery-mode manual 10.6 loopback-detection recover Description The - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 101
Switch(config)# interface gigabitEthernet 1/0/2 Switch(config-if)# loopback- port | port-channel lagid ] [ detail ] Parameter port -- The Ethernet port number. lagid -- The number of LAG, ranging from 1 to 14. detail -- Displays the loop status and block status of the VLAN which the specified port - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 102
Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the configuration of loopback detection function and the status of all ports: Switch# show loopback-detection interface Display the configuration of loopback detection function and the status of - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 103
Control Protocol) is defined in IEEE802.3ad and enables the dynamic link aggregation and disaggregation by exchanging LACP packets with its partner. The switch can dynamically group similarly configured ports into a single logical link, which will highly extend the bandwidth and flexibly balance the - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 104
static LAG: Switch(config)# interface range gigabitEthernet 1/0/2-4 Switch(config-if-range)# channel-group 1 mode on 11.2 port-channel load-balance Description The port-channel load-balance command is used to configure the Aggregate Arithmetic for LAG. To return to the default configurations, please - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 105
": Switch(config)# port-channel load-balance src-dst-ip 11.3 lacp system-priority Description The lacp system-priority command is used to configure the LACP system priority globally. To return to the default configurations, please use no lacp system-priority command. Syntax lacp system-priority pri - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 106
32768 by default. Command Mode Interface Configuration Mode (interface gigabitEthernet / interface range gigabitEthernet) Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Configure the LACP port priority as 1024 for ports 1-3: Switch(config - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 107
-- The EtherChannel Group number, ranging from 1 to 14. By default, it is empty, and will display the information of all EtherChannel None. Example Display the detailed information of EtherChannel Group 1: Switch(config)# show etherchannel 1 detail 11.6 show etherchannel load-balance Description - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 108
-group-num -- The EtherChannel Group number, ranging from 1 to 14. By default, it is empty, and will display the information of all LACP groups. internal Example Display the internal LACP information of EtherChannel Group 1: Switch(config)# show lacp 1 internal 11.8 show lacp sys-id Description - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 109
Example Display the LACP system priority: Switch(config)# show lacp sys-id 88 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 110
manually, independent of the aging time. In the stable networks, the static MAC address entries can facilitate the switch The VLAN ID number of your desired entry. It ranges from 1 to 4094. port -- The Ethernet port number port 1 together: Switch(config)# mac address-table static 00:02:58:4f - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 111
. Example Delete the MAC addresses on VLAN 1: Switch(config)# no mac address-table dynamic vid 1 12.3 mac address-table aging-time Description The mac address-table aging-time command is used to configure aging time for the dynamic address. To return to the default configuration, please use no mac - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 112
package to be forwarded. The filtering address can be added or removed manually, independent of the aging time. Syntax mac address-table filtering mac-addr Add a filtering address entry of which VLAN ID is 1 and MAC address is 00:1e:4b:04:01:5d: Switch(config)# mac address-table filtering 00:1e:4b: - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 113
aging time and can only be deleted manually too. However, the learned entries will be saved even the switch is rebooted. status -- Select the action to be taken when the number of the MAC addresses reaches the maximum learning number on the port. By default, this function is disabled. • forward: The - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 114
port as 30. When the number of MAC address entries reaches 30 on this port, new entry will be dropped: Switch(config)# interface gigabitEthernet 1/0/1 Switch(config- static | filtering -- The type of your desired entry. By default, all the entries are displayed. Command Mode Privileged EXEC Mode and - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 115
Only Admin, Operator and Power User level users have access to these commands. Example Clear the information of all static address entries: Switch(config)# clear mac address-table static 12.8 show mac address-table aging-time Description The show mac address-table aging-time command is used - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 116
Mode Privilege Requirement None. Example Display the security configuration of all ports: Switch(config)# show mac address-table max-mac-count all Display the security configuration of port 1/0/1: Switch(config)# show mac address-table max-mac-count interface gigabitEthernet 1/0/1 12.10 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 117
Requirement None. Example Display the address configuration of port 1/0/1: Switch(config)# show mac address-table interface gigabitEthernet 1/0/1 12. None. Example Display the total MAC entry information in different VLANs: Switch(config)# show mac address-table count 12.12 show mac address- - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 118
port number. port-channel-id -- The ID of the port channel. vlan-id -- Specify the VLAN which the entry belongs to. Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the information of the MAC address 00:00:00:00:23:00 in VLAN 1: Switch(config - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 119
is multi-optional. Command Mode Global Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Create VLAN 2-10 and VLAN 100: Switch(config)# vlan 2-10,100 Delete VLAN 2: Switch(config)# no vlan 2 98 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 120
to these commands. Example Specify the name of VLAN 2 as "group1": Switch(config)# vlan 2 Switch(config-vlan)# name group1 13.3 vlan_trunk (globally) Description The vlan_trunk command is used to enable VLAN Trunk globally. To disable VLAN Trunk, use the no vlan_trunk command. Syntax vlan_trunk - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 121
Enable VLAN Trunk globally: Switch(config)#vlan_trunk 13.4 vlan_trunk (interface) Description The vlan_trunk command is used to enable VLAN Trunk for the desired port. When enabled, all packets in VLANs will pass through this port. To disable VLAN Trunk, use the no vlan_trunk command. By default, it - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 122
access to these commands. Example Configure Gigabit Ethernet port 1/0/4 whose link type is "general" to VLAN 2 and its egress-rule as "tagged": Switch(config)#interface gigabitEthernet 1/0/4 Switch(config-if)#switchport general allowed vlan 2 tagged 13.6 switchport pvid Description The switchport - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 123
1/0/2 Switch(config-if)# switchport pvid 2 13.7 switchport check ingress Description The switchport check ingress command is used to enable the Ingress Checking function for the switch ports. With this function enabled, the port will accept the packet of which the VLAN ID is in the port's VLAN list - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 124
for the switch ports and the ports will perform this operation before Ingress Checking. To restore to the default setting, port 1/0/4 as "tagged": Switch(config)#interface gigabitEthernet 1/0/4 Switch(config-if)#switchport acceptable frame general 13.9 show vlan summary Description The show vlan - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 125
Display the brief information of IEEE 802.1Q VLAN: Switch(config)# show vlan brief 13.11 show vlan Description The show vlan command is used to display the information of IEEE 802.1Q VLAN. Syntax show vlan [ id vlan-id ] Parameter vlan-id -- Specify IEEE 802.1Q VLAN ID, ranging from 1 to 4094. It is - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 126
| port-channel port-channel-id ] Parameter port -- The port number. port-channel-id -- The ID of the port channel. Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the VLAN configuration information of all ports and port channels: Switch(config - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 127
8 characters at most. Command Mode Global Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Create VLAN 2 with the MAC address 00:11:11:01:01:12 and the name "TP": Switch(config)#mac-vlan mac-address 00:11:11:01:01:12 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 128
users have access to these commands. Example Enable the Gigabit Ethernet port 1/0/3 for the MAC-based VLAN feature: Switch(config)#interface gigabitEthernet 1/0/3 Switch(config-if)#mac-vlan 14.3 show mac-vlan Description The show mac-vlan command is used to display the information of the MAC-based - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 129
show mac-vlan interface command is used to display the port state of MAC-based VLAN. Syntax show mac-vlan interface Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the enable state of all the ports: Switch(config)#show mac-vlan interface 108 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 130
{ ether_2 ether-type type | snap ether-type type | llc dsap dsap_type ssap ssap_type } no protocol-vlan template template-idx Parameter protocol-name -- Give a name for the Protocol-based VLAN Template , which contains 8 characters at most. ether_2 ether-type type -- Specify the Ethernet type. snap - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 131
: Switch(config)#protocol-vlan template name TP frame ether_2 ether-type 2024 15.2 protocol-vlan vlan Description The protocol-vlan vlan command is used to create a Protocol-based VLAN entry. To delete a Protocol-based VLAN entry, please use no protocol-vlan vlan command. Syntax protocol-vlan vlan - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 132
have access to these commands. Example Add Gigabit Ethernet port 20 to protocol group 1: Switch(config)#interface gigabitEthernet 1/0/20 Switch(config-if)#protocol-vlan group 1 15.4 show protocol-vlan template Description The show protocol-vlan template command is used to display the information of - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 133
information of the Protocol-based VLAN templates: Switch(config)#show protocol-vlan template 15.5 show protocol-vlan vlan Description The show protocol-vlan vlan command is used to display the information about Protocol-based VLAN entry. Syntax show protocol-vlan vlan Command Mode Privileged EXEC - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 134
Power User level users have access to these commands. Example Enable the GVRP function globally: Switch(config)#gvrp 16.2 gvrp (interface) Description The gvrp command is used to enable the GVRP function for the desired port. To disable it, please use no gvrp command. The GVRP feature can only be - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 135
for Gigabit Ethernet ports 1/0/2-6: Switch(config)#interface range gigabitEthernet 1/0/2-6 Switch(config-if-range)#gvrp 16.3 gvrp registration Description The gvrp registration command is used to configure the GVRP registration type for the desired port. To restore to the default value, please use - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 136
as "fixed" for Gigabit Ethernet ports 1/0/2-6: Switch(config)#interface range gigabitEthernet 1/0/2-6 Switch(config-if-range)#gvrp registration fixed 16.4 gvrp timer Description The gvrp timer command is used to set a GVRP timer for the desired port. To restore to the default setting of a GARP timer - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 137
. Example Set the GARP leaveall timer of Gigabit Ethernet port 1/0/6 as 2000 centiseconds and restore the join timer of it to the default value: Switch(config)#interface gigabitEthernet 1/0/6 Switch(config-if)#gvrp timer leaveall 2000 Switch(config-if)#no gvrp timer join 16.5 show gvrp interface - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 138
16.6 show gvrp global Description The show gvrp global command is used to display the global GVRP status. Syntax show gvrp global Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the global GVRP status: Switch(config)#show gvrp global 117 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 139
IGMP Snooping function: Switch(config)# ip igmp snooping 17.2 ip igmp snooping version Description The ip igmp snooping version command is used to configure IGMP version globally. To return to the default configuration, please use no ip igmp snooping version command. Syntax ip igmp snooping version - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 140
version as v2: Switch (config)# ip igmp snooping version v2 17.3 ip igmp snooping drop-unknown Description The ip igmp snooping drop-unknown command is used to configure the way how the switch processes multicast streams that are sent to unknown multicast groups as Discard. By default, it is Forward - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 141
IGMP Snooping parameters. To disable the VLAN IGMP Snooping function, please use no ip igmp snooping vlan-config command. To restore the default values, please use no ip igmp snooping vlan-config with specified parameters. Syntax ip igmp snooping vlan-config vlan-id-list [ rtime router-time | mtime - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 142
have access to these commands. Example Enable the IGMP Snooping function and modify Router Port Aging Time as 300 seconds, Member Port Aging Time as 200 seconds for VLAN 1-3: Switch(config)# ip igmp snooping vlan-config 1-3 rtime 300 Switch(config)# ip igmp snooping vlan-config 1-3 mtime 200 121 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 143
Fast Leave on the VLANs, please use no ip igmp snooping vlan-config vlan-id-list immediate-leave command. This function is disabled by default. Syntax ip igmp snooping vlan-config vlan-id-list immediate-leave no ip igmp snooping vlan-config vlan-id-list immediate-leave Parameter vlan-id-list -- The - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 144
IGMP Report Suppression for VLAN 1-3: Switch(config)# ip igmp snooping vlan-config 1-3 report-suppression 17.8 ip igmp snooping vlan-config (router-ports-forbidden) Description This command is used to forbid the specified ports as being router ports in the specified VLAN(s). To delete the forbidden - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 145
have access to these commands. Example Forbid the Ethernet ports 1/0/1-3 as being router ports in VLAN 1 : Switch(config)# ip igmp snooping vlan-config 1 router-ports-forbidd interface gigabitEthernet 1/0/1-3 17.9 ip igmp snooping vlan-config (rport interface) Description This command is used to - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 146
Example Set the router port as 1/0/1 for VLAN 1-2: Switch(config)# ip igmp snooping vlan-config 1-2 rport interface gigabitEthernet 1/0/1 17.10 ip igmp snooping vlan-config (static) Description This command is used to configure interfaces to statically join a multicast group. To remove interfaces - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 147
feature on the VLANs, please use no ip igmp snooping vlan-config vlan-id-list querier command without any parameters. To restore the default values, please use no ip igmp snooping vlan-config vlan-id-list querier command with specified parameters. Syntax ip igmp snooping vlan-config vlan-id-list - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 148
as 100 seconds: Switch(config)# ip igmp snooping vlan-config 3 querier Switch(config)# ip igmp snooping vlan-config 3 querier query interval 100 17.12 ip igmp snooping (interface) Description The ip igmp snooping command is used to enable the IGMP Snooping function for the desired port. To disable - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 149
. To remove the maximum group limitation and return to the default of no limitation on the specified port, please use the no ip igmp snooping max-groups command. To return to the default action of dropping the report, please use the no ip igmp snooping max-groups action command. These commands only - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 150
have access to these commands. Example Enable the Fast Leave function for port 1/0/3: Switch(config)# interface gigabitEthernet 1/0/3 Switch(config-if)# ip igmp snooping immediate-leave 17.15 ip igmp profile Description The ip igmp profile command is used to create the configuration profile. To - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 151
, Operator and Power User level users have access to these commands. Example Configure the filtering mode of profile 1 as deny: Switch(config)# ip igmp profile 1 Switch(config-igmp-profile)#deny 17.17 permit Description The permit command is used to configure the filtering mode of profile as permit - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 152
, Operator and Power User level users have access to these commands. Example Configure the filtering mode of profile 1 as permit: Switch(config)# ip igmp profile 1 Switch(config-igmp-profile)#permit 17.18 range Description The range command is used to configure the range of the profile's filtering - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 153
/ interface port-channel / interface range port-channel) Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Bind profile 1 to interface gigabitEthernet 1/0/2: Switch(config)# interface gigabitEthernet 1/0/2 Switch(config-if)# ip igmp filter - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 154
configurations. Syntax show ip igmp snooping interface [ gigabitEthernet [port-list ] | port-channel [ port-channel-list ] ] { basic-config | max-groups | packet-stat } Parameter port-list -- The list of Ethernet ports. Port-channel-list -- The list of port channels. basic-config | max-groups - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 155
of port 1/0/2: Switch# show ip igmp snooping interface gigabitEthernet 1/0/2 basic-config Display the IGMP packet statistics of ports 1/0/1-4: Switch# show ip igmp snooping interface gigabitEthernet 1/0/1-4 packet-stat 17.23 show ip igmp snooping vlan Description The show ip igmp snooping vlan - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 156
multicast entries in VLAN 5: Switch(config)#show ip igmp snooping groups vlan 5 Display the count of multicast entries in VLAN 5: Switch(config)#show ip igmp snooping groups vlan 5 count Display the dynamic multicast groups of VLAN 5 Switch(config)#show ip igmp snooping groups vlan 5 dynamic Display - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 157
Switch(config)#show ip igmp snooping groups vlan 5 static Display the count of dynamic multicast entries of VLAN 5 Switch(config)#show ip igmp snooping groups vlan 5 dynamic count Display the count of static multicast entries of VLAN 5 Switch(config)#show ip igmp snooping groups vlan 5 static count - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 158
Snooping: Switch(config)# ipv6 mld snooping 18.2 ipv6 mld snooping drop-unknown Description The ipv6 mld snooping drop-unknown command is used to enable the unknown multicast packets filter function. To disable this function, please use no ipv6 mld snooping drop-unknown command. By default - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 159
no ipv6 mld snooping vlan-config vlan-id-list [ rtime | mtime | ltime ] Parameter vlan-id-list -- The ID list of the VLAN desired to modify configuration, ranging from 1 to 4094, in the format of 1-3, 5. router-time -- The Router Port Aging Time. Within this time, if the switch does not receive any - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 160
Snooping function and modify Router Port Time as 300 seconds, Member Port Time as 200 seconds for VLAN 1-3: Switch(config)# ipv6 mld snooping vlan-config 1-3 rtime 300 Switch(config)# ipv6 mld snooping vlan-config 1-3 mtime 200 18.4 ipv6 mld snooping vlan-config (immediate-leave) Description This - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 161
, please use no ipv6 mld snooping vlan-config vlan-id-list report-suppression command. This function is disabled by default. Syntax ipv6 mld snooping vlan-config vlan-id-list report-suppression no ipv6 mld snooping vlan-config vlan-id-list report-suppression Parameter vlan-id-list -- The ID list of - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 162
Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Forbid the Ethernet ports 1/0/1-3 as being router ports in VLAN 1: Switch(config)# ipv6 mld snooping vlan-config 1 router-ports-forbidd interface gigabitEthernet 1/0/1-3 141 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 163
level users have access to these commands. Example Set the router port as 1/0/1 for VLAN 1-2: Switch(config)# ipv6 mld snooping vlan-config 1-2 rport interface gigabitEthernet 1/0/1 18.8 ipv6 mld snooping vlan-config (static) Description This command is used to configure interfaces to statically - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 164
Syntax ipv6 mld snooping vlan-config vlan-id-list static ip interface { gigabitEthernet port-list | port-channel port-channel-list } no ipv6 mld snooping vlan-config vlan-id-list static ip interface { gigabitEthernet port-list | port-channel port-channel-list } Parameter vlan-id-list -- The ID list - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 165
-id-list querier [ max-response-time response-time | query-interval interval | general-query source-ip ip-addr | last-listener-query-count count | last-listener-query-interval interval ] no ipv6 mld snooping vlan-config vlan-id-list querier [ max-response-time | query-interval | general-query source - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 166
as 100 seconds: Switch(config)# ipv6 mld snooping vlan-config 3 querier Switch(config)# ipv6 mld snooping vlan-config 3 querier query interval 100 18.10 ipv6 mld snooping (interface) Description The ipv6 mld snooping command is used to enable MLD Snooping function on the desired port. To disable - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 167
Example Specify the maximum numbers of groups that ports 1/0/2-5 can join as 10, and configure the throttling action as replace: Switch(config)#interface range gigabitEthernet 1/0/2-5 Switch(config-if-range)#ipv6 mld snooping max-groups 10 Switch(config-if-range)#ipv6 mld snooping max-groups action - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 168
Only Admin and Operator level users have access to these commands. Example Enable the Fast Leave function for port 1/0/3: Switch(config)# interface gigabitEthernet 1/0/3 Switch(config-if)# ipv6 mld snooping immediate-leave 18.13 ipv6 mld profile Description The ipv6 mld profile command is - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 169
Only Admin and Operator level users have access to these commands. Example Configure the filtering mode of profile 1 as deny: Switch(config)# ipv6 mld profile 1 Switch(config-MLD-profile)#deny 18.15 permit Description The permit command is used to configure the filtering mode of profile as permit - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 170
IP-range entries at most. Syntax range start-ip end-ip no range start-ip end-ip Parameter start-ip -- Start IPv6 multicast address of the filter entry.. end-ip range ff80::1234 to ff80::1235 in profile 1: Switch(config)# ipv6 mld profile 1 Switch(config-igmp-profile)#range ff80::1234 ff80::1235 18.17 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 171
gigabitEthernet / interface port-channel / interface range port-channel) Privilege Requirement Only Admin and Operator level users have access to these commands. Example Bind profile 1 to interface gigabitEthernet 1/0/2: Switch(config)# interface gigabitEthernet 1/0/2 Switch(config-if)# ipv6 mld - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 172
Mode Privilege Requirement None. Example Display the MLD baisic configuration configuration of all ports and port channels: Switch# show ipv6 mld snooping interface basic-config Display the MLD basic configuration of port 1/0/2: Switch# show ipv6 mld snooping interface gigabitEthernet 1/0/2 basic - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 173
of ports 1/0/1-4: Switch# show ipv6 mld snooping interface gigabitEthernet 1/0/1-4 packet-stat 18.21 show ipv6 mld snooping vlan Description The show ipv6 mld snooping vlan command is used to display VLAN information of MLD Snooping. Syntax show ipv6 mld snooping vlan [ vlan-id ] Parameter vlan-id - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 174
static multicast groups. Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display all of the multicast groups: Switch(config)# show ipv6 mld snooping groups 18.23 show ipv6 mld profile Description The show ipv6 mld profile command is used to display - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 175
ports in different VLANs in IPv4 network. In IGMP Snooping, if member ports are in different VLANs, a copy of the multicast streams is sent to each VLAN that has member ports. While MVR provides a dedicated multicast VLAN commands. Example Enable MVR globally: Switch(config)# mvr 19.2 mvr group - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 176
Add multicast groups 225.1.2.3 -239.1.2.5 to MVR: Switch (config)# mvr group 225.1.2.3 3 19.3 mvr mode Description The mvr mode command is used to configure the MVR mode as compatible or dynamic. By default, it is compatible. To return to the default configuration, please use no mvr mode command - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 177
and the default value is 5 tenths of a second. Command Mode Global Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Configure the query response time of MVR as 1 second, that is 10 tenths of a second: Switch(config)# mvr - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 178
: Switch(config)# mvr vlan 10 19.6 mvr (interface) Description This command is used to enable MVR for specific interfaces. To disable MVR for the interfaces, please use no mvr command. By default, it is disabled. Syntax mvr no mvr Command Mode Interface Configuration Mode (interface gigabitEthernet - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 179
Enable MVR for port 1/0/1: Switch(config)# interface gigabitEthernet 1/0/1 Switch(config-if)#mvr 19.7 mvr type Description The mvr type command is used to configure the MVR port type as receiver or source. By default, the port is a non-MVR port. If you attempt to configure a non-MVR port with MVR - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 180
ports support Fast Leave. Before enabling Fast Leave for a port, make sure there is only a single receiver device connecting to the port. Example Enable the Fast Leave feature of MVR for port 1/0/3: Switch(config)# interface gigabitEthernet 1/0/3 Switch(config-if)#mvr immediate 19.9 mvr vlan - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 181
from the hosts. You can also statically add a receiver port to an MVR group. Example Add port 1/0/3 to MVR group 225.1.2.3 statically. The multicast VLAN is VLAN 10: Switch(config)# interface gigabitEthernet 1/0/3 Switch(config-if)#mvr vlan 10 group 225.1.2.3 19.10 show mvr Description The show - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 182
Privilege Requirement None. Example Display the MVR configuration of port 1/0/3: Switch# show mvr interface gigabitEthernet 1/0/3 19.12 show mvr MVR group. Syntax show mvr members [ ip-addr ] [ status active | inactive ] Parameter ip-addr--The multicast IP address of the MVR group. active-- Display - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 183
Example Display the membership information of all MVR groups: Switch# show mvr members 162 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 184
Tree Protocol), compatible with both STP and RSTP and subject to IEEE 802.1s, can disbranch a ring network. STP is to block redundant links and backup links as well as optimize paths. 20.1 debug spanning-tree Description The debug spanning-tree command is used to enable debuggning of spanning-tree - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 185
User level users have access to these commands. Example Enable the STP function: Switch(config)# spanning-tree 20.3 spanning-tree (interface) Description The spanning-tree command is used to enable STP function for a port. To disable the STP function, please use no spanning-tree command. Syntax - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 186
instances. To return to the default configuration, please use no spanning-tree common-config command. CIST (Common and Internal Spanning Tree) is the spanning tree in a switched network, connecting all devices in the network. Syntax spanning-tree common-config [ port-priority pri ] [ ext-cost ext - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 187
1/0/1 Switch(config-if)# spanning-tree common-config port-priority 64 ext-cost 100 int-cost 100 portfast enable point-to-point open 20.5 spanning-tree mode Description The spanning-tree mode command is used to configure the STP mode of the switch. To return to the default configurations - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 188
commands. Example Enter into the MST configuration mode: Switch(config)# spanning-tree mst configuration Switch(Config-mst)# 20.7 instance Description The instance command is used to configure the VLAN-Instance mapping. To remove the VLAN-instance mapping or disable the corresponding instance, 167 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 189
namely remove all the mapping VLANs 1-100: Switch(config)# spanning-tree mst configuration Switch(config-mst)# no instance 1 Remove VLANs 1-50 in mapping VLANs 1-100 for Instance 1: Switch(config)# spanning-tree mst configuration Switch(config-mst)# no instance 1 vlan 1-50 20.8 name Description The - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 190
and Power User level users have access to these commands. Example Configure the region name of MST as "region1": Switch(config)# spanning-tree mst configuration Switch(config-mst)# name region1 20.9 revision Description The revision command is used to configure the revision level of MST instance - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 191
: Switch(config)# spanning-tree mst instance 1 priority 4096 20.11 spanning-tree mst Description The spanning-tree mst command is used to configure MST Instance Port. To return to the default configuration of the corresponding Instance Port, please use no spanning-tree mst command. A port - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 192
path cost as 2000: Switch(config)# interface gigabitEthernet 1/0/1 Switch(config-if)# spanning-tree mst instance 1 port-priority 64 cost 2000 20.12 spanning-tree priority Description The spanning-tree priority command is used to configure the bridge priority. To return to the default value of bridge - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 193
priority as 4096: Switch(config)# spanning-tree priority Delay, which is the time for the port to transit its state after the network topology is changed. links. Hello Time ranges from 1 to 10 in seconds and it is 2 by default. Otherwise, 2 * (Hello Time + 1) - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 194
, ranging from 1 to 20 in pps. By default, it is 5. Command Mode Global Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Configure the hold-count of STP as 8pps: Switch(config)# spanning-tree hold-count 8 20.15 spanning - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 195
40 in hop. By default, it is 20. port-channel / interface range port-channel) Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Enable the BPDU filter function for port 1/0/2: Switch(config)# interface gigabitEthernet 1/0/2 Switch(config - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 196
Operator and Power User level users have access to these commands. Example Enable the BPDU forward function for port 1/0/2: Switch(config)# interface gigabitEthernet 1/0/2 Switch(config-if)# spanning-tree bpduflood 20.18 spanning-tree bpduguard Description The spanning-tree bpduguard command is used - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 197
1/0/2 Switch(config-if)# spanning-tree bpduguard 20.19 spanning-tree guard loop Description The spanning-tree guard loop command is used to enable the Loop Protect function for a port. Loop Protect is to prevent the loops in the network brought by recalculating STP because of link failures - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 198
Admin, Operator and Power User level users have access to these commands. Example Enable the Root Protect function for port 2: Switch(config)# interface gigabitEthernet 1/0/2 Switch(config-if)# spanning-tree guard root 20.21 spanning-tree guard tc Description The spanning-tree guard tc command is - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 199
and Power User level users have access to these commands. Example Enable the TC Protect of Spanning Tree for port 2: Switch(config)# interface gigabitEthernet 1/0/2 Switch(config-if)# spanning-tree guard tc 20.22 spanning-tree mcheck Description The spanning-tree mcheck command is used to enable - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 200
None. Example Display the active information of spanning-tree: Switch(config)# show spanning-tree active 20.24 show spanning-tree bridge Configuration Mode Privilege Requirement None. Example Display the bridge parameters: Switch(config)# show spanning-tree bridge 20.25 show spanning-tree interface - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 201
Mode Privilege Requirement None. Example Display the spanning-tree information of all ports: Switch(config)# show spanning-tree interface Display the spanning-tree information of port 1/0/2: Switch(config)# show spanning-tree interface gigabitEthernet 1/0/2 Display the spanning-tree mode information - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 202
from 1 to 8. port -- The Ethernet port number. port-channel-id -- The ID of the port channel. Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the region information and mapping information of VLAN and MST Instance: Switch(config)#show spanning - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 203
Display all the ports information of MST Instance 1: Switch(config)#show spanning-tree mst instance 1 interface 182 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 204
Power User level users have access to these commands. Example Enable LLDP function globally: Switch(config)#lldp 21.2 lldp forward_message Description The lldp forward_message command is used to enable the switch to forward LLDP messages when LLDP function is disabled. To disable the LLDP messages - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 205
commands. Example Enable the switch to forward LLDP messages when LLDP function is disabled globally: Switch(config)#lldp forward_message 21.3 lldp hold . TTL = Hold Multiplier * Transmit Interval. To return to the default configuration, please use no lldp hold-multiplier command. Syntax lldp hold- - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 206
Trap message which will be sent from local device to network management system. The value ranges from 5 to 3600 and the default value is 5 seconds. fast-count -- When the port's LLDP state transforms from Disable (or Rx_Only) to Tx&Rx (or Tx_Only), the fast start mechanism will be enabled, that is - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 207
Requirement Only Admin, Operator and Power User level users have access to these commands. Example Enable port 1/0/1 to receive LLDPDU: Switch(config)#interface gigabitEthernet 1/0/1 Switch(config-if)#lldp receive 21.6 lldp transmit Description The lldp transmit command is used to enable the - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 208
range gigabitEthernet) Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Enable the SNMP notification for Gigabit Ethernet port 1/0/1: Switch(config)#interface gigabitEthernet 1/0/1 Switch(config-if)#lldp snmp-trap 187 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 209
to these commands. Example Exclude "management-address" and "port-vlan-id" TLVs in LLDPDU outgoing from Gigabit Ethernet port 1/0/1: Switch(config)# interface gigabitEthernet 1/0/1 Switch(config-if)# no lldp tlv-select management-address port-vlan 21.9 lldp management-address Description The lldp - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 210
Example Configure the port's management address as 192.168.1.100 for port 1/0/1: Switch(config)# interface gigabitEthernet 1/0/1 Switch(config-if)# lldp the Fast Start Count parameter. It ranges from 1 to 10. By default, it is 4. Command Mode Global Configuration Mode Privilege Requirement Only Admin - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 211
1/0/2 Switch(config-if)# lldp med-status 21.12 lldp med-tlv-select Description The lldp med-tlv-select command is used to configure LLDP-MED TLVs to be included in outgoing LLDPDU for the corresponding port. To exclude LLDP-MED TLVs, please use no lldp med-tlv-select command. By default, All - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 212
" TLVs in LLDPDU outgoing from port 1/0/2: Switch(config)# interface gigabitEthernet 1/0/2 Switch(config-if)# no lldp med-tlv-select code ] [ what { dhcp-server | endpoint | switch } ] ] } Parameter emergency-number -- Emergency Call Service ELIN identifier, which is used during emergency call setup - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 213
Configure the civic address in the Location Identification TLV's content in outgoing LLDPDU of port 1/0/2. Configure the language as English and city as London: Switch(config)# interface gigabitEthernet 1/0/2 Switch(config-if)# lldp med-location civic-address language English lci-city London 21.14 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 214
configuration of Gigabit Ethernet port 1/0/1: Switch#show lldp interface gigabitEthernet 1/0/1 21.16 show lldp local-information interface Description The show lldp local-information interface command is used to display the LLDP information of the corresponding port. By default, the LLDP information - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 215
1/0/1: Switch#show lldp neighbor-information interface gigabitEthernet 1/0/1 21.18 show lldp traffic interface Description The show lldp traffic interface command is used to display the LLDP statistic information between the local device and neighbor device of the corresponding port. By default, the - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 216
Privilege Requirement None. Example Display the LLDP statistic information of Gigabit Ethernet port 1/0/1: Switch#show lldp traffic interface gigabitEthernet 1/0/1 195 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 217
feature for the switch: Switch(config)# ip routing 22.2 interface vlan Description This interface vlan command is used to create the VLAN interface. To delete the specified VLAN interface, please use the no interface vlan command. Syntax interface vlan { vid } no interface vlan { vid } Parameter vid - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 218
. Example Create the VLAN interface 2: Switch(config)# interface vlan 2 22.3 interface Switch(config)# interface loopback 1 22.4 switchport Description This switchport command is used to switch the Layer 3 interface into the Layer 2 port. To switch the Layer 2 port into the Layer 3 routed port - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 219
Power User level users have access to these commands. Example Switch port 1/0/9 into the routed port: Switch(config)# interface gigabitEthernet 1/0/9 Switch(config-if)# no switchport 22.5 interface range port-channel Description This interface range port-channel command is used to create multiple - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 220
gigabitEthernet 1/0/9 Switch(config-if)# no switchport Switch(config-if)# description system-if 22.7 shutdown Description This shutdown command is used to shut down the specified interface. The interface type include: routed port, port-channel interface, loopback interface and VLAN interface. To - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 221
commands. Example Shut down the routed port 1/0/9: Switch(config)# interface gigabitEthernet 1/0/9 Switch(config-if)# no switchport Switch(config-if)# shutdown 22.8 interface port-channel Description This interface port-channel command is used to create the port-channel interface. To delete the - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 222
address as 192.168.2.0, the subnet mask as 255.255.255.0 and the next-hop address as 192.168.0.2: Switch(config)# ip route 192.168.2.0 255.255.255.0 192.168.0.2 22.10 ipv6 routing Description This ipv6 routing command is enale the IPv6 routing feature globally. To - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 223
Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Create a static route with the destination network IP address as 3200::/64 and the next-hop address as 3100::1234: Switch(config)# ipv6 route 3200::/64 3100::1234 202 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 224
of VLAN 2: Switch(config)#show interface vlan 2 22.13 show ip interface Description This show ip interface command is used to display the detailed information of the specified Layer 3 interface. Syntax show ip interface [ gigabitEthernet port | port-channel port-channel-id | loopback id | vlan vlan - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 225
the detailed information of the VLAN interface 2: Switch(config)# show ip interface vlan 2 22.14 show ip interface brief Description This show ip interface brief command is used to display the summary information of the Layer 3 interfaces. Syntax show ip interface brief Command Mode Privileged - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 226
Mode Privilege Requirement None. Example Display the shortest route to 192.168.0.100: Switch(config)# show ip route specify 192.168.0.100 Look up the route entry with the destination as 192.168.0.0/24: Switch(config)# show ip route specify 192.168.0.0 255.255.255.0 Display the routes to all the - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 227
the summary information of route entries: Switch(config)# show ip route summary 22.18 show ipv6 interface Description This command is used to display the configured IPv6 information of the management interface, including ipv6 function status, link - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 228
: The connected routes. Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the IPv6 static routes: Switch(config)# show ipv6 route static 22.20 show ipv6 route summary Description This show ipv6 route summary command is used to display the - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 229
Privilege Requirement None. Example Display the summary information of IPv6 route entries: Switch(config)# show ipv6 route summary 208 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 230
1: Switch(config)# interface vlan 1 Switch(config-if)# ipv6 enable 23.2 ipv6 address autoconfig Description This command is used to enable the automatic configuration of the ipv6 link-local address. The switch has only one ipv6 link-local address, which can be configured automatically or manually - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 231
of the ipv6 link-local address on VLAN interface 1: Switch(config)# interface vlan 1 Switch(config-if)# ipv6 address autoconfig 23.3 ipv6 address link-local Description The ipv6 address link-local command is used to configure the ipv6 link-local address manually on a specified interface - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 232
the VLAN interface 1: Switch(config)# interface vlan 1 Switch(config-if)# ipv6 address fe80::1234 link-local 23.4 ipv6 address dhcp Description The ipv6 address dhcp command is used to enable the DHCPv6 Client function. When this function is enabled, the Layer 3 interface will try to obtain IP from - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 233
configuration function to obtain IPv6 address through the RA message on VLAN interface 1: Switch(config)# interface vlan 1 Switch(config-if)# ipv6 address ra 23.6 ipv6 address eui-64 Description This command is used to manually configure a global IPv6 address with an extended unique identifier (EUI - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 234
EUI-64 global address on the interface with the network prefix 3ffe::/64: Switch(config)# interface vlan 1 Switch(config-if)# ipv6 address 3ffe::/64 eui-64 23.7 ipv6 address Description This command is used to manually configure a global IPv6 address on the interface. To remove a global IPv6 address - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 235
ipv6 interface Description This command is used to display the configured ipv6 information of the management interface, including ipv6 function status, link-local address and global address, ipv6 multicast groups etc. Syntax show ipv6 interface Command Mode Privileged EXEC Mode and Any Configuration - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 236
Global Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Create a static ARP entry with the IP as 192.168.0.1 and the MAC as 00:11:22:33:44:55: Switch(config)# arp 192.168.0.1 00:11:22:33:44:55 arpa 215 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 237
. By default, it is enabled. Syntax arp dynamicremew no arp dynamicremew Command Mode Global Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Enable the switch to automatically renew the dynamic ARP entries: Switch(config - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 238
the aging time, ranging from 10 to 3000 seconds. The default value is 1200 seconds. Command Mode Global Configuration Mode Privilege Requirement these commands. Example Configure the ARP aging time as 60 seconds: Switch(config)# arp timeout 60 24.5 gratuitous-arp intf-status-up enable Description - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 239
's Layer 3 interface to send gratuitous ARP packets when receiving a gratuitous packets of which the IP address is the same as its own: Switch(config)# gratuitous-arp dup-ip-detected enable 24.7 gratuitous-arp learning enable Description This gratuitous-arp learning enable command is used to enable - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 240
gigabitEthernet / interface range gigabitEthernet / interface port-channel / interface range port-channel) Privilege Requirement None. Example Specify the interface VLAN 1 to send gratuitous ARP packets every 1 second: Switch(config)# interface vlan 1 Switch(config-if)# gratuitous-arp send-interval - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 241
on VLAN Interface 2: Switch(config)# interface vlan 2 Switch(config-if)# ip proxy-arp Enable the Proxy ARP function on routed port 1/0/2: Switch(config)# interface gigabitEthernet 2 Switch(config-if)# no switchport Switch(config-if)# ip proxy-arp 24.10 ip local-proxy-arp Description The ip local - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 242
Enable the Proxy ARP function on VLAN Interface 2: Switch(config)# interface vlan 2 Switch(config-if)# ip local-proxy-arp Enable the Proxy ARP function on routed port 1/0/2: Switch(config)# interface gigabitEthernet 2 Switch(config-if)# no switchport Switch(config-if)# ip local-proxy-arp 24.11 show - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 243
port. port-channel-id -- Specify the ID of the port channel. id -- Specify the VLAN interface ID. Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the ARP entry associated with VLAN interface 2: Switch(config)# show ip arp vlan 2 24.13 show ip - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 244
arp Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the configuration of gratuitous ARP: Switch(config)# show gratuitous-arp 24.15 show ip proxy-arp Description The show ip proxy-arp command is used to display the Proxy ARP status. Syntax show - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 245
Example Display the Proxy ARP status: Switch(config)# show ip proxy-arp 224 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 246
level users have access to these commands. Example Enable DHCP server service globally: Switch(config)# service dhcp server 25.2 ip dhcp server extend-option capwap-ac-ip Description The ip dhcp server extend-option capwap-ac-ip command is used to specify the Option 138, which should be configured - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 247
users have access to these commands. Example Set the remote DHCP server's IP address as 192.168.3.1: Switch(config)# ip dhcp server extend-option capwap-ac-ip 192.168.3.1 25.3 ip dhcp server extend-option vendor-class-id Description The ip dhcp server extend-option vendor-class-id command is used to - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 248
User level users have access to these commands. Example Set the reserved IP addresses from 192.168.1.1 to 192.168.1.9: Switch(config)# ip dhcp server exclude-address 192.168.1.1 192.168.1.9 25.5 ip dhcp server pool Description The ip dhcp server pool command is used to create the address pool of - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 249
Create the address pool of name POOL1: Switch(config)# ip dhcp server pool POOL1 25.6 ip dhcp server ping timeout Description The ip dhcp server ping timeout command is used to specify the timeout of PING process. To resume the default value, please use no ip dhcp server ping timeout command. Syntax - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 250
as 200ms: Switch(config)# ip dhcp server ping timeout 200 25.7 ip dhcp server ping packets Description The ip dhcp server ping packets command is used to specify the number of PING packets sent. If this value is set to 0, the PING process will be disabled. To resume the default value, please use - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 251
1 to 2880 minutes. The default value is 120 minutes. Command Mode DHCP Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Specify the lease time of address pool "product" as 10 minutes: Switch(config)# ip dhcp server pool - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 252
have access to these commands. Example Reserve the IP address 192.168.0.10 in the address pool "product" for the device with the MAC address as 5e:4c:a6:31:24:01 and the hardware type as ethernet: Switch(config)# ip dhcp server pool product Switch(config-dhcp)# address 192.168.0.10 hardware-address - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 253
device with the client ID as abc in ASCII: Switch(config)# ip dhcp pool product Switch(dhcp-config)# address 192.168.0.10 client-identifier abc ascii 25.12 default-gateway Description The default-gateway command is used to specify the default gateway of the address pool. To delete the configuration - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 254
User level users have access to these commands. Example Specify the address pool product's default gateways as 192.168.0.1 and 192.168.1.1: Switch(config)# ip dhcp server pool product Switch(dhcp-config)# default-gateway 192.168.0.1,192.168.1.1 25.13 dns-server Description The dns-server command is - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 255
users have access to these commands. Example Specify the address pool's Netbios servers as 192.168.0.1 and 192.168.1.1: Switch(config)# ip dhcp server pool product Switch(config-dhcp)# netbios-name-server 192.168.0.1,192.168.1.1 25.15 netbios-node-type Description The netbios-node-type command is - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 256
and Power User level users have access to these commands. Example Specify the address pool's Netbios server type as b-node: Switch(config)# ip dhcp server pool product Switch(config-dhcp)# netbios-node-type b-node 25.16 next-server Description The next-server command is used to specify the next DHCP - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 257
, Operator and Power User level users have access to these commands. Example Specify the DHCP client's domain name as edu: Switch(config)# ip dhcp server pool product Switch(config-dhcp)# domain-name edu 25.18 bootfile Description The bootfilecommand is used to specify the name of the DHCP client - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 258
EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the status of DHCP service: Switch(config)# show ip dhcp server status 25.20 show ip dhcp server statistics Description The show ip dhcp server statistics command is used to display the DHCP packets received and sent by - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 259
None. Example Display the statistics of DHCP packets received and sent by the DHCP server: Switch(config)# show ip dhcp server statistics 25.21 show ip dhcp server extend-option Description The show ip dhcp server extend-option command is used to display the configuration of the remote DCHP servers - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 260
Mode Privilege Requirement None. Example Display the configured reserved addresses: Switch(config)# show ip dhcp server excluded-address 25.24 show ip dhcp server manual-binding Description The show ip dhcp server manual-binding command is used to display the configuration of static binding - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 261
configured static binding address: Switch(config)# show ip dhcp server manual-binding 25.25 show ip dhcp server binding Description The show ip dhcp server binding command is used to display the binding entries. Syntax show ip dhcp server binding [ ip ip-address ] Parameter ip-address -- Specify the - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 262
Clear the packet statistics: Switch(config)# clear ip dhcp server statistics 25.27 clear ip dhcp server binding Description The clear ip dhcp server binding command is used to clear the binding information. Syntax clear ip dhcp server binding [ ip-address ] Parameter ip-address -- Specify the - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 263
Admin, Operator and Power User level users have access to these commands. Example Enable DHCP Relay function globally: Switch(config)# service dhcp relay 26.2 ip dhcp relay hops Description The ip dhcp relay hops command is used to specify the maximum hops (DHCP Relay agent) that the DHCP packets - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 264
maximum number of relay hops as 6: Switch(config)# ip dhcp relay hops 6 26.3 ip dhcp relay time Description The ip dhcp relay time command is used dropped by the switch. To restore the default value, please use no service dhcp relay time command. Syntax ip dhcp relay time time no ip dhcp relay time - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 265
Add DHCP Server address 192.168.2.1 to interface VLAN 1: Switch(config)# interface vlan 1 Switch(config-if)# ip helper-address 192.168.2.1 26.5 ip dhcp relay information Description The ip dhcp relay information command is used to enable option 82 support in DHCP Relay. To disable this function - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 266
have access to these commands. Example Enable option 82 support in DHCP Relay for port 2: Switch(config)#interface gigabitEthernet 1/0/2 Switch(config-if)# ip dhcp relay information 26.6 ip dhcp relay information strategy Description The ip dhcp relay information strategy command is used to specify - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 267
with the local parameter on receiving the DHCP request packet for port 2: Switch(config)#interface gigabitEthernet 1/0/2 Switch(config-if)# ip dhcp relay information strategy replace 26.7 ip dhcp relay information format Description The ip dhcp relay information format command is used to select the - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 268
to these commands. Example Specify the circuit ID as "TP-Link" for port 2: Switch(config)#interface gigabitEthernet 1/0/2 Switch(config-if)# ip dhcp relay information circuit-id TP-Link 26.9 ip dhcp relay information remote-id Description The ip dhcp relay information remote-id command is used to - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 269
port 2: Switch(config)#interface gigabitEthernet 1/0/2 Switch(config-if)# ip dhcp relay information remote-id TP-Link 26.10 ip dhcp relay default-interface Description The ip dhcp relay default-interface command is used to configure default relay agent interface. When the switch works at DHCP VLAN - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 270
level users have access to these commands. Example Add DHCP server address 192.168.2.1 to VLAN 1: Switch(config)# ip dhcp relay vlan 1 helper-address 192.168.2.1 26.12 show ip dhcp relay Description The show ip dhcp relay command is used to display the global status and Option 82 configuration of - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 271
Privilege Requirement None. Example Display the configuration of DHCP Relay: Switch(config)# show ip dhcp relay 250 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 272
: Switch(config)# ip dhcp l2relay 27.2 ip dhcp l2relay vlan Description The ip dhcp l2relay vlan command is used to enable DHCP L2 relay in the specified VLAN. To disable DHCP L2 Relay in the specific vlan, please use no ip dhcp l2relay vlan command. Syntax ip dhcp l2relay vlan vlan-range no ip dhcp - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 273
access to these commands. Example Enable option 82 support in DHCP Relay for port 2: Switch(config)#interface gigabitEthernet 1/0/2 Switch(config-if)# ip dhcp l2relay information 27.4 ip dhcp l2relay information strategy Description The ip dhcp l2relay information strategy command is used to specify - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 274
the local parameter on receiving the DHCP request packet for port 2: Switch(config)#interface gigabitEthernet 1/0/2 Switch(config-if)# ip dhcp l2relay information strategy replace 27.5 ip dhcp l2relay information format Description The ip dhcp l2relay information format command is used to select the - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 275
sub-option value field as TLV (type-length-value) for port 2: Switch(config)#interface gigabitEthernet 1/0/2 Switch(config-if)#ip dhcp l2relay information format normal 27.6 ip dhcp l2relay information circuit-id Description The ip dhcp l2relay information circuit-id command is used to specify the - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 276
access to these commands. Example Specify the remote ID as "TP-Link" for port 2: Switch(config)#interface gigabitEthernet 1/0/2 Switch(config-if)# ip dhcp l2relay information remote-id TP-Link 27.8 show ip dhcp l2relay Description The show ip dhcp l2relay command is used to display the global status - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 277
for the ports. Syntax show ip dhcp l2relay interface [ gigabitEthernet port | port-channel port-channel-id ] Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the DHCP L2 Relay configuration of port 1/0/2: Switch(config)# show ip dhcp l2relay - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 278
better quality. The switch implements three priority modes based on port, on 802.1p and on DSCP. 28.1 qos trust mode Description The qos trust mode command is used to configure the trust mode of CoS (Class of Service) function for the ports. The default trust mode is trust port priority. Syntax qos - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 279
5 as 3: Switch(config)# interface gigabitEthernet 1/0/5 Switch(config-if)# qos port-priority 3 28.3 qos cos-map Description The qos cos-map command is used to configure 802.1p to queue mapping globally. To return to the default configuration, please use no qos cos-map command. When 802.1P Priority - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 280
to these commands. Example Map the 802.1p priority 5 to TC-2: Switch (config)# qos cos-map 5 2 28.4 qos dot1p-remap Description The qos dot1p-remap command is used to configure the 802.1p to 802.1p mappings. To return to the default - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 281
1p priority 6: Switch(config)#qos dot1p- remap 5 6 28.5 qos dscp-map Description The qos dscp-map command is used to configure the DSCP to 802.1p mapping. To return to the default configuration, please use no qos dscp-map command. DSCP (DiffServ Code Point) is a new definition to IP - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 282
Example Map DSCP Priority 5 to 802.1p priority 2: Switch(config)#qos dscp-map 5 2 28.6 qos dscp-remap Description The qos dscp-remap command is used to configure the DSCP to DSCP mappings. To return to the default configuration, please use no qos dscp-remap command. When DSCP remap is configured, - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 283
have access to these commands. Example Specify the Scheduler Mode of TC1 as WRR and set the queue weight as 10 for port 1/0/1: Switch(config)# interface gigabitEthernet 1/0/1 Switch(config-if)# qos queue 1 mode wrr weight 10 28.8 show qos cos-map Description The show qos cos-msp command is used to - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 284
show qos dot1p-remap Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the IEEE 802.1P remap configuration: Switch# show qos dot1p-remap 28.10 show qos dscp-map Description The show qos dscp-map command is used to display the DSCP priority - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 285
to DSCP mappings: Switch# show qos dscp-remap 28.12 show qos port-priority interface Description The show qos port-priority interface command is used to display the port to 802.1p priority mappings for the ports. Syntax show qos port-priority interface [fastEthernet port | gigabitEthernet port | ten - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 286
. Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the trust mode of all the ports: Switch# show qos trust interface 28.14 show qos queue interface Description The show qos queue interface command is used to display the scheduler settings - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 287
Parameter port -- The port number. port-channel-id -- The ID of the port channel. Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the scheduler settings of all the ports: Switch# show qos queue interface 266 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 288
with the storm-control command to enable the storm control function and specify the detailed parameters. Example Set the storm control mode as kbps on port 1/0/5: Switch(config)# interface gigabitEthernet 1/0/5 Switch(config-if)# storm-control rate-mode kbps 267 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 289
an interface. To return to the default configuration, please use no storm-control port is not in pps mode. Example Configure the broadcast storm control rate as 1024 kbps on port 1/0/5: Switch(config)# interface gigabitEthernet 1/0/5 Switch(config-if)# storm-control rate-mode kbps Switch(config - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 290
Configure the action as drop on port 1/0/5: Switch(config)# interface gigabitEthernet 1/0/5 Switch(config-if)# storm-control exceed drop 29.4 storm-control recover Description The storm-control recover command is used to recover the port manually after the port is shutdown because of the storm - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 291
Requirement Only Admin, Operator and Power User level users have access to these commands. Example Recover port 1/0/5 manually: Switch(config)# interface gigabitEthernet 1/0/5 Switch(config-if)# storm-control recover 29.5 bandwidth Description The bandwidth command is used to configure the bandwidth - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 292
Example Configure the ingress-rate as 5120Kbps and egress-rate as 1024Kbps for port 1/0/5: Switch(config)# interface gigabitEthernet 1/0/5 Switch(config-if)# bandwidth ingress 5120 egress 1024 29.6 show storm-control Description The show storm-control command is used to display the storm-control - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 293
port-channel-id-list -- The list of port channels. Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the bandwidth-limit information of port 1/0/4: Switch(config)# show bandwidth interface gigabitEthernet 1/0/4 272 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 294
have access to these commands. Example Enable the Voice VLAN function for VLAN 10: Switch(config)# voice vlan 10 30.2 voice vlan (interface) Description The voice vlan command is used to enable Voice VLAN function on the desired ports. To disable Voice VLAN function on ports, please use no voice - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 295
Enable the Voice VLAN function for port 1/0/1: Switch(config)# interface gigabitEthernet 1/0/1 Switch(config-if)#voice vlan 30.3 voice vlan priority Description The voice vlan priority command is used to configure the priority for the Voice VLAN. To restore to the default priority, please use - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 296
these commands. Example Create a Voice VLAN OUI described as TP-Phone with the OUI address 00:11:11:11:11:11 and the mask address FF:FF:FF:00:00:00: Switch(config)#voice vlan oui 00:11:11 oui-desc TP-Phone 30.5 show voice vlan Description The show voice vlan command is used to display the - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 297
have access to these commands. Example Display the configuration information of Voice VLAN OUI: Switch(config)# show voice vlan oui-table 30.7 show voice vlan interface Description The show voice vlan interface command is used to display the Voice VLAN configuration information of all ports. 276 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 298
vlan interface Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Display the Voice VLAN configuration information of all ports and port channels: Switch(config)# show voice vlan - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 299
can help ensure that the sound quality of an IP phone does not deteriorate when data traffic on the port is heavy. 31.1 auto-voip Description The auto Switch(config)# auto-voip 31.2 auto-voip (interface) Description The auto-voip command is used to specify the interface mode as VLAN ID for the ports - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 300
Configuration Mode (interface gigabitEthernet / interface range gigabitEthernet / interface port-channel / interface range port-channel) Example Set Auto VoIP VLAN 3 for port 3: Switch(config)# interface gigabitEthernet 1/0/3 Switch(config-if)# auto-voip 3 31.3 auto-voip dot1p Description The - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 301
/ interface range gigabitEthernet / interface port-channel / interface range port-channel) Example Instruct voice devices that are connected to port 3 to send the packets according to its own configuration: Switch(config)# interface gigabitEthernet 1/0/3 Switch(config-if)# auto-voip none 280 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 302
1/0/3 Switch(config-if)# no auto-voip 31.7 auto-voip dscp Description The auto-voip dscp command is used to set the DSCP value of Auto VoIP on specified ports. Syntax auto-voip dscp value Parameter value--Set the DSCP value of Auto VoIP on specified ports. It ranges from 0 to 63. By default, it - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 303
Mode (interface gigabitEthernet / interface range gigabitEthernet / interface port-channel / interface range port-channel) Example Set the CoS Override Mode as trust for port 1/0/3: Switch(config)# interface gigabitEthernet 1/0/3 Switch(config-if)# auto-voip data priority trust 31.9 show auto - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 304
the Auto VoIP configuration information of ports. When no parameter is entered, displays the global Auto VoIP configuration information. Command Mode Privileged EXEC Mode and any Configuration Mode Example Displays the global Auto VoIP configuration information: Switch (config)# show auto-voip 283 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 305
access to these commands. Example Configure the access control mode as IP-based: Switch(config)# user access-control ip-based enable 32.2 user access-control ip-based Description The user access-control ip-based command is used to limit the IP-range of the users for login. Only the users within the - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 306
default. id -- Delete the specified IP-based entry. Command Mode Global Configuration Mode Privilege Requirement Only Admin and Operator level users have access to these commands. Example Enable the access-control of the user whose IP address is 192.168.0.148: Switch(config)# user access-control ip - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 307
[ https ] [ ping ] [ all ] -- Specify the access interface. These interfaces are enabled by default. id-- Specify the ID of the mac-based entry to be deleted. Command Mode Global Configuration Mode Privilege :01 is allowed to login: Switch(config)# user access-control mac-based 00:00:13:0A:00:01 286 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 308
Configure the access control mode as Port-based: Switch(config)# user access-control port-based enable 32.6 user access-control port-based Description The user access-control port-based command is used to limit the ports for login. Only the users connected to these ports you set here are allowed to - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 309
by default. id-- Specify the ID of the port-based entry to be deleted. Command Mode Global Configuration Mode Privilege Requirement Only Admin and Operator level users have access to these commands. Example Configure that only the users connected to ports 2-6 are allowed to login: Switch(config - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 310
by default. The HTTP and HTTPS server function can be disabled at the same time. Syntax ip http server no ip http server Command Mode Global Configuration Mode Privilege Requirement Only Admin and Operator level users have access to these commands. Example Disable the HTTP function: Switch(config - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 311
33.2 ip http port Description The ip http port command is used to configure the port number of the HTTP server within the switch. To set the number to the default value, please use no ip http port command. Syntax ip http port port-num no ip http port Parameter port-num -- Enter the port number. This - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 312
1, 1, 1 for HTTP: Switch(config)# ip http max-users 5 1 1 1 33.4 ip http session timeout Description The ip http session timeout command is used restore to the default timeout time, please use no ip http session timeout command. Syntax ip http session timeout time no ip http session timeout - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 313
Switch(config)# no ip http secure-server 33.6 ip http secure-port Description The ip http secure-port command is used to configure the port number of the HTTPS server within the switch. To set the number to the default value, please use no ip http secure-port command. Syntax ip http secure-port port - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 314
as 2800: Switch(config)# ip http secure-port 2800 33.7 ip http secure-protocol Description The ip http secure-protocol command is used to configure the SSL protocol version. To restore to the default SSL version, please use no ip http secure-protocol command. By default, the switch supports all the - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 315
as SSL 3.0: Switch(config)# ip http secure-protocol ssl3 33.8 ip http secure-ciphersuite Description The ip http secure-ciphersuite command is used to configure the cipherSuites over the SSL connection supported by the switch. To restore to the default ciphersuite types, please use no ip http secure - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 316
Power User level users have access to these commands. Example Configure the maximum number of the Admin, Operator, Power User and User as 5, 1, 1, 1 for HTTPs: Switch(config)# ip http secure-max-users 5 1 1 1 295 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 317
to 30 in minutes. By default, the value is 10. Command Mode Global Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Configure the timeout time of the HTTPs connection as 15 minutes: Switch(config)# ip http secure-session - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 318
the IP address of 192.168.0.146: Switch(config)# ip http secure-server download certificate ssl-cert ip-address 192 switch. The length of the name ranges from 1 to 25 characters. The Key must be BASE64 encoded. ip-addr -- The IP address of the TFTP server. Both IPv4 and IPv6 addresses are supported - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 319
Power User level users have access to these commands. Example Download an SSL key named ssl-key from TFTP server with the IP address of 192.168.0.146: Switch(config)# ip http secure-server download key ssl-key ip-address 192.168.0.146 Download an SSL key named ssl-key from TFTP server with the - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 320
The show ip http secure-server command is used to display the global configuration of SSL. Syntax show ip http secure-server Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the global configuration of SSL: Switch(config)# show ip http secure - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 321
access to these commands. Example Enable the SSH function: Switch(config)# ip ssh server 34.2 ip ssh port Description The ip ssh port command is used to configure the port for SSH service. To set the value to the default, please use no ip ssh port command. Syntax ip ssh port port no ip ssh port 300 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 322
65535. The default value is 22. Command Mode Global Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Configure the SSH port number as 22: Switch(config)# ip ssh port 22 34.3 ip ssh version Description The ip ssh version - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 323
as AES128-CBC: Switch(config)# ip ssh algorithm AES128-CBC 34.5 ip ssh timeout Description The ip ssh timeout command is used to specify the idle-timeout time of SSH. To restore to the factory defaults, please use ip ssh timeout command. Syntax ip ssh timeout value no ip ssh timeout Parameter value - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 324
in seconds. By default, this value is 120 seconds. Command Mode Global Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Specify the idle-timeout time of SSH as 30 seconds: Switch(config)# ip ssh timeout 30 34.6 ip ssh max - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 325
of 512 to 3072 bits. ip-addr -- The IP address of the TFTP server. Both IPv4 and IPv6 addresses are supported, for example 192.168.0.1 or file named ssh-key from TFTP server with the IP address 192.168.0.148: Switch(config)# ip ssh download v1 ssh-key ip-address 192.168.0.148 Download an SSH-1 type - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 326
key v1 34.9 show ip ssh Description The show ip ssh command is used to display the global configuration of SSH. Syntax show ip ssh Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the global configuration of SSH: Switch(config)# show ip ssh 305 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 327
log in and manage other devices via telnet. Syntax telnet ip-addr Parameter ip-addr--The IP address of the device you want to log in. Command in via telnet. Example Log in to a device with the IP address of 192.168.0.10: Switch# telnet 192.168.0.10 35.2 telnet enable Description The telnet enable - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 328
Mode Privilege Requirement Only Admin and Operator level users have access to these commands. Example Configure the telnet port number as 566: Switch(config)# telnet port 566 35.4 show telnet-status Description The show telnet-status command is used to display the configuration information - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 329
Syntax show telnet-status Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display whether the Telnet function is enabled: Switch(config)# show telnet-status 308 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 330
. Syntax tacacs-server host ip-address [ port port-id ] [ timeout time ] [ key { [ 0 ] string | 7 encryped-string } ] no tacacs-server host ip-address Parameter ip-address -- Specify the IP address of the TACACS+ server. port-id -- Specify the server's port number for AAA. By default it is 49. 309 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 331
are added in the server group "tacacs" by default. Example Configure a TACACS+ server with the IP address as 1.1.1.1, TCP port as 1500, timeout as 6 seconds, and the unencrypted key string as 12345. Switch(config)# tacacs-server host 1.1.1.1 port 1500 timeout 6 key 12345 36.2 show tacacs-server - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 332
Switch(config IP address of the RADIUS server. auth-port port-id -- Specify the UDP destination port for authentication requests. By default it is 1812. acct-port port-id -- Specify the UDP destination port for accouting requests. By deault it is 1813. time -- Specify the time in seconds the switch - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 333
server group "radius" by default. Example Configure a RADIUS server with the IP address as 1.1.1.1, authentication port as 1200, timeout as 6 seconds, retransmit times as 3, and the unencrypted key string as 12345. Switch(config)# radius-server host 1.1.1.1 auth-port 1200 timeout 6 retransmit 3 key - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 334
Privilege Requirement Only Admin level users have access to these commands. Example Display the information of all the RADIUS servers: Switch(config)# show radius-server 36.5 aaa group Description This aaa group command is used to create AAA server groups to group existing TACACS+/RADIUS servers for - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 335
ip-address no server ip-address Parameter ip-address -- Specify the server's IP address. Command Mode Server Group Configuration Mode Privilege Requirement Only Admin level users have access to these commands. Example Create the RADIUS server 1.1.1.1 to RADIUS server group "radius1": Switch(config - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 336
Mode Privilege Requirement Only Admin level users have access to these commands. Example Display the information of all the server groups: Switch(config)# show aaa group 36.8 aaa authentication login Description This aaa authentication login command is used to configure a login authentication method - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 337
these commands. User Guidelines By default the login authentication method list is "default" with "local" as method1. Example Configure a login authentication method list "list1" with the priority1 method as radius and priority2 method as local: Switch(config)# aaa authenticaiton login list1 radius - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 338
server group is supported, and the default method is server group "radius". Command Mode Global Configuration Mode Privilege Requirement Only Admin level users have access to these commands. Example Configure the default 802.1x authentication method as "radius1": Switch(config)# aaa authentication - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 339
is supported, and the default method is server group "radius". Command Mode Global Configuration Mode Privilege Requirement Only Admin level users have access to these commands. Example Configure the default 802.1x accounting method as "radius1": Switch(config)# aaa accounting dot1x default radius1 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 340
Mode Privilege Requirement Only Admin level users have access to these commands. Example Display the information of the default 802.1x accounting method list: Switch(config)# show aaa accounting 36.14 line telnet Description The line telnet command is used to enter the Line Configuration - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 341
by default, which contains the method "local". Command Mode Line Configuration Mode Privilege Requirement Only Admin level users have access to these commands. Example Configure the login authentication method list on the telnet terminal line as "list1": Switch(config)#line telnet Switch(config-line - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 342
these commands. Example Enter the ssh terminal line configuration mode: Switch(config)#line ssh 36.17 login authentication (ssh) Description The method list to the ssh terminal line. To restore to the default authentication method list, please use the no login authentication command. Syntax - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 343
by default, which contains the method "none". Command Mode Line Configuration Mode Privilege Requirement Only Admin level users have access to these commands. Example Configure the enable authentication method list on the telnet terminal line as "list2": Switch(config)#line telnet Switch(config-line - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 344
Switch(config-line)# enable authentication list2 36.20 ip http login authentication Description The ip http login authentication command is used to apply the login authentication method list to users accessing through HTTP. To restore to the default authentication method list, please use the no ip - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 345
. It is "default" by default, which contains the method "local". Command Mode Global Configuration Mode Privilege Requirement Only Admin level users have access to these commands. Example Configure the login authentication method list on the HTTP access as "list1": Switch(config)# ip http login - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 346
method list on the HTTP access as "list2": Switch(config)# ip http enable authentication list2 36.22 show aaa global Display the AAA function's global status and each application's method list: Switch(config)# show aaa global 36.23 enable admin password Description The enable admin password - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 347
. The special characters are By default, it is empty. By default, it is empty. 7 the global encryption function is enabled in service password-encryption, the password in the configuration users to change the access level to admin: Switch(config)#enable admin password 0 abc123 36.24 enable admin - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 348
-sensitive), digits and 17 kinds of special characters. The special characters are By default, it is empty. By default, it is empty. The password in the configuration file will be displayed in the The password will be displayed in the encrypted form. Switch(config)#enable admin secret 0 abc123 327 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 349
Privilege Requirement Only User, Power User and Operator level users have access to these commands. Example Get the administrative privelges (the Enable password is "123456"): Switch# enable-admin Password: 123456 328 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 350
802.1x function is to provide an access control for LAN ports via the authentication. An 802.1x system include three entities: supplicant. It is usually an 802.1x-supported network device, such as this TP-Link switch. It acts as an intermediary (proxy) : Switch(config)#dot1x system-auth-control 329 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 351
is used to detect the connection status between the TP-Link 802.1x supplicant and the switch. Please disable the handshake feature if you are using a non-TP-Link 802.1x-compliant client software. This feature is enabled by default. Syntax dot1x handshake no dot1x handshake Command Mode Global - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 352
a technology allowing the RADIUS server to send the VLAN assignment to the port when the port is authenticated. If the assigned VLAN does not exist on the switch, the switch will create the related VLAN automatically, add the authenticated port to the VLAN and change the PVID based on the assigned - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 353
Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Enable the VLAN assignment feature: Switch(config)#dot1x vlan-assignment 37.5 dot1x accounting Description The dot1x accounting command is used to enable the IEEE 802.1x accounting function - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 354
MAB feature on the Gigabit Ethernet port 1/0/1: Switch(config)#interface gigabitEthernet 1/0/1 Switch(config-if)#dot1x mab 37.7 dot1x guest-vlan Description The dot1x guest-vlan command is used to configure the Guest VLAN function on the port. To disable the Guest VLAN function, please use no dot1x - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 355
Example Enable the Guest VLAN function for VLAN 5 and set the VLAN ID as 20 on the Gigabit Ethernet port 1/0/1:: Switch(config)#interface gigabitEthernet 1/0/1 Switch(config-if)#dot1x guest-vlan 5 37.8 dot1x quiet-period time. It ranges from 1 to 999 seconds and the default value is 10 seconds. 334 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 356
the Gigabit Ethernet port 1/0/1: Switch(config)#interface gigabitEthernet 1/0/1 Switch(config-if)#dot1x quiet-period 5 37.9 dot1x timeout supp-timeout Description The dot1x timeout supp-timeout command is used to configure the supplicant timeout on the port. To restore to the default, please use no - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 357
to these commands. Example Configure the maximum transfer times of the repeated authentication request as 5 on the Gigabit Ethernet port 1/0/1: Switch(config)#interface gigabitEthernet 1/0/1 Switch(config-if)#dot1x max-req 5 37.11 dot1x Description The dot1x command is used to enable the IEEE 802.1x - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 358
.1x function for the Gigabit Ethernet port 1: Switch(config)#interface gigabitEthernet 1/0/1 Switch(config-if)#dot1x 37.12 dot1x port-control Description The dot1x port-control command is used to configure the Control Mode of IEEE 802.1x for the specified port. By default, the control mode is "auto - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 359
as "authorized-force": Switch(config)#interface gigabitEthernet 1/0/20 Switch(config-if)#dot1x port-control authorized-force 37.13 dot1x port-method Description The dot1x port-method command is used to configure the control type of IEEE 802.1x for the specified port. By default, the control type is - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 360
range gigabitEthernet) Privilege Requirement None. Example Initialize the client whose MAC address is a 00:02:58:4f:6c:23 on port 1: Switch(Config)# interface gigabitEthernet 1/0/1 Switch(Config-if)#dot1x auth-init mac 00:02:58:4f:6c:23 37.15 dot1x auth-reauth Description The dot1x auth-reauth - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 361
range gigabitEthernet) Privilege Requirement None. Example Reauthenticate the client whose MAC address is a 00:02:58:4f:6c:23 on port 1: Switch(Config)# interface gigabitEthernet 1/0/1 Switch(Config-if)#dot1x auth-reauth mac 00:02:58:4f:6c:23 37.16 show dot1x global Description The show dot1x global - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 362
Example Display the configuration information of 801.X for Gigabit Ethernet port 20: Switch(config)#show dot1x interface gigabitEthernet 1/0/20 Display the configuration information of 801.X for all Ethernet ports: Switch(config)#show dot1x interface 37.18 show dot1x auth-state interface Description - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 363
Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the authentication status of each port: Switch(config)#show dot1x auth-state interface 342 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 364
the maximum number of MAC addresses that can be learned on port 1/0/1 as 30, enable exceed-max-leaned feature and configure the mode as permanent and the status as drop: Switch (config)#interface gigabitEthernet 1/0/1 Switch(config-if)#mac address-table max-mac-count max-number 30 exceed-maxlearned - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 365
-table max-mac-count interface { fastEthernet port | gigabitEthernet port | ten-gigabitEthernet port } Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the port security configuration on port 1/0/1 Switch# show mac address-table max-mac-count - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 366
port. It does not affect the switching of network traffic on source ports, LAGs or the CPU. Usually, the monitoring port is connected to data diagnose device, which is used to analyze the monitored packets for monitoring and troubleshooting configure port 1/0/1 as the monitoring port: Switch(config)# - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 367
interface gigabitEthernet 1/0/2 Delete the monitor session 1: Switch(config)# no monitor session 1 39.2 monitor session source 1. cpu_number -- The CPU number. It can only be specified as 1. port-list -- List of the Ethernet port number. It is multi-optional. lag-list -- List of LAG interfaces. It - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 368
port and monitored ports are in the same VLAN or not is not demanded strictly. 4. The monitoring port and monitored ports cannot be link-aggregation member. Example Create monitor session 1, then configure port 4, 5, 7 as monitored port and enable ingress monitoring: Switch(config)# monitor - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 369
Switch(config)# show monitor session 1 348 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 370
an ACL ID. The IDs for MAC ACL are from 0 to 499. The IDs for IP ACL are from 500 to 999. The IDs for Combined ACL are from 1000 to 1499. The users have access to these commands. Example Create an IP ACL whose ID is 523: Switch(config)# access-list create 523 40.2 access-list resequence Description - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 371
of ACL 12 with the start ID as 1 and step value as 5: Switch(config)# access-list resequence 12 start 1 step 5 40.3 access-list mac destination-mac dmask destination-mac-mask ] [type ether-type] [pri dot1p-priority] [vid vlan-id] [tseg time-range-name] no access-list mac acl-id-or-name rule rule - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 372
. The default is No Limit. Command Mode Global Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Create MAC ACL 50 and configure Rule 5 to permit packets with source MAC address 00:34:a2:d4:34:b5: Switch (config)#access - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 373
port s-port-number] [s-port-mask s-port-mask] [d-port d-port-number] [d-port-mask d-port-mask] [tcpflag tcpflag]] [tseg time-range-name] no access-list ip Specify the action to be taken with the packets that match the rule. By default, it is set to permit. The packets will be discarded if "deny" is - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 374
and Power User level users have access to these commands. Example Create IP ACL 600, and configure Rule 1 to permit packets with source IP address 192.168.1.100: Switch (config)#access-list create 600 Switch (config)#access-list ip 600 rule 1 permit logging disable sip 192.168.1.100 sip-mask 255 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 375
vlan-id] [type ether-type] [pri priority] [sip source-ip-address sip-mask source-ip-mask]] [dip destination-ip-address dip-mask destination-ip-mask] [dscp dscp-value] [tos tos-value] [pre pre-value] [protocol protocol [s-port s-port-number s-port-mask s-port-mask] [d-port d-port-number d-port default - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 376
. The default is No Limit. Command Mode Global Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Create Combined ACL 1100 and configure Rule 1 to deny packets with source IP address 192.168.3.100 in VLAN 2: Switch(config - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 377
source-ip-address sip-mask source-ip-mask] [dip destination-ip-address dip-mask destination-ip-mask] [s-port source-port-number] [d-port destination-port- Specify the action to be taken with the packets that match the rule. By default, it is set to permit. The packets will be discarded if "deny" is - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 378
an IPv6 ACL to a VLAN or interface, you should configure the SDM template as "enterpriseV6" and save your configurations. Example Create IPv6 ACL 1600 and configure Rule 1 to deny packets with source IPv6 address CDCD:910A:2222:5498:8475:1111:3900:2020: Switch(config)# access-list create 1600 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 379
default is All. Command Mode Action Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Define the policy to redirect the matched packets to port 1/0/1 for rule 1 of ACL 6: Switch(config)# access-list action 6 rule 1 Switch - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 380
whose rate is beyond the specified rate. The default is None. Command Mode Action Configuration Mode Switch(config-action)# s-condition rate 1000 burst 100 osd discard 40.10 s-mirror Description The s-mirror command is used to define the policy to mirror the matched packets to the desired port - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 381
mirror port as Gigabit Ethernet port 1/0/2 for the data packets matching this rule: Switch(config)#access-list action 6 rule 1 Switch(config-action data packets matching the corresponding ACL. DSCP ranges from 0 to 63. By default, it is not limited. pri -- Local Priority of QoS Remark. Specify the - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 382
: Switch(config)#access-list action 6 rule 1 Switch(config-action vlan vlan-list ] | [ fastEthernet port-list ] | [gigabitEthernet port-list ] | [ ten-gigabitEthernet port-list ] } no access-list bind acl-id-or-name interface { [ vlan vlan-list ] | [ fastEthernet port-list ] | [gigabitEthernet port - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 383
Example Bind ACL 1 to port 3 and VLAN 4: Switch(config)#access-list bind 1 interface vlan 4 gigabitEthernet 1/0/3 40.13 show access-list None. Example Display the configuration of the MAC ACL whose ID is 20: Switch(config)# show access-list 20 40.14 show access-list bind Description The show access - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 384
-list status Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the usage status of ACL entry resource: Switch(config)# show access-list status 40.16 show access-list counter Description The show access-list counter command is used to display the - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 385
-- The ID of the rule. Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Clear the packet counter of ACL 100: Switch(config)# clear access-list 100 364 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 386
source to filter the packets. 41.1 ip source binding Description The ip source binding command is used to bind the IP address, MAC address, VLAN ID and the Port number together manually. You can manually bind the IP address, MAC address, VLAN ID and the Port number together in the condition that you - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 387
ID 2 and the Port number 5 manually. And then enable the entry for the ARP detection: Switch(config)#ip source binding host1 192.168.0.1 00:00:00:00:00:01 vlan 2 interface gigabitEthernet 1/0/5 arp-detection Delete the IP-MAC-VID-PORT entry with the index 5: Switch(config)#no ip source binding index - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 388
function on VLAN 1,4,6-7: Switch(config)#ip dhcp snooping vlan 1,4,6-7 41.4 ip dhcp snooping max-entries Description The ip dhcp snooping max-entries command is used to configure the maximum number of entries that can be learned on a port via DHCP Snooping. To restore to the default setting, please - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 389
number of entries that can be learned on port 1 as 100: Switch(config)#interface gigabitEthernet 1/0/1 Switch(config-if)#ip dhcp snooping max-entries 100 41.5 show ip source binding Description The show ip source binding command is used to display the IP-MAC-VIDPORT binding table. Syntax show - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 390
Snooping: Switch#show ip dhcp snooping 41.7 show ip dhcp snooping interface Description The show ip dhcp snooping interface command is used to display the DHCP Snooping configuration of a desired Gigabit Ethernet port/port channel or of all Ethernet ports/port channels. Syntax show ip dhcp snooping - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 391
Example Display the DHCP Snooping configuration of all Ethernet ports and port channels: Switch#show ip dhcp snooping interface Display the DHCP Snooping configuration of Gigabit Ethernet port 1/0/5: Switch#show ip dhcp snooping interface gigabitEthernet 1/0/5 370 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 392
be the condition for the ARP Inspection and IP verify source to filter the packets. 42.1 Ipv6 source binding Description The ipv6 source binding command is used to bind the IPv6 address, MAC address, VLAN ID and the Port number together manually. You can manually bind the IPv6 address, MAC address - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 393
address AA-BB-CC-DD-EE-FF, VLAN ID 10, port number 1/0/5, and enable this entry for ND Detection. Switch(config)# ipv6 source binding host1 2001:0:9d38:90d5::34 the Host obtaining the IP address from DHCPv6 server, and record the IPv6 address, MAC address, VLAN and the connected Port number of the - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 394
1,4,6-7: Switch(config)#ipv6 dhcp snooping vlan 1,4,6-7 42.4 ipv6 dhcp snooping max-entries Description The ipv6 dhcp snooping max-entries command is used to configure the maximum number of entries that can be learned on a port via DHCPv6 Snooping. To restore to the default setting, please use no - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 395
number of entries that can be learned on port 1 as 100: Switch(config)#interface gigabitEthernet 1/0/1 Switch(config-if)#ipv6 dhcp snooping max-entries 100 42 detection, and record the IPv6 address, MAC address, VLAN and the connected Port number of the Host for automatic binding. Syntax ipv6 nd - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 396
Switch(config)#ipv6 nd snooping vlan 1,4,6-7 42.7 ipv6 nd snooping max-entries Description The ipv6 nd snooping max-entries command is used to specify the maximum number of binding entries that are allow to be bound to a port. To return the default, please use no ipv6 nd snooping max-entries - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 397
access to these commands. Example Configure the maximum number of binding entries from ND Snooping of Gigabit Ethernet port 1/0/2 is 100: Switch(config)#interface gigabitEthernet 1/0/2 Switch(config-if)#ipv6 nd snooping max-entries 100 42.8 show ipv6 source binding Description The show ipv6 source - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 398
Switch(config)#show ipv6 source binding 42.9 show ipv6 dhcp port/port channel or of all Ethernet ports/port channels. Syntax show ipv6 dhcp snooping interface [ gigabitEthernet port | port-channel port-channel-id ] Parameters port -- The Ethernet port number. port-channel-id -- The ID of the port - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 399
None. Example Display the DHCPv6 Snooping configuration of all Ethernet ports and port channels: Switch#show ipv6 dhcp snooping interface Display the DHCPv6 Snooping configuration of Gigabit Ethernet port 1/0/5: Switch#show ipv6 dhcp snooping interface gigabitEthernet 1/0/5 42.11 show ipv6 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 400
rules can be processed. sip -- Security type. "sip" indicates that only the packets with its source IP address and port number matched to the IP-MAC binding rules can be processed. Command Mode Interface Configuration Mode (interface gigabitEthernet / interface range gigabitEthernet) Privilege - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 401
log feature to make the switch generate logs when receiving illegal packets: Switch(config)#ip verify source logging 43.3 show ip verify source Description The show ip verify source command is used to display the IP Verify Source configuration information. Syntax show ip verify source Command Mode - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 402
Switch(config)#show ip verify source 43.4 show ip verify source interface Description The show ip verify source interface command is used to display the IP verify source configuration of a desired Gigabit Ethernet port. Syntax show ip verify source interface [fastEthernet port | gigabitEthernet port - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 403
your configurations. 44.1 ipv6 verify source Description The ipv6 verify source command is used to configure the IPv6 Verify Source mode for a specified port. To disable the IPv6 Verify Source function, please use no ipv6 verify source command. Syntax ipv6 verify source { sipv6+mac | sipv6 } no ipv6 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 404
address and port number matched to the IPv6-MAC binding rules can be processed: Switch(config)#interface range gigabitEthernet 1/0/5-10 Switch(config-if-range)#ipv6 verify source sipv6+mac 44.2 show ipv6 verify source Description The show ipv6 verify source command is used to display the IPv6 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 405
Privilege Requirement None. Example Display the IPv6 verify source configuration of Gigabit Ethernet port 1/0/5: Switch#show ipv6 verify source interface gigabitEthernet 1/0/5 384 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 406
DHCP Filter function globally: Switch(config)#ip dhcp filter 45.2 ip dhcp filter (interface) Description The ip dhcp filter (interface) command is used to enable DHCP Filter function on a specified port. To disable DHCP Filter function on this port, please use no ip dhcp filter (interface) command - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 407
User level users have access to these commands. Example Enable the DHCP Filter on port 1/0/1 Switch(config)#interface gigabitEthernet 1/0/1 Switch(Config-if)#ip dhcp filter 45.3 ip dhcp filter mac-verify Description The ip dhcp filter mac-verify command is used to enable the MAC Verify feature. To - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 408
port 10/2: Switch(config)#interface gigabitEthernet 1/0/2 Switch(config-if)#ip dhcp filter mac-verify 45.4 ip dhcp filter limit rate Description The ip restore to the default configuration, please use no ip dhcp filter limit rate command. Syntax ip dhcp filter limit rate value no ip dhcp filter limit - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 409
port 1/0/2: Switch(config)#interface gigabitEthernet 1/0/2 Switch(config-if)#ip dhcp filter decline 20 45.6 ip dhcp filter server permit-entry Description The ip dhcp filter server permit-entry command is used to add entry for the legal DHCP server. To restore to the default option, please use no ip - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 410
commands. Example Create an entry for the legal DHCPv4 server whose IP address is 192.168.0.100 and connected port number is 1/0/1 without client MAC address restricted: Switch(config)#ip dhcp filter server permit-entry server-ip 192.168.0.100 client-mac all interface gigabitEthernet 1/0/1 45.7 show - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 411
Mode Privilege Requirement None. Example Display the DHCP Filter configuration on port 1/0/3: Switch#show ip dhcp filter interface gigabitEthernet 1/0/3 45.9 show ip dhcp filter server permit-entry Description The show ip dhcp filter server permit-entry command is used to display the legal - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 412
Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the legal DHCP server configuration: Switch#show ip dhcp filter server permit-entry 391 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 413
more DHCPv6 servers are present on the network and both provide DHCPv6 services to different distinct groups of clients. 46.1 ipv6 dhcp filter Description these commands. Example Enable the DHCPv6 Filter function globally: Switch(config)#ipv6 dhcp filter 46.2 ipv6 dhcp filter (interface) Description - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 414
commands. Example Enable the DHCPv6 Filter on port 1/0/1 Switch(config)#interface gigabitEthernet 1/0/1 Switch(Config-if)#ipv6 dhcp filter 46.3 ipv6 dhcp The options are 5/10/15/20/25/30 (packet/second). The default value is 0, which stands for "disable". Command Mode Interface Configuration Mode - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 415
Example Set the Flow Control of GigabitEthernet port 2 as 20 pps: Switch(config)#interface gigabitEthernet 1/0/2 Switch(config-if)#ipv6 dhcp filter limit rate 20 10, 15, 20, 25 and 30 (units:packet/second). It default value is 0, which stands for "disable". Command Mode Interface Configuration Mode - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 416
Ethernet port 1/0/2: Switch(config)#interface gigabitEthernet 1/0/2 Switch(config-if)#ipv6 dhcp filter decline 20 46.5 ipv6 dhcp filter server permit-entry Description The ipv6 dhcp filter server permit-entry command is used to add entry for the legal DHCPv6 server. To restore to the default option - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 417
filter interface [fastEthernet port | gigabitEthernet port | ten-gigabitEthernet port | port-channel port-channel-id ] Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the DHCPv6 Filter configuration on port 1/0/3: Switch#show ipv6 dhcp filter - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 418
46.8 show ip dhcp filter server permit-entry Description The show ipv6 dhcp filter server permit-entry command is used EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the legal DHCPv6 server configuration: Switch#show ipv6 dhcp filter server permit-entry 397 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 419
the evil programs sending a lot of service requests to the Host. With the DoS Defend enabled, the switch can analyze the specific field of the Example Enable the DoS defend function globally: Switch(config)#ip dos-prevent 47.2 ip dos-prevent type Description The ip dos-prevent type command is used to - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 420
less-1024 | blat | ping-flood | syn-flood | win-nuke | ping-of-death | smurf } no ip dos-prevent type { land | scan-synfin | xma-scan | null-scan | port-less-1024 | blat | ping-flood | syn-flood | win-nuke | ping-of-death | smurf } Parameter land --The attacker sends a specific fake SYN (synchronous - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 421
Power User level users have access to these commands. Example Enable the DoS Defend Type named Land attack: Switch(config)#ip dos-prevent type land 47.3 show ip dos-prevent Description The show ip dos-prevent command is used to display the DoS information of the detected DoS attack, including enable - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 422
Example Display the DoS information of the detected DoS attack globally: Switch(config)#show ip dos-prevent 401 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 423
When a unidirectional link is detected, the corresponding port will be shut down automatically or manually (depending on the shut mode configured). 48.1 dldp (global) commands. Example Enable the DLDP function globally: Switch(config)# dldp 48.2 dldp interval Description The dldp interval command is - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 424
: Switch(config)# dldp interval 10 48.3 dldp shut-mode Description The dldp shut-mode command is used to configure the shutdown mode when a unidirectional link is detected. Syntax dldp shut-mode { auto | manual } Parameter auto -- The switch automatically shuts down ports when a unidirectional link - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 425
Admin and Operator level users have access to these commands. Example Enable the DLDP function of ports 1/0/2-4: Switch (config)# interface range gigabitEthernet 1/0/2-4 Switch (config-if-range)# dldp 48.5 show dldp Description The show dldp command is used to display the global configuration of - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 426
Switch# show dldp 48.6 show dldp interface Description The show dldp interface command is used to display the configuration and state of the specified Ethernet port. By default, the configuration and state of all the ports will be displayed. Syntax show dldp interface [gigabitEthernet port ] - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 427
. To return to the default configuration, please use no snmp-server command. Syntax snmp-server no snmp-server Command Mode Global Configuration Mode Privilege Requirement Only Admin level users have access to these commands. Example Enable the SNMP function: Switch(config)# snmp-server 49.2 snmp - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 428
commands. Example Add a View named view1, configuring the OID as 1.3.6.1.6.3.20, and this OID can be managed by the SNMP management station: Switch(config)# snmp-server view view1 1.3.6.1.6.3.20 include 49.3 snmp-server group Description The snmp-server group command is used to manage and configure - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 429
authentication algorithm and a privacy algorithm are applied to check and encrypt packets). By default, the Security Level is noAuthNoPriv. There is no need to configure this in View viewDefault can be received by Management station: Switch(config)# snmp-server group group1 smode v3 slev authNoPriv - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 430
used to add User. To delete the corresponding User, please use no snmp-server user command. The User in an SNMP Group can manage the switch via the management station software. The User and its Group have the same security level and access right. Syntax snmp-server user name { local | remote - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 431
the port authentication is performed via SHA (Secure Hash Algorithm). SHA authentication mode has a higher security than MD5 mode. By default, 11111, the Privacy Mode as DES, and the Privacy Password as 22222: Switch(config)# snmp-server user admin local group2 smode v3 slev authPriv cmode MD5 cpwd - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 432
View viewDefault: Switch(config)# snmp-server ip user-name Parameter ip -- The IP Address of the management Host. Both IPv4 and IPv6 addresses are supported, for example 192.168.0.100 or fe80::1234. udp-port -- UDP port, which is used to send notifications. The UDP port functions with the IP - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 433
and v3 options. By default, the option is v1 port as 162, the User name of the management station as admin, the Security Model of the management station as v2c, the type of the notifications as inform, the maximum time for the switch to wait as 1000 seconds, and the retries time as 100: Switch(config - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 434
time as 100: Switch(config)# snmp-server host fe80::1234 162 admin smode v2c type inform retries 100 timeout 1000 49.7 snmp-server engineID Description The snmp-server engineID command is used to configure the local and remote engineID of the switch. To restore to the default setting, please use - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 435
Switch(config all SNMP standard traps. All SNMP standard traps are enabled by default. To disable the sending of SNMP standard traps, please use no when you disconnect a device to a port. warmstart -- Indicates the SNMP feature on the switch is reinitialized with the physical configuration unchanged. - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 436
and packets are sent to the port with a rate higher than what you have set. cpu --Monitors the load status of the switch CPU. The trap can be rate for the switch is 80% by default. flash --Triggered when flash is modified during operations such as backup, reset, firmware upgrade, configuration import - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 437
commands. Example Enable SNMP extended bandwidth-control trap for the switch: Switch(config)# snmp-server traps bandwidth-control 49.10 snmp-server traps vlan Description The snmp-server traps vlan command is used to enable the corresponding VLAN traps. The command without parameter enables all SNMP - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 438
Switch(config)# snmp-server traps vlan create 49.11 snmp-server traps security Description The snmp-server traps security command is used to enable the corresponding security traps. To disable this feature, please use no snmp-server traps security command. All security traps are disabled by default - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 439
the ACL trap for the switch: Switch(config)# snmp-server traps acl 49.13 snmp-server traps ip Description The snmp-server traps ip command is used to enable IP traps. To disable this feature, please use no snmp-server traps ip command. All IP traps are disabled by default. Syntax snmp-server traps - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 440
Admin level users have access to these commands. Example Enable the IP-Change trap for the switch: Switch(config)# snmp-server traps ip change 49.14 snmp-server traps power (Only for Certain Devices) Note: Only certain devices support this command. Description The snmp-server traps power command is - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 441
Enable all PoE traps for the switch: T1600G-28MPS(config)# snmp-server traps power 49.15 snmp-server traps link-status Description The snmp-server traps link-status command is used to enable SNMP link status trap for the specified port. To disable the sending of SNMP link status trap, please use no - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 442
1 to 130. The default is 50 buckets. Command Mode Global Configuration Mode Privilege Requirement Only Admin level users have access to these commands. Example Configure the sample port as Gi1/0/2 and the sample interval as 100 seconds for the entry 1-3: Switch(config)# rmon history 1-3 interface - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 443
command is used to configure the entries of SNMP-RMON Event. To return to the default configuration, please use no rmon event command. Event Group, as one of the as log and the owner of the event as owner1: Switch(config)# rmon event 1-4 user user1 description description1 type log owner owner1 422 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 444
monitored variable exceeds the threshold, an alarm event is generated, which triggers the switch to act in the set way. Syntax rmon alarm index { stats-index -- Specify the statistics index. alarm-variable -- The alarm variable. By default, the option is revbyte. s-type -- Sample Type, which is the - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 445
. By default, it is 1800. Command Mode Global Configuration Mode Privilege Requirement Only Admin level users have access to these commands. Example Configure rmon alarm entries 1-3 binding with statistics entry 2, the owners as owner1 and the alarm intervals as 100 seconds: Switch(config)#rmon - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 446
creator of the event entry, ranging from 1 to 16 characters. By default, it is "monitor". status -- The status of the statistics entry, statistics entries 1-3 with the statistics port as 1/0/1, owner as owner1 and status as valid: Switch(config)#rmon statistics 1-3 interface gigabitEthernet 1/0/1 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 447
Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement Only Admin level users have access to these commands. Example Display the Group table: Switch# show snmp-server group 49.23 show snmp-server user Description The show snmp-server user command is used to display the User table - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 448
Privileged EXEC Mode and Any Configuration Mode Privilege Requirement Only Admin level users have access to these commands. Example Display the Community table: Switch# show snmp-server community 49.25 show snmp-server host Description The show snmp-server host command is used to display the Host - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 449
users have access to these commands. Example Display the engineID: Switch# show snmp-server engineID 49.27 show rmon history Description The 1-3, 5. You can select more than one entry for each command. By default, the configuration of all history sample entries is displayed. Command Mode Privileged - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 450
1-3, 5. You can select more than one entry for each command. By default, the configuration of all SNMP-RMON enabled entries is displayed. Command Mode access to these commands. Example Display the Event configuration of entry1-4: Switch# show rmon event 1-4 49.29 show rmon alarm Description The - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 451
commands. Example Display the configuration of the Alarm Management entry 1-2: Switch# show rmon alarm 1-2 49.30 show rmon statistics Description selected to display the configuration, ranging from 1 to 65535. By default, the configuration of all statistics entries is displayed. Command Mode - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 452
IP config)# power inline consumption 160 50.2 power profile Description The power profile command is used to create a PoE profile for the switch. To delete the configured PoE profile configuration, please use no power profile command. PoE Profile is a short cut for the configuration of the PoE port - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 453
, the PD linked to the port with lower priority will be disconnected. By default, the PoE priority is "low". consumption -- The max power the port in the profile is "low" and the power limit is "5w": Switch(config)# power profile "IP Camera" supply enable priority low consumption 50 50.3 power - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 454
port in the profile can supply, with five options: "power-limit", "auto", "class1", "class2", "class3" and "class4". "Power-limit" indicates you can manually port 2: Switch(config)# interface gigabitEthernet 1/0/2 Switch(config linked to the port with lower priority will be disconnected. By default, - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 455
of the port. By default, the PoE status is "enable". Command Mode Interface Configuration Mode (interface gigabitEthernet / interface range gigabitEthernet) Privilege Requirement None. Example Enable the PoE feature for port 2: Switch(config)# interface gigabitEthernet 1/0/2 Switch(config-if)# power - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 456
/ interface range gigabitEthernet) Privilege Requirement None. Example Bind the PoE profile named "IP Camera" to port 2: Switch(config)# interface gigabitEthernet 1/0/2 Switch(config-if)# power inline profile "IP Camera" 50.7 power inline time-range Description The power inline time-range command - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 457
Switch(config)# interface gigabitEthernet 1/0/2 Switch(config-if)# power inline time-range tRange2 50.8 show the certain port. Syntax show power inline configuration interface [ fastEthernet port | gigabitEthernet port | ten-gigabitEthernet port ] Parameter port -- The Ethernet port number. Command - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 458
number. Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the PoE information of all ports: Switch# show power inline information interface 50.11 show power profile Description The show power profile command is used to display the defined PoE - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 459
Example Display the defined PoE profile: Switch# show power profile 438 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 460
have access to these commands. Example Enable the ARP Detection function globally: Switch(config)#ip arp inspection 51.2 ip arp inspection validate Description The ip arp inspection validate command is used to enable the switch to check whether the reveided ARP packet is illegal. To disable,the - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 461
an ARP packet Switch(config)#ip arp inspection validate src-mac 51.3 ip arp inspection vlan Description The ip arp inspection vlan command is used to enable the ARP Detection function on VLANs. To disable the ARP Detection function on VLANs, please use no ip arp detection vlan command. Syntax ip arp - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 462
and Power User level users have access to these commands. Example Enable the ARP Detection function on VLAN 2: Switch(config)#ip arp inspection vlan 2 51.4 ip arp inspection vlan logging Description The ip arp inspection vlan logging command is used to enable the Log function on the specific - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 463
Trusted Port: Switch(config)#interface range gigabitEthernet 1/0/2-5 Switch(config-if-range)#ip arp inspection trust 51.6 ip arp inspection limit-rate Description The ip arp inspection limit-rate command is used to configure the ARP speed of a specified port. To restore to the default speed, please - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 464
Ethernet port 5: Switch(config)#interface gigabitEthernet 1/0/5 Switch(config-if)#ip arp inspection limit-rate 50 51.7 ip arp inspection burst-interval Description The ip arp inspection burst-interval command is used to configure the burst interval of a specified port. To restore to the default - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 465
burst interval as 2 seconds for Gigabit Ethernet port 5: Switch(config)#interface gigabitEthernet 1/0/5 Switch(config-if)#ip arp inspection burst-interval 2 51.8 ip arp inspection recover Description The ip arp inspection recover command is used to restore a port to the ARP transmit status from the - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 466
Mode and Any Configuration Mode Privilege Requirement None. Example Display the configuration of Gigabit Ethernet port 1/0/1: Switch(config)#show ip arp inspection interface gigabitEthernet 1/0/1 Display the configuration of all Ethernet ports: Switch(config)#show ip arp inspection interface 445 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 467
Any Configuration Mode Privilege Requirement None. Example Display the ARP Inspection configuration of VLAN: Switch(config)#show ip arp inspection vlan 51.12 show ip arp inspection statistics Description The show ip arp inspection statistics command is used to display the number of the illegal ARP - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 468
Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Clear the statistic of the illegal ARP packets received: Switch(config)#clear ip arp inspection statistics 447 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 469
Example Enable the ND Detection function globally: Switch(config)#ipv6 nd detection 52.2 ipv6 nd detection vlan Description The ipv6 nd detection vlan command is used to enable ND Detection function on a specified VLAN. To disable ND Detection function on this VLAN, please use no ipv6 nd detection - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 470
Mode Global Configuration Mode Example Enable the Log function on VLAN 1,4,6-7: Switch(config)#ipv6 nd detection vlan 1,4,6-7 logging 52.4 ipv6 nd detection trust Description The ipv6 nd detection trust command is used to configure the port for which the ND Detection function is unnecessary as the - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 471
(interface gigabitEthernet / interface range gigabitEthernet/ interface port-channel / interface range port-channel) Example Configure the Gigabit Ethernet ports 1/0/2-5 as the Trusted Port: Switch(config)#interface range gigabitEthernet 1/0/2-5 Switch(config-if-range)#ipv6 nd detection trust 52 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 472
Display the configuration of Gigabit Ethernet port 1/0/1: Switch(config)#show ipv6 nd detection interface gigabitEthernet 1/0/1 Display the configuration of all Ethernet ports: Switch(config)#show ipv6 nd detection interface 52.7 show ipv6 nd detection vlan Description The show ipv6 nd detection - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 473
operation of the switch respectively for you Local Log is the system log information saved in the switch. It has two output channels, that is, it command. It will be lost when the switch is restarted. Syntax logging buffer no logging the system log buffer: Switch(config)#logging buffer 53.2 logging - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 474
(config)#logging buffer level 5 53.3 logging file flash Description The logging file flash command is used to store the log messages in a file in the flash on the switch. To disable the log file flash function, please use no logging file flash command. This function is disabled by default. The log - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 475
these commands. Example Enable the log file flash function: Switch(config)#logging file flash 53.4 logging file flash frequency Description The file in the log buffer to the flash, ranging from 1 to 48 hours. By default, the synchronization process takes place every 24 hours. immediate -- The system - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 476
this value will be stored to the flash. To restore to the default level, please use no logging file flash level command. Syntax logging file messages with their severities equal or higher than 7 to the flash : Switch(config)#logging file flash level 7 53.6 logging host index Description The logging - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 477
, the level 5: Switch(config)# logging host index 2 192.168.0.148 5 53.7 logging console Description The logging console command is used to send the system logs to the console port. To disable logging to the console, please use no logging console command. This function is enabled by default. Syntax - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 478
port: Switch(config)# logging console 53.8 logging console level Description The logging console level command is used to limit messages logged to the console port. System logs no higher than the set threshold level will be displayed on the console port. To restore the threshold level to default - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 479
please use no logging monitor command. This function is enabled by default. Syntax logging monitor no logging monitor Command Mode Global Configuration to these commands. Example Disable logging to the terminal devices: Switch(config)# no logging monitor 53.10 logging monitor level Description The - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 480
information with severity levels between 0-7 to the terminal devices: Switch(config)# logging monitor level 7 53.11 clear logging Description The and flash. Clear the information of the two channels, by default. Command Mode Global Configuration Mode Privilege Requirement Only Admin and Operator - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 481
None. Example Display the configuration of the Local Log: Switch(config)# show logging local-config 53.13 show logging loghost Description The show logging the configuration of all the log hosts by default. Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. 460 - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 482
. Display all the log information in the log buffer by default. Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the log information from level 0 to level 5 in the log buffer: Switch(config)# show logging buffer level 5 53.15 show logging flash - TP-Link T1600G-28TS | T1600G-18TSUN V2 CLI Reference Guide Guide - Page 483
information of levels with priority not lower than the select level will display. Display all the log information in the log file by default. Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the log information with the level marked 0-3 in the
CLI Reference Guide
Jetstream Smart Switches
1910012776 REV4.3.0
June 2020