TP-Link T1600G-52TSTL-SG2452 T1600G-52TS V1 CLI Reference Guide
TP-Link T1600G-52TSTL-SG2452 Manual
View all TP-Link T1600G-52TSTL-SG2452 manuals
Add to My Manuals
Save this manual to your list of manuals |
TP-Link T1600G-52TSTL-SG2452 manual content summary:
- TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 1
T1600G-52TS (TL-SG2452) JetStream Gigabit Smart Switch REV1.0.0 1910011156 - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 2
COPYRIGHT & TRADEMARKS Specifications are subject to change without notice. is a registered trademark of TP-LINK TECHNOLOGIES CO., LTD. Other brands and product names are trademarks or registered trademarks of their respective holders. No part of the specifications may be reproduced in any form - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 3
...13 1.4.1. Format Conventions 13 1.4.2. Special Characters 13 1.4.3. Parameter Format 13 Chapter 2 User Interface 14 2.1 enable ...14 2.2 service password-encryption 14 2.3 enable password...15 2.4 enable secret ...16 2.5 disable ...17 2.6 configure ...17 2.7 exit ...17 - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 4
4.1 voice vlan...25 4.2 voice vlan aging ...25 4.3 voice vlan priority ...26 4.4 voice vlan mac-address 26 4.5 switchport voice vlan mode 27 4.6 switchport voice vlan security 28 4.7 show voice vlan ...28 4.8 show voice vlan oui 29 4.9 show voice vlan switchport 29 Chapter 5 - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 5
address-table count 63 show mac address-table address 63 show mac address-table vlan 64 Chapter 11 System Configuration Commands 65 11.1 system-time manual 65 11.2 system-time ntp ...65 11.3 system-time dst predefined 67 IV - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 6
11.4 11.5 11.6 11.7 11.8 11.9 11.10 11.11 11.12 11.13 11.14 11.15 11.16 11.17 11.18 11.19 11.20 11.21 11.22 11.23 11.24 11.25 11.26 11.27 11.28 11.29 11.30 system-time dst date 68 system-time dst recurring 69 hostname ...70 location ...70 contact-info ...71 ip address ...71 ip address-alloc ...72 - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 7
13.1 13.2 13.3 13.4 13.5 13.6 13.7 13.8 13.9 13.10 13.11 13.12 13.13 13.14 13.15 13.16 13.17 interface gigabitEthernet 90 interface range gigabitEthernet 90 description ...91 shutdown ...91 flow-control ...92 duplex ...92 jumbo ...93 speed ...94 storm-control pps ...94 storm-control...95 - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 8
Chapter 17 Loopback Detection Commands 113 17.1 loopback-detection(global 113 17.2 loopback-detection interval 113 17.3 loopback-detection recovery-time 114 17.4 loopback-detection(interface 114 17.5 loopback-detection config 115 17.6 loopback-detection recover 116 17.7 show loopback- - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 9
20.6 20.7 20.8 20.9 20.10 20.11 20.12 20.13 20.14 20.15 20.16 20.17 20.18 20.19 20.20 20.21 20.22 20.23 20.24 20.25 20.26 20.27 spanning-tree mst configuration 132 instance ...133 name ...134 revision ...134 spanning-tree mst instance 135 spanning-tree mst 135 spanning-tree priority 136 - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 10
21.15 21.16 21.17 21.18 21.19 21.20 21.21 21.22 21.23 21.24 21.25 21.26 21.27 ip igmp profile ...155 deny ...156 permit ...156 range...157 ip igmp filter ...157 clear ip igmp snooping statistics 158 show ip igmp snooping 158 show ip igmp snooping interface 159 show ip igmp snooping vlan 159 - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 11
22.24 22.25 22.26 22.27 show ipv6 mld snooping multi-vlan 177 show ipv6 mld snooping groups 177 show ipv6 mld snooping querier 178 show ipv6 mld profile 178 Chapter 23 SNMP Commands 180 23.1 23.2 23.3 23.4 23.5 23.6 23.7 23.8 23.9 23.10 23.11 23.12 23.13 23.14 23.15 23.16 23.17 23.18 23.19 - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 12
24.4 show arp ...201 24.5 show ip arp (interface 202 24.6 show ip arp summary 202 Chapter 25 Static Routes Commands 204 25.1 25.2 25.3 25.4 25.5 25.6 25.7 25.8 25.9 25.10 25.11 25.12 interface vlan ...204 interface loopback 204 switchport...205 shutdown ...205 ip route ...206 description ... - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 13
for network administrator to provide referenced information about CLI (Command Line Interface). The device mentioned in this Guide stands for T1600G-52TS JetStream Gigabit Smart Switch. Overview of this Guide Chapter 1: Using the CLI Provide information about how to use the CLI, CLI Command Modes - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 14
Chapter 12: IPv6 Address Configuration Commands Provide information about the commands used for configuring the System IPv6 addresses. Chapter 13: Ethernet Configuration Commands Provide information about the commands used for configuring the Bandwidth Control, Negotiation Mode, and Storm Control - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 15
Chapter 1 Using the CLI 1.1 Accessing the CLI You can log on to the switch and access the CLI by logging on to the switch remotely by a Telnet or SSH connection through an Ethernet port. 1.1.1. Logon by Telnet To log on to the switch by a Telnet connection, please take the following steps: 1. Click - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 16
3. Type in the User name and Password (the factory default value for both of them are admin) and press the Enter button to enter User EXEC Mode , which is shown as Figure 1-2. Figure 1-2 Log in the Switch 4. Type in enable command to enter Privileged EXEC Mode. Figure 1-3 Enter into Priviledged EXEC - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 17
Figure 1-4 Enable SSH function Password Authentication Mode 1. Open the software to log on to the interface of PuTTY. Enter the IP address of the switch into Host Name field; keep the default value 22 in the Port field; select SSH as the Connection type. Figure 1-5 SSH Connection Config 5 - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 18
2. Click the Open button in the above figure to log on to the switch. Enter the login user name and password to log on the switch, and then enter enable to enter Privileged EXEC Mode, so you can continue to configure the switch. Figure 1-6 Log on the Switch Key Authentication Mode 1. Select the - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 19
2. After the key is successfully generated, please save the public key and private key to a TFTP server. Figure 1-8 Save the Generated Key 3. Log on to the switch by Telnet and download the public key file from the TFTP server to the switch, as the following figure shows: Figure 1-9 Download the - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 20
Note: 1. The key type should accord with the type of the key file. 2. The SSH key downloading can not be interrupted. 4. After the public key is downloaded, please log on to the interface of PuTTY and enter the IP address for login. Figure 1-10 SSH Connection Config 8 - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 21
5. Click Browse to download the private key file to SSH client software and click Open. Figure 1-11 Download the Private Key 6. After successful authentication, please enter the login user name. If you log on to the switch without entering password, it indicates that the key has been successfully - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 22
User EXEC Mode Privileged EXEC Mode Global Configuration Mode Interface Configuration Mode Interface gigabitEthernet Interface link-aggregation Interface range gigabitEthernet Interface range link-aggregation Interface vlan ...... VLAN Configuration Mode The following table gives detailed - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 23
Mode Accessing Path Prompt Logout or Access the next mode Interface Configuration Mode Interface Configuration Mode VLAN Configuration Mode Layer 2 Interface: Use the interface gigabitEthernet port, interface port-channel lagid or interface range gigabitEthernet port-list command to enter this - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 24
Global Configuration Mode: In this mode, global commands are provided, such as the Spanning Tree, Schedule Mode and so on. Interface Configuration Mode: In this mode, users can configure one or several ports, different ports corresponds to different commands a). Interface gigabitEthernet: - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 25
1.4 Conventions 1.4.1. Format Conventions The following conventions are used in this Guide: Items in square brackets [ ] are optional Items in braces { } are required Alternative items are grouped in braces and separated by vertical bars. For example: speed { - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 26
set the password to access Privileged EXEC Mode from User EXEC Mode: T1600G-52TS>enable Enter password: T1600G-52TS# 2.2 service password-encryption Description The service password-encryption command is used to encrypt the password when the password is defined or when the configuration is written - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 27
Mode Global Configuration Mode User Guidelines If the password you configured here is unencrypted and the global encryption function is enabled in service password-encryption, the password in the configuration file will be displayed in the symmetric encrypted form. Example Set the super password as - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 28
2.4 enable secret Description The enable secret command is used to set a secret password, which is using an MD5 encryption algorithm, for users to access Privileged EXEC Mode from User EXEC Mode. To return to the default configuration, please use no enable secret command. This command uses the MD5 - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 29
2.5 disable Description The disable command is used to return to User EXEC Mode from Privileged EXEC Mode. Syntax disable Command Mode Privileged EXEC Mode Example Return to User EXEC Mode from Privileged EXEC Mode: T1600G-52TS# disable T1600G-52TS> 2.6 configure Description The configure command is - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 30
Command Mode Privileged EXEC Mode and Any Configuration Mode Example Return to Global Configuration Mode from Interface Configuration Mode, and then return to Privileged EXEC Mode: T1600G-52TS(config-if)# exit T1600G-52TS(config)#exit T1600G-52TS# 2.8 end Description The end command is used to - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 31
Example Show the commands you have entered in the current mode: T1600G-52TS (config)# history 1 history 2.10 history clear Description The history clear command is used to clear the commands you have entered in the current mode, therefore these commands will not be shown next time you use the - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 32
Chapter 3 IEEE 802.1Q VLAN Commands VLAN (Virtual Local Area Network) technology is developed for the switch to divide the LAN into multiple logical LANs flexibly. Hosts in the same VLAN can communicate with each other, regardless of their physical locations. VLAN can enhance performance by - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 33
Parameter vlan-id -- Specify IEEE 802.1Q VLAN ID, ranging from 1 to 4094. Command Mode Global Configuration Mode Example Create VLAN Interface 2: T1600G-52TS(config)# interface vlan 2 3.3 name Description The name command is used to assign a description to a VLAN. To clear the description, please - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 34
Parameter vlan-list -- Specify IEEE 802.1Q VLAN ID list, ranging from 2 to 4094, in the format of 2-3, 5. It is multi-optional. tagged | untagged -- Egress rule,untagged or tagged. Tagged: All packets forwarded by the port are tagged. The packets contain VLAN information. Untagged: Packets forwarded - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 35
3.6 show vlan summary Description The show vlan summary command is used to display the summarized information of IEEE 802.1Q VLAN. Syntax show vlan summary Command Mode Privileged EXEC Mode and Any Configuration Mode Example Display the summarized information of IEEE 802.1Q VLAN: T1600G-52TS(config - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 36
Parameter vlan-id -- Specify IEEE 802.1Q VLAN ID, ranging from 1 to 4094. It is multi-optional. Using the show vlan command without parameter displays the detailed information of all VLANs. Command Mode Privileged EXEC Mode and Any Configuration Mode Example Display the information of vlan 5: T1600G - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 37
Chapter 4 Voice VLAN Commands Voice VLANs are configured specially for voice data stream. By configuring Voice VLANs and adding the ports with voice devices attached to voice VLANs, you can perform QoS-related configuration for voice data, ensuring the transmission priority of voice data stream and - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 38
Parameter time -- Aging time (in minutes) to be set for the Voice VLAN. It ranges from 1 to 43200 minutes and the default value is 1440 minutes. Command Mode Global Configuration Mode Example Set the aging time for the Voice VLAN as 1 minute: T1600G-52TS(config)# voice vlan aging 1 4.3 voice vlan - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 39
is used to configure the Voice VLAN mode for the Ethernet port. Syntax switchport voice vlan mode { manual | auto } Parameter manual | auto -- Port mode. Command Mode Interface Configuration Mode (interface gigabitEthernet / interface range gigabitEthernet / interface port-channel / interface - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 40
Example Configure the port 1/0/3 to operate in the auto voice VLAN mode: T1600G-52TS(config)# interface gigabitEthernet 1/0/3 T1600G-52TS(config-if)# switchport voice vlan mode auto 4.6 switchport voice vlan security Description The switchport voice vlan security command is used to enable the Voice - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 41
Example Display the configuration information of Voice VLAN globally: T1600G-52TS(config)# show voice vlan 4.8 show voice vlan oui Description The show voice vlan oui command is used to display the configuration information of Voice VLAN OUI. Syntax show voice vlan oui Command Mode Privileged EXEC - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 42
Display the Voice VLAN configuration information of port 1/0/2: T1600G-52TS(config)# show voice vlan switchport gigabitEthernet 1/0/2 30 - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 43
Chapter 5 Etherchannel Commands Etherchannel Commands are used to configure LAG and LACP function. LAG (Link Aggregation Group) is to combine a number of ports together to make a single high-bandwidth data path, which can highly extend the bandwidth. The bandwidth of the LAG is the sum of bandwidth - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 44
5.2 port-channel load-balance Description The port-channel load-balance command is used to configure the Aggregate Arithmetic for LAG. To return to the default configurations, please use no port-channel load-balance command. Syntax port-channel load-balance { src-mac | dst-mac | src-dst-mac | src-ip - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 45
5.3 lacp system-priority Description The lacp system-priority command is used to configure the LACP system priority globally. To return to the default configurations, please use no lacp system-priority command. Syntax lacp system-priority pri no lacp system-priority Parameter pri -- The system - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 46
T1600G-52TS(config-if-range)# lacp port-priority 1024 Configure the LACP port priority as 2048 for port 4: T1600G-52TS(config)# interface gigabitEthernet 1/0/4 T1600G-52TS(config-if)# lacp port-priority 2048 5.5 show etherchannel Description The show etherchannel command is used to display the - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 47
Example Display the Aggregate Arithmetic of LAG: T1600G-52TS(config)# show etherchannel load-balance 5.7 show lacp Description The show lacp command is used to display the LACP information for a specified EtherChannel Group. Syntax show lacp [ channel-group-num ] { internal | neighbor } Parameter - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 48
Chapter 6 User Management Commands User Manage Commands are used to manage the user's logging information by Web, Telnet or SSH, so as to protect the settings of the switch from being randomly changed. 6.1 user name (password) Description The user name command is used to add a new user or modify the - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 49
User Guidelines If the password you configured here is unencrypted and the global encryption function is enabled in service password-encryption, the password in the configuration file will be displayed in the symmetric encrypted form. Example Add and enable a new admin user named "tplink", - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 50
Command Mode Global Configuration Mode User Guidelines If both the user name (password) and user name (secret) are defined, only the latest configured password will take effect. Example Add and enable a new admin user named "tplink", of which the password is "admin". The password will be displayed - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 51
6.4 user access-control mac-based Description The user access-control mac-based command is used to limit the MAC address of the users for login. Only the user with this MAC address you set here is allowed to login. To cancel the user access limit, please use no user access-control command. Syntax - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 52
port-list --The list group of Ethernet ports, in the format of 1/0/1-4. You can appoint 5 ports at most. Command Mode Global Configuration Mode Example Configure that only the users connected to ports 2-6 are allowed to login: T1600G-52TS(config)# user access-control port-based interface range - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 53
6.7 user idle-timeout Description The user idle-timeout command is used to configure the timeout time of the switch. To restore to the default timeout time, please use no user idle-timeout command. Syntax user idle-timeout minutes no user idle-timeout Parameter minutes --The timeout time, ranging - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 54
6.9 show user configuration Description The show user configuration command is used to display the security configuration information of the users, including access-control, max-number and the idle-timeout, etc. Syntax show user configuration Command Mode Privileged EXEC Mode and Any Configuration - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 55
Chapter 7 System Log Commands The log information will record the settings and operation of the switch respectively for you to monitor operation status and diagnose malfunction. 7.1 logging buffer Description The logging buffer command is used to store the system log messages to an internal buffer. - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 56
Parameter level -- Severity level of the log information output to each channel. There are 8 severity levels marked with values 0-7. The smaller value has the higher priority. Only the log with the same or smaller severity level value will be output. By default, it is 6 indicating that the log - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 57
7.4 logging file flash frequency Description The logging file flash frequency command is used to specify the frequency to synchronize the system log file in the log buffer to the flash. To resume the default synchronizing frequency, please use the no logging file flash frequency command. Syntax - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 58
log host. Syntax logging host index idx host-ip level no logging host index idx Parameter idx -- The index of the log host. The switch supports 4 log hosts at most. host-ip -- The IP for the log host. level -- The severity level of the log information sent to each log host - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 59
Example Enable log host 2 and set its IP address as 192.168.0.148, the level 5: T1600G-52TS(config)# logging host index 2 192.168.0.148 5 7.7 logging monitor Description The logging monitor command is used to display the system logs on the terminal devices. To disable logging to the terminal, please - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 60
output to the terminal devices. By default, it is 5 indicating that all the log information between level 0-5 will be output to the terminal devices. Command Mode Global Configuration Mode Example Set the severity level as 7: T1600G-52TS(config)# logging monitor level 7 7.9 clear logging Description - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 61
Command Mode Privileged EXEC Mode and Any Configuration Mode Example Display the configuration of the Local Log: T1600G-52TS(config)# show logging local-config 7.11 show logging loghost Description The show logging loghost command is used to display the configuration of the log host. Syntax show - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 62
Parameter level -- Severity level. There are 8 severity levels marked with values 0-7. The information of levels with priority not lower than the select level will display. Display all the log information in the log buffer by default. Command Mode Privileged EXEC Mode and Any Configuration Mode - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 63
Chapter 8 SSH Commands SSH (Security Shell) can provide the unsecured remote management with security and powerful authentication to ensure the security of the management information. 8.1 ip ssh server Description The ip ssh server command is used to enable SSH function. To disable the SSH function, - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 64
Example Enable SSH v2: T1600G-52TS(config)# ip ssh version v2 8.3 ip ssh timeout Description The ip ssh timeout command is used to specify the idle-timeout time of SSH. To restore to the factory defaults, please use ip ssh timeout command. Syntax ip ssh timeout value no ip ssh timeout Parameter - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 65
must be in the range of 512 to 3072 bits. ip-addr -- The IP address of the TFTP server. Both IPv4 and IPv6 addresses are supported, for example 192.168.0.1 or fe80::1234. Command Mode Global Configuration Mode Example Download an SSH-1 type key file named ssh-key from TFTP server - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 66
8.6 remove public-key Description The remove public-key command is used to remove the SSH public key from the switch. Syntax remove public-key { v1 | v2 } Parameter v1 | v2 -- Select the type of SSH public key, v1 represents SSH-1, v2 represents SSH-2. Command Mode Privileged EXEC Mode Example - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 67
Chapter 9 SSL Commands SSL (Secure Sockets Layer), a security protocol, is to provide a secure connection for the application layer protocol (e.g. HTTP) based on TCP. Adopting asymmetrical encryption technology, SSL uses key pair to encrypt/decrypt information. A key pair refers to a public key ( - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 68
1 to 25 characters. The Certificate must be BASE64 encoded. ip-addr -- The IP address of the TFTP server. Both IPv4 and IPv6 addresses are supported, for example 192.168.0.1 or fe80::1234. Command Mode Global Configuration Mode Example Download an SSL Certificate named ssl-cert from TFTP server with - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 69
Example Download an SSL key named ssl-key from TFTP server with the IP address of 192.168.0.146: T1600G-52TS(config)# ip http secure-server download key ssl-key ip-address 192.168.0.146 Download an SSL key named ssl-key from TFTP server with the IP address of fe80::1234 T1600G-52TS(config)# ip http - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 70
MAC address entry. To remove the corresponding entry, please use no mac address-table static command. The static address can be added or removed manually, independent of the aging time. In the stable networks, the static MAC address entries can facilitate the switch to reduce broadcast packets and - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 71
filtering command. The filtering address function is to forbid the undesired package to be forwarded. The filtering address can be added or removed manually, independent of the aging time. Syntax mac address-table filtering mac-addr vid vid no mac address-table filtering {[ mac-addr ] [ vid vid - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 72
out of the influence of the aging time and can only be deleted manually. The learned entries will be cleared after the switch is rebooted. When be out of the influence of the aging time and can only be deleted manually too. However, the learned entries will be saved even the switch is rebooted - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 73
Command Mode Interface Configuration Mode (interface gigabitEthernet / interface range gigabitEthernet) Example Enable Port Security function for port 1, select Static mode as the learn mode, and specify the maximum number of MAC addresses that can be learned on this port as 30: T1600G-52TS(config)# - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 74
Command Mode Privileged EXEC Mode and Any Configuration Mode Example Display the Aging Time of the MAC address: T1600G-52TS(config)# show mac address-table aging-time 10.7 show mac address-table max-mac-count Description The show mac address-table max-mac-count interface gigabitEthernet command is - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 75
Syntax show mac address-table interface { gigabitEthernet port | port-channel lagid } Parameter port -- The Ethernet port number. lagid -- The ID of the LAG. Command Mode Privileged EXEC Mode and Any Configuration Mode Example Display the address configuration of port 1/0/1: T1600G-52TS(config)# - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 76
Syntax show mac address-table address mac-addr [ interface { gigabitEthernet port | port-channel lagid } | vid vlan-id ] Parameter mac-addr --The specified MAC address. port -- The Ethernet port number. lagid -- The ID of the LAG. vlan-id -- Specify the VLAN which the entry belongs to. Command Mode - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 77
, upgrade the switch system and other operations. 11.1 system-time manual Description The system-time manual command is used to configure the system time manually. Syntax system-time manual time Parameter time -- Set the date and time manually, MM/DD/YYYY-HH:MM:SS Command Mode Global Configuration - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 78
UTC-09:00 -- TimeZone for Alaska. UTC-08:00 -- TimeZone for Pacific Time(US Canada). UTC-07:00 -- TimeZone for Mountain Time(US Canada). UTC-06:00 -- TimeZone for Central Time(US Canada). UTC-05:00 -- TimeZone for Eastern Time(US Canada). UTC-04:30 -- TimeZone for Caracas. UTC-04:00 -- - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 79
Example Configure the system time mode as NTP, the time zone is UTC-12:00, the primary NTP server is 133.100.9.2 and the secondary NTP server is 139.78.100.163, the fetching-rate is 11 hours: T1600G-52TS(config)# system-time ntp UTC-12:00 133.100.9.2 139.79.100.163 11 11.3 system-time dst predefined - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 80
11.4 system-time dst date Description The system-time dst date command is used to configure the one-off daylight saving time. The start date is in the current year by default. The time range of the daylight saving time must shorter than one year, but you can configure it spanning years. To disable - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 81
T1600G-52TS(config)# system-time dst date Apr 1 00:00 2015 Oct 1 00:00 2015 30 11.5 system-time dst recurring Description The system-time dst recurring command is used to configure the recurring daylight saving time. It can be configured spanning years. To disable DST function, please use no system- - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 82
Example Configure the daylight saving time from 2:00am, the first Sunday of May to 2:00am, the last Sunday of Oct and the offset is 45 minutes: T1600G-52TS(config)# system-time dst recurring first Sun May 02:00 last Sun Oct 02:00 45 11.6 hostname Description The hostname command is used to configure - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 83
ip address Description This ip address command is used to configure the IP address and IP subnet mask for the specified interface manually. The interface type includes: routed port, port-channel interface, loopback interface and VLAN interface. Syntax ip address { ip-addr } { mask } [ secondary ] no - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 84
Parameter ip-addr -- The IP address of the Layer 3 interface. mask -- The subnet mask of the Layer 3 interface. secondary -- Specify the interface's secondary IP address. If this parameter is omitted here, the configured IP address is the interface's primary address. Command Mode Interface - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 85
Example Enable the DHCP Client function on the Lay 3 routed port 1/0/1: T1600G-52TS(config)# interface gigabitEthernet 1/0/1 T1600G-52TS(config-if)# no switchport T1600G-52TS(config-if)# ip address-alloc dhcp Disable the IP address obtaining function on the VLAN interface 2: T1600G-52TS(config)# - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 86
startup-config tftp ip-address ip-addr filename name Parameter ip-addr -- IP Address of the TFTP server. Both IPv4 and IPv6 addresses are supported, for example 192.168.0.1 or fe80::1234. name -- Specify the name for the configuration file which would be backup. Command Mode Privileged EXEC Mode - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 87
tftp startup-config ip-address ip-addr filename name Parameter ip-addr -- IP Address of the TFTP server. Both IPv4 and IPv6 addresses are supported, for example 192.168.0.1 or fe80::1234. name -- Specify the name for the configuration file which would be downloaded. Command Mode Privileged EXEC Mode - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 88
11.16 boot application Description The boot application command is used to configure the image file as startup image or backup image. Syntax boot application filename { image1 | image 2 } { startup | backup } no boot application Parameter image1 | image2 -- Specify the image file to be configured. - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 89
Syntax firmware upgrade ip-address ip-addr filename name Parameter ip-addr -- IP Address of the TFTP server. Both IPv4 and IPv6 addresses are supported, for example 192.168.0.1 or fe80::1234. name -- Specify the name for the firmware file. Command Mode Privileged EXEC Mode Example Upgrade the switch - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 90
. ip_addr -- The IP address of the destination node for ping test. If the parameter ip/ipv6 is not selected, both IPv4 and IPv6 addresses are supported, for example 192.168.0.100 or fe80::1234. -n count -- The amount of times to send test data during Ping testing. It ranges from 1 to 10 - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 91
should be IPv6. ip_addr -- The IP address of the destination device. If the parameter ip/ipv6 is not selected, both IPv4 and IPv6 addresses are supported, for example 192.168.0.100 or fe80::1234. maxHops -- The maximum number of the route hops the test data can pass though. It ranges from - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 92
Syntax show system-info Command Mode Privileged EXEC Mode and Any Configuration Mode Example Display the system information: T1600G-52TS# show system-info 11.22 show image-info Description The show image-info command is used to display the information of image files in the system. Syntax show image- - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 93
Example Display the system boot configuration information: T1600G-52TS# show boot 11.24 show running-config Description The show running-config command is used to display the current operating configuration of the system or of a specified port. Syntax show running-config Command Mode Privileged EXEC - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 94
diagnostics of the connected Ethernet Port., which facilitates you to check the connection status of the cable connected to the switch, locate and diagnose the trouble spot of the network. Syntax show cable-diagnostics interface gigabitEthernet port 82 - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 95
Parameter port -- The number of the port which is selected for Cable test. Command Mode Privileged EXEC Mode and Any Configuration Mode Example Show the cable-diagnostics of port 3: T1600G-52TS# show cable-diagnostics interface gigabitEthernet 1/0/3 11.29 show cpu-utilization Description The show - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 96
Example Display the memory utilization information of the switch: T1600G-52TS# show memory-utilization 84 - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 97
automatic configuration of the ipv6 link-local address. The switch has only one ipv6 link-local address, which can be configured automatically or manually. The general ipv6 link-local address has the prefix as fe80::/10. IPv6 routers cannot forward packets that have link-local source or destination - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 98
address autoconfig 12.3 ipv6 address link-local Description The ipv6 address link-local command is used to configure the ipv6 link-local address manually on a specified interface. To delete the configured link-local address, please use no ipv6 address link-local command. Syntax ipv6 address ipv6 - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 99
12.4 ipv6 address dhcp Description The ipv6 address dhcp command is used to enable the DHCPv6 Client function. When this function is enabled, the Layer 3 interface will try to obtain IP from DHCPv6 server. To delete the allocated IP from DHCPv6 server and disable the DHCPv6 Client function, please - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 100
T1600G-52TS(config)# interface vlan 1 T1600G-52TS(config-if)# ipv6 address ra 12.6 ipv6 address eui-64 Description This command is used to manually configure a global IPv6 address with an extended unique identifier (EUI) in the low-order 64 bits on the interface. Specify only the network prefix. The - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 101
no ipv6 address ipv6-addr Parameter ipv6-addr -- Global IPv6 address with network prefix, for example 3ffe::1/64. Configuration Mode Interface Configuration Mode Example Configure the global address 3001::1/64 on VLAN interface 1: T1600G-52TS(config)# interface vlan 1 T1600G-52TS(config-if)# ipv6 - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 102
Chapter 13 Ethernet Configuration Commands Ethernet Configuration Commands can be used to configure the Bandwidth Control, Negotiation Mode and Storm Control for Ethernet ports. 13.1 interface gigabitEthernet Description The interface gigabitEthernet command is used to enter the Interface - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 103
User Guidelines Command in the Interface Range gigabitEthernet Mode is executed independently on all ports in the range. It does not affect the execution on the other ports at all if the command results in an error on one port. Example To enter the Interface range gigabitEthernet Configuration Mode, - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 104
Syntax shutdown no shutdown Command Mode Interface Configuration Mode (interface gigabitEthernet / interface range gigabitEthernet / interface port-channel / interface range port-channel) Example Disable port 1/0/3: T1600G-52TS(config)# interface gigabitEthernet 1/0/3 T1600G-52TS(config-if)# - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 105
Syntax duplex { auto | full | half } no duplex Parameter auto | full | half -- The duplex mode of the Ethernet port. There are three options: auto-negotiation mode, full-duplex mode and half-duplex mode. By default the Gigabit Ethernet port is auto-negotiation mode. Command Mode Interface - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 106
13.8 speed Description The speed command is used to configure the Speed Mode for an Ethernet port. To return to the default configuration, please use no speed command. Syntax speed { 10 | 100 | 1000 | auto } no speed Parameter 10 | 100 | 1000 | auto -- The speed mode of the Ethernet port. There are - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 107
Example Set the storm control mode as pps on port 1/0/5: T1600G-52TS(config)# interface gigabitEthernet 1/0/5 T1600G-52TS(config-if)# storm-control pps 13.10 storm-control Description The storm-control command is used to enable the broadcast, multicast, or unicast strom control function and to set - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 108
13.11 bandwidth Description The bandwidth command is used to configure the bandwidth limit for an Ethernet port. To disable the bandwidth limit, please use no bandwidth command. Syntax bandwidth {[ ingress ingress-rate ] [ egress egress-rate ]} no bandwidth { all | ingress | egress } Parameter - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 109
Command Mode Global Configuration Mode Example Clear the statistic information of all ports and LAGs: T1600G-52TS(config)# clear counters 13.13 show interface status Description The show interface status command is used to display the connection status of the Ethernet port/LAG. Syntax show interface - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 110
Command Mode Privileged EXEC Mode and Any Configuration Mode Example Display the statistics information of all Ethernet ports and LAGs: T1600G-52TS(config)# show interface counters Display the statistics information of port 1/0/2: T1600G-52TS(config)# show interface counters gigabitEthernet 1/0/2 13 - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 111
Syntax show storm-control interface [ gigabitEthernet port-list ] [ port-channel lagid-list ] Parameter port-list --The list of Ethernet ports. lagid-list -- The list of LAGs. Command Mode Privileged EXEC Mode and Any Configuration Mode Example Display the storm-control information of port 4, 5, 6, - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 112
experience of a better quality. 14.1 qos Description The qos command is used to configure CoS (Class of Service) based on port. To return to the default configuration, please use no qos command. Syntax qos cos-id no qos Parameter cos-id -- The priority - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 113
Syntax qos dscp no qos dscp Command Mode Global Configuration Mode User Guidelines DSCP (DiffServ Code Point) is a new definition to IP ToS field given by IEEE. DSCP priorities are mapped to the corresponding 802.1p priorities. IP datagram will be classified into the egress queue based on the - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 114
User Guidelines 1. By default, the mapping relation between tag/cos and the egress queue is: 0/CoS 0-TC1, 1/CoS 1-TC0, 2/CoS 2-TC0, 3/CoS 3-TC1, 4/CoS 4-TC2, 5/CoS 5-TC2, 6/CoS 6-TC3, 7/CoS 7-TC3 2. Among the priority levels TC0-TC3, the bigger value, the higher p r i o r i t y. Example Map CoS 5 to - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 115
User Guidelines By default, the mapping relation between tag and the egress queue is: (0-7)-CoS 0, (8-15)-CoS 1, (16-23)-CoS 2, (24-31)-CoS 3, (32-39)-CoS 4, (40-47)-CoS 5, (48-55)-CoS 6, (56-63)-CoS 7. Example Map DSCP values 10-12 to CoS 2: T1600G-52TS(config)# qos queue dscp-map 10-12 2 14.5 qos - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 116
command. The weight values of TC0, TC1 and TC2 are 1, 2 and 4 respectively, while the value of TC3 is 0 and non-configurable. equ -- Equal-Mode. In this mode, all the queues occupy the bandwidth equally. The weight value ratio of all the queues is 1:1:1:1. Command Mode Global Configuration Mode - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 117
Command Mode Global Configuration Mode Example Specify the Schedule Mode as Weight Round Robin Mode, with the weight values of TC0, TC1, TC2 and TC3 as 4, 7, 15 and 24: T1600G-52TS(config)# qos queue mode wrr T1600G-52TS(config)# qos queue weight 0 4 T1600G-52TS(config)# qos queue weight 1 7 T1600G- - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 118
Syntax show qos cos-map Command Mode Privileged EXEC Mode and Any Configuration Mode Example Display the configuration of IEEE 802.1P Priority and the mapping relation between cos-id and tc-id: T1600G-52TS# show qos cos-map 14.9 show qos dscp-map Description The show qos dscp-map command is used to - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 119
14.11 show qos status Description The show qos status command is used to display the status of IEEE 802.1P priority and DSCP priority. Syntax show qos status Command Mode Privileged EXEC Mode and Any Configuration Mode Example Display the status of IEEE 802.1P priority and DSCP priority: T1600G-52TS - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 120
, the monitoring port is connected to data diagnose device, which is used to analyze the monitored packets for monitoring and troubleshooting the network. 15.1 monitor session destination interface Description The monitor session destination interface command is used to configure the monitoring - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 121
15.2 monitor session source interface Description The monitor session source interface command is used to configure the monitored port. To delete the corresponding monitored port, please use no monitor session source interface command. Syntax monitor session session_num source interface - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 122
T1600G-52TS(config)# monitor session 1 source interface gigabitEthernet 1/0/4-5,1/0/7 rx Delete port 4 in monitor session 1 and its configuration: T1600G-52TS(config)# no monitor session 1 source interface gigabitEthernet 1/0/4 rx 15.3 show monitor session Description The show monitor session - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 123
Chapter 16 Port Isolation Commands Port Isolation provides a method of restricting traffic flow to improve the network security by forbidding the port to forward packets to the ports that are not on its forwarding port list. 16.1 port isolation Description The port isolation command is used to - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 124
16.2 show port isolation interface Description The show port isolation interface command is used to display the forward port list of a port/LAG. Syntax show port isolation interface [ gigabitEthernet port | port-channel lagid ] Parameter port -- The number of Ethernet port you want to show its - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 125
Chapter 17 Loopback Detection Commands With loopback detection feature enabled, the switch can detect loops using loopback detection packets. When a loop is detected, the switch will display an alert or further block the corresponding port according to the configuration. 17.1 loopback-detection( - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 126
Example Specify the interval-time as 50 seconds: T1600G-52TS(config)# loopback-detection interval 50 17.3 loopback-detection recovery-time Description The loopback-detection recovery-time command is used to configure the time after which the blocked port would automatically recover to normal status. - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 127
by which the switch copes with the detected loops. Syntax loopback-detection config [ process-mode { alert | port-based }] [ recovery-mode { auto | manual }] Parameter process-mode -- The mode how the switch processes the detected loops. Alert: When a loop is detected, display an alert. Port based - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 128
17.6 loopback-detection recover Description The loopback-detection recover command is used to remove the block status of selected ports, recovering the blocked ports to normal status, Syntax loopback-detection recover Command Mode Interface Configuration Mode (interface gigabitEthernet / interface - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 129
17.8 show loopback-detection interface Description The show loopback-detection interface command is used to display the configuration of loopback detection function and the status of the specified Ethernet port. Syntax show loopback-detection interface [ gigabitEthernet port ] Parameter port -- The - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 130
Chapter 18 ACL Commands 18.1 access-list create Description The access-list create command is used to create standard-IP ACL and extend-IP ACL. Syntax access-list create access-list-num Parameter access-list-num -- ACL ID, ranging from 100 to 299. The ID range of Standard-IP ACL ranges is 100-199 - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 131
Example Create a MAC ACL whose ID is 23: T1600G-52TS(config)# mac access-list 23 18.3 access-list standard Description The access-list standard command is used to add Standard-IP ACL rule. To delete the corresponding rule, please use no access-list standard command. Standard-IP ACLs analyze and - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 132
T1600G-52TS(config)# access-list standard 120 rule 10 permit sip 192.168.0.100 smask 255.255.255.0 18.4 access-list extended Description The access-list extended command is used to add Extended-IP ACL rule. To delete the corresponding rule, please use no access-list extended command. Syntax access- - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 133
T1600G-52TS(config)# access-list extended 220 rule 10 permit sip 192.168.0.100 smask 255.255.255.0 18.5 rule Description The rule command is used to configure MAC ACL rule. To delete the corresponding rule, please use no rule command. Syntax rule rule-id { deny | permit } [[ smac source-mac ] smask - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 134
18.6 access-list policy name Description The access-list policy name command is used to add Policy. To delete the corresponding Policy, please use no access-list policy name command. A Policy is used to control the data packets those match the corresponding ACL rules by configuring ACLs and actions - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 135
Example Add ACL whose ID is 120 to policy1 and create an action for them: T1600G-52TS(config)# access-list policy action policy1 120 18.8 access-list bind acl Description The access-list bind acl command is used to bind an ACL to the specified port. To cancel the bind relation, please use no access- - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 136
Command Mode Interface Configuration Mode (interface gigabitEthernet / interface range gigabitEthernet / interface port-channel / interface range port-channel) Example Bind policy1 to port 1/0/2: T1600G-52TS(config)# interface gigabitEthernet 1/0/2 T1600G-52TS(config-if)# access-list bind policy1 18 - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 137
Command Mode Privileged EXEC Mode and Any Configuration Mode Example Display the configuration of the MAC ACL whose ID is 20: T1600G-52TS(config)# show access-list 20 18.12 show access-list policy Description The show access-list policy command is used to display the information of a specified - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 138
can forward DHCP packets from DHCP servers. In this way, the switch can devoid of DHCP cheating attack which will cause network confusion and security problem. 19.1 ip dhcp filtering Description The ip dhcp filtering command is used to enable DHCP Filtering function. To disable please use no ip dhcp - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 139
Example Enable the DHCP Filtering feature in VLAN 3,4,5 and 7: T1600G-52TS(config)# ip dhcp filtering vlan 3-5,7 19.3 ip dhcp filtering trust Description The ip dhcp filtering trust command is used to configure a port to be a Trusted Port. Only the trusted ports can forward DHCP packets from DHCP - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 140
19.5 show ip dhcp filtering interface Description The show ip dhcp filtering interface command is used to display the DHCP Filtering configuration information of a desired port or of all ports. Syntax show ip dhcp filtering interface [ gigabitEthernet port ] [ port-channel lagid ] Parameters port -- - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 141
Chapter 20 MSTP Commands MSTP (Multiple Spanning Tree Protocol), compatible with both STP and RSTP and subject to IEEE 802.1s, can disbranch a ring network. STP is to block redundant links and backup links as well as optimize paths. 20.1 debug spanning-tree Description The debug spanning-tree - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 142
Example Display all the spanning-tree debug messages: T1600G-52TS# debug spanning-tree all 20.2 spanning-tree(global) Description The spanning-tree command is used to enable STP function globally. To disable the STP function, please use no spanning-tree command. Syntax spanning-tree no spanning-tree - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 143
20.4 spanning-tree common-config Description The spanning-tree common-config command is used to configure the parameters of the ports for comparison in the CIST and the common parameters of all instances. To return to the default configuration, please use no spanning-tree common-config command. CIST - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 144
Command Mode Interface Configuration Mode (interface gigabitEthernet / interface range gigabitEthernet / interface port-channel / interface range port-channel) Example Enable the STP function of port 1, and configure the Port Priority as 64, ExtPath Cost as 100, IntPath Cost as 100, and then enable - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 145
default configuration of the corresponding Instance, please use no spanning-tree mst configuration command. Syntax spanning-tree mst configuration no spanning-tree mst configuration Command Mode Global Configuration Mode Example Enter into the MST configuration mode: T1600G-52TS(config)# spanning- - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 146
Remove VLANs 1-50 in mapping VLANs 1-100 for Instance 1: T1600G-52TS(config)# spanning-tree mst configuration T1600G-52TS(config-mst)# no instance 1 vlan 1-50 20.8 name Description The name command is used to configure the region name of MST instance. Syntax name name Parameters name -- The region - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 147
T1600G-52TS(config-mst)# revision 100 20.10 spanning-tree mst instance Description The spanning-tree mst instance command is used to configure the priority of MST instance. To return to the default value of MST instance priority, please use no spanning-tree mst instance command. Syntax spanning-tree - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 148
Parameter instance-id -- Instance ID, ranging from 1 to 8. pri -- Port Priority, which must be multiple of 16 ranging from 0 to 240. By default, it is 128. Port Priority is an important criterion on determining if the port will be chosen as the root port by the device connected to this port. cost -- - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 149
20.13 spanning-tree tc-defend Description The spanning-tree tc-defend command is used to configure the TC Protect of Spanning Tree globally. To return to the default configuration, please use no spanning-tree tc-defend command. A switch removes MAC address entries upon receiving TC-BPDUs. If a - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 150
Parameter forward-time -- Forward Delay, which is the time for the port to transit its state after the network topology is changed. Forward Delay ranges from 4 to 30 in seconds and it is 15 by default. Otherwise, 2 * (Forward Delay - 1) >= Max Age. hello-time --Hello Time, which is the interval to - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 151
20.16 spanning-tree max-hops Description The spanning-tree max-hops command is used to configure the maximum number of hops that occur in a specific region before the BPDU is discarded. To return to the default configurations, please use no spanning-tree max-hops command. Syntax spanning-tree max- - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 152
Example Enable the BPDU filter function for port 1/0/2: T1600G-52TS(config)# interface gigabitEthernet 1/0/2 T1600G-52TS(config-if)# spanning-tree bpdufilter 20.18 spanning-tree bpduguard Description The spanning-tree bpduguard command is used to enable the BPDU protect function for a port. With the - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 153
Command Mode Interface Configuration Mode (interface gigabitEthernet / interface range gigabitEthernet / interface port-channel / interface range port-channel) Example Enable the Loop Protect function for port 2: T1600G-52TS(config)# interface gigabitEthernet 1/0/2 T1600G-52TS(config-if)# spanning- - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 154
removing MAC address entries, which may decrease the performance and stability of the network. With the Protect of Spanning Tree function enabled, you can configure the number of TC-BPDUs in a required time, so as to avoid the process of removing MAC addresses frequently. Syntax spanning-tree guard - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 155
Syntax show spanning-tree active Command Mode Privileged EXEC Mode and Any Configuration Mode Example Display the active information of spanning-tree: T1600G-52TS(config)# show spanning-tree active 20.24 show spanning-tree bridge Description The show spanning-tree bridge command is used to display - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 156
Example Display the spanning-tree information of all ports: T1600G-52TS(config)# show spanning-tree interface Display the spanning-tree information of port 1/0/2: T1600G-52TS(config)# show spanning-tree interface gigabitEthernet 1/0/2 Display the spanning-tree mode information of port 1/0/2: T1600G- - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 157
20.27 show spanning-tree mst Description The show spanning-tree mst command is used to display the related information of MST Instance. Syntax show spanning-tree mst { configuration [ digest ] | instance instance-id [ interface [ gigabitEthernet port | port-channel lagid ] ] } Parameter instance-id - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 158
Chapter 21 IGMP Snooping Commands IGMP Snooping (Internet Group Management Protocol Snooping) is a multicast control mechanism running on Layer 2 switch. It can effectively prevent multicast groups being broadcasted in the network. 21.1 ip igmp snooping(global) Description The ip igmp snooping - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 159
Example Enable IGMP Snooping function of port 1/0/3: T1600G-52TS(config)# interface gigabitEthernet 1/0/3 T1600G-52TS(config-if)# ip igmp snooping 21.3 ip igmp snooping rtime Description The ip igmp snooping rtime command is used to specify router port aging time globally. To restore the default - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 160
Command Mode Global Configuration Mode Example Specify IGMP Snooping member port aging time as 100 seconds globally: T1600G-52TS(config)# ip igmp snooping mtime 100 21.5 ip igmp snooping report-suppression Description The ip igmp snooping report-suppression command is used enable the IGMP report - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 161
Command Mode Interface Configuration Mode (interface gigabitEthernet / interface range gigabitEthernet / interface port-channel / interface range port-channel) Example Enable the Fast Leave function for port 1/0/3: T1600G-52TS(config)# interface gigabitEthernet 1/0/3 T1600G-52TS(config-if)# ip igmp - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 162
Parameter interval -- Specify the interval to send Specific Query Message in seconds, ranging from 1 to 5. Command Mode Global Configuration Mode Example Specify the interval of Specific Query Message to 3 seconds: T1600G-52TS(config)# ip igmp snooping last-listener query-inteval 3 21.9 ip igmp - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 163
Syntax ip igmp snooping vlan-config vlan-id-list [ rtime router-time | mtime member-time | rport interface { gigabitEthernet port-list | port-channel lagid } ] ip igmp snooping vlan-config vlan-id-list static ip interface { gigabitEthernet port-list | port-channel lagid } no ip igmp snooping vlan- - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 164
Add static multicast IP address 225.0.0.1, which corresponds to VLAN 2, and configure the forward ports as ports 1/0/1-3: T1600G-52TS(config)# ip igmp snooping vlan-config 2 static 225.0.0.1 interface gigabitEthernet 1/0/1-3 21.11 ip igmp snooping multi-vlan-config Description The ip igmp snooping - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 165
Example Enable Multicast VLAN 3, and configure Router Port Time as 100 seconds, Member Port Time 100 seconds, and Static Router Port port 1/0/3: T1600G-52TS(config)# ip igmp snooping multi-vlan-config 3 rtime 100 T1600G-52TS(config)# ip igmp snooping multi-vlan-config 3 mtime 100 T1600G-52TS(config - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 166
Syntax ip igmp snooping querier vlan vlan-id { query-interval interval | max-response-time response-time | general-query source-ip ip-addr } no ip igmp snooping querier vlan vlan-id { query-interval | max-response-time | general-query source-ip } Parameter vlan-id -- VLAN ID, ranging from 1 to 4094. - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 167
Syntax ip igmp snooping max-groups [ maxgroup ] ip igmp snooping max-groups action { drop | replace } no ip igmp snooping max-groups no ip igmp snooping max-groups action Parameter maxgroup -- Specify the maximum numbers of groups that the port can join. It ranges from 0 to 1000 and the default - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 168
Command Mode Global Configuration Mode Example Create the profile 1: T1600G-52TS(config)# ip igmp profile 1 21.16 deny Description The deny command is used to configure the filtering mode of profile as deny. Syntax deny Command Mode Profile Configuration Mode Example Configure the filtering mode of - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 169
21.18 range Description The range command is used to configure the range of the profile's filtering multicast address. To delete the corresponding filtering multicast address, please use no range command. A profile contains 16 filtering IP-range entries at most. Syntax range start-ip end-ip no range - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 170
Example Bind profile 1 to interface gigabitEthernet 1/0/2: T1600G-52TS(config)# interface gigabitEthernet 1/0/2 T1600G-52TS(config-if)# ip igmp filter 1 21.20 clear ip igmp snooping statistics Description The clear ip igmp snooping statistics command is used to clear the statistics of the IGMP - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 171
21.22 show ip igmp snooping interface Description The show ip igmp snooping interface command is used to display the port configuration of IGMP snooping. Syntax show ip igmp snooping interface [ gigabitEthernet [ port | port-list ] ] { basic-config | max-groups | packet-stat } show ip igmp snooping - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 172
Parameter vlan-id --The VLAN ID selected to display. Command Mode Privileged EXEC Mode and Any Configuration Mode Example Display the IGMP snooping configuration information of VLAN 2: T1600G-52TS# show ip igmp snooping vlan 2 21.24 show ip igmp snooping multi-vlan Description The show ip igmp - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 173
count-- The numbers of all multicast groups. dynamic-- Display dynamic multicast groups. dynamic count-- The numbers of all dynamic multicast groups. static-- Display static multicast groups. static count-- The numbers of all static multicast groups. Command Mode Privileged EXEC Mode and Any - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 174
Command Mode Privileged EXEC Mode and Any Configuration Mode Example Display all Querier information: T1600G-52TS(config)# show ip igmp snooping querier 21.27 show ip igmp profile Description The show ip igmp profile command is used to display the configuration information of all the profiles or a - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 175
Chapter 22 MLD Snooping Commands MLD Snooping (Multicast Listener Discovery Snooping) is a multicast control mechanism running on Layer 2 switch. It can effectively prevent multicast groups being broadcasted in the IPv6 network. 22.1 ipv6 mld snooping(global) Description The ipv6 mld snooping - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 176
Example Enable MLD Snooping on port 1/0/3: T1600G-52TS(config)# interface gigabitEthernet 1/0/3 T1600G-52TS(config-if)# ipv6 mld snooping 22.3 ipv6 mld snooping rtime Description The ipv6 mld snooping rtime command is used to specify router port aging time globally. To restore the default timer, - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 177
Command Mode Global Configuration Mode Example Specify MLD Snooping member port aging time as 100 seconds globally: T1600G-52TS(config)# ipv6 mld snooping mtime 100 22.5 ipv6 mld snooping report-suppression Description The ipv6 mld snooping report-suppression command is used enable the MLD report - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 178
Command Mode Interface Configuration Mode (interface gigabitEthernet / interface range gigabitEthernet / interface port-channel / interface range port-channel) Example Enable the Fast Leave function for port 1/0/3: T1600G-52TS(config)# interface gigabitEthernet 1/0/3 T1600G-52TS(config-if)# ipv6 mld - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 179
Command Mode Global Configuration Mode Example Specify the interval of Specific Query Message to 3 seconds: T1600G-52TS(config)# ipv6 mld snooping last-listener query-inteval 3 22.9 ipv6 mld snooping last-listener query-count Description The ipv6 mld snooping last-listener query-count command is - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 180
Syntax ipv6 mld snooping vlan-config vlan-id-list [ rtime router-time | mtime member-time | rport interface { gigabitEthernet port-list | port-channel lagid } ] ipv6 mld snooping vlan-config vlan-id-list static ip interface { gigabitEthernet port-list | port-channel lagid } no ipv6 mld snooping vlan - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 181
Add static multicast IP address ff01::1234:01, which corresponds to VLAN 2, and configure the forward ports as ports 1/0/1-3: T1600G-52TS(config)# ipv6 mld snooping vlan-config 2 static ff01::1234:01 interface gigabitEthernet 1/0/1-3 22.11 ipv6 mld snooping multi-vlan-config Description The ipv6 mld - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 182
Example Enable Multicast VLAN 3, and configure Router Port Time as 100 seconds, Member Port Time 100 seconds, and Static Router Port port 1/0/3: T1600G-52TS(config)# ipv6 mld snooping multi-vlan-config 3 rtime 100 T1600G-52TS(config)# ipv6 mld snooping multi-vlan-config 3 mtime 100 T1600G-52TS( - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 183
Syntax ipv6 mld snooping querier vlan vlan-id { query-interval interval | max-response-time response-time | general-query source-ip ip-addr } no ipv6 mld snooping querier vlan vlan-id { query-interval | max-response-time | general-query source-ip } Parameter vlan-id -- VLAN ID, ranging from 1 to - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 184
Syntax ipv6 mld snooping max-groups [ maxgroup ] ipv6 mld snooping max-groups action { drop | replace } no ipv6 mld snooping max-groups no ipv6 mld snooping max-groups action Parameter maxgroup -- Specify the maximum numbers of groups that the port can join. It ranges from 0 to 1000 and the default - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 185
Command Mode Global Configuration Mode Example Create the profile 1: T1600G-52TS(config)# ipv6 mld profile 1 22.16 deny Description The deny command is used to configure the filtering mode of profile as deny. Syntax deny Command Mode Profile Configuration Mode Example Configure the filtering mode of - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 186
22.18 range Description The range command is used to configure the range of the profile's filtering multicast address. To delete the corresponding filtering multicast address, please use no range command. A profile contains 16 filtering IP-range entries at most. Syntax range start-ip end-ip no range - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 187
Example Bind profile 1 to interface gigabitEthernet 1/0/2: T1600G-52TS(config)# interface gigabitEthernet 1/0/2 T1600G-52TS(config-if)# ipv6 mld filter 1 22.20 clear ipv6 mld snooping statistics Description The clear ipv6 mld snooping statistics command is used to clear the statistics of the MLD - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 188
22.22 show ipv6 mld snooping interface Description The show ipv6 mld snooping interface command is used to display the port configuration of MLD snooping. Syntax show ipv6 mld snooping interface [ gigabitEthernet [ port | port-list ] ] { basic-config | max-groups | packet-stat } show ipv6 mld - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 189
Parameter vlan-id -- The VLAN ID selected to display, ranging from 1 to 4094. Command Mode Privileged EXEC Mode and Any Configuration Mode Example Display all of the VLAN information: T1600G-52TS(config)# show ipv6 mld snooping vlan 22.24 show ipv6 mld snooping multi-vlan Description The show ipv6 - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 190
dynamic-- Display dynamic multicast groups. dynamic count-- The numbers of all dynamic multicast groups. static-- Display static multicast groups. static count-- The numbers of all static multicast groups. Command Mode Privileged EXEC Mode and Any Configuration Mode Example Display all of the - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 191
Parameter id -- Specify the ID of the profile, ranging from 1 to 999. Command Mode Privileged EXEC Mode and Any Configuration Mode Example Display the configuration information of all profiles: T1600G-52TS(config)# show ipv6 mld profile 179 - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 192
Chapter 23 SNMP Commands SNMP (Simple Network Management Protocol) functions are used to manage the network devices for a smooth communication, which can facilitate the network administrators to monitor the network nodes and implement the proper operation. 23.1 snmp-server Description The snmp- - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 193
mib-oid -- MIB Object ID. It is the Object Identifier (OID) for the entry of View, ranging from 1 to 61 characters. include | exclude -- View Type, with include and exclude options. They represent the view entry can/cannot be managed by the SNMP management station individually. Command Mode Global - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 194
By default, the Security Level is noAuthNoPriv. There is no need to configure this in SNMP v1 Mode and SNMP v2c Mode. read-view -- Select the View to be the Read View. The management access is restricted to read-only, and changes cannot be made to the assigned SNMP View. write-view -- Select the - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 195
Parameter name -- User Name, ranging from 1 to 16 characters. local | remote -- User Type, with local and remote options. Local indicates that the user is connected to a local SNMP engine, while remote means that the user is connected to a remote SNMP engine. group-name -- The Group Name of the User - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 196
of the user as MD5, the Authentication Password as 11111, the Privacy Mode as DES, and the Privacy Password as 22222: T1600G-52TS(config)# snmp-server user admin local group2 smode v3 slev authPriv cmode MD5 cpwd 11111 emode DES epwd 22222 23.5 snmp-server community Description The snmp-server - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 197
retries ] [ timeout timeout ] no snmp-server host ip user-name Parameter ip -- The IP Address of the management Host. Both IPv4 and IPv6 addresses are supported, for example 192.168.0.100 or fe80::1234. udp-port -- UDP port, which is used to send notifications. The UDP port functions with the IP - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 198
station as admin, the Security Model of the management station as v2c, the type of the notifications as inform, the maximum time for the switch to wait as 1000 seconds, and the retries time as 100: T1600G-52TS(config)# snmp-server host 192.168.0.146 162 admin smode v2c type inform retries 100 - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 199
Example Specify the local engineID as 1234567890, and the remote engineID as abcdef123456: T1600G-52TS(config)# snmp-server engineID local 1234567890 remote abcdef123456 23.8 snmp-server traps snmp Description The snmp-server traps snmp command is used to enable SNMP standard traps which include - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 200
23.9 snmp-server traps link-status Description The snmp-server traps link-status command is used to enable SNMP link status trap for the specified port. To disable the sending of SNMP link status trap, please use no snmp-server traps link-status command. Syntax snmp-server traps link-status no snmp- - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 201
loopback-detection -- Enable loopback-detection trap. It is sent when the switch detects loopback or loopback is cleared. storm-control -- Enable storm-control trap. It is sent when the multicast or broadcast rate exceeds the predefined value. spanning-tree -- Enable spanning-tree trap. It is sent - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 202
Command Mode Global Configuration Mode Example Enable all SNMP extended MAC address-related traps for the switch: T1600G-52TS(config)# snmp-server traps mac Enable new MAC address trap only for the switch: T1600G-52TS(config)# snmp-server traps mac new 23.12 snmp-server traps vlan Description The - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 203
23.13 rmon history Description The rmon history command is used to configure the history sample entry. To return to the default configuration, please use no rmon history command. RMON (Remote Monitoring), basing on SNMP architecture, functions to monitor the network. History Group is one of the - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 204
23.14 rmon event Description The rmon event command is used to configure the entries of SNMP-RMON Event. To return to the default configuration, please use no rmon event command. Event Group, as one of the commonly used RMON Groups, is used to define RMON events. Alarms occur when an event is - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 205
23.15 rmon alarm Description The rmon alarm command is used to configure SNMP-RMON Alarm Management. To return to the default configuration, please use no rmon alarm command. Alarm Group is one of the commonly used RMON Groups. RMON alarm management allows monitoring the specific alarm variables. - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 206
to configure the entries of SNMP-RMON statistics. To delete the corresponding entry, please use no rmon statistics command. The maximum supported entries are 1000. Syntax rmon statistics index interface gigabitEthernet port [ owner owner-name] [ status { underCreation | valid }] no rmon statistics - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 207
owner-name -- The creator of the event entry, ranging from 1 to 16 characters. By default, it is "monitor". status -- The status of the statistics entry, either "underCreation" or "valid". "underCreation" means this entry won't take effect until it is modified to "valid"; "valid" means this entry - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 208
Example Display the View table: T1600G-52TS# show snmp-server view 23.19 show snmp-server group Description The show snmp-server group command is used to display the Group table. Syntax show snmp-server group Command Mode Privileged EXEC Mode and Any Configuration Mode Example Display the Group - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 209
Command Mode Privileged EXEC Mode and Any Configuration Mode Example Display the Community table: T1600G-52TS# show snmp-server community 23.22 show snmp-server host Description The show snmp-server host command is used to display the Host table. Syntax show snmp-server host Command Mode Privileged - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 210
23.24 show rmon history Description The show rmon history command is used to display the configuration of the history sample entry. Syntax show rmon history [ index ] Parameter index -- The index number of the entry selected to display the configuration, ranging from 1 to 12, in the format of 1-3, - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 211
23.26 show rmon alarm Description The show rmon alarm command is used to display the configuration of the Alarm Management entry. Syntax show rmon alarm [ index ] Parameter index -- The index number of the entry selected to display the configuration, ranging from 1 to 12, in the format of 1-3, 5. - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 212
contains two types of ARP entries: dynamic and static. An ARP dynamic entry is automatically created and maintained by ARP. A static ARP entry is manually configured and maintained. 24.1 arp Description This arp command is used to add a static ARP entry. To delete the specified ARP entry, please use - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 213
Command Mode Privileged EXEC Mode Example Clear all the dynamic ARP entries: T1600G-52TS(config)# clear arp-cache 24.3 arp timeout Description This arp timeout command is used to configure the ARP aging time of the interface. Syntax arp timeout timeout no arp timeout Parameter timeout -- Specify the - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 214
Parameter ip -- Specify the IP address of your desired ARP entry. mac -- Specify the MAC address of your desired ARP entry. Command Mode Privileged EXEC Mode and Any Configuration Mode Example Display the ARP entry with the IP as 192.168.0.2: T1600G-52TS(config)# show ip arp 192.168.0.2 24.5 show ip - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 215
Syntax show ip arp summary Command Mode Privileged EXEC Mode and Any Configuration Mode Example Display the number of the ARP entries: T1600G-52TS(config)# show ip arp summary 203 - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 216
Chapter 25 Static Routes Commands 25.1 interface vlan Description This interface vlan command is used to create the VLAN interface. To delete the specified VLAN interface, please use the no interface vlan command. Syntax interface vlan { vid } no interface vlan { vid } Parameter vid -- The ID of the - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 217
Example Create the loopback interface 1: T1600G-52TS(config)# interface loopback 1 25.3 switchport Description This switchport command is used to switch the Layer 3 interface into the Layer 2 port. To switch the Layer 2 port into the Layer 3 routed port, please use the no switchport command. Syntax - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 218
Example Shut down the routed port 1/0/9 : T1600G-52TS(config)# interface gigabitEthernet 1/0/9 T1600G-52TS(config-if)# no switchport T1600G-52TS(config-if)# shutdown 25.5 ip route Description This ip route command is configure the static route. To clear the corresponding entry, please use the no ip - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 219
Syntax description string no description Parameter string -- Content of an interface description, ranging from 1 to 32 characters. Command Mode Interface Configuration Mode Example Add a description system-if to the routed port 1/0/9 : T1600G-52TS(config)# interface gigabitEthernet 1/0/9 T1600G-52TS - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 220
Syntax show ip interface [ gigabitEthernet port | port-channel lagid | loopback id | vlan vlan-id ] Parameter port -- The port number. lagid -- The ID of the LAG. Member ports in this LAG should all be routed ports. id -- The loopback interface ID. vlan-id -- The VLAN interface ID. Command Mode - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 221
Syntax show ip route [ static | connected ] Parameter static | connected -- Specify the route type. If not specified, all types of route entries will be displayed. static: The static routes. connected: The connected routes. Command Mode Privileged EXEC Mode and Any Configuration Mode Example Display - TP-Link T1600G-52TSTL-SG2452 | T1600G-52TS V1 CLI Reference Guide - Page 222
Display the routes to all the subnets that belongs to 192.168.0.0/16: T1600G-52TS(config)# show ip route specify 192.168.0.0 255.255.0.0 longer-prefixes 25.12 show ip route summary Description This show ip route summary command is used to display the summary information of the route entries
T1600G-52TS (TL-SG2452)
JetStream Gigabit Smart Switch
REV1.0.0
1910011156