TP-Link T2500G-10MPS T2500G-10MPSUN V1 CLI Reference Guide Guide
TP-Link T2500G-10MPS Manual
View all TP-Link T2500G-10MPS manuals
Add to My Manuals
Save this manual to your list of manuals |
TP-Link T2500G-10MPS manual content summary:
- TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 1
CLI Reference Guide T2500G-10MPS 1910012153 REV1.0.0 May 2017 - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 2
COPYRIGHT & TRADEMARKS Specifications are subject to change without notice. is a registered trademark of TP-Link Technologies Co., Ltd. Other brands and product names are trademarks or registered trademarks of their respective holders. No part of the specifications may be reproduced - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 3
...18 1.4.1 Format Conventions ...18 1.4.2 Special Characters ...19 1.4.3 Parameter Format...19 Chapter 2 User Interface 20 2.1 enable ...20 2.2 service password-encryption 20 2.3 enable password...21 2.4 enable secret ...22 2.5 configure...23 2.6 exit...24 2.7 end ...24 2.8 history...25 - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 4
3.11 3.12 show vlan ...34 show interface switchport ...34 Chapter 4 MAC-based VLAN Commands 36 4.1 mac-vlan mac-address...36 4.2 mac-vlan ...37 4.3 show mac-vlan...37 4.4 show mac-vlan interface...38 Chapter 5 Protocol-based VLAN Commands 39 5.1 protocol-vlan template ...39 5.2 protocol-vlan - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 5
.8 11.9 11.10 11.11 11.12 11.13 11.14 11.15 11.16 11.17 user name (password)...70 user name (secret)...71 service password-recovery ...72 user access-control ip-based 73 user access-control mac-based 74 user access-control port-based 75 line ...76 password ...77 - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 6
key 91 show ip http configuration...92 show ip http secure-server ...92 Chapter 13 Binding Table Commands 93 13.1 13.2 13.3 13.4 13.5 13.6 13.7 13.8 13.9 13.10 13.11 13.12 13.13 13.14 13.15 ip source binding ...93 ip dhcp snooping ...94 ip dhcp snooping vlan ...95 ip dhcp snooping information - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 7
14.7 14.8 14.9 show ip arp inspection interface 109 show ip arp inspection statistics 109 clear ip arp inspection statistics 110 Chapter 15 DoS Defend Commands 111 15.1 15.2 15.3 ip dos-prevent ...111 ip dos-prevent type...111 show ip dos-prevent...113 Chapter 16 IEEE 802.1X Commands 115 - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 8
18.6 18.7 18.8 18.9 18.10 18.11 18.12 18.13 18.14 18.15 logging host index ...134 logging console...135 logging console level...136 logging monitor ...137 logging monitor level ...137 clear logging ...138 show logging local-config...139 show logging loghost ...139 show logging buffer ...140 show - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 9
21.32 21.33 21.34 21.35 system-time manual ...161 system-time ntp ...161 system-time dst predefined ...167 ip address ...168 ip address-alloc...169 reset ...170 reboot ...170 reboot-schedule ...171 copy ...174 remove backup-image...174 firmware upgrade...175 boot autoinstall start...176 - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 10
22 IPv6 Address Configuration Commands 189 22.1 22.2 22.3 22.4 22.5 22.6 22.7 22.8 ipv6 enable...189 ipv6 address autoconfig...189 ipv6 address link-local ...190 ipv6 address dhcp ...191 ipv6 address ra ...191 ipv6 address eui-64 ...192 ipv6 address ...193 show ipv6 interface...194 Chapter 23 - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 11
24.3 24.4 24.5 24.6 24.7 24.8 24.9 24.10 24.11 24.12 qos dscp ...208 qos queue cos-map ...209 qos queue dscp-map ...210 qos queue mode ...211 qos queue weight ...212 show qos interface...213 show qos cos-map...214 show qos dscp-map ...214 show qos queue mode...215 show qos status ...215 Chapter 25 - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 12
action...245 redirect interface ...246 s-condition ...246 s-mirror...247 qos-remark ...248 access-list bind acl(interface 249 access-list bind acl(vlan) ...249 access-list bind(interface) ...250 access-list bind(vlan)...251 show access-list ...251 show access-list policy ...252 show access-list - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 13
272 31.1 31.2 31.3 31.4 31.5 31.6 31.7 31.8 dldp(global) ...272 dldp interval ...272 dldp shut-mode ...273 dldp reset(global) ...274 dldp(interface)...274 dldp reset(interface) ...275 show dldp ...275 show dldp interface...276 Chapter 32 IGMP Snooping Commands 277 32.1 32.2 32.3 32.4 32.5 32 - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 14
32.11 32.12 32.13 32.14 32.15 32.16 32.17 32.18 32.19 32.20 32.21 32.22 32.23 32.24 32.25 32.26 32.27 32.28 32.29 32.30 32.31 32.32 ip igmp snooping vlan-config (router-port-forbidden 284 ip igmp snooping multi-vlan-config 285 ip igmp snooping multi-vlan-config (router-port-forbidden 286 ip igmp - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 15
snmp-server user ...324 snmp-server community...325 snmp-server host ...326 snmp-server engineID ...328 snmp-server traps snmp...328 snmp-server traps link-status 329 snmp-server traps...330 snmp-server traps power ...331 snmp-server traps ddm...332 snmp-server traps vlan...334 rmon history ...334 - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 16
34.21 34.22 34.23 34.24 34.25 34.26 34.27 34.28 show snmp-server user...340 show snmp-server community 341 show snmp-server host...341 show snmp-server engineID 341 show rmon history...342 show rmon event ...343 show rmon alarm...343 show rmon statistics ...344 Chapter 35 LLDP Commands 345 35 - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 17
http enable authentication 373 show aaa global ...374 Chapter 37 DHCP Relay Commands 375 37.1 37.2 37.3 37.4 37.5 37.6 37.7 37.8 37.9 service dhcp relay ...375 ip dhcp relay information ...375 ip dhcp relay information policy 376 ip dhcp relay information custom 377 ip dhcp relay information - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 18
38.10 38.11 38.12 38.13 38.14 38.15 38.16 38.17 38.18 power inline supply...389 power inline profile ...389 power inline time-range...390 show power inline ...391 show power inline configuration interface 391 show power inline information interface 392 show power profile...392 show power holiday - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 19
device mentioned in this Guide stands for T2500G-10MPS JetStream Gigabit L2 Managed Switch without any explanation. Overview of this Guide Chapter 1: Using the CLI about the commands used for configuring LAG (Link Aggregation Group) and LACP (Link Aggregation Control Protocol). Chapter 11: User - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 20
configuring the HTTP and HTTPS logon. Chapter 13: Binding Table Commands Provide information about the commands used for binding the IP address, MAC address, VLAN and System information and System IP, reboot and reset the switch, upgrade the switch system and commands used for cable test. Chapter - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 21
MSTP (Multiple Spanning Tree Protocol). Chapter 31: DLDP Commands Provide information about the commands used for configuring the DLDP (Device Link Detection Protocol). Chapter 32: IGMP Snooping Commands Provide information about the commands used for configuring the IGMP Snooping (Internet Group - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 22
If you are using the switch's Micro-USB console port with the USB port of a Windows PC, a driver for the USB port is required. The USB driver is provided on the resource CD. Follow the InstallSheild Wizard to accomplish the installation. The TP-Link USB Console Driver supports the following Windows - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 23
After the TP-Link USB Console Driver is installed, the PC's USB port will act as RS-232 serial port when the PC's USB port is connected to the switch's Micro-USB the terminal emulation program or the terminal to use the following settings: Baud rate: 38400 bps Data bits: 8 Parity: none - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 24
5. The DOS prompt "T2500G-10MPS>" will appear after pressing the Enter button as shown in Figure 1-2. It indicates that you can use the CLI now. Figure 1-2 Log in the Switch 1.1.2 Logon by Telnet For Telnet connection, you should also configure the Telnet login mode and login authentication - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 25
the prompted DOS screen shown in Figure 1-3. Figure 1-3 Configure login local mode Now, you can logon by Telnet in login local mode. 1. Make sure the switch and the PC are in the same LAN. Click Start and type in cmd in the Search programs and files window and press the Enter - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 26
the User EXEC Mode 4. Type enable command to enter Privileged EXEC Mode. Figure 1-7 Enter into the Priviledged EXEC Mode Now you can manage your switch with CLI commands through Telnet connection. Login Mode Firstly configure the Telnet login mode as "login" and the connection password as 456 in - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 27
.168.0.1 in the command prompt shown as Figure 1-10, and press the Enter button. Figure 1-10 Connecting to the Switch 3. You are prompted to enter the connection password 456 you have set through Console port connection, and then you are in User EXEC Mode. Figure 1-11 Enter into the User EXEC Mode - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 28
a Putty client software is recommended. There are two authentication modes to set up an SSH connection: Password Authentication Mode: It requires username and by default. Key Authentication Mode: It requires a public key for the switch and a private key for the SSH client software. You can generate - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 29
Password Authentication Mode 1. Open the software to log on to the interface of PuTTY. Enter the IP address of the switch into Host Name field; keep the default value 22 in the Port field; select SSH as the Connection type. Figure 1-14 SSH Connection Config 2. Click - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 30
Key Authentication Mode 1. Select the key type and key length, and generate SSH key. Figure 1-16 Generate SSH Key Note: 1. The key length is in the range of 512 to 3072 bits. 2. During the key generation, randomly moving the mouse quickly can accelerate the key generation. 12 - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 31
is successfully generated, please save the public key and private key to a TFTP server. Figure 1-17 Save the Generated Key 3. Log on to the switch by Telnet and download the public key file from the TFTP server to the switch, as the following figure shows: Figure 1-18 Download the Public Key 13 - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 32
Note: 1. The key type should accord with the type of the key file. 2. The SSH key downloading can not be interrupted. 4. After the public key is downloaded, please log on to the interface of PuTTY and enter the IP address for login. Figure 1-19 SSH Connection Config 14 - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 33
enter the login user name. If you log on to the switch without entering password, it indicates that the key has been successfully downloaded. Figure 1-21 Log on the Switch 1.2 CLI Command Modes The CLI is divided into different command modes: User - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 34
Mode can also be divided into Interface Ethernet, Interface link-aggregation and some other modes, which is shown as EXEC Mode Primary mode once it is connected with the switch. T2500G-10MPS> Use the exit command to disconnect the switch. Use the enable command to access Privileged EXEC mode. - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 35
from Global Configuration mode. T2500G-10MPS (config-if)# or T2500G-10MPS(config-if-range)# Use the switchport command to switch to the Layer 2 interface between the PC and the switch is established by a Telnet/SSH connection. 2. Each command mode has its own set of specific commands. To configure - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 36
link-aggregation: Configure parameters for a link-aggregation, such as broadcast storm. d). Interface range link history. 1.3 Privilege Restrictions This switch's security is divided into four Format Conventions The following conventions are used in this Guide: Items in square brackets [ ] are - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 37
Bold indicates an unalterable keyword. For example: show logging Normal Font indicates a constant (several options are enumerated and only one can be selected). For example: mode {dynamic | static | permanent} Italic Font indicates a variable (an actual value must be assigned). For example: - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 38
EXEC Mode Privilege Requirement None. Example If you have set the password to access Privileged EXEC Mode from User EXEC Mode: T2500G-10MPS>enable Enter password: T2500G-10MPS# 2.2 service password-encryption Description The service password-encryption command is used to encrypt the password when - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 39
encryption function: T2500G-10MPS(config)# service password-encryption 2.3 enable password Description The enable password command is used to set or change the password with fixed length, which you can copy from another switch's configuration file. After the encrypted password is configured, you - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 40
service password-encryption, the password in the configuration file will be displayed in the symmetric encrypted form. Example Set the super password as "admin" and unencrypted to access Privileged EXEC Mode from User EXEC Mode: T2500G-10MPS copy from another switch's configuration file. After the 22 - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 41
are defined, you must enter the password set in enable secret. Example Set the secret password as "admin" and unencrypted to access Privileged EXEC Mode from User EXEC Mode. The password will be displayed in the encrypted form. T2500G-10MPS(config)#enable secret 0 admin 2.5 configure Description The - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 42
None. Example Return to Global Configuration Mode from Interface Configuration Mode, and then return to Privileged EXEC Mode: T2500G-10MPS(config-if)# exit T2500G-10MPS(config)#exit T2500G-10MPS# 2.7 end Description The end command is used to return to Privileged EXEC Mode. Syntax end Command Mode - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 43
entered in the current mode since the switch is powered. Syntax history Command Mode Privileged EXEC Mode and any Configuration Mode Privilege Requirement None. Example Show the commands you have entered in the current mode: T2500G-10MPS (config)# history 1 history 2.9 history clear Description The - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 44
T2500G-10MPS(config)#history clear 26 - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 45
1Q VLAN Commands VLAN (Virtual Local Area Network) technology is developed for the switch to divide the LAN into multiple logical LANs flexibly. Hosts in the same commands. Example Create VLAN 2-10 and VLAN 100: T2500G-10MPS(config)# vlan 2-10,100 Delete VLAN 2: T2500G-10MPS(config)# no vlan 2 27 - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 46
Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Create VLAN Interface 2: T2500G-10MPS(config)# interface vlan 2 3.3 name Description The name command is used to assign a description to a VLAN. To clear the description, please - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 47
to these commands. Example Specify the name of VLAN 2 as "group1": T2500G-10MPS(config)# vlan 2 T2500G-10MPS(config-vlan)# name group1 3.4 switchport mode Description The switchport mode command is used to configure the Link Types for the ports. Syntax switchport mode { access | trunk | general - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 48
level users have access to these commands. Example Configure Gigabit Ethernet port 1/0/3 whose link type is "access" to VLAN 2: T2500G-10MPS(config)#interface gigabitEthernet 1/0/3 T2500G-10MPS(config-if)#switchport access vlan 2 3.6 switchport trunk allowed vlan Description The switchport trunk - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 49
users have access to these commands. Example Configure the link type of port 2 as trunk and add it to VLAN 2: T2500G-10MPS(config)#interface gigabitEthernet 1/0/2 T2500G-10MPS(config-if)#switchport mode trunk T2500G-10MPS(config-if)#switchport trunk allowed vlan 2 3.7 switchport general allowed - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 50
these commands. Example Configure Gigabit Ethernet port 1/0/4 whose link type is "general" to VLAN 2 and its egress-rule as "tagged": T2500G-10MPS(config)#interface gigabitEthernet 1/0/4 T2500G-10MPS(config-if)#switchport mode general T2500G-10MPS(config-if)#switchport general allowed vlan 2 tagged - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 51
Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the summarized information of IEEE 802.1Q VLAN: T2500G-10MPS(config)# show vlan summary 3.10 show vlan brief Description The show vlan brief command is used to display the brief information of - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 52
of all VLANs. Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the information of vlan 5: T2500G-10MPS(config)# show vlan id 5 3.12 show interface switchport Description The show interface switchport command is used to display the IEEE 802 - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 53
Privilege Requirement None. Example Display the VLAN configuration information of all ports and port channels: T2500G-10MPS(config)# show interface switchport 35 - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 54
Power User level users have access to these commands. Example Create VLAN 2 with the MAC address 00:11:11:01:01:12 and the name "TP": T2500G-10MPS(config)#mac-vlan mac-address 00:11:11:01:01:12 vlan 2 description - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 55
level users have access to these commands. Example Enable the Gigabit Ethernet port 1/0/3 for the MAC-based VLAN feature: T2500G-10MPS(config)#interface gigabitEthernet 1/0/3 T2500G-10MPS(config-if)#mac-vlan 4.3 show mac-vlan Description The show mac-vlan command is used to display the information - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 56
:XX:XX. vlan-id -- Specify IEEE 802.1Q VLAN ID, ranging from 1 to 4094. Example Display the information of all the MAC-based VLAN entry: T2500G-10MPS(config)#show mac-vlan all 4.4 show mac-vlan interface Description The show mac-vlan interface command is used to display the port state of MAC - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 57
Global Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Create a Protocol-based VLAN template named "TP" whose Ethernet protocol type is 0x2024: T2500G-10MPS (config)#protocol-vlan template name TP ether-type 2024 39 - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 58
Only Admin, Operator and Power User level users have access to these commands. Example Create Protocol-based VLAN 2 and bind it with Protocol-based VLAN Template 3: T2500G-10MPS(config)#protocol-vlan vlan 2 template 3 5.3 protocol-vlan group Description The protocol-vlan command is used to add the - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 59
Power User level users have access to these commands. Example Add Gigabit Ethernet port 20 to protocol group 1: T2500G-10MPS(config)#interface gigabitEthernet 1/0/20 T2500G-10MPS(config-if)#protocol-vlan group 1 5.4 show protocol-vlan template Description The show protocol-vlan template command is - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 60
show protocol-vlan vlan Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display information of the Protocol-based VLAN entry: T2500G-10MPS(config)#show protocol-vlan vlan 42 - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 61
of public networks at the network access terminal of the Internet Service Provider. And these packets will be transmitted with double-tag across to these commands. Example Enable the VLAN-VPN function globally: T2500G-10MPS(config)#dot1q-tunnel 6.2 dot1q-tunnel tpid Description The dot1q-tunnel - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 62
Example Configure Global TPID of the VLAN-VPN as 0x9100: T2500G-10MPS(config)#dot1q-tunnel tpid 9100 6.3 switchport dot1q-tunnel mapping Description c-vlan -- Customer VLAN ID, ranging from 1 to 4094. sp-vlan -- Service Provider VLAN ID, ranging from 1 to 4094. descript -- Give a description to - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 63
Mapping entry on the Gigabit Ethernet port 1/0/3 with the Customer VLAN as VLAN 2 and the Service Provider VLAN as VLAN 3: T2500G-10MPS(config)#interface gigabitEthernet 1/0/3 T2500G-10MPS(config-if)#switchport dot1q-tunnel mapping 2 3 6.4 switchport dot1q-tunnel mode nni Description The switchport - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 64
Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the global configuration information of the VLAN VPN: T2500G-10MPS(config)#show dot1q-tunnel 6.6 show dot1q-tunnel mapping Description The show dot1q-tunnel mapping command is used to display the information - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 65
dot1q-tunnel interface Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the port type of all VLAN VPN ports: T2500G-10MPS(config)#show dot1q-tunnel interface 47 - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 66
service providers to transmit packets from different customers across their ISP networks and maintain Layer 2 protocol configurations of each customer. The supported commands. Example Enable the L2PT function globally: T2500G-10MPS(config)# l2protocol-tunnel 7.2 l2protocol-tunnel type Description - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 67
the port's type as UNI if it is connecting to the user's local network. 01000ccccccc | 01000ccccccd | gvrp | stp | lacp | all -- Select the supported Layer 2 protocol type. Packets of the specified protocol will be encapsulated with their destination MAC address before they are sent to the ISP - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 68
Example Configure port 1/0/3 as a UNI port for STP packets with the threshold as 1000 packets/second: T2500G-10MPS(config)#interface gigabitEthernet 1/0/3 T2500G-10MPS(config-if)# l2protocol-tunnel type uni stp threshold 1000 7.3 show l2protocol-tunnel global Description The show l2protocol-tunnel - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 69
Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the L2PT configuration information of Gigabit Ethernet port 1/0/1: T2500G-10MPS(config)#show l2protocol-tunnel interface gigabitEthernet 1/0/1 Display the L2PT configuration information of all Ethernet ports - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 70
information and propagate the local VLAN registration information to other switches, without having to individually configure each VLAN. 8.1 gvrp have access to these commands. Example Enable the GVRP function globally: T2500G-10MPS(config)#gvrp 8.2 gvrp (interface) Description The gvrp command is - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 71
level users have access to these commands. Example Enable the GVRP function for Gigabit Ethernet ports 1/0/2-6: T2500G-10MPS(config)#interface range gigabitEthernet 1/0/2-6 T2500G-10MPS(config-if-range)#gvrp 8.3 gvrp registration Description The gvrp registration command is used to configure the - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 72
GVRP registration mode as "fixed" for Gigabit Ethernet ports 1/0/2-6: T2500G-10MPS(config)#interface range gigabitEthernet 1/0/2-6 T2500G-10MPS(config-if-range)#gvrp registration fixed 8.4 gvrp timer Description The gvrp timer command is used to set a GVRP timer for the desired port. To restore to - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 73
to these commands. Example Set the GARP leaveall timer of Gigabit Ethernet port 1/0/6 as 2000 centiseconds and restore the join timer of it to the default value: T2500G-10MPS(config)#interface gigabitEthernet 1/0/6 T2500G-10MPS(config-if)#gvrp timer leaveall 2000 T2500G-10MPS(config-if)#no gvrp - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 74
8.6 show gvrp global Description The show gvrp global command is used to display the global GVRP status. Syntax show gvrp global Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the global GVRP status: T2500G-10MPS(config)#show gvrp global 56 - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 75
User level users have access to these commands. Example Enable the Voice VLAN function for VLAN 10: T2500G-10MPS(config)# voice vlan 10 9.2 voice vlan aging Description The voice vlan aging command is used to set the aging time for a voice VLAN. To restore to the default aging time for the Voice - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 76
voice vlan aging Parameter time -- Aging time (in minutes) to be set for the Voice VLAN. It ranges from 1 to 43200 minutes and the level users have access to these commands. Example Set the aging time for the Voice VLAN as 1 minute: T2500G-10MPS(config)# voice vlan aging 1 9.3 voice vlan priority - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 77
Example Configure the priority of the Voice VLAN as 5: T2500G-10MPS(config)# voice vlan priority 5 9.4 voice vlan mac-address Create a Voice VLAN OUI described as TP-Phone with the OUI address 00:11:11:11:11:11 and the mask address FF:FF:FF:00:00:00: T2500G-10MPS(config)#voice vlan mac-address 00:11 - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 78
the Ethernet port. Syntax switchport voice vlan mode { manual | auto } Parameter manual | auto -- Port mode. Command Mode Interface Configuration to operate in the auto voice VLAN mode: T2500G-10MPS(config)# interface gigabitEthernet 1/0/3 T2500G-10MPS(config-if)# switchport voice vlan mode auto - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 79
Power User level users have access to these commands. Example Enable port 1/0/3 for the Voice VLAN security feature: T2500G-10MPS(config)# interface gigabitEthernet 1/0/3 T2500G-10MPS(config-if)# switchport voice vlan security 9.7 show voice vlan Description The show voice vlan command is used to - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 80
Only Admin, Operator and Power User level users have access to these commands. Example Display the configuration information of Voice VLAN OUI: T2500G-10MPS(config)# show voice vlan oui 9.9 show voice vlan switchport Description The show voice vlan switchport command is used to display the Voice - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 81
Control Protocol) is defined in IEEE802.3ad and enables the dynamic link aggregation and disaggregation by exchanging LACP packets with its partner. The switch can dynamically group similarly configured ports into a single logical link, which will highly extend the bandwidth and flexibly balance the - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 82
Example Add ports 2-4 to EtherChannel Group 1 and enable the static LAG: T2500G-10MPS(config)# interface range gigabitEthernet 1/0/2-4 T2500G-10MPS(config-if-range)# channel-group 1 mode on 10.2 port-channel load-balance Description The port-channel load-balance command is used to configure the - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 83
Admin, Operator and Power User level users have access to these commands. Example Configure the Aggregate Arithmetic for LAG as "src-dst-ip": T2500G-10MPS(config)# port-channel load-balance src-dst-ip 10.3 lacp system-priority Description The lacp system-priority command is used to configure the - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 84
, Operator and Power User level users have access to these commands. Example Configure the LACP port priority as 1024 for ports 1-3: T2500G-10MPS(config)# interface range gigabitEthernet 1/0/1-3 T2500G-10MPS(config-if-range)# lacp port-priority 1024 Configure the LACP port priority as 2048 for port - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 85
Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the detailed information of EtherChannel Group 1: T2500G-10MPS(config)# show etherchannel 1 detail 10.6 show etherchannel load-balance Description The show etherchannel load-balance command is used to - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 86
. Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the internal LACP information of EtherChannel Group 1: T2500G-10MPS(config)# show lacp 1 internal 10.8 show lacp sys-id Description The show lacp sys-id command is used to display the - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 87
Example Display the LACP system priority: T2500G-10MPS(config)# show lacp sys-id 69 - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 88
User Management Commands User Manage Commands are used to manage the user's logging information by Web, Telnet or SSH, so as to protect the settings of the switch from being randomly changed. 11.1 user name (password) Description The user name command is used to add a new user or modify the existed - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 89
service password-encryption, the password in the configuration file will be displayed in the symmetric encrypted form. Example Add and enable a new admin user named "tplink", of which the password is "admin" and unencrypted: T2500G-10MPS all the settings of different functions. "operator" means that - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 90
form. T2500G-10MPS(config)#user name tplink privilege admin secret 0 admin 11.3 service password-recovery Description The service password-recovery service password-recovery command. With password-recovery enabled, you can connect to the switch's concole port and delete all your previous set - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 91
Enable the switch's password recovery feature: T2500G-10MPS(config)# service password-recovery 11.4 user access-control ip-based Description The user access-control ip-based command is used to limit the IP-range of the users for login. Only the users within the IP-range you set here are allowed - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 92
Enable the access-control of the user whose IP address is 192.168.0.148: T2500G-10MPS(config)# user access-control ip-based 192.168.0.148 255.255.255.255 address of the users for login. Only the user with this MAC address you set here is allowed to login. To cancel the user access limit, please use - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 93
T2500G-10MPS(config)# 00:00:13:0A:00:01 user access-control mac-based 11.6 user access-control port-based Description The user access-control port-based command is used to limit the ports for login. Only the users connected to these ports you set here are allowed to login. To cancel the user - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 94
Only Admin level users have access to these commands. Example Enter the Console port configuration mode and configure the console port 0: T2500G-10MPS(config)#line console 0 Enter the Virtual Terminal configuration mode so as to prepare further configurations such as password and login mode for - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 95
you can copy from another switch's configuration file. After the service password-encryption, the password in the configuration file will be displayed in the symmetric encrypted form. Example Configure the connection password of Console port connection 0 as "tplink" and unencrypted: T2500G-10MPS - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 96
" and unencrypted: T2500G-10MPS(config)#line vty 0 5 T2500G-10MPS(config-line)#password 0 tplink 11.9 login Description The login command is used to configure the login mode of a switch which uses connection password to login. At this situation, a connection password must be set for virtual terminal - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 97
Console port connection 0 as login local mode: T2500G-10MPS(config)#line console 0 T2500G-10MPS(config-line)#login local 11.11 media-type rj45 Description The media-type rj45 command is used to configure the console media type as RJ-45 for input. The switch has two console ports available -- an RJ - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 98
-line)# media-type rj45 Receive the micro-USB console input prior to the RJ-45 console input: T2500G-10MPS(config)# line console 0 T2500G-10MPS(config-line)# no media-type rj45 11.12 telnet Description The telnet enable command is used to enable the Telnet function. To disable the Telnet - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 99
and Operator level users have access to these commands. Example Specify the communication baud rate on the console port to the default value: T2500G-10MPS(config)# no serial_port 11.14 show password-recovery Description The show password-recovery command is used to display the status of the password - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 100
Any Configuration Mode Privilege Requirement Only Admin level users have access to these commands. Example Display the information of the current users: T2500G-10MPS(config)# show user account-list 11.16 show user configuration Description The show user configuration command is used to display the - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 101
function. Syntax show telnet-status Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display whether the Telnet function is enabled: T2500G-10MPS(config)# show telnet-status 83 - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 102
ip http server Description The ip http server command is used to enable the HTTP server within the switch. To disable the HTTP function, please use no ip http server command. This function is enabled by to these commands. Example Disable the HTTP function: T2500G-10MPS(config)# no ip http server 84 - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 103
to these commands. Example Configure the maximum number of the Admin, Operator, Power User and User users logging on to the HTTP server as 5, 3, 2 and 3: T2500G-10MPS(config)# ip http max-users 5 3 2 3 85 - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 104
Configure the timeout time of the HTTP connection as 15 minutes: T2500G-10MPS(config)# ip http session timeout 15 12.4 ip http secure-server Description The ip http secure-server command is used to enable the HTTPS server within the switch. To disable the HTTPS function, please use no ip http secure - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 105
: T2500G-10MPS(config)# no ip http secure-server 12.5 ip http secure-protocol Description The ip http secure-protocol command is used to configure the SSL protocol version. To restore to the default SSL version, please use no ip http secure-protocol command. By default, the switch supports SSLv3 - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 106
switch supports all these ciphersuites. Command Mode Global Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Configure the ciphersuite to be used for encryption over the SSL connection as 3des-ede-cbc-sha: T2500G-10MPS - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 107
users have access to these commands. Example Configure the maximum number of the Admin and Guest users logging on to the HTTPs server as 5 and 3: T2500G-10MPS(config)# ip http secure-max-users 5 3 12.8 ip http secure-session timeout Description The ip http secure-session timeout command is used to - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 108
the SSL certificate which is selected to download to the switch. The length of the name ranges from 1 to 25 TFTP server. Both IPv4 and IPv6 addresses are supported, for example 192.168.0.1 or fe80::1234. the IP address of 192.168.0.146: T2500G-10MPS(config)# ip http secure-server download certificate - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 109
supported, for example 192.168.0.1 or fe80::1234. Command Mode Global Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Download an SSL key named ssl-key from TFTP server with the IP address of 192.168.0.146: T2500G-10MPS - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 110
Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the configuration information of the HTTP server: T2500G-10MPS(config)# show ip http configuration 12.12 show ip http secure-server Description The show ip http secure-server command is used - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 111
Inspection and IP verify source to filter the packets. 13.1 ip source binding Description The ip source binding command is used to bind the IP address, MAC address, VLAN ID and the Port number together manually. You can manually bind the IP address, MAC address, VLAN ID and the Port number together - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 112
ID 2 and the Port number 5 manually. And then enable the entry for the ARP detection: T2500G-10MPS(config)#ip source binding host1 192.168.0.1 00:00:00:00 and the connected Port number of the Host for automatic binding. The switch can also propagate the control information and the network parameters - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 113
Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Enable the DHCP Snooping function globally: T2500G-10MPS(config)#ip dhcp snooping 13.3 ip dhcp snooping vlan Description The ip dhcp snooping vlan command is used to enable DHCP Snooping - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 114
users have access to these commands. Example Enable the Option 82 function of DHCP Snooping on port 1/0/1: T2500G-10MPS(config)#interface gigabitEthernet 1/0/1 T2500G-10MPS(config-if)#ip dhcp snooping information option 13.5 ip dhcp snooping information strategy Description The ip dhcp snooping - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 115
to these commands. Example Replace the Option 82 field of the packets with the switch defined one and then send out on port 1/0/1: T2500G-10MPS(config)#interface gigabitEthernet 1/0/1 T2500G-10MPS(config-if)#ip dhcp snooping information strategy replace 13.6 ip dhcp snooping information remote - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 116
these commands. Example Configure the customized sub-option Remote ID for the Option 82 as tplink on port 1/0/1: T2500G-10MPS(config)#interface gigabitEthernet 1/0/1 T2500G-10MPS(config-if)#ip dhcp snooping information remote-id tplink 13.7 ip dhcp snooping information circuit-id Description The ip - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 117
User level users have access to these commands. Example Configure the Gigabit Ethernet port 1/0/2 to be a Trusted Port: T2500G-10MPS(config)#interface gigabitEthernet 1/0/2 T2500G-10MPS(config-if)#ip dhcp snooping trust 13.9 ip dhcp snooping mac-verify Description The ip dhcp snooping mac-verify - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 118
User level users have access to these commands. Example Enable the MAC Verify feature for the Gigabit Ethernet port 10/2: T2500G-10MPS(config)#interface gigabitEthernet 1/0/2 T2500G-10MPS(config-if)#ip dhcp snooping mac-verify 13.10 ip dhcp snooping limit rate Description The ip dhcp snooping limit - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 119
Requirement Only Admin, Operator and Power User level users have access to these commands. Example Set the Flow Control of GigabitEthernet port 2 as 20 pps: T2500G-10MPS(config)#interface gigabitEthernet 1/0/2 T2500G-10MPS(config-if)#ip dhcp snooping limit rate 20 13.11 ip dhcp snooping decline rate - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 120
Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the IP-MAC-VID-PORT binding table: T2500G-10MPS(config)#show ip source binding 13.13 show ip dhcp snooping Description The show ip dhcp snooping command is used to display the running status - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 121
Example Display the DHCP Snooping configuration of all Ethernet ports and port channels: T2500G-10MPS#show ip dhcp snooping interface Display the DHCP Snooping configuration of Gigabit Ethernet port 1/0/5: T2500G-10MPS#show ip dhcp snooping interface gigabitEthernet 1/0/5 13.15 show ip dhcp snooping - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 122
EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the DHCP snooping option 82 configuration of all Ethernet ports and port channels: T2500G-10MPS#show ip dhcp snooping information interface Display the DHCP snooping option 82 configuration of Gigabit Ethernet port - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 123
these commands. Example Enable the ARP Detection function globally: T2500G-10MPS(config)#ip arp inspection 14.2 ip arp inspection trust Description such as up-linked port and routing port and LAG port, should be set as Trusted Port. To ensure the normal communication of the switch, please configure - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 124
1/0/2-5 as the Trusted Port: T2500G-10MPS(config)#interface range gigabitEthernet 1/0/2-5 T2500G-10MPS(config-if-range)#ip arp inspection slow the network speed extremely. With the ARP Defend enabled, the switch can terminate receiving the ARP packets for 300 seconds when the transmission speed - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 125
Example Enable the arp defend function for the Gigabit Ethernet ports 1/0/2-6: T2500G-10MPS(config)#interface range gigabitEthernet 1/0/2-6 T2500G-10MPS(config-if-range)#ip arp inspection 14.4 ip arp inspection limit-rate Description The ip arp inspection limit-rate command is used to configure the - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 126
User level users have access to these commands. Example Restore Gigabit Ethernet port 1/0/5 to the ARP transmit status: T2500G-10MPS(config)#interface gigabitEthernet 1/0/5 T2500G-10MPS(config-if)#ip arp inspection recover 14.6 show ip arp inspection Description The show ip arp inspection command is - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 127
Privilege Requirement None. Example Display the configuration of Gigabit Ethernet port 1/0/1: T2500G-10MPS(config)#show ip arp inspection interface gigabitEthernet 1/0/1 Display the configuration of all Ethernet ports: T2500G-10MPS(config)#show ip arp inspection interface 14.8 show ip arp inspection - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 128
Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the number of the illegal ARP packets received: T2500G-10MPS(config)#show ip arp inspection statistics 14.9 clear ip arp inspection statistics Description The clear ip arp inspection statistics command is - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 129
the evil programs sending a lot of service requests to the Host. With the DoS Defend enabled, the switch can analyze the specific field of the access to these commands. Example Enable the DoS defend function globally: T2500G-10MPS(config)#ip dos-prevent 15.2 ip dos-prevent type Description The ip - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 130
trapped in an endless circle of building the initial connection. scan-synfin --The attacker sends the packet with its SYN field and the FIN field set to 1. The SYN field is used to request initial connection whereas the FIN field is used to request disconnection. Therefore, the packet of this type - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 131
Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Enable the DoS Defend Type named Land attack: T2500G-10MPS(config)#ip dos-prevent type land 15.3 show ip dos-prevent Description The show ip dos-prevent command is used to display the DoS - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 132
Example Display the DoS information of the detected DoS attack globally: T2500G-10MPS(config)#show ip dos-prevent 114 - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 133
the authentication status of the supplicant. It is usually an 802.1X-supported network device, such as this TP-Link switch. It acts as an intermediary (proxy) between the supplicant and the to these commands. Example Enable the IEEE 802.1X function: T2500G-10MPS(config)#dot1x system-auth-control 115 - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 134
status between the TP-Link 802.1x supplicant and the switch. Please disable the handshake feature if you are using a non-TP-Link 802.1x-compliant client to these commands. Example Disable the 802.1X handshake function: T2500G-10MPS(config)# no dot1x handshake 16.3 dot1x auth-method Description The - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 135
uses extensible authentication protocol (EAP) to exchange information between the switch and the client. The EAP protocol packets with authentication data Configure the Authentication Method of IEEE 802.1X as "pap": T2500G-10MPS(config)#dot1x auth-method pap 16.4 dot1x accounting Description The - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 136
Requirement Only Admin, Operator and Power User level users have access to these commands. Example Enable the Guest VLAN function for VLAN 5: T2500G-10MPS(config)#dot1x guest-vlan 5 16.6 dot1x quiet-period Description The dot1x quiet-period command is used to enable the quiet-period function - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 137
function: T2500G-10MPS(config)#dot1x quiet-period Enable the quiet-period function and set the quiet-period as 5 seconds: T2500G-10MPS(config)# dot1x timeout supplicant-timeout Parameter time --The maximum time for the switch to wait for the response from supplicant before resending a request to - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 138
Only Admin, Operator and Power User level users have access to these commands. Example Configure the supplicant timeout value as 5 seconds: T2500G-10MPS(config)#dot1x timeout supplicant-timeout 5 16.8 dot1x max-reauth-req Description The dot1x max-reauth-req command is used to configure the - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 139
User level users have access to these commands. Example Enable the IEEE 802.1X function for the Gigabit Ethernet port 1: T2500G-10MPS(config)#interface gigabitEthernet 1/0/1 T2500G-10MPS(config-if)#dot1x 16.10 dot1x guest-vlan(interface) Description The dot1x guest-vlan command is used to enable the - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 140
Power User level users have access to these commands. Example Enable the Guest VLAN function for Gigabit Ethernet port 1/0/2: T2500G-10MPS(config)#interface gigabitEthernet 1/0/2 T2500G-10MPS(config-if)#dot1x guest-vlan 16.11 dot1x port-control Description The dot1x port-control command is used to - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 141
have access to these commands. Example Configure the Control Mode for Gigabit Ethernet port 20 as "authorized-force": T2500G-10MPS(config)#interface gigabitEthernet 1/0/20 T2500G-10MPS(config-if)#dot1x port-control authorized-force 16.12 dot1x port-method Description The dot1x port-method command is - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 142
dot1x global Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the configuration of 801.X globally: T2500G-10MPS(config)#show dot1x global 16.14 show dot1x interface Description The show dot1x interface command is used to display all ports or - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 143
Privilege Requirement None. Example Display the configuration information of 801.X for Gigabit Ethernet port 20: T2500G-10MPS(config)#show dot1x interface gigabitEthernet 1/0/20 Display the configuration information of 801.X for all Ethernet ports: T2500G-10MPS(config)#show dot1x interface 125 - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 144
server for PPP authentication and AAA (authentication, authorization, and accounting) access requests. The switch will remove the Circuit-ID/Remote-ID tag from the received PPPoE Active Discovery Offer . Example Enable the PPPoE ID-Insertion function: T2500G-10MPS(config)# pppoe id-insertion 126 - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 145
-ID Insertion function for the Gigabit Ethernet port 1/0/1: T2500G-10MPS (config)# interface gigabitEthernet 1/0/1 T2500G-10MPS (config-if)# pppoe circuit-id 17.3 pppoe circuit of PPPoE Circuit-ID for the port. mac: The MAC address of the switch will be used to encode the Circuit-ID option. 127 - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 146
ip: The IP address of the switch will be used to encode the Circuit-ID option. This is type of PPPoE Circuit-ID as "mac" for the Gigabit Ethernet port 1/0/1: T2500G-10MPS (config)# interface gigabitEthernet 1/0/1 T2500G-10MPS (config-if)# pppoe circuit-id type mac 17.4 pppoe remote-id Description - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 147
users have access to these commands. Example Configure the remote-ID as "mac" for the Gigabit Ethernet port 1/0/1: T2500G-10MPS (config)# interface gigabitEthernet 1/0/1 T2500G-10MPS (config-if)# pppoe remote-id mac 17.5 show pppoe id-insertion global Description The show pppoe id-insertion global - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 148
Any Configuration Mode Privilege Requirement None. Example Display the configuration information of PPPoE Circuit-ID Insertion function of all Ethernet ports: T2500G-10MPS# show pppoe id-insertion interface Display the configuration of PPPoE Circuit-ID Insertion function of the Gigabit Ethernet port - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 149
record the settings and operation of the switch respectively switch is restarted. Syntax logging buffer no logging buffer Command Mode Global Configuration Mode Privilege Requirement Only Admin and Operator level users have access to these commands. Example Enable the system log buffer: T2500G-10MPS - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 150
users have access to these commands. Example Set the severity level as 5: T2500G-10MPS(config)#logging buffer level 5 18.3 logging file flash Description The logging file flash command is used to store the log messages in a file in the flash on the switch. To disable the log file flash function - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 151
Privilege Requirement Only Admin and Operator level users have access to these commands. Example Enable the log file flash function: T2500G-10MPS(config)#logging file flash 18.4 logging file flash frequency Description The logging file flash frequency command is used to specify the frequency to - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 152
Save the log messages with their severities equal or higher than 7 to the flash : T2500G-10MPS(config)#logging file flash level 7 18.6 logging host index Description The logging host index devices. You can remotely monitor the settings and operation status of other devices through the log host. 134 - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 153
no logging host index idx Parameter idx -- The index of the log host. The switch supports 4 log hosts at most. host-ip -- The IP for the log host. these commands. Example Enable log host 2 and set its IP address as 192.168.0.148, the level 5: T2500G-10MPS(config)# logging host index 2 192.168.0.148 - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 154
Example Enable logging to the console port: T2500G-10MPS(config)# logging console 18.8 logging console level Description The logging console level command is used to limit messages logged to the console port. System logs no higher than the set threshold level will be displayed on the console port. - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 155
. Example Disable logging to the terminal devices: T2500G-10MPS(config)# no logging monitor 18.10 logging monitor level Description The logging monitor level command is used to limit messages logged to the terminal devices. System logs no higher than the set threshold level will be displayed on the - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 156
and Operator level users have access to these commands. Example Output the log information with severity levels between 0-7 to the terminal devices: T2500G-10MPS(config)# logging monitor level 7 18.11 clear logging Description The clear logging command is used to clear the information in the log - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 157
local-config Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the configuration of the Local Log: T2500G-10MPS(config)# show logging local-config 18.13 show logging loghost Description The show logging loghost command is used to display the - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 158
EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the log information from level 0 to level 5 in the log buffer: T2500G-10MPS(config)# show logging buffer level 5 18.15 show logging flash Description The show logging flash command is used to display the log information - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 159
. Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the log information with the level marked 0~3 in the log file: T2500G-10MPS(config)# show logging flash level 3 141 - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 160
Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Enable the SSH function: T2500G-10MPS(config)# ip ssh server 19.2 ip ssh version Description The ip ssh version command is used to enable the SSH protocol version. To - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 161
Mode Global Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Enable SSH v2: T2500G-10MPS(config)# ip ssh version v2 19.3 ip ssh algorithm Description The ip ssh algorithm command is used to configure the algorithm in SSH - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 162
Requirement Only Admin, Operator and Power User level users have access to these commands. Example Specify the idle-timeout time of SSH as 30 seconds: T2500G-10MPS(config)# ip ssh timeout 30 19.5 ip ssh max-client Description The ip ssh max-client command is used to specify the maximum number of - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 163
Specify the maximum number of the connections to the SSH server as 3: T2500G-10MPS(config)# ip ssh max-client 3 19.6 ip ssh download Description The The IP address of the TFTP server. Both IPv4 and IPv6 addresses are supported, for example 192.168.0.1 or fe80::1234. Command Mode Global Configuration - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 164
Mode Privileged EXEC Mode Privilege Requirement Only Admin level users have access to these commands. Example Remove the SSH-1 type public key from the switch: T2500G-10MPS# remove public-key v1 19.8 show ip ssh Description The show ip ssh command is used to display the global configuration of SSH - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 165
Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the global configuration of SSH: T2500G-10MPS(config)# show ip ssh 147 - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 166
or removed manually, independent of the aging time. In the stable networks, the static MAC address entries can facilitate the switch to Example Add a static Mac address entry to bind the MAC address 00:02:58:4f:6c:23, VLAN1 and port 1 together: T2500G-10MPS(config)# mac address-table static 00:02 - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 167
these commands. Example Configure the aging time as 500 seconds: T2500G-10MPS(config)# mac address-table aging-time 500 20.3 mac address- package to be forwarded. The filtering address can be added or removed manually, independent of the aging time. Syntax mac address-table filtering mac-addr - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 168
and MAC address is 00:1e:4b:04:01:5d: T2500G-10MPS(config)# mac address-table filtering 00:1e:4b:04:01:5d vid 1 20.4 mac address-table notification Description The mac address-table notification command is used to configure global settings of MAC address table notification. Syntax mac address-table - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 169
, specify the notification sending interval as 2 seconds: T2500G-10MPS(config)# mac address-table notification global-status enable table of the aging time and can only be deleted manually. The learned entries will be cleared after the switch is rebooted. When permanent mode is selected, the - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 170
port as 30. When the number of MAC address entries reaches 30 on this port, new entry will be dropped : T2500G-10MPS(config)# interface gigabitEthernet 1/0/1 T2500G-10MPS(config-if)# mac address-table max-mac-count max-number 30 mode static status drop 20.6 mac address-table notification (interface - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 171
these commands. Example Enable the learn-mode-change notification on port 1/0/2: T2500G-10MPS(config)# mac address-table notification global-status enable T2500G-10MPS(config)# interface gigabitEthernet 1/0/2 T2500G-10MPS(config-if)# mac address-table notification learn-mode-change enable 20.7 mac - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 172
. Example Configure the max learned MAC address number is VLAN 2 as 1000, and drop the packets that have no match in the MAC address table: T2500G-10MPS(config)# mac address-table security vid 2 max-learn 1000 drop 20.8 show mac address-table Description The show mac address-table command is used to - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 173
Only Admin, Operator and Power User level users have access to these commands. Example Clear the information of all static address entries: T2500G-10MPS(config)# clear mac address-table static 20.10 show mac address-table aging-time Description The show mac address-table aging-time command - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 174
Mode Privilege Requirement None. Example Display the security configuration of all ports: T2500G-10MPS(config)# show mac address-table max-mac-count all Display the security configuration of port 1/0/1: T2500G-10MPS(config)# show mac address-table max-mac-count interface gigabitEthernet 1/0/1 20.12 - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 175
. Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the address configuration of port 1/0/1: T2500G-10MPS(config)# show mac address-table interface gigabitEthernet 1/0/1 20.13 show mac address-table count Description The show mac address-table - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 176
EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the information of the MAC address 00:00:00:00:23:00 in VLAN 1: T2500G-10MPS(config)#show mac address-table address 00:00:00:00:23:00 vid 1 20.15 show mac address-table vlan Description The show mac address - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 177
Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the notificaiton configuration of all the ports: T2500G-10MPS(config)# show mac address-table notification all 20.17 show mac address-table security Description The show mac address-table security - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 178
Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the MAC address security configuration of VLAN 1: T2500G-10MPS(config)# show mac address-table security vid 1 160 - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 179
time is 12/20/2010 17:30:35 T2500G-10MPS(config)# system-time manual 12/20/2010-17:30:35 21.2 system-time ntp Description The system-time ntp command is used to configure the time zone and the IP address for the NTP Server. The switch will get UTC automatically if it has - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 180
The detailed information that each time-zone means are displayed as follow: UTC-12:00 -- TimeZone for International Date Line West. UTC-11:00 -- TimeZone for Coordinated Universal Time-11. UTC-10:00 -- TimeZone for Hawaii. UTC-09:00 -- TimeZone for Alaska. UTC-08:00 -- TimeZone for Pacific Time - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 181
-12:00, the primary NTP server is 133.100.9.2 and the secondary NTP server is 139.78.100.163, the fetching-rate is 11 hours: T2500G-10MPS(config)# system-time ntp UTC-12:00 133.100.9.2 139.79.100.163 11 21.3 system-time dst predefined Description The system-time dst predefined - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 182
Privilege Requirement Only Admin and Operator level users have access to these commands. Example Configure the daylight saving time as USA standard: T2500G-10MPS(config)#system-time dst predefined USA 21.4 system-time dst date Description The system-time dst date command is used to configure the one - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 183
commands. Example Configure the daylight saving time from zero clock, Apr 1st to zero clock Oct 1st and the offset is 30 minutes in 2015: T2500G-10MPS(config)# system-time dst date Apr 1 00:00 2015 Oct 1 00:00 2015 30 21.5 system-time dst recurring Description The system-time dst recurring - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 184
2:00am, the last Sunday of Oct and the offset is 45 minutes: T2500G-10MPS(config)# system-time dst recurring first Sun May 02:00 last Sun Oct . By default, it is the device name, for example "T2500G-10MPS". Command Mode Global Configuration Mode Privilege Requirement Only Admin and Operator - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 185
have access to these commands. Example Configure the system location as SHENZHEN: T2500G-10MPS(config)# location SHENSHEN 21.8 contact-info Description The contact-info command is . It consists of 32 characters at most. It is "www.tp-link.com" by default. Command Mode Global Configuration Mode 167 - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 186
Configure the system contact information as www.tp-link.com: T2500G-10MPS(config)# contact-info www.tp-link.com 21.9 ip address Description This ip address command is used to configure the IP address and IP subnet mask for the specified interface manually. The interface type includes: routed port - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 187
have access to these commands. Example Enable the DHCP Client function on the Lay 3 routed port 1/0/1: T2500G-10MPS(config)# interface gigabitEthernet 1/0/1 T2500G-10MPS(config-if)# no switchport T2500G-10MPS(config-if)# ip address-alloc dhcp Disable the IP address obtaining function on the VLAN - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 188
restore to the factory defaults and your current settings will be lost. Syntax reset Command Mode Privileged EXEC Mode Privilege Requirement Only Admin level users have access to these commands. Example Reset the software of the switch: T2500G-10MPS# reset 21.12 reboot Description The reboot command - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 189
and the time you set here is later than the time that this command is executed, the switch will reboot later that day; otherwise the switch will reboot at the time point the next day. Example Specify the switch to save the configuration files and reboot in 200 minutes,: T2500G-10MPS(config)# reboot - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 190
level users have access to these commands. Example Save current settings: T2500G-10MPS# copy running-config startup-config 21.15 copy startup-config -addr -- IP Address of the TFTP server. Both IPv4 and IPv6 addresses are supported, for example 192.168.0.1 or fe80::1234. name -- Specify the name for - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 191
switch from TFTP server. Syntax copy tftp startup-config ip-address ip-addr filename name Parameter ip-addr -- IP Address of the TFTP server. Both IPv4 and IPv6 addresses are supported as config.cfg to the switch from TFTP server with the IP 192.168.0.148: T2500G-10MPS# copy tftp startup-config ip - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 192
Mode Privilege Requirement Only Admin level users have access to these commands. Example Configure the image2.bin as the startup image: T2500G-10MPS(config)# boot application filename image2 startup 21.18 remove backup-image Description The remove backup-image command is used to delete the - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 193
and IPv6 addresses are supported, for example 192.168.0.1 or fe80::1234. name -- Specify the name for the firmware file. Command Mode Privileged 168.0.148, and reboot the switch with this firmware: T2500G-10MPS# firmware upgrade ip-address 192.168.0.148 filename firmware.bin It will only upgrade the - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 194
T2500G-10MPS# firmware upgrade ip-address fe80::1234 filename firmware.bin It will only upgrade the backup image. Continue? (Y/N):y Operation users have access to these commands. Example Start Auto Install function: T2500G-10MPS (config)# boot autoinstall start 21.21 boot autoinstall persistent-mode - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 195
-save new configuration file to start-up configuration file: T2500G-10MPS (config)# boot autoinstall auto-save 21.23 boot autoinstall auto-reboot Description The boot autoinstall auto-reboot command is used to automatically reboot the switch after Auto Install function is completed successfully. To - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 196
Mode Privilege Requirement Only Admin level users have access to these commands. Example Configure the switch to auto reboot after Auto Install function completed successfully: T2500G-10MPS (config)# boot autoinstall auto-reboot 21.24 boot autoinstall retry-count Description The boot autoinstall - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 197
None. Example Display the configuration file which downloaded by Auto Install: T2500G-10MPS # show boot autoinstall downloaded-config 21.27 ping Description The ping command is used to test the connectivity between the switch and one node of the network. Syntax ping [ ip | ipv6 ] { ip_addr - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 198
. If the parameter ip/ipv6 is not selected, both IPv4 and IPv6 addresses are supported, for example 192.168.0.100 or fe80::1234. -n count -- The amount of 8 times' Ping test, the connection between the switch and the network device is failed to establish: T2500G-10MPS# ping fe80::1234 -n 8 -l 512 21. - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 199
the parameter ip/ipv6 is not selected, both IPv4 and IPv6 addresses are supported, for example 192.168.0.100 or fe80::1234. maxHops -- The maximum number 20 maxHops, the connection between the switch and the destination device is failed to establish: T2500G-10MPS# tracert fe80::1234 20 21.29 show - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 200
Mode Privilege Requirement None. Example Display the system information: T2500G-10MPS# show system-info 21.30 show system-info interface Description Privilege Requirement None. Example Display the utilization of port 18: T2500G-10MPS# show system-info interface gigabitEthernet 1/0/18 21.31 show - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 201
and Any Configuration Mode Privilege Requirement Only Admin level users have access to these commands. Example Display the system image files' information: T2500G-10MPS# show image-info 21.32 show boot Description The show boot command is used to display the boot configuration of the system. Syntax - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 202
. Example Display the system current operating configuration: T2500G-10MPS# show running-config 21.34 show startup-config Description The show startup-config command is used to display the current configuration saved in the switch. These configuration settings will not be lost the next time you - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 203
show system-time dst Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the DST time information of the switch T2500G-10MPS# show system-time dst 21.37 show system-time ntp Description The show system-time ntp command is used to display the NTP - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 204
Display the NTP mode configuration information of the switch: T2500G-10MPS# show system-time ntp 21.38 show you to check the connection status of the cable connected to the switch, locate and diagnose the trouble spot of the network. Syntax show cable-diagnostics interface gigabitEthernet port - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 205
Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the CPU utilization information of the switch: T2500G-10MPS# show cpu-utilization 21.41 show memory-utilization Description The show memory-utilization command is used to display the system - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 206
Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the memory utilization information of the switch: T2500G-10MPS# show memory-utilization 188 - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 207
-10MPS(config)# interface vlan 1 T2500G-10MPS(config-if)# ipv6 enable 22.2 ipv6 address autoconfig Description This command is used to enable the automatic configuration of the ipv6 link-local address. The switch has only one ipv6 link-local address, which can be configured automatically or manually - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 208
-local address on VLAN interface 1: T2500G-10MPS(config)# interface vlan 1 T2500G-10MPS(config-if)# ipv6 address autoconfig 22.3 ipv6 address link-local Description The ipv6 address link-local command is used to configure the ipv6 link-local address manually on a specified interface. To delete the - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 209
Power User level users have access to these commands. Example Configure the link-local address as fe80::1234 on the VLAN interface 1: T2500G-10MPS(config)# interface vlan 1 T2500G-10MPS(config-if)# ipv6 address fe80::1234 link-local 22.4 ipv6 address dhcp Description The ipv6 address dhcp command is - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 210
to obtain IPv6 address through the RA message on VLAN interface 1: T2500G-10MPS(config)# interface vlan 1 T2500G-10MPS(config-if)# ipv6 address ra 22.6 ipv6 address eui-64 Description This command is used to manually configure a global IPv6 address with an extended unique identifier (EUI) in - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 211
global address on the interface with the network prefix 3ffe::1/64: T2500G-10MPS(config)# interface vlan 1 T2500G-10MPS(config-if)# ipv6 address 3ffe::1/64 eui-64 22.7 ipv6 address Description This command is used to manually configure a global IPv6 address on the interface. To remove a global IPv6 - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 212
ipv6 function status, link-local address and global address, ipv6 multicast groups etc. Syntax show ipv6 interface Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the ipv6 information of the management interface: T2500G-10MPS(config)# show - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 213
level users have access to these commands. Example To enter the Interface gigabitEthernet Configuration Mode and configure port 2: T2500G-10MPS(config)# interface gigabitEthernet 1/0/2 23.2 interface range gigabitEthernet Description The interface range gigabitEthernet command is used to enter the - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 214
Configuration Mode, and configure ports 1, 2, 3, 6, 7 and 9 at the same time by adding them to one port-list: T2500G-10MPS(config)# interface range gigabitEthernet 1/0/1-3,1/0/6-7,1/0/9 23.3 description Description The description command is used to add a description to the Ethernet port. To - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 215
Operator and Power User level users have access to these commands. Example Add a description Port_5 to port 1/0/5: T2500G-10MPS(config)# interface gigabitEthernet 1/0/5 T2500G-10MPS(config-if)# description Port_5 23.4 shutdown Description The shutdown command is used to disable an Ethernet port. To - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 216
Admin and Operator level users have access to these commands. Example Enable the flow-control function for port 1/0/3: T2500G-10MPS(config)# interface gigabitEthernet 1/0/3 T2500G-10MPS(config-if)# flow-control 23.6 duplex Description The duplex command is used to configure the Duplex Mode for an - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 217
Admin and Operator level users have access to these commands. Example Configure the Duplex Mode as full-duplex for port 1/0/3: T2500G-10MPS(config)# interface gigabitEthernet 1/0/3 T2500G-10MPS(config-if)# duplex full 23.7 jumbo Description The jumbo command is used to allow the jumbo frame to pass - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 218
Requirement Only Admin, Operator and Power User level users have access to these commands. Example Globally configure the size of jumbo frames as 9216: T2500G-10MPS (config)# jumbo-size 9216 23.9 speed Description The speed command is used to configure the Speed Mode for an Ethernet port. To return - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 219
T2500G-10MPS(config-if)# speed 100 23.10 storm-control Description The storm-control command is used to enable the broadcast, multicast, or unicast strom control function and to set threshold levels on an interface. To disable the storm control function, please use no storm-control command. Syntax - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 220
access to these commands. Example Configure the ingress-rate as 5120Kbps and egress-rate as 1024Kbps for port 1/0/5: T2500G-10MPS(config)# interface gigabitEthernet 1/0/5 T2500G-10MPS(config-if)# bandwidth ingress 5120 egress 1024 23.12 clear counters Description The clear counters command is used - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 221
Only Admin and Operator level users have access to these commands. Example Clear the statistic information of all ports and port channels: T2500G-10MPS(config)# clear counters 23.13 show interface status Description The show interface status command is used to display the connection status of the - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 222
. Example Display the statistics information of all Ethernet ports and port channels: T2500G-10MPS(config)# show interface counters Display the statistics information of port 1/0/2: T2500G-10MPS(config)# show interface counters gigabitEthernet 1/0/2 23.15 show interface configuration Description The - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 223
Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the storm-control information of port 4, 5, 6, and 7: T2500G-10MPS(config)# show storm-control interface gigabitEthernet 1/0/4-7 23.17 show bandwidth Description The show bandwidth command is used to display - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 224
-- The list of port channels. Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the bandwidth-limit information of port 1/0/4: T2500G-10MPS(config)# show bandwidth interface gigabitEthernet 1/0/4 206 - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 225
. 24.1 qos Description The qos command is used to configure CoS (Class of Service) based on port. To return to the default configuration, please use no qos port. Example Configure the priority of port 5 as 3: T2500G-10MPS(config)# interface gigabitEthernet 1/0/5 T2500G-10MPS(config-if)# qos 3 207 - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 226
be classified into the egress queue based on this mapping relation. Example Enable the mapping relation between IEEE 802.1P Priority and egress queue: T2500G-10MPS (config)# qos cos 24.3 qos dscp Description The qos dscp command is used to enable the mapping relation between DSCP Priority and CoS - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 227
egress queue based on the mapping relation between DSCP priority and CoS value. Example Enable the mapping relation between DSCP Priority and CoS value: T2500G-10MPS(config)# qos dscp 24.4 qos queue cos-map Description The qos queue cos-map command is used to configure the mapping relation between - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 228
TC4, 5/CoS 5-TC5, 6/CoS 6-TC6, 7/CoS 7-TC7. 2. Among the priority levels TC0-TC7, the bigger value, the higher priority. Example Map CoS 5 to TC 2: T2500G-10MPS(config)# qos queue cos-map 5 2 24.5 qos queue dscp-map Description The qos queue dscp-map command is used to configure the mapping relation - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 229
55)-TC 6, (56-63)-TC 7. Example Map DSCP values 10-12 to TC 2: T2500G-10MPS(config)# qos queue dscp-map 10-12 2 24.6 qos queue mode Description The qos the packets according to the priority queues and scheduling algorithms you set. On this switch, the priority levels are labeled as TC0, TC1,TC2 ... - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 230
Example Specify the Schedule Mode as Weight Round Robin Mode: T2500G-10MPS(config)# qos queue mode wrr 24.7 qos queue weight +WRR. The switch will control the forwarding sequence of the packets according to the priority queues and scheduling algorithms you set. On this switch, the priority - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 231
from 0 to 127. TC7 and the queue with its weight value set as 0 are in the SP group; other queues, with none-zero T2500G-10MPS(config)# qos queue mode wrr T2500G-10MPS(config)# qos queue weight 0 4 T2500G-10MPS(config)# qos queue weight 1 7 T2500G-10MPS(config)# qos queue weight 2 15 T2500G-10MPS - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 232
Configuration Mode Privilege Requirement None. Example Display the configuration of IEEE 802.1P Priority and the mapping relation between cos-id and tc-id: T2500G-10MPS# show qos cos-map 24.10 show qos dscp-map Description The show qos dscp-map command is used to display the configuration of DSCP - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 233
qos queue mode Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the schedule rule of the egress queues: T2500G-10MPS# show qos queue mode 24.12 show qos status Description The show qos status command is used to display the status of IEEE 802 - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 234
T2500G-10MPS# show qos status 216 - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 235
is used to analyze the monitored packets for monitoring and troubleshooting the network. 25.1 monitor session destination interface Description session 1 and configure port 1/0/1 as the monitoring port: T2500G-10MPS(config)# monitor session 1 destination interface gigabitEthernet 1/0/1 Delete the - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 236
(config)# no monitor session 1 destination interface gigabitEthernet 1/0/2 Delete the monitor session 1: T2500G-10MPS(config)# no monitor session 1 25.2 monitor session source interface Description The monitor session source interface command is used to configure the monitored port. To delete - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 237
strictly. 4. The monitoring port and monitored ports cannot be link-aggregation member. Example Create monitor session 1, then configure port 4, 5, 7 as monitored port and enable ingress monitoring: T2500G-10MPS(config)# monitor session 1 source interface gigabitEthernet 1/0/4-5,1/0/7 rx Delete port - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 238
port 1, 2, 4 and port channel 2 to the forward list of port 1/0/5: T2500G-10MPS(config)# interface gigabitEthernet 1/0/5 T2500G-10MPS(config-if)# port isolation gi-forward-list 1/0/1-2,1/0/4 po-forward-list 2 Set all Ethernet ports and port channels to forward list of port 1/0/2, namely restore to - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 239
port list, ranging from 1 to 6. Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the forward-list of port 1/0/2: T2500G-10MPS# show port isolation interface gigabitEthernet 1/0/2 Display the forward-list of all Ethernet ports and port channels - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 240
Enable the loopback detection function globally: T2500G-10MPS(config)# loopback-detection 27.2 loopback-detection interval Description The loopback-detection interval command is used to define the interval of sending loopback detection packets from switch ports to network, aiming at detecting - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 241
Only Admin, Operator and Power User level users have access to these commands. Example Specify the interval-time as 50 seconds: T2500G-10MPS(config)# loopback-detection interval 50 27.3 loopback-detection recovery-time Description The loopback-detection recovery-time command is used to configure - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 242
T2500G-10MPS(Config-if-range)# loopback-detection 27.5 loopback-detection config Description The loopback-detection config command is used to configure the process-mode and recovery-mode for the ports by which the switch auto | manual } Parameter process-mode -- The mode how the switch processes the - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 243
process-mode as port-based and recovery-mode as manual for port 2: T2500G-10MPS(config)# interface gigabitEthernet 1/0/2 T2500G-10MPS(config-if)# loopback-detection config process-mode port-based recovery-mode manual 27.6 loopback-detection recover Description The loopback-detection recover - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 244
Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the global configuration of loopback detection function: T2500G-10MPS# show loopback-detection global 27.8 show loopback-detection interface Description The show loopback-detection interface command is used - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 245
T2500G-10MPS# show loopback-detection interface Display the configuration of loopback detection function and the status of port 5: T2500G-10MPS# show loopback-detection interface gigabitEthernet 1/0/5 227 - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 246
SFP ports on the switch. The user can choose Setting Enabled on all the SFP ports. Command Mode Interface Configuration Mode (interface fastEthernet / interface range fastEthernet / interface gigabitEthernet / interface range gigabitEthernet) Example Enable DDM function on port 1/0/25: T2500G-10MPS - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 247
down the port when an exceeding alarm threshold event is encountered. Default Setting none, which means the port will never be shut down regardless of the warning threshold event is encountered: T2500G-10MPS(config)#interface gigabitEthernet 1/0/25 T2500G-10MPS(config-if)#ddm shutdown warning 28 - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 248
Default Setting None. Command Mode Interface Configuration Mode (interface fastEthernet / interface range fastEthernet / interface gigabitEthernet / interface range gigabitEthernet) Example Configure the high_alarm threshold of DDM temperature on the port 1/0/25 as 5: T2500G-10MPS(config)#interface - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 249
. Default Setting None. Command Mode Interface Configuration Mode (interface fastEthernet / interface range fastEthernet / interface gigabitEthernet / interface range gigabitEthernet) Example Configure the high_alarm threshold of DDM voltage on the port 1/0/25 as 5: T2500G-10MPS(config)#interface - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 250
Default Setting None. Command Mode Interface Configuration Mode (interface fastEthernet / interface range fastEthernet / interface gigabitEthernet / interface range gigabitEthernet) Example Configure the high_alarm threshold of DDM Bias Current on the port 1/0/25 as 5: T2500G-10MPS(config)#interface - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 251
mW. Default Setting None. Command Mode Interface Configuration Mode (interface fastEthernet / interface range fastEthernet / interface gigabitEthernet / interface range gigabitEthernet) Example Configure the high_alarm threshold of DDM Tx Power on the port 1/0/25 as 5: T2500G-10MPS(config)#interface - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 252
range gigabitEthernet) Example Configure the high_alarm threshold of DDM Rx Power on the port 1/0/25 as 5: T2500G-10MPS(config)#interface gigabitEthernet 1/0/25 T2500G-10MPS(config-if)#ddm rx_power_threshold high_alarm 5 28.8 show ddm configuration Description The show ddm configuration command is - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 253
command is used to display the DDM status, which is the digital diagnostic monitoring status of SFP modules inserting into the switch's SFP ports. Syntax show ddm status Command Mode Privileged EXEC Mode and Any Configuration Mode Example View the DDM status: T2500G-10MPS(config)#show ddm status 235 - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 254
Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Add a time-range named tSeg1: T2500G-10MPS(config)# time-range tSeg1 29.2 absolute Description The absolute command is used to configure a time-range into an absoluteness mode. To delete - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 255
level users have access to these commands. Example Configure the time-range tSeg1 with time from May 5, 2012 to Oct. 5, 2012: T2500G-10MPS(config)# time-range tSeg1 T2500G-10MPS(config-time-range)# absolute start 05/05/2012 end 10/05/2012 29.3 periodic Description The periodic command is used to - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 256
level users have access to these commands. Example Configure the time-range tSeg1 with time from 8:30 to 12:00 at weekend: T2500G-10MPS(config)#time-range tSeg1 T2500G-10MPS(config-time-range)#periodic week-date weekend time-slice1 08:30-12:00 29.4 holiday Description The holiday command is used to - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 257
users have access to these commands. Example Define National Day, configuring the start date as October 1st, and the end date as October 3rd: T2500G-10MPS(config)#holiday nationalday start-date 10/01 end-date 10/03 29.6 access-list create Description The access-list create command is used to create - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 258
to these commands. Example Create a standard-IP ACL whose ID is 523: T2500G-10MPS(config)# access-list create 523 29.7 mac access-list Description The mac access-list command is used to create MAC ACL. To set the detailed configurations for a specified MAC ACL, please use mac access-list command - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 259
29.8 access-list standard Description The access-list standard command is used to add Standard-IP ACL rule. To delete the corresponding rule, please use no access-list standard command. Standard-IP ACLs analyze and process data packets based on a series of match conditions, which can be the source - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 260
.0, the time-range for the rule to take effect is "tRange1", and the packets match this rule will be forwarded by the switch: T2500G-10MPS(config)# access-list create 520 T2500G-10MPS(config)# access-list standard 520 rule 10 permit sip 192.168.0.100 smask 255.255.255.0 tseg tSeg1 29.9 access-list - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 261
the time-range for the rule to take effect is tSeg1, and the packets match this rule will be forwarded by the switch: T2500G-10MPS(config)# access-list create 2220 T2500G-10MPS(config)# access-list extended 2220 rule 10 permit sip 192.168.0.100 smask 255.255.255.0 tseg tSeg1 29.10 rule Description - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 262
5, the time-range for the rule to take effect is "tRange1", and the packets match this rule will be forwarded by the switch: T2500G-10MPS(config)# mac access-list 20 T2500G-10MPS(config-mac-acl)# rule 10 permit smac 00:01:3F:48:16:23 smask 11:11:11:11:11:00 vid 2 pri 5 tseg - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 263
these commands. Example Add a Policy named policy1: T2500G-10MPS(config)# access-list policy name policy1 29.12 access-list policy action Description The access-list policy action command is used to add ACLs and create actions for the policy. To set the detailed configuration of actions for a policy - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 264
User level users have access to these commands. Example Add ACL whose ID is 120 to policy1 and create an action for them: T2500G-10MPS(config)# access-list policy action policy1 120 29.13 redirect interface Description The redirect interface command is used to configure Direction function of policy - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 265
packets matching ACL 120 in the policy, if the rate beyond 1000kbps, they will be discarded by the switch: T2500G-10MPS(config)#access-list policy action policy1 120 T2500G-10MPS(config-action)#s-condition rate 1000 osd discard 29.15 s-mirror Description The s-mirror command is used to configure - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 266
data packets matching ACL 120: T2500G-10MPS(config)#access-list policy action policy1 120 T2500G-10MPS(config-action)#s-mirror interface gigabitEthernet change the data packet's 802.1P priority field to the dot1p-pri you set. 802.1P priority ranges from 0 to 7. Command Mode Action Configuration - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 267
have access to these commands. Example Bind ACL 100 to port 1/0/2: T2500G-10MPS(config)# interface gigabitEthernet 1/0/2 T2500G-10MPS(config-if)# access-list bind acl 100 29.18 access-list bind acl(vlan) Description The access-list bind acl command is used to bind an ACL to the specified VLAN. To - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 268
level users have access to these commands. Example Bind ACL 100 to VLAN 2: T2500G-10MPS(config)# interface vlan 2 T2500G-10MPS(config-if)# access-list bind acl 100 29.19 access-list bind(interface) Description The access-list bind command is used to bind a policy to a specified port. To cancel the - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 269
Requirement Only Admin, Operator and Power User level users have access to these commands. Example Bind policy1 to VLAN 2: T2500G-10MPS(config)# interface vlan 2 T2500G-10MPS(config-if)# access-list bind policy1 29.21 show access-list Description The show access-list command is used to display - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 270
the information of a policy named policy1: T2500G-10MPS(config)# show access-list policy policy1 29.23 show access-list bind Description The show access-list bind command is used to display the configuration of Policy bind. Syntax show access-list bind Command Mode Privileged EXEC Mode and Any - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 271
Tree Protocol), compatible with both STP and RSTP and subject to IEEE 802.1s, can disbranch a ring network. STP is to block redundant links and backup links as well as optimize paths. 30.1 debug spanning-tree Description The debug spanning-tree command is used to enable debuggning of spanning-tree - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 272
Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Enable the STP function: T2500G-10MPS(config)# spanning-tree 30.3 spanning-tree(interface) Description The spanning-tree command is used to enable STP function for a port. To - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 273
the STP function for port 1/0/2: T2500G-10MPS(config)# interface gigabitEthernet 1/0/2 T2500G-10MPS(config-if)# spanning-tree 30.4 command. CIST (Common and Internal Spanning Tree) is the spanning tree in a switched network, connecting all devices in the network. Syntax spanning-tree common-config [ - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 274
-- The P2P link status, with auto, open and close options. T2500G-10MPS(config-if)# spanning-tree common-config port-priority 64 ext-cost 100 int-cost 100 portfast enable point-to-point open 30.5 spanning-tree mode Description The spanning-tree mode command is used to configure the STP mode of the switch - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 275
, Operator and Power User level users have access to these commands. Example Enter into the MST configuration mode: T2500G-10MPS(config)# spanning-tree mst configuration T2500G-10MPS(Config-mst)# 30.7 instance Description The instance command is used to configure the VLAN-Instance mapping. To remove - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 276
namely remove all the mapping VLANs 1-100: T2500G-10MPS(config)# spanning-tree mst configuration T2500G-10MPS(config-mst)# no instance 1 Remove VLANs 1-50 in mapping VLANs 1-100 for Instance 1: T2500G-10MPS(config)# spanning-tree mst configuration T2500G-10MPS(config-mst)# no instance 1 vlan 1-50 30 - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 277
and Power User level users have access to these commands. Example Configure the region name of MST as "region1": T2500G-10MPS(config)# spanning-tree mst configuration T2500G-10MPS(config-mst)# name region1 30.9 revision Description The revision command is used to configure the revision level of MST - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 278
the switch will be chosen as the root bridge in the specific instance. Command Mode Global Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Enable the MST Instance 1 and configure its priority as 4096: T2500G-10MPS(config - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 279
to these commands. Example Configure the priority of port 1 in MST Instance 1 as 64, and path cost as 2000: T2500G-10MPS(config)# interface gigabitEthernet 1/0/1 T2500G-10MPS(config-if)# spanning-tree mst instance 1 port-priority 64 cost 2000 30.12 spanning-tree priority Description The spanning - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 280
priority as 4096: T2500G-10MPS(config)# spanning- which is the interval to send BPDU packets, and used to test the links. Hello Time ranges from 1 to 10 in seconds and it is 2 by - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 281
Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Configure the hold-count of STP as 8pps: T2500G-10MPS(config)# spanning-tree hold-count 8 30.15 spanning-tree max-hops Description The spanning-tree max-hops command is used to configure the - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 282
Requirement Only Admin, Operator and Power User level users have access to these commands. Example Configure the max-hops of STP as 30: T2500G-10MPS(config)# spanning-tree max-hops 30 30.16 spanning-tree bpdufilter Description The spanning-tree bpdufilter command is used to enable the BPDU filter - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 283
will set itself T2500G-10MPS(config-if)# spanning-tree bpduguard 30.18 spanning-tree guard loop Description The spanning-tree guard loop command is used to enable the Loop Protect function for a port. Loop Protect is to prevent the loops in the network brought by recalculating STP because of link - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 284
-10MPS(config)# interface gigabitEthernet 1/0/2 T2500G-10MPS(config-if)# spanning-tree guard loop 30.19 spanning-tree guard root Description The spanning-tree guard root command is used to enable the Root Protect function for a port. With the Root Protect function enabled, the root bridge will set - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 285
BPDUs. If a malicious user continuously sends TC-BPDUs to a switch, the switch will be busy with removing MAC address entries, which may the TC Protect of Spanning Tree for port 2: T2500G-10MPS(config)# interface gigabitEthernet 1/0/2 T2500G-10MPS(config-if)# spanning-tree guard tc 30.21 spanning - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 286
Only Admin, Operator and Power User level users have access to these commands. Example Enable mcheck for port 2: T2500G-10MPS(config)# interface gigabitEthernet 1/0/2 T2500G-10MPS(config-if)# spanning-tree mcheck 30.22 show spanning-tree active Description The show spanning-tree active command is - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 287
Mode Privilege Requirement None. Example Display the spanning-tree information of all ports: T2500G-10MPS(config)# show spanning-tree interface Display the spanning-tree information of port 1/0/2: T2500G-10MPS(config)# show spanning-tree interface gigabitEthernet 1/0/2 Display the spanning-tree mode - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 288
Privilege Requirement None. Example Display the protect information of all ports: T2500G-10MPS(config)# show spanning-tree interface-security Display the protect information of port 1: T2500G-10MPS(config)# show spanning-tree interface-security gigabitEthernet 1/0/1 Display the interface security - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 289
None. Example Display the region information and mapping information of VLAN and MST Instance: T2500G-10MPS(config)#show spanning-tree mst configuration Display the related information of MST Instance 1: T2500G-10MPS(config)#show spanning-tree mst instance 1 Display all the ports information of MST - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 290
-pair Ethernet cables. When a unidirectional link is detected, the corresponding port will be shut down automatically or manually (depending on the shut mode configured to these commands. Example Enable the DLDP function globally: T2500G-10MPS(config)# dldp 31.2 dldp interval Description The dldp - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 291
packets as 10 seconds: T2500G-10MPS(config)# dldp interval 10 31.3 dldp shut-mode Description The dldp shut-mode command is used to configure the shutdown mode when a unidirectional link is detected. Syntax dldp shut-mode { auto | manual } Parameter auto -- The switch automatically shuts down ports - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 292
to reset all the unidirectional links and restart the link detect process. Syntax dldp reset Command Mode Global Configuration Mode Privilege Requirement Only Admin and Operator level users have access to these commands. Example Reset the DLDP function globally: T2500G-10MPS(config)# dldp reset 31 - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 293
T2500G-10MPS (config-if-range)# dldp 31.6 dldp reset(interface) Description The dldp reset command is used to reset the specified port and restart the link detect process. Syntax dldp reset Command Mode Interface Configuration Mode (interface gigabitEthernet / interface range gigabitEthernet) - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 294
Example Display the global configuration of DLDP function: T2500G-10MPS# show dldp 31.8 show dldp interface Description The show dldp interface Requirement None. Example Display the configuration and state of all ports: T2500G-10MPS# show dldp interface Display the configuration and state of port - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 295
Snooping) is a multicast control mechanism running on Layer 2 switch. It can effectively prevent multicast groups being broadcasted in the users have access to these commands. Example Enable IGMP Snooping function: T2500G-10MPS(config)# ip igmp snooping 32.2 ip igmp snooping(interface) Description - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 296
, Operator and Power User level users have access to these commands. Example Enable IGMP Snooping function of port 1/0/3: T2500G-10MPS(config)# interface gigabitEthernet 1/0/3 T2500G-10MPS(config-if)# ip igmp snooping 32.3 ip igmp snooping rtime Description The ip igmp snooping rtime command is used - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 297
time as 100 seconds globally: T2500G-10MPS(config)# ip igmp snooping mtime 100 32.5 ip igmp snooping report-suppression Description The ip igmp snooping report-suppression command is used enable the IGMP report suppression function. When it is enabled, the switch - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 298
and Power User level users have access to these commands. Example Enable the Fast Leave function for port 1/0/3: T2500G-10MPS(config)# interface gigabitEthernet 1/0/3 T2500G-10MPS(config-if)# ip igmp snooping immediate-leave 32.7 ip igmp snooping drop-unknown Description The ip igmp snooping drop - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 299
Admin, Operator and Power User level users have access to these commands. Example Specify the operation to process unknown multicast as discard: T2500G-10MPS(config)# ip igmp snooping drop-unknown 32.8 ip igmp snooping last-listener query-inteval Description The ip igmp snooping last-listener query - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 300
Only Admin, Operator and Power User level users have access to these commands. Example Specify the number of Specific Query Message to 3: T2500G-10MPS(config)# ip igmp snooping last-listener query-count 3 32.10 ip igmp snooping vlan-config Description The ip igmp snooping vlan-config command - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 301
time -- Router Port Time. Within this time, if the switch does not receive IGMP query message from the router port, set the router port as 1/0/1 for VLAN 1-2: T2500G-10MPS(config)# ip igmp snooping vlan-config 1-3 rtime 300 T2500G-10MPS(config)# ip igmp snooping vlan-config 1-3 mtime 200 T2500G-10MPS - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 302
T2500G-10MPS(config)# ip igmp snooping vlan-config 2 static 225.0.0.1 interface gigabitEthernet 1/0/1-3 32.11 . Example Forbid the Ethernet ports 1/0/1-3 as being router ports in VLAN 1 : T2500G-10MPS(config)# ip igmp snooping vlan-config 1 router-port-forbidd interface gigabitEthernet 1/0/1-3 284 - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 303
modify, ranging from 2 to 4094. If not specified, the default multicast VLAN will be selected. router-time -- Router Port Time. Within this time, if the switch does not receive IGMP query message from the router port, it will consider this port is not a router port any more. Router Port Time ranges - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 304
(config)# ip igmp snooping multi-vlan-config 3 rtime 100 T2500G-10MPS(config)# ip igmp snooping multi-vlan-config 3 mtime 100 T2500G-10MPS(config)# ip igmp snooping multi-vlan-config 3 rport interface gigabitEthernet 1/0/3 32.13 ip igmp snooping multi-vlan-config (router-port-forbidden) Description - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 305
The ID of the multicast VLAN. ip -- Specify the IP address. The switch will use this IP address to replace the source IP address of the IGMP address of the IGMP packets in multicast VLAN 1 as 192.168.0.112: T2500G-10MPS(config)# ip igmp snooping multi-vlan-config 1 replace-sourceip 192.168.0.112 32 - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 306
Only Admin, Operator and Power User level users have access to these commands. Example Enable the IGMP Snooping Querier function of VLAN 1: T2500G-10MPS(config)#ip igmp snooping querier vlan 1 32.16 ip igmp snooping querier vlan (general query) Description The ip igmp snooping querier vlan - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 307
. Example For VLAN 2, specify its query-interval as 200 seconds, and the response-time as 20 seconds: T2500G-10MPS(config)#ip igmp snooping querier vlan 2 query-interval 200 T2500G-10MPS(config)#ip igmp snooping querier vlan 2 max-response-time 20 32.17 ip igmp snooping max-groups Description The - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 308
groups that ports 1/0/2-5 can join as 10, and configure the throttling action as replace: T2500G-10MPS(config)#interface range gigabitEthernet 1/0/2-5 T2500G-10MPS(config-if-range)#ip igmp snooping max-groups 10 T2500G-10MPS(config-if-range)#ip igmp snooping max-groups action replace 32.18 ip igmp - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 309
Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Enable IGMP accounting globally: T2500G-10MPS(config)# ip igmp snooping accounting 32.20 ip igmp profile Description The ip igmp profile command is used to create the configuration - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 310
Mode Global Configuration Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Create the profile 1: T2500G-10MPS(config)# ip igmp profile 1 32.21 deny Description The deny command is used to configure the filtering mode of profile as deny - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 311
, Operator and Power User level users have access to these commands. Example Configure the filtering mode of profile 1 as permit: T2500G-10MPS(config)# ip igmp profile 1 T2500G-10MPS(config-igmp-profile)#permit 32.23 range Description The range command is used to configure the range of the profile - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 312
Only Admin, Operator and Power User level users have access to these commands. Example Bind profile 1 to interface gigabitEthernet 1/0/2: T2500G-10MPS(config)# interface gigabitEthernet 1/0/2 T2500G-10MPS(config-if)# ip igmp filter 1 32.25 clear ip igmp snooping statistics Description The - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 313
Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Clear the statistics of the IGMP packets: T2500G-10MPS(config)# clear ip igmp snooping statistics 32.26 show ip igmp snooping Description The show ip igmp snooping command is used to display - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 314
Display the IGMP baisic configuration configuration of all ports and port channels: T2500G-10MPS# show ip igmp snooping interface basic-config Display the IGMP basic configuration of port 1/0/2: T2500G-10MPS# show ip igmp snooping interface gigabitEthernet 1/0/2 basic-config Display the IGMP packet - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 315
snooping multi-vlan Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the Multicast VLAN configuration: T2500G-10MPS# show ip igmp snooping multi-vlan 32.30 show ip igmp snooping groups Description The show ip igmp snooping groups command is - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 316
show ip igmp snooping groups vlan 5 Display the count of multicast entries in VLAN 5: T2500G-10MPS(config)#show ip igmp snooping groups vlan 5 count Display the dynamic multicast groups of VLAN 5 T2500G-10MPS(config)#show ip igmp snooping groups vlan 5 dynamic Display the static multicast groups of - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 317
to display, ranging from 1 to 4094. Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display all Querier information: T2500G-10MPS(config)# show ip igmp snooping querier 32.32 show ip igmp profile Description The show ip igmp profile command is used to - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 318
Discovery Snooping) is a multicast control mechanism running on Layer 2 switch. It can effectively prevent multicast groups being broadcasted in the users have access to these commands. Example Enable MLD Snooping: T2500G-10MPS(config)# ipv6 mld snooping 33.2 ipv6 mld snooping(interface) Description - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 319
Only Admin and Operator level users have access to these commands. Example Specify MLD Snooping router port aging time as 100 seconds globally: T2500G-10MPS(config)# ipv6 mld snooping rtime 100 33.4 ipv6 mld snooping mtime Description The ipv6 mld snooping mtime command is used to specify member - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 320
time as 100 seconds globally: T2500G-10MPS(config)# ipv6 mld snooping mtime 100 33.5 ipv6 mld snooping report-suppression Description The ipv6 mld snooping report-suppression command is used enable the MLD report suppression function. When it is enabled, the switch - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 321
Admin and Operator level users have access to these commands. Example Enable the Fast Leave function for port 1/0/3: T2500G-10MPS(config)# interface gigabitEthernet 1/0/3 T2500G-10MPS(config-if)# ipv6 mld snooping immediate-leave 33.7 ipv6 mld snooping drop-unknown Description The ipv6 mld snooping - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 322
Requirement Only Admin and Operator level users have access to these commands. Example Specify the interval of Specific Query Message to 3 seconds: T2500G-10MPS(config)# ipv6 mld snooping last-listener query-inteval 3 33.9 ipv6 mld snooping last-listener query-count Description The ipv6 mld snooping - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 323
. Example Specify the number of Specific Query Message to 3: T2500G-10MPS(config)# ipv6 mld snooping last-listener query-count 3 33 format of 1-3, 5. router-time -- Router Port Time. Within this time, if the switch does not receive IGMP query message from the router port, it will consider this port - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 324
, Member Port Time as 200 seconds for VLAN 1-3, and set the router port as 1/0/1 for VLAN 1-2: T2500G-10MPS(config)# ipv6 mld snooping vlan-config 1-3 rtime 300 T2500G-10MPS(config)# ipv6 mld snooping vlan-config 1-3 mtime 200 T2500G-10MPS(config)# ipv6 mld snooping vlan-config 1-2 rport interface - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 325
and Operator level users have access to these commands. Example Forbid the Ethernet ports 1/0/1-3 as being router ports in VLAN 1 : T2500G-10MPS(config)# ipv6 mld snooping vlan-config 1 router-port-forbidd interface gigabitEthernet 1/0/1-3 33.12 ipv6 mld snooping multi-vlan-config Description The - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 326
used. member-time -- Member Port Time. Within this time, if the switch does not receive IGMP report message from the member port, it will consider T2500G-10MPS(config)# ipv6 mld snooping multi-vlan-config 3 rtime 100 T2500G-10MPS(config)# ipv6 mld snooping multi-vlan-config 3 mtime 100 T2500G-10MPS - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 327
Ethernet ports 1/0/1-3 as being router ports in multicast VLAN 1 : T2500G-10MPS(config)# ipv6 mld snooping multi-vlan-config 1 router-port-forbidd interface 2 to 4094.. ip -- Specify the IP address. The switch will use this IP address to replace the source IP address of the MLD packets. - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 328
have access to these commands. Example Replace the source IP address of the MLD packets in multicast VLAN 1 as fe80::02ff:ffff:fe00:0001: T2500G-10MPS(config)# ipv6 mld snooping multi-vlan-config 1 replace-sourceip fe80::02ff:ffff:fe00:0001 33.15 ipv6 mld snooping querier vlan Description The ipv6 - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 329
. Example For VLAN 2, specify its query-interval as 200 seconds, and the response-time as 20 seconds: T2500G-10MPS(config)#ipv6 mld snooping querier vlan 2 query-interval 200 T2500G-10MPS(config)#ipv6 mld snooping querier vlan 2 max-response-time 20 33.17 ipv6 mld snooping max-groups Description The - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 330
of groups that ports 1/0/2-5 can join as 10, and configure the throttling action as replace: T2500G-10MPS(config)#interface range gigabitEthernet 1/0/2-5 T2500G-10MPS(config-if-range)#ipv6 mld snooping max-groups 10 T2500G-10MPS(config-if-range)#ipv6 mld snooping max-groups action replace 312 - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 331
. Command Mode Global Configuration Mode Privilege Requirement Only Admin and Operator level users have access to these commands. Example Create the profile 1: T2500G-10MPS(config)# ipv6 mld profile 1 33.19 deny Description The deny command is used to configure the filtering mode of profile as deny - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 332
Only Admin and Operator level users have access to these commands. Example Configure the filtering mode of profile 1 as permit: T2500G-10MPS(config)# ipv6 mld profile 1 T2500G-10MPS(config-igmp-profile)#permit 33.21 range Description The range command is used to configure the range of the profile - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 333
) Privilege Requirement Only Admin and Operator level users have access to these commands. Example Bind profile 1 to interface gigabitEthernet 1/0/2: T2500G-10MPS(config)# interface gigabitEthernet 1/0/2 T2500G-10MPS(config-if)# ipv6 mld filter 1 33.23 clear ipv6 mld snooping statistics Description - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 334
Requirement Only Admin, Operator and Power User level users have access to these commands. Example Clear the statistics of the MLD packets: T2500G-10MPS(config)# clear ipv6 mld snooping statistics 33.24 show ipv6 mld snooping Description The show ipv6 mld snooping command is used to display - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 335
Display the MLD baisic configuration configuration of all ports and port channels: T2500G-10MPS# show ipv6 mld snooping interface basic-config Display the MLD basic configuration of port 1/0/2: T2500G-10MPS# show ipv6 mld snooping interface gigabitEthernet 1/0/2 basic-config Display the MLD packet - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 336
snooping multi-vlan Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the Multicast VLAN configuration: T2500G-10MPS# show ipv6 mld snooping multi-vlan 33.28 show ipv6 mld snooping groups Description The show ipv6 mld snooping groups command is - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 337
display, ranging from 1 to 4094. Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display all Querier information: T2500G-10MPS(config)# show ipv6 mld snooping querier 33.30 show ipv6 mld profile Description The show ipv6 mld profile command is used to - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 338
profile, ranging from 1 to 999. Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the configuration information of all profiles: T2500G-10MPS(config)# show ipv6 mld profile 320 - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 339
access to these commands. Example Enable the SNMP function: T2500G-10MPS(config)# snmp-server 34.2 snmp-server view Description The snmp packets is used to describe the managed objects of the switch, and the MIB (Management Information Base) is the set of the OIDs. The SNMP View is created for the - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 340
commands. Example Add a View named view1, configuring the OID as 1.3.6.1.6.3.20, and this OID can be managed by the SNMP management station: T2500G-10MPS(config)# snmp-server view view1 1.3.6.1.6.3.20 include 34.3 snmp-server group Description The snmp-server group command is used to manage and - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 341
can receive notification messages of the assigned SNMP view generated by the switch's SNMP agent. Command Mode Global Configuration Mode Privilege Requirement Only Admin View viewDefault can be received by Management station: T2500G-10MPS(config)# snmp-server group group1 smode v3 slev authNoPriv - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 342
used to add User. To delete the corresponding User, please use no snmp-server user command. The User in an SNMP Group can manage the switch via the management station software. The User and its Group have the same security level and access right. Syntax snmp-server user name { local | remote - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 343
Authentication Mode of the user as MD5, the Authentication Password as 11111, the Privacy Mode as DES, and the Privacy Password as 22222: T2500G-10MPS(config)# snmp-server user admin local group2 smode v3 slev authPriv cmode MD5 cpwd 11111 emode DES epwd 22222 34.5 snmp-server community Description - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 344
community has read-write management right to View viewDefault: T2500G-10MPS(config)# snmp-server community public read-write viewDefault 34.6 ip -- The IP Address of the management Host. Both IPv4 and IPv6 addresses are supported, for example 192.168.0.100 or fe80::1234. udp-port -- UDP port, which - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 345
Model of the management station as v2c, the type of the notifications as inform, the maximum time for the switch to wait as 1000 seconds, and the retries time as 100: T2500G-10MPS(config)# snmp-server host 192.168.0.146 162 admin smode v2c type inform retries 100 timeout 1000 Add a Notification - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 346
used to configure the local and remote engineID of the switch. To restore to the default setting, please use no snmp-server engineID command. Syntax snmp engineID as 1234567890, and the remote engineID as abcdef123456: T2500G-10MPS(config)# snmp-server engineID local 1234567890 remote abcdef123456 34 - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 347
these commands. Example Enable SNMP standard linkup trap for the switch: T2500G-10MPS(config)# snmp-server traps snmp linkup 34.9 snmp-server traps link-status Description The snmp-server traps link-status command is used to enable SNMP link status trap for the specified port. To disable the sending - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 348
Enable SNMP link status trap for port 3: T2500G-10MPS(config)# interface gigabitEthernet 1/0/3 T2500G-10MPS(config-if)# snmp-server traps link-status 34.10 of the switch is 80%. flash -- Enable flash trap. It is sent when flash is modified during operations such as backup, reset, firmware upgrade, - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 349
loopback-detection -- Enable loopback-detection trap. It is sent when the switch detects loopback or loopback is cleared. storm-control -- Enable storm-control trap Example Enable SNMP extended bandwidth-control trap for the switch: T2500G-10MPS(config)# snmp-server traps bandwidth-control 34.11 - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 350
the total power required by all the connected PDs exceeds the maximum power the PoE switch can supply. port-pwr-change -- Enable PoE port power change trap . The Example Enable SNMP PoE over max power budget traps for the switch: T2500G-10MPS(config)# snmp-server traps power over-max-pwr-budget 34.12 - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 351
DDM traps. And the no snmp-server traps ddm command without any parameter is used to disable all the types of DDM traps. For more instructions about the alarm threshold or warning threshold, refer to Chapter 28 DDM Commands. Command Mode Global Configuration Mode Example Enable all the SNMP DDM - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 352
have access to these commands. Example Enable all SNMP extended VLAN-related traps for the switch: T2500G-10MPS(config)# snmp-server traps vlan Enable VLAN-created trap only for the switch: T2500G-10MPS(config)# snmp-server traps vlan create 34.14 rmon history Description The rmon history command - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 353
users have access to these commands. Example Configure the sample port as Gi1/0/2 and the sample interval as 100 seconds for the entry 1-3: T2500G-10MPS(config)# rmon history 1-3 interface gigabitEthernet 1/0/2 interval 100 owner owner1 34.15 rmon event Description The rmon event command is used to - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 354
event as description1, the type of event as log and the owner of the event as owner1: T2500G-10MPS(config)# rmon event 1-4 user user1 description description1 type log owner owner1 34.16 rmon alarm Description The , an alarm event is generated, which triggers the switch to act in the set way. 336 - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 355
Syntax rmon alarm index { stats-index sindex } [ alarm-variable { revbyte | revpkt | bpkt | mpkt | crc-lign | undersize | oversize | jabber | collision | 64 | 65-127 | 128-511 | 512-1023 | 1024-10240 }] [ s-type { absolute | delta} ] [ rising-threshold r-hold ] [ rising-event-index r-event] [ - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 356
Only Admin level users have access to these commands. Example Configure rmon alarm entries 1-3 binding with statistics entry 2, the owners as owner1 and the alarm intervals as 100 seconds: T2500G-10MPS(config)#rmon alarm 1-3 stats-index 2 owner owner1 interval 100 34.17 rmon statistics Description - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 357
EXEC Mode and Any Configuration Mode Privilege Requirement Only Admin level users have access to these commands. Example Display SNMP configuration globally: T2500G-10MPS# show snmp-server 34.19 show snmp-server view Description The show snmp-server view command is used to display the View table - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 358
Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement Only Admin level users have access to these commands. Example Display the Group table: T2500G-10MPS# show snmp-server group 34.21 show snmp-server user Description The show snmp-server user command is used to display the User - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 359
EXEC Mode and Any Configuration Mode Privilege Requirement Only Admin level users have access to these commands. Example Display the Host table: T2500G-10MPS# show snmp-server host 34.24 show snmp-server engineID Description The show snmp-server engineID command is used to display the engineID - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 360
Privileged EXEC Mode and Any Configuration Mode Privilege Requirement Only Admin level users have access to these commands. Example Display the engineID: T2500G-10MPS# show snmp-server engineID 34.25 show rmon history Description The show rmon history command is used to display the configuration of - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 361
Mode and Any Configuration Mode Privilege Requirement Only Admin level users have access to these commands. Example Display the Event configuration of entry1-4: T2500G-10MPS# show rmon event 1-4 34.27 show rmon alarm Description The show rmon alarm command is used to display the configuration of the - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 362
Privilege Requirement Only Admin level users have access to these commands. Example Display the configuration of the Alarm Management entry 1-2: T2500G-10MPS# show rmon alarm 1-2 34.28 show rmon statistics Description The show rmon statistics command is used to display the configuration of the - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 363
Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Enable LLDP function globally: T2500G-10MPS(config)#lldp 35.2 lldp hold-multiplier Description The lldp hold-multiplier command is used to configure the Hold Multiplier parameter. The - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 364
Mode Privilege Requirement Only Admin, Operator and Power User level users have access to these commands. Example Specify Hold Multiplier as 5: T2500G-10MPS(config)#lldp hold-multiplier 5 35.3 lldp timer Description The lldp timer command is used to configure the parameters about transmission. To - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 365
commands. Example Specify the Transmit Interval of LLDPDU as 45 seconds and Trap message to NMS as 120 seconds: T2500G-10MPS(config)#lldp timer tx-interval 45 T2500G-10MPS(config)#lldp timer notify-interval 120 35.4 lldp receive Description The lldp receive command is used to enable the designated - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 366
and Power User level users have access to these commands. Example Enable Gigabit Ethernet port 1/0/1 to transmit LLDPDU: T2500G-10MPS(config)# interface gigabitEthernet 1/0/1 T2500G-10MPS(config-if)#lldp transmit 35.6 lldp snmp-trap Description The lldp snmp-trap command is used to enable the port - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 367
notification for Gigabit Ethernet port 1/0/1: T2500G-10MPS(config)#interface gigabitEthernet 1/0/1 T2500G-10MPS(config-if)#lldp snmp-trap 35 system-name ] [ management-address ] [ port-vlan ] [ protocol-vlan ] [ vlan-name ] [ link-aggregation ] [ mac-phy-cfg ] [ max-frame-size ] [ power ] [ all ] } - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 368
Mode Global Configuration Mode Privilege Requirement Only Admin and Operator level users have access to these commands. Example Specify Fast Start Count as 5: T2500G-10MPS(config)# lldp med-fast-count 5 35.9 lldp med-status Description The lldp med-status command is used to enable the LLDP-MED - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 369
Admin, Operator and Power User level users have access to these commands. Example Enable the LLDP-MED feature for port 1/0/2: T2500G-10MPS(config)# interface gigabitEthernet 1/0/2 T2500G-10MPS(config-if)# lldp med-status 35.10 lldp med-tlv-select Description The lldp med-tlv-select command is used - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 370
T2500G-10MPS(config-if)# no lldp med-tlv-select network-policy inventory- ] [ country-code country-code ] [ what { dhcp-server | endpoint | switch } ] ] } Parameter emergency-number -- Emergency Call Service ELIN identifier, which is used during emergency call setup to a traditional CAMA or ISDN - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 371
show lldp Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the global configuration of LLDP: T2500G-10MPS#show lldp 35.13 show lldp interface Description The show lldp interface command is used to display LLDP configuration of the corresponding - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 372
EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the LLDP information of Gigabit Ethernet port 1/0/1: T2500G-10MPS#show lldp local-information interface gigabitEthernet 1/0/1 35.15 show lldp neighbor-information interface Description The show lldp neighbor-information - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 373
Privilege Requirement None. Example Display the neighbor information of Gigabit Ethernet port 1/0/1: T2500G-10MPS#show lldp neighbor-information interface gigabitEthernet 1/0/1 35.16 show lldp traffic interface Description The show lldp traffic interface command is used to display the LLDP - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 374
sequence to authenticate a user. The switch supports Login List for users to gain access to the switch, and Enable List for normal users TACACS+. Users can set these servers in a preferable order, which is called the server group list. When a user tries to access the switch, the switch will ask the - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 375
Example Enable the AAA function globally: T2500G-10MPS(config)# aaa enable 36.2 tacacas-server the server's port number for AAA. By default it is 49. time -- Specify the time in seconds the switch waits for the server's response before it times out. The time ranges from 1 to 9 seconds. The default - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 376
Configure a TACACS+ server with the IP address as 1.1.1.1, TCP port as 1500, timeout as 6 seconds, and the unencrypted key string as 12345. T2500G-10MPS(config)# tacacs-server host 1.1.1.1 port 1500 timeout 6 key 12345 36.3 show tacacs-server Description This show tacacs-server command is used to - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 377
1812. acct-port port-id -- Specify the UDP destination port for accouting requests. By deault it is 1813. time -- Specify the time in seconds the switch waits for the server's response before it times out. The time ranges from 1 to 9 seconds. The default is 5 seconds. number -- Specify the number of - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 378
information of all the RADIUS servers: T2500G-10MPS(config)# show radius-server 36.6 aaa group Description This aaa group command is used to create AAA server groups to group existing TACACS+/RADIUS servers for authentication. This command puts the switch - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 379
Mode Privilege Requirement Only Admin level users have access to these commands. Example Create a RADIUS server group with the name radius1: T2500G-10MPS(config)# aaa group radius radius1 36.7 server Description This server command is used to add the existing server in the defined server - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 380
Mode Privilege Requirement Only Admin level users have access to these commands. Example Display the information of all the server groups: T2500G-10MPS(config)# show aaa group 36.9 aaa authentication login Description This aaa authentication login command is used to configure a login authentication - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 381
as method1. Example Configure a login authentication method list "list1" with the priority1 method as radius and priority2 method as local: T2500G-10MPS(config)# aaa authenticaiton login list1 radius local 36.10 aaa authentication enable Description This aaa authentication enable command is used to - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 382
as method1. Example Configure a privilege authentication method list "list2" with the priority1 method as radius and priority2 method as local: T2500G-10MPS(config)# aaa authenticaiton enable list2 radius local 36.11 aaa authentication dot1x default Description This aaa authentication dot1x default - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 383
server group is supported, and the default method is server group "radius". Command Mode Global Configuration Mode Privilege Requirement Only Admin level users have access to these commands. Example Configure the default 802.1X accounting method as "radius1": T2500G-10MPS(config)# aaa accounting - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 384
Mode Privilege Requirement Only Admin level users have access to these commands. Example Display the information of all the authentication method lists: T2500G-10MPS(config)# show aaa authentication 36.14 show aaa accounting Description This show aaa accounting command is used to display the summary - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 385
Only Admin level users have access to these commands. Example Enter the Console port configuration mode and configure the console port 0: T2500G-10MPS(config)#line console 0 36.16 login authentication(console) Description The login authentication command is used to apply the login authentication - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 386
access to these commands. Example Configure the login authentication method list on the console port as "list1": T2500G-10MPS(config)# line console 0 T2500G-10MPS(config-line)# login authentication list1 36.17 enable authentication(console) Description The enable authentication command is used to - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 387
Mode Privilege Requirement Only Admin level users have access to these commands. Example Enter the telnet terminal line configuration mode: T2500G-10MPS(config)#line telnet 36.19 login authentication(telnet) Description The login authentication command is used to apply the login authentication - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 388
level users have access to these commands. Example Configure the login authentication method list on the telnet terminal line as "list1": T2500G-10MPS(config)#line telnet T2500G-10MPS(config-line)# login authentication list1 36.20 line ssh Description The line ssh command is used to enter the Line - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 389
have access to these commands. Example Configure the login authentication method list on the ssh terminal line as "list1": T2500G-10MPS(config)# line ssh T2500G-10MPS(config-line)# login authentication list1 36.22 enable authentication(telnet) Description The enable authentication command is used to - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 390
access to these commands. Example Configure the enable authentication method list on the telnet terminal line as "list2": T2500G-10MPS(config)#line telnet T2500G-10MPS(config-line)# enable authentication list2 36.23 enable authentication(ssh) Description The enable authentication command is used to - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 391
Only Admin level users have access to these commands. Example Configure the login authentication method list on the HTTP access as "list1": T2500G-10MPS(config)# ip http login authentication list1 36.25 ip http enable authentication Description The ip http enable authentication command is used to - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 392
Only Admin level users have access to these commands. Example Configure the enable authentication method list on the HTTP access as "list2": T2500G-10MPS(config)# ip http enable authentication list2 36.26 show aaa global Description This show aaa global command is used to display global status - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 393
users have access to these commands. Example Enable DHCP Relay function globally: T2500G-10MPS(config)# service dhcp relay 37.2 ip dhcp relay information Description The ip dhcp relay information command is used to enable option 82 support in DHCP Relay. To disable this function, please use no ip - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 394
access to these commands. Example Enable option 82 support in DHCP Relay: T2500G-10MPS(config)# ip dhcp relay information 37.3 ip dhcp Replace the option 82 field with the system option defined by the switch. Command Mode Global Configuration Mode Privilege Requirement Only Admin, Operator and Power - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 395
The ip dhcp relay information custom command is used to enable the switch to customize the option 82 field. To disable this function, please have access to these commands. Example Enable the switch to customize the option 82 field: T2500G-10MPS(config)# ip dhcp relay information custom 37.5 ip - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 396
Example Specify the remote ID as "TP-Link": T2500G-10MPS(config)# ip dhcp relay information remote-id TP-Link 37.7 ip dhcp relay default-interface Description The ip dhcp relay default-interface command is used to configure default relay agent interface. When the switch works at DHCP VLAN Relay mode - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 397
and Power User level users have access to these commands. Example Configure interface VLAN 1 as the default relay agent interface: T2500G-10MPS(config)# interface vlan 1 T2500G-10MPS(config-if)# ip dhcp relay default-interface 37.8 ip dhcp relay vlan Description The ip dhcp relay vlan command is - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 398
T2500G-10MPS(config)# ip dhcp relay vlan 1 helper-address 192.168.2.1 37.9 show ip dhcp relay Description The show ip Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the configuration of DHCP Relay: T2500G-10MPS(config)# show ip dhcp relay 380 - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 399
Only Admin, Operator and Power User level users have access to these commands. Example Configure the max power the PoE switch can supply as 100W: T2500G-10MPS(config)# power inline consumption 100 38.2 power profile Description The power profile command is used to create a PoE profile for - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 400
the system power limit, the PD linked to the port with lower priority will " and "class4". "power-limit" indicates you can manually enter a value. It ranges from 1 to 300. automatically by the PoE switch. "class1" represents 4w T2500G-10MPS(config)# power profile "IP Camera" supply enable priority - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 401
Only Admin, Operator and Power User level users have access to these commands. Example Create a PoE time-range named "tRange1" for the switch: T2500G-10MPS(config)# power time-range tRange1 38.4 absolute Description The absolute command is used to create an absolute mode time-range for the Time - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 402
commands. Example Create an absolute mode time-range for the PoE of the switch and specify the date extending from 08:00 on May 5th, 2012 to 22:00 on Oct. 5th, 2012: T2500G-10MPS(config)# power time-range tRange1 T2500G-10MPS(config-time-range)# absolute from 05/05/2012-08:00 to 10/05 - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 403
during Monday to Friday, the other is from 10:00 to 16:00 during the weekends: T2500G-10MPS(config)# power time-range tRange2 T2500G-10MPS(config-time-range)# periodic start 08:00 end 18:00 day-of-the-week 1-5 T2500G-10MPS(config-time-range)# periodic start 10:00 end 16:00 day-of-the-week 6-7 385 - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 404
command is used to create PoE holiday for the switch. To delete the corresponding PoE holiday configuration, T2500G-10MPS(config)# power holiday LaborDay start-date 05/01 end-date 05/03 38.7 holiday Description The holiday command is used to configure holiday mode for the Time-range of the switch - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 405
time-range of the switch excludes the PoE holiday: T2500G-10MPS(config)# power time-range tRange3 T2500G-10MPS(config-time-range)# ", "auto", "class1", "class2", "class3" and "class4". "power-limit" indicates you can manually enter a value. It ranges from 1 to 300. The value is in the unit of 0.1 - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 406
limit as "5w" for port 1/0/2: T2500G-10MPS(config)# interface gigabitEthernet 1/0/2 T2500G-10MPS(config-if)# power inline consumption 50 38 descending order. When the supply power exceeds the system power limit, the PD linked to the port with lower priority will be disconnected. By default, the - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 407
. Example Enable the PoE feature for port 1/0/2: T2500G-10MPS(config)# interface gigabitEthernet 1/0/2 T2500G-10MPS(config-if)# power inline supply enable 38.11 power inline profile Description The power inline profile command is used to bind a PoE profile to the corresponding port. To cancel - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 408
Only Admin, Operator and Power User level users have access to these commands. Example Bind the PoE profile named "IP Camera" to port 1/0/2: T2500G-10MPS(config)# interface gigabitEthernet 1/0/2 T2500G-10MPS(config-if)# power inline profile "IP Camera" 38.12 power inline time-range Description - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 409
Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the PoE information of the system: T2500G-10MPS# show power inline 38.14 show power inline configuration interface Description The show power inline configuration interface command is used to - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 410
number. Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the PoE information of all ports: T2500G-10MPS# show power inline information interface 38.16 show power profile Description The show power profile command is used to display the defined - TP-Link T2500G-10MPS | T2500G-10MPSUN V1 CLI Reference Guide Guide - Page 411
Syntax show power holiday Command Mode Privileged EXEC Mode and Any Configuration Mode Privilege Requirement None. Example Display the defined PoE holiday: T2500G-10MPS# show power holiday 38.18 show power time-range Description The show power time-range command is used to display the configuration
CLI Reference Guide
T2500G-10MPS
1910012153 REV1.0.0
May 2017