Without our written permission this document may not be excerpted, reproduced, transmitted, or
otherwise in all or part by any party by any means.
ii
-
Preface
Version Description
This manual’s command descriptions are based on the software release 4.00.000. The
commands listed here are the subset of commands that are supported by the DGS-6600
series switches.
Note: Other Ethernet L2/L3 Chassis-Based Switch series Hardware using similar software
may support a different subset of commands although generally the majority of the supported
commands and options will be similar.
Audience
This reference manual is intended for network administrators and other IT networking
professionals responsible for managing the DGS-6600 by using the D-LINK Command Line
Reference (CLI). The CLI is the primary management interface to the D-LINK DGS-6600
which will be generally referred to as the “switch” within this manual. This manual is written in
a way that assumes that you already have the experience and knowledge of Ethernet and
modern networking principles for Local Area Networks.
Document Organization
PrefaceDescribes how to use the CLI reference manual.
Feature Table of
Contents
Command ListingsA complete list of available commands arranged in alphabetical order.
AcronymsA glossary of acronyms used throughout the reference manual.
A command list of the DGS-6604 commands grouped by their features and
linked to the command descriptions.
Other Documentation
The documents below are a further source of information in regards to configuring and troubleshooting the
switch. All the documents are available for download from D-Links web site www.d-link.com.
•DGS-6600 Series Quick Installation Guide
•DGS-6600 Series Hardware Installation Guide
iii
-
Conventions
ConventionDescription
boldface fontCommands, command options and keywords are printed in boldface. Key words
in the command line, are to be entered exactly as they are displayed.
UPPERCASE ITALICS
font
[ ]Square brackets enclose an optional value or set of optional arguments.
{ a|b|c}Braces enclose alternative keywords separated by vertical bars. Generally, one
[ a | b | c ]Optional values or arguments are enclosed in square brackets and separated by
blue color screen
Parameters or values that must be specified are printed in UPPERCASE
ITALICS. Parameters in the command line, are to be replaced with the actual
values that are desired to be used with the command.
of the keywords in the separated list can be chosen.
vertical bars. Generally, one of the vales or arguments in the separated list can
be chosen.
Blue color screen fonts: are used it presents an example of a screen
console display including example entries of CLI command input with the
corresponding output.
Notes, Notices, and Cautions
Below are examples of the 3 types of indicators used in this manual. When administering your switch
using the information in this document, you should pay special attention to these indicators. Each
example below provides an explanatory remark regarding each type of indicator.
NOTE: A NOTE indicates important information that helps you make better use of your
device
NOTICE: A NOTICE indicates either potential damage to hardware or loss of data and tells
you how to avoid the problem
CAUTION: A CAUTION indicates a potential for property damage, personal injury, or death.
iv
-
Command Descriptions:
The information pertaining to each command in this reference guide is presented using a number of
template fields. The fields are:
•Description - This is a short and concise statement describing the commands functionality.
•Syntax - The precise form to use when entering and issuing the command. The form conventions
are described in the table shown under the section “Conventions” on page iv of this guide.
•Syntax Description - A table where each row describes the optional or required arguments, and
their use, that can be issued with the command.
•Default - If the command sets a configuration value or administrative state of the switch then any
default settings (i.e. without issuing the command) of the configuration is shown here.
•Command Mode - The mode in which the command can be issued. The modes are either User
EXEC, Privileged EXEC, Global Configuration or a specific configuration mode. These modes are
described in the section titled “Command Modes” on page v below.
•Command Usage - If necessary, a detailed description of the command and its various utilization
scenarios is given here.
•Example(s) - Each command is accompanied by a practical example of the command being
issued in a suitable scenario.
Command Modes
There are several command modes available in the command-line interface (CLI). The set of commands
available to the user depends on both the mode the user is currently in and their privilege level. For each
case, the user can see all the commands that are available in a particular command mode by entering a
question mark (?) at the system prompt.
The command-line interface has four privilege levels:
•Basic User- Privilege Level 1. This user account level has the lowest priority of the user accounts
and is allowed to configure the terminal control settings. The purpose of this type of user account
level is for basic system checking. This user account can only show limited information that is not
related to security. The most important limitation of this account is that there is no way of changing
the access right level.
•Advanced User- Privilege Level 2. This user account level is very similar to a basic user except
that an advanced user can enter privileged EXEC mode.
•Power User- Privilege Level 12. This user account level is used to grant system configuration
rights for users who need to change or monitor system configuration, except for security related
information such as user accounts and SNMP account settings, etc.
•Administrator- Privilege Level 15. This administrator user account level can monitor all system
information and change any of the system configuration settings expressed in this configuration
guide.
The command-line interface has a number of command modes. There are three basic command modes:
v
-
Login
User EXEC mode
Basic user
User EXEC mode
Advanced user
Privileged EXEC mode
Power user
Privileged EXEC mode
Administrator
Global configuration mode
Administrator
Interface configuration mode
Administrator
VLAN configuration mode
Administrator
Mgmt-if configuration mode
Administrator
Disable
Administrator
Enable
Power User
Disable
Power User
Basic UserAdvanced UserPower User
config
Enable
Administrator
Administrator
mgmt-if
vlan
interface
config
•User EXEC mode
•Privileged EXEC mode
•Global Configuration mode
All other sub-configuration modes can be accessed via global configuration mode.
When a user logs in to the Switch, the privilege level of the user determines the command mode the user
will enter after initially logging in. The user will either log into user EXEC mode or privileged EXEC mode.
Users with a basic user and advanced user level will log into the Switch in user EXEC mode. Users with
power user and administrator level accounts will log into the Switch in privileged EXEC mode. Therefore,
user EXEC mode can operate at either basic user level or advanced user level, and privileged EXEC
mode can operate at either power user level or administrator level. The user can only enter global
configuration mode from privileged EXEC mode. Therefore, global configuration mode can be accessed
by users who have power user or administrator level user accounts. As for sub-configuration modes, a
subset of those can only be accessed by users who have the highest secure administrator level
privileges.
In user EXEC mode at advanced user level, the user is allowed to enter privileged EXEC mode by
entering the enable password. In privileged EXEC mode, the user is allowed to exit to the user EXEC
mode at advanced user level by entering the disable command. The enable password and disable
commands are functions that can be used to switch between user EXEC mode and privileged EXEC
mode.
The following state diagram describes the main command modes and how to enter each one:
vi
-
Note: Not all configuration modes are listed in the above figure. For example, in
global configuration mode, enter “router ospf” to enter OSPF router configuration
mode
The following table briefly lists the available command modes. Only the basic command modes and some
of the sub-configuration modes are enumerated. The basic command modes and basic sub-configuration
modes are further described in the following chapters. Descriptions for the rest of the sub-configuration
modes are not provided in this section. For more information on the additional sub-configuration modes,
the user should refer to the chapters relating to these functions.
The available command modes and privilege levels are described below:
Command Mode & Privilege LevelPurpose
User EXEC mode at Basic User levelFor checking basic system settings, allowing users to
change the local terminal session settings, and verifying
basic network connectivity. Checking security related
settings is not allowed at this command mode and
privilege level.
User EXEC mode at Advanced User levelThis level has almost the same access rights as user
EXEC mode at basic user level, except that a user in this
mode and at this level can enter privileged EXEC mode
by entering the enable command.
Privileged EXEC mode at Power User levelFor changing both local and global terminal settings,
monitoring, and performing certain system
administration tasks. The system administration tasks
that can be performed at this level includes the clearing
of system configuration settings, except for any security
related information, such as user accounts, SNMP
account settings etc.
Privileged EXEC mode at Administrator
level
This level is identical to privileged EXEC mode at power
user level, except that a user at the administrator level
can monitor and clear security related settings.
Global Configuration Mode at Power User
level
For applying global settings, except for security related
settings, on the entire Switch. In addition to applying
global settings on the entire Switch, the user can access
other sub-configuration modes from global configuration
mode.
Global Configuration Mode at Administrator
level
For applying global settings on the entire Switch. In
addition to applying global settings on the entire Switch,
the user can access other sub-configuration modes from
global configuration mode.
Interface Configuration Mode at Power
User level
For applying interface related settings.
vii
-
Command Mode & Privilege LevelPurpose
VLAN Interface Configuration ModeFor applying VLAN interface related settings.
VLAN Configuration ModeFor applying settings to a VLAN.
IP Access-List Configuration ModeFor specifying filtering criteria for an IP access list.
User EXEC Mode at Basic User Level
This command mode is mainly designed for checking basic system settings, allowing users to change the
local terminal session settings and carry out basic network connectivity verification. One limitation of this
command mode is that it cannot be used to display information related to security. The most significant
limitation of this command mode is that there is no way of changing the access right level of the logged in
user.
This command mode can be entered by logging in as a basic user.
User EXEC Mode at Advanced User Level
User EXEC mode at advanced user level has the same purpose as user EXEC mode at basic user level,
except that user EXEC mode at advanced user level is allowed to use the enable command to enter
privileged EXEC mode.
This command mode can be entered by logging in as an advanced user or by using the disable
command in privileged EXEC mode.
In the following example, the user is currently logged in as an advanced user in privileged EXEC mode
and uses the disable command to return to user EXEC mode at advanced user level:
DGS-6600:15#disable
DGS-6600:2>
Privileged EXEC Mode at Power User Level
Users logged into the Switch in privileged EXEC mode at this level can change both local and global
terminal settings, monitor, and perform system administration tasks like clearing configuration settings
(except for security related information such as user accounts, SNMP account settings etc.)
There are two methods that a user can use to enter privileged EXEC mode at power user level. The first
method is to login to the Switch with a user account that has a privilege level of 12. The other method is to
use the enable privilege LEVEL command in user EXEC mode.
In the following example, the user enters privileged EXEC mode at power user level by logging in with a
user account called “power-user” that has a privilege level of 12:
viii
-
User Access Verification
Username: power-user
Password:
DGS-6600 Chassis-based High-Speed Switch
Command Line Interface
Firmware: 4.00.00
Copyright (c) 2012 D-Link Corporation. All rights reserved.
DGS-6600:12#
In the following example, the user enters the enable privilege LEVEL command in user EXEC mode to
enter privileged EXEC mode at Power User level:
DGS-6600:2>enable privilege 12
DGS-6600:12#
Privileged EXEC Mode at Administrator Level
This command mode has a privilege level of 15. Users logged in with this command mode can monitor all
system information and change any system configuration settings mentioned in this Configuration Guide.
There are two methods that a user can use to enter privileged EXEC mode at administrator level. The first
method is to login to the Switch with a user account that has a privilege level of 15. The second method
requires a user to login to the Switch in as a user with an advanced user or power user level and and use
the enable privilege LEVEL command.
In this command mode, the user can return to user EXEC mode at an advanced user level by entering the
disable command.
In the following example, the user is currently logged in as an administrator in privileged EXEC mode and
uses the disable command to return to user EXEC mode at an advanced user level:
DGS-6600:15#disable
DGS-6600:2>
ix
-
In the following example, the user enters the enable privilege LEVEL command in privileged EXEC
mode at power user level to enter privileged EXEC mode at an administrator level:
DGS-6600:12#enable privilege 15
DGS-6600:15#
Global Configuration Mode
The primary purpose of global configuration mode is to apply global settings on the entire Switch. Global
configuration mode can be accessed at both power user and administrator level. However, security
related settings are not accessible at power user level. In addition to applying global settings on the entire
Switch, the user can also access other sub-configuration modes.
In order to access global configuration mode, the user must be logged in as an administrator or power
user and use the configure terminal command in privileged EXEC mode.
In the following example, the user is logged in as an Administrator in privileged EXEC mode and uses the
configure terminal command to access global configuration mode:
DGS-6600:15#configure terminal
DGS-6600:15(config)#
The exit command is used to exit global configuration mode and return to privileged EXEC mode.
The procedures to enter the different sub-configuration modes can be found in the related chapters in this
Configuration Guide. The command modes are used to configure the individual functions.
Interface Configuration Mode
Interface configuration mode is used to configure the parameters for an interface or a range of interfaces.
An interface can be a physical port, VLAN, or other virtual interface. Thus, interface configuration mode is
distinguished further according to the type of interface. The command prompt for each type of interface is
slightly different.
VLAN Interface Configuration Mode
VLAN interface configuration mode is one of the available interface modes and is used to configure the
parameters of a VLAN interface.
To access VLAN interface configuration mode, use the following command in global configuration mode:
CommandExplanation
DGS-6600:15(config)#interface
Enters VLAN interface configuration mode.
vlanVLAN-ID
x
DGS-6604 m
Command Listing by Feature
802.1xdot1x auth-mode — 190
dot1x auth-protocol — 191
dot1x control-direction — 192
dot1x default — 193
dot1x forward-pdu — 194
dot1x guest-vlan (interface configuration) — 195
dot1x initialize — 197
dot1x max-req — 198
dot1x pae — 199
dot1x port-control — 200
dot1x re-authenticate — 201
dot1x re-authentication — 202
dot1x system-auth-control — 203
dot1x timeout — 204
dot1x user — 205
show dot1x — 671
show dot1x user — 675
show dot1x vlan — 676
AAAaaa authentication — 30
aaa authorization — 32
aaa group server — 33
server — 616
show aaa — 646
show aaa group server — 649
CLI Reference Guide
1
DGS-6604 m
Access
Control Lists
ip access-group — 252
ip access-list — 254
ipv6 access-list — 366
mac access-group — 460
mac access-list — 461
periodic — 543
permit | deny (ip access-list) — 544
permit | deny (ipv6 access list) — 547
permit | deny (mac access-list) — 549
resequence access-list — 601
show access-group — 650
show access-list — 651
Access
Management
show time-range — 926
time-range — 1028
banner login — 61
command prompt — 133
configure terminal — 135
disable — 180
enable — 207
enable password — 208
end — 211
exit — 229
help — 242
ip http server — 292
ip http service-port — 293
ip telnet server — 359
ip telnet service-port — 360
CLI Reference Guide
2
DGS-6604 m
ip trusted-host — 361
login — 450
logout — 451
password encryption — 536
show enable password — 677
show history — 689
show ip trusted-host — 795
show username — 930
show user-session — 931
telnet — 1015
terminal length — 1020
terminal timeout — 1021
terminal width — 1022
username — 1042
Basic IPv4arp — 56
arp timeout — 57
clear arp-cache — 99
ip address — 258
show arp — 652
show ip interface — 739
Basic IPv6clear ipv6 neighbors — 115
default ipv6 nd prefix — 164
ipv6 address — 367
ipv6 enable — 377
ipv6 hop-limit — 378
ipv6 nd managed-config-flag — 379
CLI Reference Guide
3
DGS-6604 m
ipv6 nd other-config-flag — 380
ipv6 nd prefix — 381
ipv6 nd ra-interval — 382
ipv6 nd ra-lifetime — 383
ipv6 nd reachable-time — 384
ipv6 nd retrans-timer — 385
ipv6 nd suppress-ra — 386
ipv6 neighbor — 387
show ip dhcp pool — 709
show ipv6 interface brief — 804
show ipv6 neighbors — 805
Basic Switchshow environment — 678
show system — 921
show unit — 928
show version — 932
BGPaddress-family ipv4 — 40
aggregate-address — 41
bgp always-compare-med — 71
bgp asnotation dot — 72
bgp bestpath as-path ignore — 74
bgp bestpath compare-routerid — 76
bgp default ipv4-unicast — 77
bgp default local-preference — 78
bgp deterministic-med — 79
bgp enforce-first-as — 80
bgp log-neighbor-changes — 83
CLI Reference Guide
4
DGS-6604 m
bgp router-id — 84
clear ip bgp — 104
clear ip bgp peer-group — 106
default-information originate (BGP) — 167
ip community-list — 266
ip dhcp snooping verify MAC-address — 287
match as-path — 471
match community — 472
neighbor advertisement-interval — 510
neighbor description — 511
neighbor filter-list — 512
neighbor peer-group (create group) — 513
neighbor peer-group (add group member) — 515
neighbor remote-as — 516
neighbor route-map — 517
neighbor send-community — 518
neighbor shutdown — 519
neighbor timers — 520
neighbor update-source — 521
neighbor weight — 522
network (BGP) — 527
redistribute — 590
router bgp — 607
set as-path — 624
set community — 625
set origin — 638
set weight — 639
CLI Reference Guide
5
DGS-6604 m
show ip arp inspection — 693
show ip bgp — 697
show ip bgp community-list — 699
show ip bgp filter-list — 701
show ip bgp neighbors — 702
show ip community-list — 705
timers bgp — 1027
Chassisreboot — 589
show system high-availability — 925
system high-availability — 1012
Digital
Diagnostic
Monitoring
(DDM)
ddm bias-current — 151
ddm log — 153
ddm rx-power — 154
ddm shutdown — 156
ddm state — 157
ddm temperature — 158
ddm voltage — 162
ddm tx-power — 160
show ddm — 665
show ddm configuration — 666
show ddm status — 668
DHCP Client
clear ipv6 dhcp client — 114
(IPv6)
ipv6 address — 368
ipv6 dhcp client information refresh minimum — 372
ipv6 dhcp client pd — 373
show ipv6 dhcp — 797
CLI Reference Guide
6
DGS-6604 m
show ipv6 general-prefix — 801
DHCP Relay
(IPv4)
DHCP Relay
(IPv6)
ip dhcp relay — 271
ip dhcp relay address — 272
ip dhcp relay hops — 273
ip dhcp relay information check — 274
ip dhcp relay information option — 275
ip dhcp relay information policy — 277
ip dhcp relay information trust-all — 278
ip dhcp relay information trusted — 279
show ip dhcp relay — 712
show ip dhcp relay information trusted-sources — 713
ipv6 dhcp relay destination — 375
show ipv6 dhcp relay interface — 800
DHCP Server
(IPv4)
accept dhcp client-identifier — 34
accept dhcp relay-agent — 35
based-on client-id — 63
based-on c-vid — 64
based-on interface-ip-address — 65
based-on mac-address — 66
based-on relay-ip-address — 67
based-on s-vid — 68
based-on user-class — 69
based-on vendor-class — 70
bootfile — 91
clear ip dhcp binding — 108
clear ip dhcp conflict — 110
CLI Reference Guide
7
DGS-6604 m
clear ip dhcp server statistics — 112
default-router — 175
dns-server — 183
domain-name — 184
ip address-list — 260
ip dhcp ping packets — 268
ip dhcp ping timeout — 269
ip dhcp pool — 270
lease — 424
netbios node-type — 523
netbios scope-id — 524
DHCP Server
Screening/
Client Filtering
netbios wins-server — 525
next-server — 529
service dhcp — 618
show ip dhcp binding — 706
show ip dhcp conflict — 708
show ip dhcp pool — 709
show ip dhcp server — 715
show ip dhcp server statistics — 716
subnet-mask — 1003
ip dhcp screening — 280
ip dhcp screening ports — 281
ip dhcp screening suppress-duration — 282
ip dhcp screening trap-log — 283
show ip dhcp screening — 714
DHCP
ip dhcp snooping — 284
Snooping
CLI Reference Guide
8
DGS-6604 m
ip dhcp snooping information option — 285
ip dhcp snooping trust — 286
ip dhcp snooping verify MAC-address — 287
ip dhcp snooping vlan — 288
show ip dhcp snooping — 718
show ip dhcp snooping binding — 719
show ip dhcp snooping database — 722
DoS
clear dos_prevention counter — 101
Prevention
dos_prevention action — 185
dos_prevention type — 186
show dos_prevention — 669
DVMRPip dvmrp — 290
ip dvmrp metric — 291
show ip dvmrp neighbor — 724
show ip dvmrp prune — 727
show ip dvmrp route — 728
Dynamic ARP
ip arp inspection trust — 261
Inspection
ip arp inspection validate — 262
ip arp inspection vlan — 264
ERPSerpi enable — 212
erps — 225
erps domain — 226
erpi protected-vlan — 213
erpi raps-vlan — 215
erpi ring-mel — 216
erpi ring-port — 217
CLI Reference Guide
9
DGS-6604 m
erpi rpl — 219
erpi tc-propagation — 220
erpi timer — 221
erpi type — 223
show erps domain — 681
show erps erpi — 683
Errdisableerrdisable recovery — 227
show errdisable recovery — 685
File Systemdelete — 176
dir — 179
GVRPclear gvrp statistics interface — 103
graceful-restart — 232
gvrp (Interface) — 236
gvrp advertise (Interface) — 237
gvrp advertise (VLAN) — 238
gvrp dynamic-vlan-creation — 239
gvrp forbidden — 240
gvrp timer — 241
show gvrp configuration — 686
show gvrp statistics — 688
High
bgp graceful-restart — 81
Availability
ip multicast graceful-restart — 314
ipv6 ospf graceful-restart — 390
ipv6 ospf restart helper — 391
ipv6 rip graceful-restart — 398
ospf graceful-restart — 530
CLI Reference Guide
10
DGS-6604 m
ospf restart helper — 531
redundancy force-switchover — 599
rip graceful-restart — 603
show redundancy — 899
IGMPip igmp access-group — 294
ip igmp last-member-query-interval — 296
ip igmp query-interval — 297
ip igmp query-max-response-time — 298
ip igmp robustness-variable — 299
ip igmp version — 308
show ip igmp group — 729
show ip igmp interface — 732
IGMP
ip igmp snooping — 300
Snooping
ip igmp snooping querier — 305
ip igmp snooping static-group — 306
show ip igmp snooping — 733
show ip igmp snooping group — 735
show ip igmp snooping mrouter — 738
Interfaceclear counters — 100
description — 177
encapsulation dot1q — 209
interface — 248
interface range — 250
show interface — 690
show interface status err-disabled — 692
IP Utilityping — 551
CLI Reference Guide
11
DGS-6604 m
traceroute — 1029
IP Multicastip mroute — 310
ip multicast-routing — 315
show ip mroute — 742
show ip mroute forwarding-cache — 744
IPv6 Protocol
Independent
IP Source
Guard
ipv6 route — 402
ipv6 unicast-routing long-prefix — 410
ipv6 unicast-routing long-prefix log — 412
show ipv6 protocols — 815
show ipv6 route — 819
show ipv6 route summary — 822
show ipv6 unicast-routing long-prefix status — 823
ip verify source vlan dhcp-snooping — 363
ip source binding — 355
show ip source binding — 792
show ip verify source — 796
IPv6 Tunnelinterface tunnel — 251
ipv6 nd suppress-ra — 386
tunnel destination — 1039
tunnel mode — 1040
tunnel source — 1041
Jumbo Frameip mtu — 312
max-rcv-frame-size — 477
mtu — 504
L2 FDBclear mac address-table — 121
CLI Reference Guide
12
DGS-6604 m
mac address-table aging destination-hit — 462
mac address-table aging-time — 463
mac address-table static — 464
multicast filtering-mode — 506
show mac address-table — 849
show mac address-table aging destination-hit — 851