NOTE:Emphasizes important information or calls your attention to
related features or instructions.
W
ARNING
:
Alerts you to a potential hazard that could cause personal injury.
C
AUTION
:
Alerts you to a potential hazard that could cause loss of data, or
damage the system or equipment.
Release
Date
Revision
Initial Release
2017/05/22
A1
AUDIENCE
The guide is intended for use by network administrators who are responsible for operating and
maintaining network equipment; consequently, it assumes a basic working knowledge of general
switch functions, the Internet Protocol (IP), and Simple Network Management Protocol (SNMP).
CONVENTIONS
The following conventions are used throughout this guide to show information:
Web Commands ............................................................................................................................ - 81 -
EX26262F Managed Switch Users Guide - CLI
- 5 -
INTRODUCTION
EtherWAN's EX26262F provides a 26-port switching platform with support for IEEE802.3at Power over
Ethernet, high performance switching, and the advanced management features required for enterprise
environments.
Equipped with 24 10/100/1000BASE-TX PoE ports, in combination with 2 100/1000 SFP Combo options, the
EX26262F is feature-rich, with 9216 Bytes Jumbo Frame support, full wire speed Gigabit throughput, and QoS
support.
The PoE ports provide up to 30 Watts per port, with a total power budget of 370 Watts, allowing the switch
to operate a wide variety of Powered Devices with different bandwidth and power consumption
requirements, such as IP cameras.
Robust management features include port security, IGMP snooping, VLANs, GARP protocols, and LACP, as
well as SNMP & RMON interfaces. An intuitive GUI for web management simplifies switch configuration,
status monitoring, and maintenance activities.
The EX26262F provides the following features:
Supports IPv4/IPv6 dual stack management
Supports SSH/SSL secured management
Supports SNMP v1/v2c/v3
Supports RMON groups 1,2,3,9
Supports IGMP v1/v2/v3 Snooping
Supports MLD v1/v2 Snooping
Supports RADIUS and TACACS+ authentication
Supports IP Source Guard
Supports DHCP Relay (Option 82)
Supports DHCP Snooping
Supports ACL and QCL for traffic filtering
Supports 802.1d(STP), 802.1w(RSTP) and 802.1s(MSTP)
Supports LACP and static link aggregation
Supports Q-in-Q double tag VLAN
Supports GVRP dynamic VLAN
EX26262F Managed Switch Users Guide - CLI
- 6 -
CLI Management
MODE
PROMPT
FUNCTIONS
exec
EX26262F#
Display current configuration,
diagnostics, maintenance
config
EX26262F (config)#
Configuration commands
Config-if
EX26262F (config-interface)#
Configure ports
Config-if-vlan
EX26262F (config-if-vlan)#
Configure static vlan
Config-line
EX26262F (config-line)#
Line Configuration
Config-impc-profile
EX26262F (config-impc-profile)#
IPMC Profile
Config-snmp-host
EX26262F (config-snmp-host)#
SNMP Server Host
Config-stp-aggr
EX26262F (config-stp-aggr)#
STP Aggregation
Config-dhcp-pool
EX26262F (config-dhcp-pool)#
DHCP Pool Configuration
Config-rfc2544-profile
EX26262F (config-rfc2544-profile)#
RFC2544 Profile
Initial Configuration
Connect to the switch console by connecting the RJ45 to DB9 console cable to the RJ45 console
port of the switch and to the serial port of the computer running a terminal emulation application
(such as HyperTerminal or Putty).
Configuration settings of the terminal-emulation program: Baud rate: 115,200bps, Data bits: 8,
Parity: none, Stop bit: 1, Flow control: none.
The default login name is“root,” no password.
Baud rate 115200
Stop bits 1
Data bits 8
Parity N
Flow control none
You can also use telnet to connect to the management VLAN of the switch: 192.168.1.10. Login is
the sameL “root,” no password.
Command Modes
The CLI is divided into several modes. If a user has privilege to run a particular command,
the command must be run in the correct mode. To see the commands of the mode, enter a “?” at the
system prompt. All commands will be listed in the screen. The command modes are listed bellow:
deadtime Time to stop using a RADIUS server that doesn't respond
host Specify a RADIUS server
key Set RADIUS encryption key
retransmit Specify the number of retries to active server
timeout Time to wait for a RADIUS server to reply
<Minutes : 1-1440> Time in minutes
<Host4 : ipv4_ucast> IPv4 address
<Host6 : ipv6_ucast> IPv6 address
<HostName : word1-255> Hostname
acct-port UDP port for RADIUS accounting server
auth-port UDP port for RADIUS authentication server
key Server specific key (overrides default)
retransmit Specify the number of retries to active server (overrides default)
timeout Time to wait for this RADIUS server to reply (overrides default)
<AuthPort : 0-65535> UDP port number
<Seconds : 1-1000> Wait time in seconds
Switch(config)# radius-server host device key 12
AAA
This section shows you to use an AAA (Authentication, Authorization, Accounting) server to
provide access control to your network. The AAA server can be a TACACS+ or RADIUS
server to create and manage objects that contain settings for using AAA servers.
authentication Authentication
login Login
console Configure Console
http Configure HTTP
ssh Configure SSH
telnet Configure Telnet
local Use local database for authentication
radius Use RADIUS for authentication
tacacs Use TACACS+ for authentication
deadtime Time to stop using a nonresponding TACACS+ server
host Specify a TACACS+ server
key Set TACACS+ encryption key
timeout Time to wait for a TACACS+ server to reply
<Minutes : 1-1440> Time in minutes
<Key: line1-63> Shared key
<Seconds : 1-1000> Wait time in seconds
start_addr: Starting IP address of rangeinIPv4 or IPV6 format
end_addr: Ending IP address of rangein IPv4 or IPV6 format
<all> All services
<snmp> SNMP services
<telnet> telnet services
<web> Web services
EX26262F(config)# access management 10 3 192.168.1.1 all
Access Management Commands
Access
This section shows you to configure access management table of the Switch including HTTP/HTTPS,
SNMP, and TELNET/SSH. You can manage the Switch over an Ethernet LAN, or over the Internet..
The switch access control lists are used for packet filtering and for selecting types of traffic to be
analyzed, forwarded, or influenced in some way. The ACLs are divided into EtherTypes. IPv4, ARP
protocol, MAC and VLAN parameters etc. Here we will just go over the standard and extended
access lists for TCP/IP. As you create ACEs for ingress classification, you can assign a policy for each
port, the policy number is 1-8, however, each policy can be applied to any port. This makes it very
easy to determine what type of ACL policy you will be working with.
access-list ace:
Create or modify Access Control Entry.
EX26262F Managed Switch Users Guide - CLI
- 11 -
access-list ace { update<1-256> | <1-256> }[ vid { <1-4095> |
any } ]
Parameter:
action Access list action
dmac-type The type of destination MAC address
frametype Frame type
ingress Ingress
logging Logging frame information
lookup Second lookup
mirror Mirror frame to destination mirror port
next insert the current ACE before the next ACE ID
policy Policy
rate-limiter Rate limiter
redirect Redirect frame to specific port
shutdown Shutdown incoming port
tag Tag
tag-priority Tag priority
vid VID field
deny Deny
filter Filter
permit Permit
any Don't-care the type of destination MAC address
broadcast Broadcast destination MAC address
multicast Multicast destination MAC address
unicast Unicast destination MAC address
any Don't-care the frame type
arp Frame type of ARP
etype Frame type of etype
ipv4 Frame type of IPv4
ipv4-icmp Frame type of IPv4 ICMP
ipv4-tcp Frame type of IPv4 TCP
ipv4-udp Frame type of IPv4 TCP
ipv6 Frame type of IPv4
ipv6-icmp Frame type of IPv6 ICMP
ipv6-tcp Frame type of IPv6 TCP
ipv6-udp Frame type of IPv6 UDP
interface Select an interface to configure
<port_type> Gigabitethernet
* All switches or All ports
Gigabitethernet 1 Gigabit Ethernet port
<port_type_id> Port ID in the format of switch-no/port-no ex, 1/1-26 for
Gigabitethernet
EX26262F Managed Switch Users Guide - CLI
- 12 -
<port_type> * or Gigabitethernet
* All Switches or All ports
Gigabitethernet 1 Gigabit Ethernet Port
<port_type_list> Port list in 1/1-26
any Don't-care the ingress interface
<0-255> Policy ID
policy-bitmask The bitmask for policy ID
<0x0-0xFF> The value of policy bitmask
<1-4095> The value of VID field
<0-7> The value of tag priority
<0-256> If the next ACE ID is non-zero, the ACE will be Placed before
this ACE in the list. If the next ACE ID is zero, the ACE will be placed last
in the list.
Mode:
Interface Config
Syntax:
access-list port-state
Parameter:
none
EX26262F(config-if)# access-list policy 10
access-list logging:
Enable access list logging. Note: The logging feature only works when the
packet length is less than 1518 (without VLAN tags) and the System Log
memory size and logging rate is limited.
access-list mirror:
Mirror frames to a destination mirror port.
access-list policy:
Configure the access-list policy value. The access-list interface
configuration will affect the received frames if it doesn't match any ACE.
interface Select an interface to configure
* All Switches or All Ports
Gigbitethernet 1 Gigabit Ethernet Port
<port_type_list> Port list in 1/1-26
rate-limiter Rate limiter
< RateLimiterList : 1~16> Rate limiter ID
ace Access list entry
statistics Traffic statistics
<AceId : 1~256> ACE ID
ace-status The local ACEs status
static The ACEs that are configured by users manually
loop-protect The ACEs that are configured by Loop Protect module
dhcp The ACEs that are configured by DHCP module
upnp The ACEs that are configured by UPnP module
arp-inspection The ACEs that are configured by ARP Inspection
module
mep The ACEs that are configured by MEP module
ipmc The ACEs that are configured by IPMC module
ip-source-guard The ACEs that are configured by IP Source Guard
module
ip-mgmt The ACEs that are configured by IP Mamagement module
conflicts The conflicts ACEs that does not applied to the hardware
due to hardware limitations
EX26262F# show access-list ace statistics rate-limiter
Switch access-list ace number: 0
Switch access-list rate limiter ID 1 is 1 pps
EXAMPLE:
EX26262F Managed Switch Users Guide - CLI
- 16 -
Aggregation Commands
Mode:
Global config
Syntax:
aggregation mode { [ smac ] [ dmac ] [ ip ] [ port ] }
no aggregation mode
Parameter:
dmac Destination MAC affects the distribution
ip IP address affects the distribution
port IP port affects the distribution
smac Source MAC affects the distribution
Monde:
Interface config
Syntax:
aggregation group <uint>
no aggregation group
Parameter:
<uint> The Aggregation group id <1-14>.
EX26262F(config)# aggregation mode ip port dmac smac
EX26262F(config-if)# aggregation group 10
Aggregation
The Aggregation is used to configure the settings of Link Aggregation. You can bundle more than
one port with the same speed, full duplex and the same MAC to be a single logical port, thus the
logical port aggregates the bandwidth of these ports. This means you can apply your current
Ethernet equipment’s to build the bandwidth aggregation. For example, if there are three Fast
Ethernet ports aggregated in a logical port, then this logical port has bandwidth three times as high
as a single Fast Ethernet port has.
aggregation mode:
Set traffic distribution mode.
EXAMPLE:
aggregation group:
Configure the link aggregation group.
EXAMPLE:
EX26262F Managed Switch Users Guide - CLI
- 17 -
Mode
Privileged exec
Syntax:
show aggregation [ mode ][ | {begin | exclude | include } <LINE>]
Parameter:
mode Traffic distribution mode
| Output modifiers
begin Begin with the line that matches
exclude Exclude lines that match
include Include lines that match
<LINE> String to match output lines
EX26262F# show aggregation Mode
Aggregation Mode:
SMAC : Enabled
DMAC : Disabled
IP : Enabled
Port : Enabled
show aggregation:
Display aggregation configurations on the switch.
EXAMPLE:
EX26262F Managed Switch Users Guide - CLI
- 18 -
ARP-inspection Commands
Mode:
Global config
Syntax:
[no] ip arpinspection
ip arp inspection entry interface <port_type> <in_port_type_id> <vlan_var>
ip arp inspection vlan <in_vlan_list>
ip arp inspection vlan <in_vlan_list> logging { deny | permit | all }
Parameter:
inspection ARP inspection
entry arp inspection entry
interface arp inspection entry interface config
<port_type> Port type in Fast, Giga ethernet
<port_type_id> Port ID in the format of switch-no/port-no
<vlan_id> Select a VLAN id to configure
<mac_ucast> Select a MAC address to configure
<ipv4_ucast> Select an IP Address to configure
deny log denied entries
permit log permitted entries
all log all entries
translate arp inspection translate all entries
vlan arp inspection vlan setting
<vlan_list> arp inspection vlan list
Arp inspection
The section describes to configure the ARP Inspection parameters of the switch. You could use the
ARP Inspection configure to manage the ARP table.
ip arp inspection:
Add ARP inspection static entry.
EX26262F Managed Switch Users Guide - CLI
- 19 -
Mode:
Privilged exec
Syntax:
show ip arp
show ip arp inspection [ interface {<port_type> <port_type_list>} | vlan
inspection ARP inspection
interface arp inspection entry interface config
<port_type> Gigabitethernet
<port_type_list> Port list in 1/1-26 for Gigabitethernet
EX26262F# show ip arp
169.254.0.1 via VLAN1:00-e0-b3-3f-18-65
192.168.1.11 via VLAN1:00-e0-b3-3f-18-65
192.168.1.199 via VLAN1:30-65-ec-91-98-20
192.168.1.254 (Incomplete)
show ip arp:
Display the ARP inspection configuration information.
<LINE> c banner-text c, where 'c' is a delimiting character
exec Set EXEC process creation banner
login Set login banner
motd Set Message of the Day banner
banner:
Define a login banner
EX26262F Managed Switch Users Guide - CLI
- 21 -
Clock Commands
Mode:
Global config
Syntax:
clock set <icliDate> <icliTime>
clock summer-time <word16> date [ <start_month_var> <start_date_var>
set set clock
summer-time Configure summer (daylight savings) time
timezone Configure time zone
<date> yyyy/mm/dd
<time> hh:mm:ss
<2000-2097> Year to start
hh:mm Time to start (hh:mm)
<1-12> Month to end
<1-31> Date to end
<2000-2097> Year to end
hh:mm Time to end (hh:mm)
<1-1440> Offset to add in minutes
<1-5> Week number to start
<1-7> Weekday to start
<1-12> Month to start
flash:filename | tftp://server/path-and-filename File in FLASH or on TFTP
server
running-config Currently running configuration
startup-config Startup configuration
| Output modifiers
syntax-check Perform syntax check on source
configuration
begin Begin with the line that matches
exclude Exclude lines that match
include Include lines that match
<LINE> String to match output lines
copy
Copy from source to destination.
EX26262F Managed Switch Users Guide - CLI
- 23 -
DHCP Commands
Mode:
Privilged exec
Syntax:
ip dhcp retry interface vlan <vlan_id>
Parameter:
dhcp Dhcp commands
retry Restart the DHCP query process
interface Interface
vlan Vlan interface
<vlan_id> Vlan ID
Mode:
Global config
Syntax:
[no] ip dhcp excluded-address <low_ip> [ <high_ip> ]
[no] ip dhcp pool <pool_name>
[no] ip dhcp relay
[no] ip dhcp relay information option
[no] ip dhcp relay information policy { drop | keep | replace }
[no] ip dhcp server
[no] ip dhcp snooping
ip helper-address <v_ipv4_ucast>
Parameter:
drop Drop the package when receive a DHCP message that already contains
relay information
keep Keep the original relay information when receive a DHCP message that
already contains it
replace Replace the original relay information when receive a DHCP message
that already contains it.
DHCP
Dynamic Host Configuration Protocol (DHCP) automatically provides an Internet Protocol (IP) host
with its IP address and other configuration information such as the subnet mask and default
gateway.
ip dhcp (privileged exec):
Restart the DHCP query process
ip dhcp (global):
DHCP settings and configuration.
EX26262F Managed Switch Users Guide - CLI
- 24 -
show ip dhcp:
Mode:
Privilged exec
Syntax:
show ip dhcp relay [ statistics ]
show ip dhcp snooping [ statistics ] [ interface <port_type> <port_type_list> ]
show ip dhcp detailed statistics { server | client | snooping | relay |
------GigabitEthernet 1/1 Open 0 Open 0 Open 0 Open 0
GigabitEthernet 1/2 Open 0 Open 0 Open 0 Open 0
GigabitEthernet 1/3 OK 0 OK 0 OK 0 OK 0
GigabitEthernet 1/4 Open 0 Open 0 Open 0 Open 0
Run cable diagnostics
EXAMPLE:
DNS Proxy
ip dns proxy:
Set dns proxy service
EX26262F Managed Switch Users Guide - CLI
Loading...
+ 57 hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.