Reproduction in any manner whatsoever without the written permission of D-Link Computer Corporation is strictly forbidden.
Trademarks used in this text: D-Link and the D-LINK logo are trademarks of D-Link Computer Corporation; Microsoft and
Windows are registered trademarks of Microsoft Corporation.
Other trademarks and trade names may be used in this document to refer to either the entities claiming the marks and names or
their products. D-Link Computer Corporation disclaims any proprietary interest in trademarks and trade names other than its
own.
USING THE CONSOLE CLI.........................................................................................................................................4
MODIFY BANNER AND PROMPT COMMANDS .....................................................................................................20
SWITCH PORT COMMANDS ....................................................................................................................................23
PORT SECURITY COMMANDS ................................................................................................................................26
BROADCAST STORM CONTROL COMMANDS .....................................................................................................87
COS COMMANDS......................................................................................................................................................91
PORT MIRRORING COMMANDS ...........................................................................................................................105
LINK AGGREGATION COMMANDS.......................................................................................................................113
BASIC IP COMMANDS............................................................................................................................................118
ACCESS CONTROL LIST (ACL) COMMANDS......................................................................................................151
TIME RANGE COMMANDS.....................................................................................................................................164
TIME AND SNTP COMMANDS ...............................................................................................................................170
COMMAND HISTORY LIST.....................................................................................................................................237
The Switch can be managed through the Switch’s serial port, Telnet, or the Web-based management agent. The Command Line
Interface (CLI) can be used to configure and manage the Switch via the serial port or Telnet interfaces.
This manual provides a reference for all of the commands contained in the CLI. Configuration and management of the Switch via
the Web-based management agent is discussed in the Manual. This manual provides a reference for all of the commands contained
in the CLI for members of this series, including the DES-3028, DES-3028P, DES-3052, and DES-3052P. Examples present in this
manual may refer to any member of this series and may show different port counts, but are universal to this series of switches,
unless otherwise stated. Configuration and management of the Switch via the Web-based management agent is discussed in the
User’s Guide.
Accessing the Switch via the Serial Port
The Switch’s serial port’s default settings are as follows:
• 9600 baud
• no parity
• 8 data bits
• 1 stop bit
A computer running a terminal emulation program capable of emulating a VT-100 terminal and a serial port configured as above
is then connected to the Switch’s serial port via an RS-232 DB-9 cable.
With the serial port properly connected to a management computer, the following screen should be visible. If this screen does not
appear, try pressing Ctrl+r to refresh the console screen.
Figure 1-1. Initial CLI screen
There is no initial username or password. Just press the Enter key twice to display the CLI input cursor − DES-3028P:4#. This is
the command line where all commands are input.
Each Switch must be assigned its own IP Address, which is used for communication with an SNMP network manager or other
TCP/IP application (for example BOOTP, TFTP). The Switch’s default IP address is 10.90.90.90. Users can change the default
Switch IP address to meet the specification of your networking address scheme.
The Switch is also assigned a unique MAC address by the factory. This MAC address cannot be changed, and can be found on the
initial boot console screen – shown below.
Figure 1-2. Boot screen
The Switch’s MAC address can also be found in the Web management program on the Switch Information (Basic Settings)
window on the Configuration menu.
The IP address for the Switch must be set before it can be managed with the Web-based manager. The Switch IP address can be
automatically set using BOOTP or DHCP protocols, in which case the actual address assigned to the Switch must be known.
The IP address may be set using the Command Line Interface (CLI) over the console serial port as follows:
1. Starting at the command line prompt, enter the commands config ipif System ipaddress
xxx.xxx.xxx.xxx/yyy.yyy.yyy.yyy. Where the x’s represent the IP address to be assigned to the IP interface named
System and the y’s represent the corresponding subnet mask.
2. Alternatively, users can enter config ipif System ipaddress xxx.xxx.xxx.xxx/z. Where the x’s represent the IP address to
be assigned to the IP interface named System and the z represents the corresponding number of subnets in CIDR
notation.
The IP interface named System on the Switch can be assigned an IP address and subnet mask which can then be used to connect a
management station to the Switch’s Telnet or Web-based management agent.
In the above example, the Switch was assigned an IP address of 10.90.90.91 with a subnet mask of 255.0.0.0. The system message
Success indicates that the command was executed successfully. The Switch can now be configured and managed via Telnet,
SNMP MIB browser and the CLI or via the Web-based management agent using the above IP address to connect to the Switch.
The DES-3028/28P/52/52P support a console management interface that allows the user to connect to the Switch’s management
agent via a serial port and a terminal or a computer running a terminal emulation program. The console can also be used over the
network using the TCP/IP Telnet protocol. The console program can be used to configure the Switch to use an SNMP-based
network management software over the network.
This chapter describes how to use the console interface to access the Switch, change its settings, and monitor its operation.
Note: Switch configuration settings are saved to non-volatile RAM using the save command. The current
configuration will then be retained in the Switch’s NV-RAM, and reloaded when the Switch is rebooted. If
the Switch is rebooted without using the save command, the last configuration saved to NV-RAM will be
loaded.
Connecting to the Switch
The console interface is used by connecting the Switch to a VT100-compatible terminal or a computer running an ordinary
terminal emulator program (e.g., the HyperTerminal program included with the Windows operating system) using an RS-232C
serial cable. Your terminal parameters will need to be set to:
• VT-100 compatible
• 9600 baud
• 8 data bits
• No parity
• One stop bit
• No flow control
Users can also access the same functions over a Telnet interface. Once users have set an IP address for your Switch, users can use
a Telnet program (in VT-100 compatible terminal mode) to access and control the Switch. All of the screens are identical, whether
accessed from the console port or from a Telnet interface.
After the Switch reboots and users have logged in, the console looks like this:
Figure 2-1. Initial Console Screen after logging in
Commands are entered at the command prompt, DES-3028P:4#.
There are a number of helpful features included in the CLI. Entering the ? command will display a list of all of the top-level
commands.
When users enter a command without its required parameters, the CLI will prompt users with a Next possible completions:
message.
Figure 2-3. Example Command Parameter Help
In this case, the command config account was entered with the parameter <username>. The CLI will then prompt users to enter
the <username> with the message, Next possible completions:. Every command in the CLI has this feature, and complex
commands have several layers of parameter prompting.
In addition, after typing any given command plus one space, users can see all of the next possible sub-commands, in sequential
order, by repeatedly pressing the Tab key.
To re-enter the previous command at the command prompt, press the up arrow cursor key. The previous command will appear at
the command prompt.
Figure 2-4. Using the Up Arrow to Re-enter a Command
In the above example, the command config account was entered without the required parameter <username>, the CLI returned
the Next possible completions: <username> prompt. The up arrow cursor control key was pressed to re-enter the previous
command (config account) at the command prompt. Now the appropriate username can be entered and the config account
command re-executed.
All commands in the CLI function in this way. In addition, the syntax of the help prompts are the same as presented in this manual
− angle brackets < > indicate a numerical value or character string, braces { } indicate optional parameters or a choice of
parameters, and brackets [ ] indicate required parameters.
If a command is entered that is unrecognized by the CLI, the top-level commands will be displayed under the Available commands: prompt.
Figure 2-5. The Next Available Commands Prompt
The top-level commands consist of commands such as show or config. Most of these commands require one or more parameters
to narrow the top-level command. This is equivalent to show what? or config what? Where the what? is the next parameter.
For example, if users enter the show command with no additional parameters, the CLI will then display all of the possible next
parameters.
Figure 2-6. Next possible completions: Show Command
In the above example, all of the possible next parameters for the show command are displayed. At the next command prompt, the
up arrow was used to re-enter the show command, followed by the account parameter. The CLI then displays the user accounts
configured on the Switch.
name in the <ipif_name 12> space, a VLAN name in the
<vlan_name 32> space, and the network address in the
<network_address> space. Do not type the angle brackets.
config ipif Engineering ipaddress 10.24.22.5/255.0.0.0 vlan
Design state enable
[square brackets]
Purpose Encloses a required value or set of required arguments. One value
or argument can be specified.
Syntax
Description In the above syntax example, users must specify either an admin or
Example
Command
create account [admin | user] <username 15>
a user level account to be created. Do not type the square brackets.
create account admin Darren
| vertical bar
Purpose Separates two or more mutually exclusive items in a list, one of
which must be entered.
Syntax
Description In the above syntax example, users must specify either admin, or
Example
Command
create account [admin | user] <username 15>
user. Do not type the vertical bar.
create account admin Darren
{braces}
Purpose Encloses an optional value or set of optional arguments.
Syntax
Description In the above syntax example, users have the option to specify
reset {[config | system]}
config or system. It is not necessary to specify either optional value,
however the effect of the system reset is dependent on which, if any,
value is specified. Therefore, with this example there are three
possible outcomes of performing a system reset. See the following
chapter, Basic Commands for more details about the reset
command.
Example
command
reset config
Line Editing Key Usage
Delete Deletes the character under the cursor and then shifts the
remaining characters in the line to the left.
Backspace Deletes the character to the left of the cursor and then shifts the
remaining characters in the line to the left.
Insert or Ctrl+R Toggle on and off. When toggled on, inserts text and shifts previous
text to the right.
Left Arrow Moves the cursor to the left.
Right Arrow Moves the cursor to the right.
Up Arrow Repeats the previously entered command. Each time the up arrow
is pressed, the command previous to that displayed appears. This
way it is possible to review the command history for the current
session. Use the down arrow to progress sequentially forward
through the command history list.
Down Arrow The down arrow will display the next command in the command
history entered in the current session. This displays each command
sequentially as it was entered. Use the up arrow to review previous
commands.
Tab Shifts the cursor to the next field to the left.
Multiple Page Display Control Keys
Space Displays the next page.
CTRL+c Stops the display of remaining pages when multiple pages are to be
displayed.
ESC Stops the display of remaining pages when multiple pages are to be
displayed.
n Displays the next page.
p Displays the previous page.
q Stops the display of remaining pages when multiple pages are to be
displayed.
r Refreshes the pages currently displayed.
a Displays the remaining pages without pausing between pages.
Each command is listed, in detail, in the following sections.
create account
Example usage:
Purpose
Syntax create [admin | user] <username 15>
Description
Parameters admin <username>
Restrictions
Used to create user accounts.
The create account command is used to create user accounts that
consist of a username of 1 to 15 characters and a password of 0 to
15 characters. Up to 8 user accounts can be created.
user <username>
Only Administrator-level users can issue this command.
Usernames can be between 1 and 15 characters.
Passwords can be between 0 and 15 characters.
This command is used to configure the serial port’s baud rate and auto
logout settings.
baud_rate [9600 | 19200 | 38400 | 115200]− The serial bit rate that will be
used to communicate with the management host. There are four options:
9600, 19200, 38400, 115200.
never − No time limit on the length of time the console can be open with
no user input.
2_minutes− The console will log out the current user if there is no user
input for 2 minutes.
5_minutes − The console will log out the current user if there is no user
input for 5 minutes.
10_minutes− The console will log out the current user if there is no user
input for 10 minutes.
15_minutes− The console will log out the current user if there is no user
input for 15 minutes.
Only administrator-level users can issue this command.
Used to pause the scrolling of the console screen when a command
displays more than one page.
This command is used when issuing a command which causes the
console screen to rapidly scroll through several pages. This
command will cause the console to pause at the end of each page.
The default setting is enabled.
None.
Only administrator-level users can issue this command.
disable clipaging
Example usage:
To disable pausing of the screen display when show command output reaches the end of the page:
Used to disable the pausing of the console screen scrolling at the
end of each page when a command displays more than one screen
of information.
This command is used to disable the pausing of the console screen
at the end of each page when a command would display more than
one screen of information.
None.
Only administrator-level users can issue this command.
enable telnet
Purpose
Syntax enable telnet <tcp_port_number 1-65535>
Description
Parameters
Used to enable communication with and management of the Switch
using the Telnet protocol.
This command is used to enable the Telnet protocol on the Switch.
The user can specify the TCP or UDP port number the Switch will
use to listen for Telnet requests.
<tcp_port_number 1-65535>− The TCP port number. TCP ports
Used to enable the HTTP-based management software on the Switch.
This command is used to enable the Web-based management software
on the Switch. The user can specify the TCP port number the Switch will
use to listen for Telnet requests.
<tcp_port_number 1-65535> − The TCP port number. TCP ports are
numbered between 1 and 65535. The “well-known” port for the Webbased management software is 80.
Only administrator-level users can issue this command.
DES-3028P:4#enable web 80
Command: enable web 80
Note: SSL will be disabled if web is enabled.
Success.
DES-3028P:4#
Example usage:
To disable HTTP:
disable web
Purpose
Syntax disable web
Description
Parameters
Restrictions
DES-3028P:4#disable web
Command: disable web
Success.
DES-3028P:4#
Used to disable the HTTP-based management software on the
Switch.
This command disables the Web-based management software on
the Switch.
None.
Only administrator-level users can issue this command.
save
Purpose
Syntax save
Description
Parameters
Used to save changes in the Switch’s configuration to non-volatile
RAM.
This command is used to enter the current switch configuration into
non-volatile RAM. The saved switch configuration will be loaded into
the Switch’s memory each time the Switch is restarted.
To save the Switch’s current configuration to non-volatile RAM:
Restrictions
DES-3028P:4#save
Command: save
Saving all configurations to NV-RAM... Done.
Success.
DES-3028P:4#
Only administrator-level users can issue this command.
reboot
Purpose
Syntax reboot
Description
Parameters
Used to restart the Switch.
This command is used to restart the Switch.
None.
Restrictions
Example usage:
To restart the Switch:
DES-3028P:4#reboot
Command: reboot
Are users sure want to proceed with the system reboot? (y|n)
Please wait, the switch is rebooting...
reset
Purpose
Syntax reset {[config | system]}
Description
Parameters
None.
Used to reset the Switch to the factory default settings.
This command is used to restore the Switch’s configuration to the
default settings assigned from the factory.
config− If the keyword ‘config’ is specified, all of the factory default
settings are restored on the Switch including the IP address, user
accounts, and the switch history log. The Switch will not save or
reboot.
system− If the keyword ‘system’ is specified all of the factory default
settings are restored on the Switch. The Switch will save and reboot
after the settings are changed to default. Rebooting will clear all
entries in the Forwarding Data Base.
If no parameter is specified, the Switch’s current IP address, user
accounts, and the switch history log are not changed. All other
parameters are restored to the factory default settings. The Switch
will not save or reboot.
Example usage:
Restrictions
Only administrator-level users can issue this command.
new name of no more that 16 characters.
username - The command prompt will be changed to the login
username.
default – The command prompt will reset to factory default
command prompt.
restrictions include:
• If the “reset/reset config” command is executed, the
modified command prompt will remain modified. However,
the “reset system” command will reset the command
prompt to the original factory banner.
config greeting _message
Purpose Used to configure the login banner (greeting message).
Syntax
Description Users can use this command to modify the login banner (greeting
Parameters default – If the user enters default to the modify banner command, then
the banner will be reset to the original factory banner.
To open the Banner Editor, click Enter after typing the config
greeting_message command. Type the information to be displayed on
the banner by using the commands described on the Banner Editor:
Quit without save: Ctrl+C
Save and quit: Ctrl+W
Move cursor: Left/Right/Up/Down
Delete line: Ctrl+D
Erase all setting: Ctrl+X
Reload original setting: Ctrl+L
Restrictions Only administrator-level users can issue this command. Other restrictions
include:
• If the “reset/reset config” command is executed, the modified
banner will remain modified. However, the “reset system”
command will reset the modified banner to the original factory
banner.
• The capacity of the banner is 6*80. 6 Lines and 80 characters per
line.
• Ctrl+W will only save the modified banner in the DRAM. Users
need to type the “save” command to save it into FLASH.
• Only valid in threshold level.
Example usage:
To modify the banner to read “Say goodnight, Gracie”:
Greeting Messages Editor
================================================================================
Say Goodnight, Gracie
DGS-3028P Fast Ethernet Switch
Command Line Interface
Firmware: Build 1.00-B22
Copyright(C) 2006-2009D-Link Corporation. All rights reserved.
================================================================================
<Function Key> <Control Key>
Ctrl+C Quit without save left/right/
Ctrl+W Save and quit up/down Move cursor
Ctrl+D Delete line
Ctrl+X Erase all setting
Ctrl+L Reload original setting
<portlist> − Specifies a port or range of ports to be configured.
medium_type [fiber | copper] – This applies only to the Combo ports. If configuring the Combo
ports this defines the type of transport medium used.
speed – Allows the user to adjust the speed for a port or range of ports. The user has a choice of
the following:
• auto − Enables auto-negotiation for the specified range of ports.
• [10 | 100 | 1000] − Configures the speed in Mbps for the specified range of ports. Gigabit
ports are statically set to 1000 and cannot be set to slower speeds.
• [half | full] − Configures the specified range of ports as either full-duplex or half-duplex.
• [master | slave] - The master setting (1000M/Full_M) will allow the port to advertise
capabilities related to duplex, speed and physical layer type. The master setting will also
determine the master and slave relationship between the two connected physical layers.
This relationship is necessary for establishing the timing control between the two physical
layers. The timing control is set on a master physical layer by a local source. The slave
setting (1000M/Full_S) uses loop timing, where the timing comes form a data stream
received from the master. If one connection is set for 1000M/Full_M, the other side of the
connection must be set for 1000M/Full_S. Any other configuration will result in a link
down status for both ports.
flow_control [enable | disable] – Enable or disable flow control for the specified ports.
learning [enable | disable] − Enables or disables the MAC address learning on the specified
range of ports.
state [enable | disable] − Enables or disables the specified range of ports.
description <desc 32> - Enter an alphanumeric string of no more than 32 characters to describe
a selected port interface.
clear_description - Enter this command to clear the port description of the selected port(s).
Restrictions Only administrator-level users can issue this command.
To configure the speed of port 3 to be 10 Mbps, full duplex, with learning and state enabled:
DES-3028P:4#config ports 1-3 speed 10_full state enable
Command: config ports 1-3 speed 10_full state enable
Success.
DES-3028P:4#
show ports
Example usage:
To display the configuration of all ports on a standalone switch:
Purpose
Syntax show ports [<portlist>] {description | err_disabled}
Description
Parameters
Restrictions
DES-3028P:4#show ports
Command show ports
Port Port Settings Connection Address
State Speed/Duplex/FlowCtrl Speed/Duplex/FlowCtrl Learning
------ -------- --------------------- --------------------- -------1 Enabled Auto/Enabled Link Down Enabled
2 Enabled Auto/Enabled Link Down Enabled
3 Enabled Auto/Enabled Link Down Enabled
4 Enabled Auto/Enabled Link Down Enabled
5 Enabled Auto/Enabled Link Down Enabled
6 Enabled Auto/Enabled Link Down Enabled
7 Enabled Auto/Enabled Link Down Enabled
8 Enabled Auto/Enabled Link Down Enabled
9 Enabled Auto/Enabled Link Down Enabled
10 Enabled Auto/Enabled 100M/Full/None Enabled
11 Enabled Auto/Enabled Link Down Enabled
12 Enabled Auto/Enabled Link Down Enabled
13 Enabled Auto/Disabled Link Down Enabled
14 Enabled Auto/Disabled Link Down Enabled
15 Enabled Auto/Disabled Link Down Enabled
16 Enabled Auto/Disabled Link Down Enabled
17 Enabled Auto/Disabled Link Down Enabled
18 Enabled Auto/Disabled Link Down Enabled
19 Enabled Auto/Disabled Link Down Enabled
20 Enabled Auto/Disabled Link Down Enabled
CTRL+C ESC q Quit SPACE n Next Page p Previous Page r Refresh
Used to display the current configuration of a range of ports.
This command is used to display the current configuration of a
range of ports.
<portlist> − Specifies a port or range of ports to be displayed.
{description} – Adding this parameter to the show ports command
indicates that a previously entered port description will be included
in the display.
err_disabled – Use this to list disabled ports including connection
status and reason for being disabled.
To display the configuration of all ports on a standalone switch, with description:
DES-3028P:4#show ports description
Command: show ports description
Port Port Settings Connection Address
State Speed/Duplex/FlowCtrl Speed/Duplex/FlowCtrl Learning
------ -------- --------------------- --------------------- -------1 Enabled Auto/Disabled Link Down Enabled
Desc: dads1
2 Enabled Auto/Disabled Link Down Enabled
Desc:
3 Enabled Auto/Disabled Link Down Enabled
Desc:
4 Enabled Auto/Disabled Link Down Enabled
Desc:
5 Enabled Auto/Disabled Link Down Enabled
Desc:
6 Enabled Auto/Disabled Link Down Enabled
Desc:
7 Enabled Auto/Disabled Link Down Enabled
Desc:
8 Enabled Auto/Disabled Link Down Enabled
Desc:
9 Enabled Auto/Disabled Link Down Enabled
Desc:
10 Enabled Auto/Disabled Link Down Enabled
Desc:
CTRL+C ESC q Quit SPACE n Next Page p Previous Page r Refresh