1
MS400870M
24 Port GBE SFP Switch 19” 1U
24X10/100/1000T Combo 100/1000X SFP
Network Management
User’s Guide
Version 0.96
2
Trademarks
Contents subject to revise without prior notice.
All other trademarks remain the property of their respective owners.
Copyright Statement
Copyright 2008, All Rights Reserved.
This publication may not be reproduced as a whole or in part, in any way whatsoever unless prior
consent has been obtained from Company.
FCC Warning
This equipment has been tested and found to comply with the limits for a Class-A digital device,
pursuant to Part 15 of the FCC Rules. These limitations are designed to provide reasonable
protection against harmful interference in a residential installation. This equipment generates uses
and can radiate radio frequency energy. If this equipment is not installed properly and used in
accordance with the instructions, may cause harmful interference to radio communications. However,
there is no guarantee that interference will not occur in a particular installation. If this equipment
does cause harmful interference to radio or television reception, which can be determined by turning
the equipment off and on, the user is encouraged to try to correct the interference by one or more of
the following measures:
Reorient or relocate the receiving antenna.
Increase the separation between the equipment and receiver.
Connect the equipment into a different outlet from that the receiver is connected.
Consult your local distributors or an experienced radio/TV technician for help.
Shielded interface cables must be used in order to comply with emission limits.
Changes or modifications to the equipment, which are not approved by the party responsible for
compliance, could affect the user‟s authority to operate the equipment.
Copyright © 2008 All Rights Reserved.
Company has an on-going policy of upgrading its products and it may be possible that information in
this document is not up-to-date. Please check with your local distributors for the latest information.
No part of this document can be copied or reproduced in any form without written consent from the
company.
Trademarks:
All trade names and trademarks are the properties of their respective companies.
3
Revision History
Manual Version
Modification
Firmware Version
Date
0.95
Add CLI and Web interface
1.07.00
2009/06
0.96
Modify quick keys
1.07.00
2009/06
Note: This User’s Manual is written or revised according to the officially-released Firmware version.
The content of this Manual is subject to change without prior notice.
4
Table of Contents
1. INTRODUCTION ............................................................................................................... 8
1.1 Interface ....................................................................................................................... 8
1.2 Management Options ................................................................................................... 9
1.3 Management Software ............................................................................................... 10
1.4 Management Preparations ......................................................................................... 11
2. Command Line Interface (CLI) ......................................................................................... 13
2.1 Using the Local Console ............................................................................................ 13
2.2 Remote Console Management - Telnet ...................................................................... 14
2.3 Navigating CLI ............................................................................................................ 15
2.3.1 Mode and command summary ............................................................................ 15
2.3.2 General commands and quick keys ..................................................................... 19
2.3.2.1 Quick keys ..................................................................................................... 19
2.3.2.2 Listing Command .......................................................................................... 20
2.3.2.3 Show command ........................................................................................... 20
2.3.2.4 Usage Help .................................................................................................. 23
2.3.2.5 Press Any Key to Continue .......................................................................... 23
2.3.2.6 Conventions ................................................................................................ . 24
2.4 User mode .................................................................................................................. 24
2.5 Enable mode .............................................................................................................. 26
2.5.1 Backup command mode ..................................................................................... 26
2.5.2 CFM command mode ......................................................................................... 27
2.5.3 Console command mode .................................................................................... 28
2.5.4 IP command mode .............................................................................................. 28
2.5.5 Service command mode ..................................................................................... 29
2.5.6 Syslog command mode ...................................................................................... 32
2.5.7 System command mode ..................................................................................... 32
2.5.8 Time-server command mode .............................................................................. 32
2.5.9 Upgrade command mode ................................................................................... 32
2.5.10 User command mode ........................................................................................ 33
2.6 Config mode ............................................................................................................... 34
2.6.1 Aggr command mode .......................................................................................... 35
2.6.2 CFM command mode ......................................................................................... 36
2.6.3 Dot1x command mode ........................................................................................ 38
2.6.4 IGMP filter command mode ................................................................................ 39
2.6.5 IGMP command mode ................................ ........................................................ 40
2.6.6 MAC command mode ......................................................................................... 40
2.6.7 Mirror command mode ........................................................................................ 41
2.6.8 MVR command mode ......................................................................................... 41
2.6.9 Port command mode ........................................................................................... 43
2.6.10 QoS command mode ......................................................................................... 43
2.6.11 RSTP command mode ....................................................................................... 46
2.6.12 SKA command mode ......................................................................................... 48
2.6.13 Multicast command mode .................................................................................. 49
2.6.14 Switch command mode ..................................................................................... 50
2.6.15 VLAN command mode ....................................................................................... 50
3. SNMP NETWORK MANAGEMENT................................................................................. 53
4. WEB MANAGEMENT ...................................................................................................... 54
4.1 System Information .................................................................................................... 56
4.2 User Authentication .................................................................................................... 57
5
4.2.1 RADIUS Configuration ......................................................................................... 59
4.3 Network Management ................................ ................................................................ 60
4.3.1 Network Configuration ......................................................................................... 60
4.3.2 System Service Configuration.............................................................................. 61
4.3.3 RS232/Telnet/Console Configuration ................................................................... 62
4.3.4 Time Server Configuration ................................................................................... 63
4.3.5 Device Community ............................................................................................... 64
4.3.6 Trap Destination ................................................................................................... 65
4.3.7 Trap Configuration ............................................................................................... 66
4.3.8 Mal-attempt Log Configuration ............................................................................. 67
4.4 Switch Management ................................................................................................... 67
4.4.1 Switch Configuration ............................................................................................ 69
4.4.2 Port Configuration ................................................................................................ 70
4.4.3 Link Aggregation .................................................................................................. 71
4.4.3.1 Trunk Mode Configuration ............................................................................. 72
4.4.3.2 Port Trunking ................................................................................................. 73
4.4.3.3 LACP Port Configuration ............................................................................... 74
4.4.4 Rapid Spanning Tree ........................................................................................... 76
4.4.4.1 RSTP Switch Settings ................................................................................... 77
4.4.4.2 RSTP Aggregated Port Settings .................................................................... 78
4.4.4.3 RSTP Physical Port Settings ......................................................................... 80
4.4.5 802.1X Configuration ........................................................................................... 83
4.4.5.1 Configure System .......................................................................................... 83
4.4.5.2 Configure Port Admin State ........................................................................... 84
4.4.5.3 Configure Port Reauthenticate ...................................................................... 85
4.4.6 MAC Address Management ................................................................................. 86
4.4.6.1 MAC Table Learning ...................................................................................... 87
4.4.6.2 Static MAC Table Configuration ..................................................................... 87
4.4.7 VLAN Configuration ............................................................................................. 89
4.4.7.1 Port-Based VLAN .......................................................................................... 89
4.4.7.2 802.1Q VLAN Concept .................................................................................. 91
4.4.7.3 802.1Q VLAN ................................................................................................ 94
4.4.7.3.1 Configure VLAN ...................................................................................... 95
4.4.7.3.2 Configure VLAN Aware ........................................................................... 96
4.4.7.3.3 Configure Ingress Filter .......................................................................... 97
4.4.7.3.4 Configure Frame Type ............................................................................ 97
4.4.7.3.5 Configure Port VLAN ID .......................................................................... 98
4.4.7.3.6 Configure Port Egress Mode .................................................................. 99
4.4.8 QoS Configuration ............................................................................................... 99
4.4.8.1 QoS Port Configuration ............................................................................... 100
4.4.8.2 QoS Control List .......................................................................................... 103
4.4.8.3 QoS Rate Limiter ......................................................................................... 105
4.4.8.4 Storm Control .............................................................................................. 106
4.4.9 DSCP Remark ................................................................................................... 107
4.4.10 Port Mirroring ................................................................................................... 109
4.4.11 IGMP Snooping ................................................................................................ 110
4.4.11.1 IGMP Configuration .................................................................................... 111
4.4.11.2 IGMP VLANID Configuration ..................................................................... 112
4.4.11.3 IPMC Segment .......................................................................................... 113
4.4.11.4 IPMC Profile .............................................................................................. 114
6
4.4.11.5 IGMP Filtering ............................................................................................ 116
4.4.12 Static Multicast Configuration ........................................................................... 117
4.4.13 MVR ................................................................................................................. 119
4.4.13.1 MVR Settings ............................................................................................ 120
4.4.13.2 MVR Group ............................................................................................... 122
4.4.14 SKA Configuration ........................................................................................... 123
4.4.14.1 DHCP Option 82 Settings .......................................................................... 124
4.4.14.2 DHCP Port settings ................................................................................... 126
4.4.14.3 Filter Configuration .................................................................................... 126
4.4.14.4 Static IP Table Configuration ..................................................................... 127
4.4.15 CFM Configuration .......................................................................................... 129
4.4.15.1 Maintenance Domain ................................................................................ 131
4.4.15.2 Maintenance Association Settings ............................................................. 133
4.4.15.3 Maintenance End Point List ....................................................................... 135
4.4.15.4 Maintenance End Point Settings ............................................................... 135
4.4.15.5 Loopback Testing ...................................................................................... 137
4.4.15.6 Linktrace Testing ....................................................................................... 138
4.4.15.7 Y.1731 Round-Trip Delay Measurement .................................................... 139
4.4.16 Access Control List Management (ACLM) ...................................................... 139
4.5 Switch Monitor .......................................................................................................... 143
4.5.1 Switch Port State ............................................................................................... 144
4.5.2 Port Traffic Statistics .......................................................................................... 145
4.5.3 Port Packet Error ............................................................................................... 146
4.5.4 Port Packet Analysis Statistics ........................................................................... 147
4.5.5 LACP Monitor .................................................................................................... 148
4.5.5.1 LACP Port Status ........................................................................................ 148
4.5.5.2 LACP Statistics ............................................................................................ 149
4.5.6 RSTP Monitor .................................................................................................... 150
4.5.6.1 RSTP VLAN Bridge Overview ..................................................................... 150
4.5.6.2 RSTP Port Status ........................................................................................ 151
4.5.6.3 RSTP Statistics ........................................................................................... 151
4.5.7 802.1X Monitor .................................................................................................. 152
4.5.7.1 80.2.1X Port Status ..................................................................................... 152
4.5.7.2 802.1X Statistics .......................................................................................... 153
4.5.8 IGMP Snooping Status....................................................................................... 154
4.5.8.1 Snooping Status .......................................................................................... 154
4.5.8.2 IGMP Group Table ....................................................................................... 155
4.5.9 MAC Address Table ........................................................................................... 156
4.5.10 SFP Information ............................................................................................... 156
4.5.10.1 SFP Port Information ................................................................................. 156
4.5.10.2 SFP Port State .......................................................................................... 157
4.5.11 DCHP Snooping ............................................................................................... 158
4.5.12 CFM Information .............................................................................................. 159
4.5.12.1 CFM Stack ................................................................................................. 160
4.5.12.2 CFM Statistics ........................................................................................... 161
4.5.12.3 Maintenance End Point ............................................................................. 162
4.5.12.4 Remote Maintenance End Points .............................................................. 163
4.5.12.5 Linktrace Reply ......................................................................................... 163
4.6 System Utility ........................................................................................................... 164
4.6.1 Event Log .......................................................................................................... 165
7
4.6.2 Update ............................................................................................................... 166
4.6.3 Load Factory Settings ........................................................................................ 167
4.6.4 Load Factory Settings Except Network Configuration ........................................ 168
4.6.5 Backup Configuration ........................................................................................ 168
4.7 Save Configuration ................................................................................................... 169
4.8 Reset System ........................................................................................................... 170
8
1. INTRODUCTION
Thank you for using the 24 dual speed combo ports plus 2 Giga combo port Managed
Switch. The built-in management module allows users to configure this Managed Switch
and monitor the operation status locally or remotely through the network.
1.1 Interface
There are 4 models in MS400870M Series. Descriptions and interface figures are provided
below:
MS400870M-1A – 24 dual speed combo ports plus 2 Giga combo port managed Switch
fixed 1 AC
MS400870M-2A – 24 dual speed combo ports plus 2 Giga combo port managed Switch
fixed 2 Redundant AC
MS400870M-1D – 24 dual speed combo ports plus 2 Giga combo port managed Switch fixed
1 DC
MS400870M-2D – 24 dual speed combo ports plus 2 Giga combo port managed Switch
fixed 2 Redundant DC
These 4 models have the same front panel:
Figure 1: MS400870M Series Front Panel
Each model has different rear panel format:
Figure 2-1: MS400870M-1A Rear Panel
Figure 2-2: MS400870M-2A Rear Panel
Figure 2-3: MS400870M-1D Rear Panel
9
Figure 2-4: MS400870M-2D Rear Panel
1.2 Management Options
Switch management options available in MS400870M Series are listed and described
below:
Local Console Management
Telnet Management
SNMP Management
WEB Management
Local Console Management
Local Console Management is done through the RS-232 DB-9 Console port located in the
back of the MS400870M Series Switch. Direct RS-232 cable connection between the PC
and the Managed switch is required for this type of management.
Telnet Management
Telnet runs over TCP/IP and allows you to establish a management session through the
network. Once the Managed switch is on the network with proper configurations, you can
use Telnet to login and monitor its status remotely.
SNMP Management
SNMP is also done over the network. Apart from standard MIB (Management Information
Bases), an additional private MIB is also provided for SNMP-based network management
system to compile and control.
Web Management
Web Management is done over the network and can be accessed via a standard web
browser, such as Microsoft Internet Explorer. Once the Managed switch is available on the
network, you can login and monitor the status of it through a web browser remotely or
locally. Local Console-type Web management, especially for the first time use of the
Managed Switch to set up the needed IP, can be done through one of the 10/100Base-TX 8pin RJ-45 ports located at the front panel of the Managed Switch. Direct RJ45 LAN cable
connection between a PC and the Managed Switch is required for Web Management.
10
1.3 Management Software
Following is a list of management software choices for MS400870M Series:
Managed switch CLI interface
SNMP-based Management Software
Web Browser Application
Console Program
The Managed Switch has a built-in, Command Line Interface called the CLI which you can
use to:
Configure the system
Monitor the status
Reset the system
You can use CLI as the only management system. However, other network management
option - SNMP -based management system is also available.
You can access the text-mode Console Program locally by connecting a VT100 terminal - or
a workstation running VT100 emulation software - to the Managed Switch RS-232 DB-9
Console port directly. Or, you can use Telnet to login and access the CLI through network
connection remotely.
SNMP Management System
Standard SNMP-based network management system is used to manage the Managed
Switch through the network remotely.
When you use a SNMP-based network management system, the Managed switch becomes
one of the managed devices (network elements) in that system. The Managed switch
management module contains an SNMP agent that will respond to the requests from the
SNMP-based network management system. These requests, which you can control, can
vary from getting system information to setting the device attribute values.
The Managed Switch‟s private MIB is provided for you to install in your SNMP-based
network management system.
Web Browser Application
You can manage the Managed Switch through a web browser, such as Internet Explorer or
Netscape, etc. (The default IP address of the Managed Switch port can be reached at
“http://192.168.0.1”.) For your convenience, you can use either this Web-based
Management Browser Application program or other network management option, for
example SNMP-based management system as your management system.
11
1.4 Management Preparations
After you have decided how to manage your Managed Switch, you are required to connect
cables properly, determine the Managed switch IP address and, in some cases, install MIB
shipped with your Managed Switch.
Connecting the Managed switch
It is very important that the proper cables with the correct pin arrangement are used when
connecting the Managed switch to another switches, hubs, workstations, etc.
1000Base-X / 100Base-FX SFP Port
The small form-factor pluggable (SFP) is a compact optical transceiver used in optical
data communications applications. It interfaces a network device mother board (for a
switch, router or similar device) to a fiber optic or unshielded twisted pair networking
cable. It is a popular industry format supported by several fiber optic component
vendors.
SFP transceivers are available with a variety of different transmitter and receiver
types, allowing users to select the appropriate transceiver for each link to provide the
required optical reach over the available optical fiber type. SFP transceivers are also
available with a "copper" cable interface, allowing a host device designed primarily for
optical fiber communications to also communicate over unshielded twisted pair
networking cable.
SFP slot for 3.3V mini GBIC module supports hot swappable SFP fiber transceiver.
Before connect the other switches, workstation or Media Converter, make sure both
side of the SFP transfer are with the same media type, for example: 1000Base-SX to
1000Base-SX, 1000Bas-LX to 1000Base-LX.And check the fiber-optic cable type
match the SFP transfer model. To connect to 1000Base-SX transceiver, use the
multi-mode fiber cable- with one side must be male duplex LC connector type. To
connect to 1000Base-LX transfer, use the single-mode fiber cable-with one side must
be male duplex LC connector type.
10/100/1000Base-T RJ-45 Auto-MDI/MDIX Port
24 x 10/100/1000Base-T RJ-45 Auto-MDI/MDIX ports are located at the front of the
Managed Switch. These RJ-45 ports allow user to connect their traditional copperbased Ethernet/Fast Ethernet devices to the network. All these ports support autonegotiation and MDI/MDIX auto-crossover, i.e. either crossover or straight through
CAT-5 UTP or STP cable may be used.
RS-232 DB-9 Port
The RS-232 DB-9 port is located at the rear of the Managed Switch. This DB-9 port is
used for local, out-of-band management. Since this DB-9 port of the Managed switch
is DTE, a null modem is also required to connect the Managed Switch and the PC.
12
By connecting this DB-9 port, it allows you to configure & check the status of
Managed Switch even when the network is down.
IP Addresses
IP addresses have the format n.n.n.n, (The default factory setting is 192.168.0.1).
IP addresses are made up of two parts:
The first part (for example 192.168.n.n) refers to network address that identifies the
network in which the device resides. Network addresses are assigned by three
allocation organizations. Depending on your location, each allocation organization
assigns a globally unique network number to each network that wishes to connect to
the Internet.
The second part (for example n.n.0.1) identifies the device within the network.
Assigning unique device numbers is your responsibility. If you are unsure of the IP
addresses allocated to you, consult with the allocation organization where your IP
addresses were obtained.
Remember that none of the two devices on a network can have the same address. If you
connect to the outside network, you must change all the arbitrary IP addresses to comply
with those you have been allocated by the allocation organization. If you do not do this, your
outside communications will not be performed.
A subnet mask is a filtering system for IP addresses. It allows you to further subdivide your
network. You must use the proper subnet mask for proper operation of a network with
subnets defined.
MIB for Network Management Systems
Private MIB (Management Information Bases) is provided for managing the Managed switch
through the SNMP-based network management system. You must install the private MIB
into your SNMP-based network management system first.
The MIB file is shipped together with the Managed Switch. The file name extension is “.mib”
that allows SNMP-based compiler can read and compile.
13
2. Command Line Interface (CLI)
This chapter introduces you how to use your MS400870M Series CLI, specifically in:
Local Console
Telnet
Configuring the system
Resetting the system
The interface and options in Local Console and Telnet are the same. The major difference
is the type of connection and the port that is used to manage the Managed Switch.
2.1 Using the Local Console
Local Console is always done through the RS-232 DB-9 port and requires a direct
connection between the switch and a PC. This type of management is useful especially
when the network is down and the switch cannot be reached by any other means.
You also need the Local Console Management to setup the Switch network configuration for
the first time. You can setup the IP address and change the default configuration to desired
settings to enable Telnet or SNMP services.
Follow these steps to begin a management session using Local Console Management:
Step 1. Attach the serial cable the RS-232 DB-9 port located at the back of the Switch
with a null modem.
Step 2. Attach the other end to the serial port of a PC or workstation.
Step 3. Run a terminal emulation program using the following settings:
Emulation VT-100/ANSI compatible
BPS 9600
Data bits 8
Parity None
Stop bits 1
Flow Control None
Enable Terminal keys
Step 4. Press Enter to access the CLI (Command Line Interface) mode.
14
2.2 Remote Console Management - Telnet
You can manage the Managed Switch via Telnet session. However, you must first assign a
unique IP address to the Switch before doing so. Use the Local Console to login the
Managed Switch and assign the IP address for the first time.
Follow these steps to manage the Managed Switch through Telnet session:
Step 1. Use Local Console to assign an IP address of the Managed Switch,
IP address
Subnet Mask
Default gateway IP address, if required
Step 2. Run Telnet.
Step 3. Log into the Switch CLI mode.
Limitations: When using Telnet, keep the following in mind:
Only two active Telnet sessions can access the Managed Switch at the same time.
15
2.3 Navigating CLI
The Command Line Interface (CLI) of MS400870M Series is divided into three different
modes. After you enter the authorized username and password, you start from the User
mode. The commands available depend on which mode you are currently in. Enter a
question mark (?) at the system prompt to obtain a list of commands available for each
command mode.
In CLI management, the User mode only provides users basic functions to operate the
Managed Switch. If you would like to configure advanced features of the Managed Switch,
such as, VLAN, QoS, Rate limit control, you must enter the Enable or Config mode. The
CLI management of this Managed Switch is structured in a hierarchical manner which
means that when you want to enter Enable mode you must start from the User mode and
enter the required command and password and when you want to enter Config mode you
must enter the required command in Enable mode. The following table provides an overview
of this Managed Switch.
Command Mode
Access Method
Switch Prompt
Displayed
Exit Method
User mode
Log in
Console>
logout
Enable mode
From user mode,
enter the enable
command
Console#
exit
Config mode
From the enable
mode, enter the
config command
Console(config)#
exit
2.3.1 Mode and command summary
Mode
Command
Access Method
Prompt
Description
User
cfm
While in User
mode, enter cfm
command.
Console(cfm)>
Run loopback,
linktrace and delay
measurement test.
enable
While in User
mode, enter the
enable command
and a password
(press Enter).
Console#
Enter Enable mode.
exit
While in User
mode, enter exit
command.
Username:
Exit from current
mode.
help
While in User
mode, enter help
command.
Console>
Show available
commands that can
be used in User
mode.
history
While in User
mode, enter
Console>
List commands that
have been used.
16
history command.
logout
While in User
mode, enter
logout command.
Username:
Logout
ping
While in User
mode, enter the
ping command
and followed by
target IP.
Console>
The ping test from
the Managed Switch
to another network
unit.
show
While in User
mode, enter the
show command or
enter the show
command and
followed by the
command you
would like to
view its current
setting.
Console>
Show a list of
commands or show
the current setting of
each listed
command.
Enable
Enter
Enable
mode
While in User
mode, enter the
enable command
and a password
(press Enter).
Console#
Enter Enable mode.
backup
While in Enable
mode, enter the
backup
command.
Console(backup)#
Backup configuration
file via FTP or TFTP.
cfm
While in Enable
mode, enter the
cfm command.
Console(cfm)#
Run loopback
linktrace and delay
measurement test.
configure
While in Enable
mode, enter the
configure
command.
Console(config)#
Enter Config mode.
Console
While in Enable
mode, enter the
Console
command.
Console(Console)#
Set up time-out timer
when the user is
inactive.
disable
While in Enable
mode, enter the
disable command.
Console>
Exit from current
mode.
exit
While in Enable
mode, enter the
exit command.
Console>
Exit from current
mode.
help
While in Enable
mode, enter the
help command.
Console#
Show available
commands that can
be used in Enable
mode.
history
While in Enable
Console#
List commands that
17
mode, enter the
history command.
have been used.
ip
While in Enable
mode, enter the ip
command.
Console(ip)#
Configure IP
addresses of the
Managed Switch.
logout
While in Enable
mode, enter the
logout command.
Username:
Logout
ping
While in Enable
mode, enter the
ping command
and followed by
target IP.
Console#
The ping test from
the Managed Switch
to another network
unit.
reboot
While in Enable
mode, enter the
reboot command.
Boot-up message
To restart the
Managed Switch.
restore
While in Enable
mode, enter the
restore command.
Console#
Load factory settings
service
While in Enable
mode, enter the
service command.
Console(service)#
Configure the
network
management
service.
syslog
While in Enable
mode, enter the
syslog command.
Console(syslog)#
Configure the Switch
syslog parameters.
system
While in Enable
mode, enter the
system command.
Console(system)#
Configure the
Managed Switch‟s
basic information.
time-server
While in Enable
mode, enter the
time-server
command.
Console(timeserver)#
Synchronize the time
of a computer client
or server to another
server.
upgrade
While in Enable
mode, enter the
upgrade
command.
Console(upgrade)#
Upgrade the
Managed Switch‟s
firmware and restore
the previous settings.
user
While in Enable
mode, enter the
user command.
Console(user)#
Configure user
accounts.
write
While in Enable
mode, enter the
write command.
Console#
Save configuration to
the Managed
Switch‟s flash
memory.
show
While in Enable
mode, enter the
show command or
enter the show
command and
followed by the
Console#
Show a list of
commands or show
the current setting of
each listed
command.
18
command you
would like to
view its current
setting.
Config
Enter
Config
mode
While in Enable
mode, enter the
configure
command.
Console(config)#
In Enable mode,
users can access the
Switch‟s advanced
features, such as
VLAN, Rate limit,
QoS, etc.
aggr
When in Config
mode, enter the
aggr command.
Console(configaggr)#
Configure LACP
functions.
cfm
When in Config
mode, enter the
cfm command.
Console(config-cfm)#
Configure the
Managed Switch
OAM 802.1ag CFM
settings.
dot1x
When in Config
mode, enter the
dot1x command.
Console(configdot1x)#
Configure the
Managed Switch to
send information
when 802.1x client
authenticates via the
Switch.
exit
When in Config
mode, enter the
exit command.
Console#
Exit from current
mode
help
When in Config
mode, enter the
help command.
Console(config)#
Show available
commands that can
be used in Config
mode.
history
When in Config
mode, enter the
history command.
Console(config)#
List commands that
have been used.
igmpfilter
When in Config
mode, enter the
igmpfilter
command.
Console(configigmpfilter)#
Configure IGMP
filtering settings.
igmp
When in Config
mode, enter the
igmp command.
Console(configigmp)#
Configure IGMP
settings.
mac
When in Config
mode, enter the
mac command.
Console(configmac)#
Set up each port‟s
MAC learning
function.
mirror
When in Config
mode, enter the
mirror command.
Console(configmirror)#
Set up target port for
mirroring.
mvr
When in Config
mode, enter the
mvr command.
Console(config-mvr)#
Configure Multicast
VLAN Registration
(MVR) settings.
port
When in Config
Console(config)#
Configure the status
19
mode, enter the
port command.
of each port.
qos
When in Config
mode, enter the
qos command.
Console(config-qos)#
Set up the priority of
packets within the
Managed Switch.
rstp
When in Config
mode, enter the
rstp command.
Console(config-rstp)#
Set up each port and
aggregated ports‟
RSTP status.
ska
When in Config
mode, enter the
ska command.
Console(config-ska)#
Configure Secure
Customer
Connections (SKA)
settings.
multicast
When in Config
mode, enter the
multicast
command.
Console(configmulticast)#
Configure static
multicast settings.
switch
When in Config
mode, enter the
switch command.
Console(configswitch)#
Set up acceptable
frame size and
address learning,
etc.
vlan
When in Config
mode, enter the
vlan command.
Console(configvlan)#
Set up VLAN mode
and VLAN
configuration.
show
When in Config
mode, enter the
show command or
enter the show
command and
followed by the
command you
would like to
view its current
setting.
Console(config)#
Show a list of
commands or show
the current setting of
each listed
command.
2.3.2 General commands and quick keys
2.3.2.1 Quick keys
Using the key or entering the
command…
To do this…
Enter the “?” commands
Obtain a list of available commands in the current
mode.
Enter the “help” commands
Obtain a list of available commands in the current
mode.
Enter incomplete characters then
enter the question mark (?)
List all commands similar to incomplete characters.
Enter the “exit” command
Return to the former mode or login screen.
Enter the “history” command
List all commands that have been used.
20
Press the direction or key
Scroll through the command history.
Enter unique part of a command and
press TAB key
The switch will automatically display the full
command.
2.3.2.2 Listing Command
After entering the question mark (?) at the prompt line, the screen will show a list of
commands available for each command mode.
1. Command Prompt: The command prompt shows the mode that is currently configured.
Users can type in commands or characters after the prompt.
2. Command: This column lists all commands that are available in the current mode.
3. Purpose & Description: This column lists each command‟s purpose and description in
the current mode.
4. Usage: This column lists each command‟s usage in the current mode.
2.3.2.3 Show command
In each mode, users can enter show command to view a list of commands, view each
command‟s current setting, and view system information. The following explains how “show”
command is used in MS400870M Series.
Show system
When you enter “show system” command in each mode, you will be informed of system
information. The following screen page shows a sample of system information in User
mode.
Currently configured mode
Entering commands
or characters
21
Company Name: This shows the company name or related information.
System Object ID: This shows the predefined System OID.
System Contact: This shows the system contact information.
System Name: This shows the system name or related descriptions.
System Location: This shows the system location.
Model Name: This shows the product model name.
Firmware Version: This shows the firmware version of this Managed Switch.
M/B Version: This shows the motherboard version of this Managed Switch.
Serial Number: This shows the serial number of this Managed Switch.
Date Code: This shows the date code of this Managed Switch.
Up Time: This shows how long this Managed Switch has been turned on since the last
reboot.
Local Time: This shows the local time of the device.
Show available commands
In User, Enable and Config mode, you can type “show” to view a list of commands
available.
22
Show a Command’s Current Settings
In User, Enable and Config mode, you can type “show” and followed by the command listed
above to view its current setting. For example, if you type “show qos” in User mode
(Console>), then the current setting of qos command will be displayed.
Within QoS, the rate limit configurations can be set. You can type “show qos rate-limit” in
any mode to view its current setting.
Show Currently-Configured Settings
When you type a specific command in Enable or Config mode to configure or edit the setting
of a certain function, you can type “show” to verify the setting you have just configured or
23
edited. For example, when you are in Console(console)# and have changed the setting of
time-out function, you can type “show” after “Console(console)#” prompt, then you can verify
the currently-configured setting of time-out function.
2.3.2.4 Usage Help
When entering a command without the required parameter, the system will remind users of
the command‟s syntax and parameter.
2.3.2.5 Press Any Key to Continue
When a command generates more than one page outputs, the prompt “Press Ctrl-C to exit
or any key to continue!” will be displayed at the bottom of the screen. Simply press any key
to view next page information or press Ctrl-C to return to the prompt line.
24
2.3.2.6 Conventions
In CLI, some conventions are used consistently to express uses of a parameter. Common
conventions are described below.
Conventions
Descriptions
< >
Required parameters or values are in angle
brackets.
[ ]
Optional parameters or values are in square
brackets. For example: [qce_id] or [etype <etype
(0x600-FFFF)> | vid <vid(1-4094)> | port
<udp_tcp_port(0-65535)> |dscp <dscp(0-63)> |
tos <tos_list(0-7)> | tag_prio <tag_prio_list(0-7)>]
<port_list>
“port_list” allows you to enter several
discontinuous port number, separating by a
comma, for example, port “5, 7, 9, 12”; or, you
can enter continuous port numbers with a dash
and separating by a comma, for example, port
“1-5, 7-9, 12-15.”
<enable | disable>
Two options, separated by a vertical bar, are
available for selection. Select one option within
the angle bracket.
<administrator | read_and_write |
read_only | access_denied>
Several options, separated by a vertical bar, are
available for selection. Select one option within
the angle bracket.
[etype <etype (0x600-FFFF)> | vid
<vid(1-4094)> | port <udp_tcp_port(0-
65535)> |dscp <dscp(0-63)> | tos
<tos_list(0-7)> | tag_prio
<tag_prio_list(0-7)>]
This is an optional parameter or value and six
parameters are available for selection.
2.4 User mode
When you use CLI, you will start in the User mode. The User mode provides basic
configurations and ping test of the Managed Switch. In User mode, users can assign Switch
IP address, mask and gateway.
Access to User mode
When the Managed Switch is turned on, boot-up message will be displayed first and then
followed by username and password prompt (Default username is admin. No password is
required for default setting thus press Enter key in password prompt.). When system
prompt shows “Console>”, it means the user has successfully entered the User mode.
25
Boot up message
Root directory (Default username: admin without password)
In “Console>”, enter the question mark (?) to show all commands available for User mode.
The screen shows as follows:
Command
Description
cfm
Run OAM 802.1ag CFM loopback, linktrace, delay measurement test.
enable
Enter the Enable mode.
exit
Leave the User mode.
help
Display a list of available commands in User mode.
history
Display the command history.
logout
Logout from the Managed Switch.
ping
Allow users to ping a specified network device.
show
Show a list of commands or show the current setting of each listed command.
26
2.5 Enable mode
In order to manage the Managed Switch and set up required switching functions, enter the
enable command after the “Console>” and then press ? for a list of commands available for
use.
Command
Description
backup
Backup configuration file via FTP or TFTP.
cfm
Run OAM 802.1ag CFM loopback, linktrace, delay measurement test.
configure
Enter Config mode.
console
Set up time-out time.
disable
Exit Enable mode and return to User Mode.
exit
Exit Enable mode and return to User Mode.
help
Display a list of available commands in Enable mode.
history
Show commands that have been used.
ip
Assign IP addresses manually or automatically.
logout
Logout from the Managed Switch.
ping
Allow users to ping a specified network device.
reboot
Restart the Managed Switch.
restore
Restore configuration via FTP or TFTP.
service
Three different management services are provided to configure the Managed
Switch; these are “Telnet”, “SNMP”, and “Web”.
syslog
Configure the Managed Switch‟s syslog settings.
system
Configure system information.
time-server
Synchronize the time of a computer client or server to another server.
upgrade
Allow users to update firmware and restore configuration via FTP or TFTP.
user
Set up a user account and its access privilege.
Show
Show a list of commands or show the current setting of each listed command.
2.5.1 Backup command mode
Prompt
Command & Parameter
Description
Console(backup)#
auto-backup <ftp | tftp><server
ip> <username> <password>
<file directory> <0-23 o'clock>
To configure auto-backup settings. The
system will backup configuration file.
auto-backup <enable | disable>
To enable or disable auto-backup function.
config <ftp | tftp> <server ip>
<username> <password>
<file directory>
To backup configuration file immediately.
27
2.5.2 CFM command mode
Ethernet Connectivity Fault Management (CFM) is an end-to-end and service-to-service
Ethernet layer operations, administration and maintenance (OAM) 802.1ag protocol. It
includes practical connectivity monitoring, fault verification and fault isolation for large
Ethernet metropolitan-area networks (MANs) and WANs.
As its name implies, IEEE 802.1ag focuses on the connectivity fault management which
provides the following four features on each Virtual Local Area Network (VLAN) basis.
Fault Detection/Fault notification
Fault verification
Fault isolation
Fault Detection/Fault notification
IEEE 802.1ag supports fault detection through Continuity Check Messages (CCM). CCM is
somewhat like the “keep-alive” message. By default, every 802.1ag-capable network device
(ND) sends out “heart-beat” style CCM periodically. Hence, by configuring a list of expected
existent remote 802.1ag-capable NDs, the local 802.1ag-capable ND can detect the health
status of its connection to the remote ND.
Fault verification
IEEE 802.1ag supports fault verification through Loopback Messages (LBM) and Loopback
Reply (LBR). The LBM/LBR mechanism is similar to ICMP “ping” function in the IP network.
However, since the interfaces of an ND in an Ethernet network may not possess their
individual IP address, the operator can not achieve fault verification by ICMP “ping” in such
a network environment.
Fault isolation
In addition to the LBM/LBR mechanism, IEEE 802.1ag supports fault isolation through
Linktrace Messages (LTM) and Linktrace Reply (LTR). The LTM/LTR mechanism is similar
to the “trace route” function in the IP network. However, since the interfaces of an ND in an
Ethernet network may not possess their individual IP address, the operator can not achieve
fault isolation by “trace route” in such a network environment.
IEEE 802.1ag also defines the following network error status to be conveyed in the CCM.
MACstatus
Either some remote ND is reporting its interface as not ready to pass both the data packets
and BPDU, or all remote NDs are reporting their interfaces as not able to pass ordinary data
packets.
RemoteCCM
The ND is not receiving valid CCMs from at least one of the remote NDs.
ErrorCCM
The ND has received at least one invalid CCM whose CCM Interval has not yet timed out.
XconCCM
The ND has received at least one CCM from either another VLAN or a lower MD Level
whose CCM Interval has not yet timed out.
28
Prompt
Command & Parameter
Description
Console(cfm)#
loopback <domain_name>
<assoc_name> <target mepid
| mac address>[-n number(2-
100)] [-s size(1-255)] [-p
priority(0-7)] [-d drop
eligible(true|false)]
Run loopback test.
For Example:
Console(cfm)#loopback domain assoc
00:01:02:03:04:05 -n 100 -s 255 -p 3 -d true
linktrace <domain_name>
<assoc_name> <target mepid
| mac address>[-f flag(fdbonly
| none)] [-h hop count(1-255)]
Run linktrace test.
For Example:
Console(cfm)# linktrace domain assoc
00:01:02:03:04:05 -f none -h 100
de-measure <domain_name>
<assoc_name> <target mepid
| mac address>[-n number(2-
100)] [-p priority(0-7)]
Run delay measurement test.
For Example:
Console(cfm)#de-measure domain assoc
00:01:02:03:04:05 -n 100 -p 0
2.5.3 Console command mode
Prompt
Command & Parameter
Description
Console(Console)#
time-out <secs>
To disconnect the Managed Switch when the
user is inactive.
<secs>: 0 or 5-9999 seconds
For example:
Console(Console)#time-out 300
2.5.4 IP command mode
Prompt
Command & Parameter
Description
Console(ip)#
type <manual | dhcp>
If “DHCP” is selected and a DHCP server is also
available on the network, the Managed Switch will
automatically get the IP address from the DHCP
server. If "Manual" mode is selected, the user needs
to specify the IP address, Subnet Mask and Gateway.
For example:
Console(ip)# type manual
address <ip> <mask> <gw>
Enter the unique IP address of this Managed Switch.
You can use the default IP address or specify a new
one when address duplication occurs or the address
does not match up with your network. (Default IP
address is 192.168.0.1)
For example:
Console(ip)# address 192.110.1.2
Specify the subnet mask to the Switch IP address.
The default subnet mask values for the three Internet
address classes are as follows:
Class A: 255.0.0.0
Class B: 255.255.0.0
Class C: 255.255.255.0
For example:
29
Console(ip)# address 192.110.1.2 255.255.255.0
Specify the IP address of a gateway or a router,
which is responsible for the delivery of the IP packets
sent by the Switch. This address is required when the
Switch and the network management station are on
different networks or subnets. The default value of
this parameter is 0.0.0.0, which means no gateway
exists and the network management station and
Switch are on the same network.
For example:
Console(ip)# address 192.110.1.2 255.255.255.0
120.110.1.5
2.5.5 Service command mode
Prompt
Command & Parameter
Description
Console(servicetelnet)#
mode <enable | disable>
In service command mode, it provides three
modes for users to choose from, these are
“telnet”, “snmp” and “web”. If you type “telnet”,
you can set up whether to enable or disable this
mode.
For example:
Console(service-telnet)#mode enable
port <telnet_port>
When telnet is enabled, you can set up the port
number that allows telnet access.
The default port number is set to 23 in telnet
mode. However, you can also identify a port
number between 1025 and 65535.
For example:
Console(service-telnet)#port 23
Console(servicesnmp)#
mode <enable | disable>
In service command mode, it provides three
modes for users to choose from, these are
“telnet”, “snmp” and “web”. If you type “snmp”,
you can set up either to enable or disable this
mode.
For example:
Console(service-snmp)#mode enable
Console(snmpcommunity)#
add<community>
Add a new community. The name of the
community is up to 20 alphanumeric characters.
For example:
Console(snmp-community)#add myswitch
delete<community>
To delete a community that is already added to
the Managed switch.
For example:
Console(snmp-community)#delete myswitch
Console(snmpcommunity_commnity
name)#
state <enable | disable>
To enable or disable community function.
description <description>
Enter a unique description for this community
name, up to 35 alphanumeric characters. This is
mainly for reference only.
ip <enable | disable>
To enable or disable IP security. If enabled,
Community may access the Managed Switch
30
only through the management station, which
has the exact IP address specified in IP address
field below. If disabled, Community can access
the Managed Switch through any management
stations.
ip_addr <ip_addr>
Specify the IP address used for IP Security
function.
level <administrator |
read_and_write | read_only |
access_denied>
Specify the desired privilege for the SNMP
operation.
<administrator | read_and_write | read_only |
access_denied>: Four operation privileges are
available in the Managed Switch.
Administrator: Full access right includes
maintaining user account & system information,
loading factory settings, etc.
Read & Write: Full access right but cannot
modify user account & system information and
load factory settings.
Read Only: Allow to view only.
Access Denied: Completely forbidden for
access.
NOTE 1: When the community browses the
Managed Switch without proper access right,
the Managed Switch will respond nothing. For
example, if a community only has Read & Write
privilege, then it cannot browse the Managed
Switch’s user table.
NOTE 2: If you would like to edit the settings of
your new account, you can enter the command
community community name under the
Console(service-snmp)#.
For example:
If you want to edit settings of the account
“salesdept”, you can use the following
commands to enter the editing mode.
Console#service
Console(service)#snmp
Console(service-snmp)#community salesdept
Console(snmp-community_salesdept)#
Console(snmp-trapdest)#
add <trap_id> <trap_ip>
<community>
To add a new trap destination. This function will
send trap to the specified destination.
<trap_id>: 1~10
<trap_ip>: The specific IP address of the
network management system that will receive
the trap.
<community>: up to 20 characters.
NOTE: If you would like to edit the settings of a
trap destination, you can enter the command
trap-dest trap id under the Console(service-
Loading...