2.7 end ..................................................................................................................................................... 20
2.9 history ................................................................................................................................
2.10 history clear .................................................................................................................................... 22
............... 21
Chapter 3 User Management Commands ................................................................ 23
3.1 user name (password) ................................................................................................................. 23
3.2 user name (secret) ........................................................................................................................ 24
3.3 show user account-list................................................................................................................ 25
3.4 show user configuration ............................................................................................................. 26
Chapter 4 System Configuration Commands ......................................................... 27
4.9 ip address ........................................................................................................................................ 34
4.10 ip address-alloc ............................................................................................................................. 35
4.27 show system-info ......................................................................................................................... 47
4.28 show image-info ............................................................................................................................ 47
4.29 show boot ........................................................................................................................................ 48
4.30 show running-config .................................................................................................................... 48
4.31 show startup-config .................................................................................................................... 49
4.32 show system-time ........................................................................................................................ 49
4.33 show system-time dst ................................................................................................................. 50
4.34 show system-time ntp ................................................................................................................ 50
4.35 show cable-diagnostics interface........................................................................................... 51
4.36 show cpu-utilization ..................................................................................................................... 51
4.37 show memory-utilization ............................................................................................................ 52
7.6 show holiday ................................................................................................................................... 60
7.7 show time-range ........................................................................................................................... 61
Chapter 8 Port Configuration Commands ............................................................... 62
8.10 show interface status .................................................................................................................. 68
8.11 show interface counters ............................................................................................................ 68
8.12 show interface configuration .................................................................................................... 69
Chapter 9 Port Isolation Commands ......................................................................... 70
9.1 port isolation................................................................................................................................... 70
9.2 show port isolation interface .................................................................................................... 71
11.5 show etherchannel ....................................................................................................................... 81
11.6 show etherchannel load-balance ............................................................................................ 82
11.7 show lacp ......................................................................................................................................... 83
11.8 show lacp sys-id ............................................................................................................................ 83
Chapter 12 MAC Address Commands ......................................................................... 85
12.1 mac address-table static ........................................................................................................... 85
12.2 mac address-table aging-time ................................................................................................. 86
12.3 mac address-table filtering ....................................................................................................... 86
12.4 mac address-table max-mac-count ...................................................................................... 87
12.5 show mac address-table ............................................................................................................ 89
12.6 clear mac address-table ............................................................................................................ 89
12.7 show mac address-table aging-time ..................................................................................... 90
12.8 show mac address-table max-mac-count ........................................................................... 90
12.9 show mac address-table interface ......................................................................................... 91
12.10 show mac address-table count ............................................................................................... 91
12.11 show mac address-table address .......................................................................................... 92
12.12 show mac address-table vlan ................................................................................................... 93
13.2 name .................................................................................................................................................. 95
13.3 switchport general allowed vlan .............................................................................................. 95
13.7 show vlan summary...................................................................................................................... 98
13.8 show vlan brief ............................................................................................................................... 99
13.9 show vlan ......................................................................................................................................... 99
13.10 show interface switchport ...................................................................................................... 100
17.18 range .............................................................................................................................................. 126
17.19 ip igmp filter ................................................................................................................................. 127
17.20 clear ip igmp snooping statistics ......................................................................................... 127
17.21 show ip igmp snooping ............................................................................................................ 128
17.22 show ip igmp snooping interface ......................................................................................... 128
17.23 show ip igmp snooping vlan ................................................................................................... 129
17.24 show ip igmp snooping groups ............................................................................................. 130
17.25 show ip igmp profile .................................................................................................................. 131
18.16 range .............................................................................................................................................. 144
19.2 mvr group ..................................................................................................................................... 149
19.7 mvr type ........................................................................................................................................ 153
19.10 show mvr ...................................................................................................................................... 155
19.11 show mvr interface .................................................................................................................... 156
19.12 show mvr members .................................................................................................................. 156
19.13 show mvr traffic .......................................................................................................................... 157
20.8 name ............................................................................................................................................... 163
21.14 show lldp ....................................................................................................................................... 187
21.15 show lldp interface .................................................................................................................... 187
21.16 show lldp local-information interface ................................................................................. 188
21.17 show lldp neighbor-information interface ......................................................................... 189
21.18 show lldp traffic interface ....................................................................................................... 189
22.1 ip routing ....................................................................................................................................... 191
22.9 ip route .......................................................................................................................................... 196
22.12 show interface vlan ................................................................................................................... 198
22.13 show ip interface ........................................................................................................................ 198
22.14 show ip interface brief .............................................................................................................. 199
IX
22.15 show ip route ............................................................................................................................... 199
22.16 show ip route specify ............................................................................................................... 200
22.17 show ip route summary ........................................................................................................... 201
22.18 show ipv6 interface ................................................................................................................... 201
22.19 show ipv6 route .......................................................................................................................... 202
22.20 show ipv6 route summary ...................................................................................................... 202
24.9 ip proxy-arp.................................................................................................................................. 215
24.10 ip local-proxy-arp ...................................................................................................................... 215
24.11 show arp ........................................................................................................................................ 216
24.12 show ip arp (interface) .............................................................................................................. 217
24.13 show ip arp summary................................................................................................................ 217
24.14 show gratuitous-arp ................................................................................................................. 218
24.15 show ip proxy-arp ...................................................................................................................... 218
Chapter 25 DHCP Server Commands ........................................................................ 220
25.1 service dhcp server .................................................................................................................. 220
25.2 ip dhcp server extend-option capwap-ac-ip.................................................................... 220
25.3 ip dhcp server extend-option vendor-class-id ............................................................... 221
25.4 ip dhcp server exclude-address ........................................................................................... 222
X
25.5 ip dhcp server pool ................................................................................................................... 222
25.6 ip dhcp server ping timeout ................................................................................................... 223
25.7 ip dhcp server ping packets ................................................................................................... 224
31.8 auto-voip data priority .............................................................................................................. 277
31.9 show auto-voip ........................................................................................................................... 277
Chapter 32 Access Control Commands ................................................................... 279
32.1 user access-control ip-based enable ................................................................................. 279
32.2 user access-control ip-based ............................................................................................... 279
32.3 user access-control mac-based enable ............................................................................ 280
32.4 user access-control mac-based .......................................................................................... 281
32.5 user access-control port-based enable ............................................................................ 282
32.6 user access-control port-based .......................................................................................... 282
Chapter 33 HTTP and HTTPS Commands ................................................................ 284
33.1 ip http server ............................................................................................................................... 284
33.2 ip http port .................................................................................................................................... 285
33.3 ip http max-users ....................................................................................................................... 285
33.4 ip http session timeout ............................................................................................................ 286
33.5 ip http secure-server ................................................................................................................ 287
33.6 ip http secure-port .................................................................................................................... 287
33.7 ip http secure-protocol............................................................................................................ 288
33.8 ip http secure-ciphersuite ...................................................................................................... 289
33.9 ip http secure-max-users ....................................................................................................... 290
33.10 ip http secure-session timeout ............................................................................................. 291
33.11 ip http secure-server download certificate ...................................................................... 291
33.12 ip http secure-server download key ................................................................................... 292
XIII
33.13 show ip http configuration ...................................................................................................... 293
33.14 show ip http secure-server .................................................................................................... 294
34.1 ip ssh server ................................................................................................................................ 295
34.2 ip ssh port ..................................................................................................................................... 295
34.3 ip ssh version .............................................................................................................................. 296
34.4 ip ssh algorithm .......................................................................................................................... 297
34.5 ip ssh timeout .............................................................................................................................. 297
34.6 ip ssh max-client ........................................................................................................................ 298
34.7 ip ssh download .......................................................................................................................... 299
34.9 show ip ssh................................................................................................................................... 300
35.2 telnet port ..................................................................................................................................... 301
35.3 show telnet-status..................................................................................................................... 302
36.4 show radius-server ................................................................................................................... 306
36.5 aaa group ...................................................................................................................................... 307
36.6 server ............................................................................................................................................. 308
36.7 show aaa group .......................................................................................................................... 308
36.12 show aaa authentication ......................................................................................................... 312
36.13 show aaa accounting ................................................................................................................ 313
36.14 line telnet ...................................................................................................................................... 313
36.16 line ssh ........................................................................................................................................... 315
37.6 dot1x mab .................................................................................................................................... 327
40.3 access-list mac .......................................................................................................................... 344
40.4 access-list ip ............................................................................................................................... 346
48.5 show dldp ..................................................................................................................................... 398
48.6 show dldp interface................................................................................................................... 399
49.17 rmon history ................................................................................................................................ 416
53.12 show logging local-config....................................................................................................... 455
53.13 show logging loghost ............................................................................................................... 455
53.14 show logging buffer .................................................................................................................. 456
53.15 show logging flash ..................................................................................................................... 456
XX
Preface
This Guide is intended for network administrator to provide referenced information about CLI
(Command Line Interface). The device mentioned in this Guide stands for T1600G-28TS/
T1600G-52TS/ T1600G-28MPS/T1600G-18TS JetStream Gigabit L2 Managed Switch without
any explanation. The commands in this guide apply to these models if not specially noted, and
T1600G-28TS is taken as an example model in the example commands.
Some models featured in this guide may be unavailable in your country or region. For local
sales information, visit https://www.tp-link.com.
Overview of this Guide
Chapter 1: Using the CLI
Provide information about how to use the CLI, CLI Command Modes, Security Levels and some
Conventions.
Chapter 2: User Interface
Provide information about the commands used to switch between five CLI Command Modes.
Chapter 3: User Management Commands
Provide information about the commands used for user management.
Chapter 4: System Configuration Commands
Provide information about the commands used for configuring the System information and
System IP, reboot and reset the switch, upgrade the switch system and commands used for
cable test.
Chapter 5:EEE Configuration Commands
Provide information about the commands used for configuring EEE.
Chapter 6: SDM Template Commands
Provide information about the commands used for configuring the SDM templates.
Chapter 7: Time Range Commands
Provide information about the commands used for configuring the time range.
Chapter 8: Port Configuration Commands
Provide information about the commands used for configuring the Speed, Negotiation Mode,
and Flow Control for Ethernet ports.
Chapter 9: Port Isolation Commands
Provide information about the commands used for configuring Port Isolation function.
Chapter 10: Loopback Detection Commands
Provide information about the commands used for configuring the Loopback Detection
function.
1
Chapter 11: Etherchannel Commands
Provide information about the commands used for configuring LAG (Link Aggregation Group)
and LACP (Link Aggregation Control Protocol).
Chapter 12: MAC Address Commands
Provide information about the commands used for Address configuration.
Chapter 13:IEEE 802.1Q VLAN Commands
Provide information about the commands used for configuring IEEE 802.1Q VLAN.
Chapter 14: MAC-based VLAN Commands
Provide information about the commands used for configuring MAC-based VLAN.
Chapter 15: Protocol-based VLAN Commands
Provide information about the commands used for configuring Protocol VLAN.
Chapter 16: GVRP Commands
Provide information about the commands used for configuring GVRP (GARP VLAN registration
protocol).
Chapter 17: IGMP Snooping Commands
Provide information about the commands used for configuring the IGMP Snooping (Internet
Group Management Protocol Snooping).
Chapter 18: MLD Snooping Commands
Provide information about the commands used for configuring the MLD Snooping (Multicast
Listener Discovery Snooping).
Chapter 19: MVR Commands
Provide information about the commands used for configuring the MVR.
Chapter 20: MSTP Commands
Provide information about the commands used for configuring the MSTP (Multiple Spanning
Tree Protocol).
Chapter 21: LLDP Commands
Provide information about the commands used for configuring LLDP function.
Chapter 22: Static Routes Commands
Provide information about the commands used for configuring the Static Route function.
Chapter 23: IPv6 Address Configuration Commands
Provide information about the commands used for configuring the System IPv6 addresses.
Chapter 24: ARP Commands
Provide information about the commands used for configuring the ARP (Address Resolution
Protocol) functions.
2
Chapter 25: DHCP Server Commands
Provide information about the commands used for configuring the DHCP Server function.
Chapter 26: DHCP Relay Commands
Provide information about the commands used for configuring the DHCP Relay function.
Chapter 27: DHCP L2 Relay Commands
Provide information about the commands used for configuring the DHCP L2 Relay function.
Chapter 28: QoS Commands
Provide information about the commands used for configuring the QoS function.
Chapter 29: Bandwidth Commands
Provide information about the commands used for configuring the Bandwidth Control.
Chapter 30: Voice VLAN Commands
Provide information about the commands used for configuring Voice VLAN.
Chapter 31 Auto VoIP Commands
Provide information about the commands used for configuring Auto VoIP.
Chapter 32: Access Control Commands
Provide information about the commands used for configuring Access Control.
Chapter 33: HTTP and HTTPS Commands
Provide information about the commands used for configuring the HTTP and HTTPS logon.
Chapter 34: SSH Commands
Provide information about the commands used for configuring and managing SSH (Security
Shell).
Chapter 35: Telnet Commands
Provide information about the commands used for configuring and managing SSH (Security
Shell).
Chapter 36: AAA Commands
Provide information about the commands used for configuring AAA (authentication,
authorization and accounting).
Chapter 37: IEEE 802.1X Commands
Provide information about the commands used for configuring IEEE 802.1X function.
Chapter 38 Port Security Commands
Provide information about the commands used for configuring Port Security.
Chapter 39: Port Mirroring Commands
Provide information about the commands used for configuring the Port Mirror function.
3
Chapter 40: ACL Commands
Provide information about the commands used for configuring the ACL (Access Control List).
Chapter 41: IPv4 IMPB Commands
Provide information about the commands used for binding the IP address, MAC address, VLAN
and the connected Port number of the Host together.
Chapter 42: IPv6 IMPB Commands
Provide information about the commands used for binding the IPv6 address, MAC address,
VLAN and the connected Port number of the Host together.
Chapter 43: IP Verify Source Commands
Provide information about the commands used for guarding the IP Source by filtering the IP
packets based on the IP-MAC Binding entries.
Chapter 44: IPv6 Verify Source Commands
Provide information about the commands used for guarding the IPv6 Source by filtering the IP
packets based on the IP-MAC Binding entries.
Chapter 45: DHCPv4 Filter Commands
Provide information about the commands used for configuring the DHCPv4 Filter.
Chapter 46: DHCPv6 Filter Commands
Provide information about the commands used for configuring the DHCPv6 Filter.
Chapter 47: DoS Defend Command
Provide information about the commands used for DoS defend and detecting the DoS attack.
Chapter 48: DLDP Commands
Provide information about the commands used for configuring the DLDP (Device Link
Detection Protocol).
Chapter 49: SNMP Commands
Provide information about the commands used for configuring the SNMP (Simple Network
Management Protocol) functions.
Chapter 50: PoE Commands (For T1600G-28MPS only)
Provide information about the commands used for configuring PoE function.
Chapter 51: ARP Inspection Commands
Provide information about the commands used for protecting the switch from the ARP
cheating or ARP Attack.
Chapter 52: ND Detection Commands
Provide information about the commands used for configuring ND detection.
Chapter 53: System Log Commands
Provide information about the commands used for configuring system log.
4
Chapter 1 Using the CLI
1.1 Accessing the CLI
You can log on to the switch and access the CLI by logging on to the switch remotely by a
Telnet or SSH connection through an Ethernet port.
1.1.1 Logon by Telnet
To log on to the switch by a Telnet connection, please take the following steps:
1. Click Start and type in cmd in the Search programs and files window and press the Enter
button.
Figure 1-1 Run Window
2. Type in telnet 192.168.0.1 in the cmd window and press Enter.
Figure 1-2 Type in the telnet command
5
3. Type in the login username and password (both admin by default). Press Enter and you will
enter User EXEC Mode.
Figure 1-2 Log in the Switch
4. Type in enable command and you will enter Privileged EXEC Mode. By default no
password is needed. Later you can set a password for users who want to access the
Privileged EXEC Mode.
Figure 1-3 Enter into Priviledged EXEC Mode
1.1.2 Logon by SSH
To log on by SSH, a Putty client software is recommended. There are two authentication modes
to set up an SSH connection:
Password Authentication Mode: It requires username and password, which are both admin by
default.
Key Authentication Mode: It requires a public key for the switch and a private key for the SSH
client software. You can generate the public key and the private key through Putty Key
Generator.
Note:
Before SSH login, please follow the steps shown in Figure 1-4 to enable the SSH function
through Telnet connection.
6
Figure 1-4 Enable SSH function
■ Password Authentication Mode
1. Open the software to log on to the interface of PuTTY. Enter the IP address of the switch
into Host Name field; keep the default value 22 in the Port field; select SSH as the
Connection type.
Figure 1-5 SSH Connection Config
7
2. Click the Open button in the above figure to log on to the switch. Enter the login user name
and password to log on the switch, and then enter enable to enter Privileged EXEC Mode,
so you can continue to configure the switch.
Figure 1-6 Log on the Switch
■ Key Authentication Mode
1. Select the key type and key length, and generate SSH key.
Figure 1-7 Generate SSH Key
Note:
1. The key length is in the range of 512 to 3072 bits.
2. During the key generation, randomly moving the mouse quickly can accelerate the key
generation.
8
2. After the key is successfully generated, please save the public key and private key to a
TFTP server.
Figure 1-8 Save the Generated Key
3. Log on to the switch by Telnet and download the public key file from the TFTP server to the
switch, as the following figure shows:
Figure 1-9 Download the Public Key
9
Note:
1. The key type should accord with the type of the key file.
2. The SSH key downloading can not be interrupted.
4. After the public key is downloaded, please log on to the interface of PuTTY and enter the IP
address for login.
Figure 1-10 SSH Connection Config
10
5. Click Browse to download the private key file to SSH client software and click Open.
Figure 1-11 Download the Private Key
6. After successful authentication, please enter the login user name. If you log on to the
switch without entering password, it indicates that the key has been successfully
downloaded.
Figure 1-12 Log on the Switch
1.2 CLI Command Modes
The CLI is divided into different command modes: User EXEC Mode, Privileged EXEC Mode,
Global Configuration Mode, Interface Configuration Mode and VLAN Configuration Mode.
11
mode.
VLAN Configuration mode.
mode.
Interface Configuration Mode can also be divided into Interface Ethernet, Interface
link-aggregation and some other modes, which is shown as the following diagram.
The following table gives detailed information about the Accessing path, Prompt of each mode
and how to exit the current mode and access the next mode.
Mode Accessing Path Prompt
User EXEC
Mode
Privileged
EXEC Mode
Global
Configuration
Mode
Primary mode once
it is connected with
the switch.
Use the enable
command to enter
this mode from User
EXEC mode.
Use the configure
command to enter
this mode from
Privileged EXEC
mode.
T1600G-28TS>
T1600G-28TS#
T1600G-28TS(config)#
Logout or Access the next
mode
Use the exit command to
disconnect the switch.
Use the enable command to
access Privileged EXEC mode.
Enter the disable or the exit
command to return to User
EXEC mode.
Enter configure command to
access Global Configuration
Use the exit or the end
command or press Ctrl+Z to
return to Privileged EXEC mode.
Use the interface
port
gigabitEthernet
interface range
gigabitEthernet
command to access interface
Configuration mode.
or
port-list
Interface
Configuration
Mode
Layer 2 Interface:
Use the interface
gigabitEthernet
port,
interface
port-channel
port-channel-id
interface range
gigabitEthernet
port-list
enter this mode from
Global Configuration
or
command to
T1600G-28TS (config-if)#
or
T1600G-28TS(config-if-range)#
12
Use the vlan
Use the end command or press
Ctrl+Z to return to Privileged
EXEC mode.
Enter the exit or the # command
to return to Global Configuration
mode.
A port number must be specified
in the interface command.
vlan-list
to access
Configuration mode.
list
configuration mode.
wn set of specific commands. To configure some
a). Interface gigabitEthernet: Configure parameters for an Ethernet port, such as
Mode Accessing Path Prompt
Layer 3 Interface:
Use the no
switchport
command to enter
Routed Port mode
from Interface
Configuration mode.
Interface
Configuration
Mode
Use the interface
vlan-id
vlan
command to enter
VLAN Interface
mode from Global
Configuration mode.
Use the interface
loopback
command to enter
Loopback Interface
mode from Global
id
T1600G-28TS (config-if)#
T1600G-28TS(config-if-range)#
or
Logout or Access the next
mode
Use the switchport command to
switch to the Layer 2 interface
mode.
Use the end command or press
Ctrl+Z to return to Privileged
EXEC mode.
Enter the exit or the # command
to return to Global Configuration
mode.
Use the end command or press
Ctrl+Z to return to Privileged
EXEC mode.
Enter the exit command or the #
command to return to Global
VLAN
Configuration
Mode
Use the vlan
command to enter
this mode from
Global Configuration
mode.
vlan-
T1600G-28TS (config-vlan)#
Note:
1. The user is automatically in User EXEC Mode after the connection between the PC and the
switch is established by a Telnet/SSH connection.
2. Each command mode has its o
commands, you should access the corresponding command mode firstly.
• Global Configuration Mode: In this mode, global commands are provided, such as the
Spanning Tree, Schedule Mode and so on.
• Interface Configuration Mode: In this mode, users can configure one or several ports,
different ports corresponds to different commands
13
statistic information, port
Duplex-mode, flow control status.
b). Interface range gigabitEthernet: Configure parameters for several Ethernet ports.
c). Interface link-aggregation: Configure parameters for a link-aggregation, such as
broadcast storm.
d). Interface range link-aggregation: Configure parameters for multi-trunks.
e). Interface vlan: Configure parameters for the vlan-port.
• VLAN Configuration Mode: In this mode, users can create a VLAN and add a specified
port to the VLAN.
3. Some commands are global, that means they can be performed in all modes:
• show: Display all information of switch, for example:
information, VLAN information.
• history: Display the commands history.
1.3 Privilege Restrictions
This switch’s security is divided into four privilege levels: User level, Power User level, Operator
level and Admin level. You can define username and password pairs, and assign a specific
privilege level to each pair. Different privilege levels have access to specified commands,
which is illustrated in the Privilege Requirement in each command. For details about how to
configure usename and password pairs, please refer to user name (password) and
(secret).
Users can enter Privileged EXEC mode from User EXEC mode by using the enable command. In
default case, no password is needed. In Global Configuration Mode, you can configure
password for Admin level by enable password command. Once password is configured, you
are required to enter it to access Privileged EXEC mode.
user name
1.4 Conventions
1.4.1 Format Conventions
The following conventions are used in this Guide:
• Items in square brackets [ ] are optional
• Items in braces { } are required
14
• Alternative items are grouped in braces and separated by vertical bars. For example:
speed {10 | 100 | 1000 }
• Bold indicates an unalterable keyword. For example: show logging
• Normal Font indicates a constant (several options are enumerated and only one can be
selected). For example: mode {dynamic | static | permanent}
• Italic Font indicates a variable (an actual value must be assigned). For example: bridge
aging-time
aging-time
1.4.2 Special Characters
You should pay attentions to the description below if the variable is a character string:
• These six characters ” < > , \ & cannot be input.
• If a blank is contained in a character string, single or double quotation marks should be
used, for example ’hello world’, ”hello world”, and the words in the quotation marks will be
identified as a string. Otherwise, the words will be identified as several strings.
1.4.3 Parameter Format
Some parameters must be entered in special formats which are shown as follows:
• MAC address must be enter in the format of xx:xx:xx:xx:xx:xx.
• One or several values can be typed for a port-list or a vlan-list using comma to separate.
Use a hyphen to designate a range of values, for instance, 1/0/1, 1/0/3-5, 1/0/7 indicates
choosing port 1/0/1, 1/0/3, 1/0/4, 1/0/5, 1/0/7.
15
Chapter 2 User Interface
2.1 enable
Description
The enable command is used to access Privileged EXEC Mode from User
EXEC Mode.
Syntax
enable
Command Mode
User EXEC Mode
Privilege Requirement
None.
Example
If you have set the password to access Privileged EXEC Mode from User
EXEC Mode:
T1600G-28TS>enable
Enter password:
T1600G-28TS#
2.2 service password-encryption
Description
The service password-encryption command is used to encrypt the
password when the password is defined or when the configuration is written,
using the symmetric encryption algorithm. Encryption prevents the password
from being readable in the configuration file. To disable the global encryption
Syntax
function, please use no service password-encryption command.
service password-encryption
no service password-encryption
16
Command Mode
Global Configuration Mode
Privilege Requirement
Only Admin level users have access to these commands.
Example
Enable the global encryption function:
T1600G-28TS(config)# service password-encryption
2.3 enable password
Description
The enable password command is used to set or change the password for
users to access Privileged EXEC Mode from User EXEC Mode. To remove the
password, please use no enable password command. This command uses
the symmetric encryption.
Syntax
enable password { [ 0 ]
no enable password
Parameter
0 —— Specify the encryption type. 0 indicates that an unencrypted password
will follow. By default, the encryption type is 0.
password
characters or symbols. The password is case sensitive, allows digits, English
letters (case sensitive), underlines and sixteen special characters
( !$%'()*,-./[]{|} ). By default, it is empty.
7 —— Indicates a symmetric encrypted password with fixed length will follow.
encrypted-password
password
—— Super password, a string from 1 to 31 alphanumeric
—— A symmetric encrypted password with fixed length,
| 7
encrypted-password
}
which you can copy from another switch’s configuration file. After the
encrypted password is configured, you should use the corresponding
unencrypted password if you re-enter this mode.
Command Mode
Global Configuration Mode
17
Privilege Requirement
Only Admin level users have access to these commands.
User Guidelines
If the password you configured here is unencrypted and the global
encryption function is enabled in service password-encryption
password in the configuration file will be displayed in the symmetric
encrypted form.
If both the enable password and enable secret are defined, only the latest
configured password will take effect.
Example
Set the super password as “admin” and unencrypted to access Privileged
EXEC Mode from User EXEC Mode:
T1600G-28TS(config)#enable password 0 admin
2.4 enable secret
Description
The enable secret command is used to set a secret password, which is using
, the
an MD5 encryption algorithm, for users to access Privileged EXEC Mode from
User EXEC Mode. To return to the default configuration, please use no enable
secret command. This command uses the MD5 encryption.
Syntax
enable secret { [ 0 ]
no enable secret
Parameter
0 —— Specify the encryption type. 0 indicates that an unencrypted password
will follow. By default, the encryption type is 0.
password
characters or symbols. The password is case sensitive, allows digits, English
letters (case sensitive), underlines and sixteen special characters
( !$%'()*,-./[]{|} ). By default, it is empty. The password in the configuration file
will be displayed in the MD5 encrypted form.
password
—— Super password, a string from 1 to 31 alphanumeric
| 5
encrypted-password
}
5 —— Indicates an MD5 encrypted password with fixed length will follow.
18
encrypted-password
which you can copy from another switch’s configuration file. After the
encrypted password is configured, you should use the corresponding
unencrypted password if you re-enter this mode.
Command Mode
Global Configuration Mode
Privilege Requirement
Only Admin level users have access to these commands.
User Guidelines
If both the enable password and enable secret are defined, only the latest
configured password will take effect.
Example
Set the secret password as “admin” and unencrypted to access Privileged
—— An MD5 encrypted password with fixed length,
EXEC Mode from User EXEC Mode. The password will be displayed in the
encrypted form.
T1600G-28TS(config)#enable secret 0 admin
2.5 configure
Description
The configure command is used to access Global Configuration Mode from
Privileged EXEC Mode.
Syntax
configure
Command Mode
Privileged EXEC Mode
Privilege Requirement
Only Admin, Operator and Power User level users have access to these
commands.
Example
Access Global Configuration Mode from Privileged EXEC Mode:
T1600G-28TS# configure
T1600G-28TS(config)#
19
2.6 exit
Description
The exit command is used to return to the previous Mode from the current
Mode.
Syntax
exit
Command Mode
Privileged EXEC Mode and Any Configuration Mode
Privilege Requirement
None.
Example
Return to Global Configuration Mode from Interface Configuration Mode, and
then return to Privileged EXEC Mode:
T1600G-28TS(config-if)# exit
T1600G-28TS(config)#exit
T1600G-28TS#
2.7 end
Description
The end command is used to return to Privileged EXEC Mode.
Syntax
end
Command Mode
Privileged EXEC Mode and Any Configuration Mode
Privilege Requirement
Only Admin level users have access to these commands.
Example
Return to Privileged EXEC Mode from Interface Configuration Mode:
T1600G-28TS(config-if)#end
T1600G-28TS#
20
2.8 clipaging
Description
The clipaging command is used to enable the pause function for the screen
display. If you want to display all the related information of the switch at once
when using the show command, please use no clipaging command.
Syntax
clipaging
no clipaging
Command Mode
Privileged EXEC Mode and Any Configuration Mode
Privilege Requirement
None.
Example
Disable the pause function for the screen display:
T1600G-28TS(config)#no clipaging
2.9 history
Description
The history command is used to show the latest 20 commands you entered
in the current mode since the switch is powered.
Syntax
history
Command Mode
Privileged EXEC Mode and any Configuration Mode
Privilege Requirement
None.
Example
Show the commands you have entered in the current mode:
T1600G-28TS (config)# history
1 history
21
2.10 history clear
Description
The history clear command is used to clear the commands you have entered
in the current mode, therefore these commands will not be shown next time
you use the history command.
Syntax
history clear
Command Mode
Privileged EXEC Mode and any Configuration Mode
Privilege Requirement
Only Admin, Operator and Power User level users have access to these
commands.
Example
Clear the commands you have entered in the current mode:
T1600G-28TS(config)#history clear
22
Chapter 3 User Management Commands
User Management commands are used to manage the user’s logging information by Web,
Telnet or SSH, so as to protect the settings of the switch from being randomly changed.
3.1 user name (password)
Description
The user name command is used to add a new user or modify the existed
users’ information. To delete the existed users, please use no user name
command. This command uses the symmetric encryption.
Syntax
user name
{ [ 0 ]
no user name
Parameter
name
composed of digits, English letters and under dashes only.
admin | operator | power_user | user —— Access level. “admin” means that
you can edit, modify and view all the settings of different functions. “operator”
means that you can edit, modify and view most of the settings of different
functions. “power-user” means that you can edit, modify and view some of
the settings of different functions. “user” means that you can only view some
of the settings of different functions without the right to edit or modify. It is
“admin” by default. For more details about privilege restrictions, please refer
to the Privilege Requirement part in each command.
0 —— Specify the encryption type. 0 indicates that an unencrypted password
The system-time ntp command is used to configure the time zone and the IP
address for the NTP Server. The switch will get UTC automatically if it has
connected to an NTP Server.
Syntax
system-time ntp {
fetching-rate
{
Parameter
timezone
UTC+13:00.
timezone
}
—— Your local time-zone, and it ranges from UTC-12:00 to
27
} {
ntp-server
} {
backup-ntp-server
}
The detailed information that each time-zone means are displayed as follow:
UTC-12:00 —— TimeZone for International Date Line West.
UTC-11:00 —— TimeZone for Coordinated Universal Time-11.
UTC-10:00 —— TimeZone for Hawaii.
UTC-09:00 —— TimeZone for Alaska.
UTC-08:00 —— TimeZone for Pacific Time(US Canada).
UTC-07:00 —— TimeZone for Mountain Time(US Canada).
UTC-06:00 —— TimeZone for Central Time(US Canada).
UTC-05:00 —— TimeZone for Eastern Time(US Canada).
UTC-04:30 —— TimeZone for Caracas.
UTC-04:00 —— TimeZone for Atlantic Time(Canada).
UTC-03:30 —— TimeZone for Newfoundland.
UTC-03:00 —— TimeZone for Buenos Aires, Salvador, Brasilia.
UTC-02:00 —— TimeZone for Mid-Atlantic.
UTC-01:00 —— TimeZone for Azores, Cape Verde Is.
UTC —— TimeZone for Dublin, Edinburgh, Lisbon, London.
UTC+01:00 —— TimeZone for Amsterdam, Berlin, Bern, Rome, Stockholm,
Vienna.
UTC+02:00 —— TimeZone for Cairo, Athens, Bucharest, Amman, Beirut,
Jerusalem.
UTC+03:00 —— TimeZone for Kuwait, Riyadh, Baghdad.
UTC+03:30 —— TimeZone for Tehran.
UTC+04:00 —— TimeZone for Moscow, St.Petersburg, Volgograd, Tbilisi,
Port Louis.
UTC+04:30 —— TimeZone for Kabul.
UTC+05:00 —— TimeZone for Islamabad, Karachi, Tashkent.
UTC+05:30 —— TimeZone for Chennai, Kolkata, Mumbai, New Delhi.
UTC+05:45 —— TimeZone for Kathmandu.
UTC+06:00 —— TimeZone for Dhaka,Astana, Ekaterinburg.
UTC+06:30 —— TimeZone for Yangon (Rangoon).
UTC+07:00 —— TimeZone for Novosibrisk, Bangkok, Hanoi, Jakarta.
UTC+08:00—— TimeZone for Beijing, Chongqing, Hong Kong, Urumqi,
Singapore.
UTC+09:00
—— TimeZone for Seoul, Irkutsk, Osaka, Sapporo, Tokyo.
UTC+09:30 —— TimeZone for Darwin, Adelaide.
UTC+10:00 —— TimeZone for Canberra, Melbourne, Sydney, Brisbane.
UTC+11:00 —— TimeZone for Solomon Is., New Caledonia, Vladivostok.
UTC+12:00 —— TimeZone for Fiji, Magadan, Auckland, Welington.
UTC+13:00 —— TimeZone for Nuku'alofa, Samoa.
ntp-server
—— The IP address for the Primary NTP Server.
28
backup-ntp-server
fetching-rate
—— Specify the rate fetching time from NTP server.
Command Mode
Global Configuration Mode
Privilege Requirement
Only Admin and Operator level users have access to these commands.
Example
Configure the system time mode as NTP, the time zone is UTC-12:00, the
primary NTP server is 133.100.9.2 and the secondary NTP server is
alert
generate an entry on the log file. It is the default setting
port-based
and generate an entry on the log file. In addition, the switch will block the port
——
When a loop is detected, the switch will send a trap message and
.
——
When a loop is detected, the switch will send a trap message
74
on which the loop is detected and no packets can pass through the port.
——
vlan-based
and generate an entry on the log file. In addition, the switch will block the
VLAN in which the loop is detected and only the packets of the blocked VLAN
cannot pass through the port.
auto —— Block status can be automatically removed after recovery time.
When a loop is detected, the switch will send a trap message
manual —— Block status can only be removed manually.
Command Mode
Interface Configuration Mode (interface gigabitEthernet | interface range
gigabitEthernet | interface port-channel | interface range port-channel )
Privilege Requirement
Only Admin, Operator and Power User level users have access to these
commands.
Example
Configure the loopback detection process-mode as port-based, and