TP-Link T1700G-28TQ CLI Reference Guide

Download

CLI Reference Guide

T1700G-28TQ

1910012757 REV3.1.0

March 2020

Specifications are subject to change without notice. is a registered trademark of

TP-Link Corporation Limited. Other brands and product names are trademarks or registered

trademarks of their respective holders.

No part of the specifications may be reproduced in any form or by any means or used to make

any derivative such as translation, transformation, or adaptation without permission from

reserved.

https://www.tp-link.com

CONTENTS

Preface ............................................................................................................................ 1

Chapter 1 Using the CLI ................................................................................................... 5

1.1 Accessing the CLI ..................................................................................................................................... 5

1.1.1 Logon by Telnet ...................................................................................................................... 5

1.1.2 Logon by SSH .......................................................................................................................... 6

1.2 CLI Command Modes ............................................................................................................................ 11

1.3 Privilege Restrictions ............................................................................................................................. 14

1.4 Conventions .............................................................................................................................................. 15

1.4.1 Format Conventions ........................................................................................................... 15

1.4.2 Special Characters .............................................................................................................. 15

1.4.3 Parameter Format ................................................................................................................ 15

Chapter 2 User Interface .............................................................................................. 16

2.1 enable ............................................................................................................................................... 16

2.2 service password-encryption .................................................................................................. 16

2.3 enable password ........................................................................................................................... 17

2.4 enable secret ................................................................................................................................. 18

2.5 configure .......................................................................................................................................... 19

2.6 exit...................................................................................................................................................... 19

2.7 end ..................................................................................................................................................... 20

2.8 clipaging ........................................................................................................................................... 20

2.9 history ............................................................................................................................................... 21

2.10 history clear .................................................................................................................................... 22

Chapter 3 Stack .............................................................................................................. 23

3.1 switch priority ................................................................................................................................. 23

3.2 switch renumber ........................................................................................................................... 24

3.3 switch stack-port .......................................................................................................................... 24

3.4 switch provision ............................................................................................................................ 25

3.5 show switch .................................................................................................................................... 26

Chapter 4 User Management Commands ................................................................ 28

4.1 user name (password) ................................................................................................................. 28

4.2 user name (secret) ........................................................................................................................ 29

4.3 show user account-list................................................................................................................ 30

4.4 show user configuration ............................................................................................................. 31

Chapter 5 System Configuration Commands ......................................................... 32

5.1 system-time manual .................................................................................................................... 32

5.2 system-time ntp ............................................................................................................................ 32

5.3 system-time dst predefined ..................................................................................................... 34

5.4 system-time dst date .................................................................................................................. 35

5.5 system-time dst recurring ......................................................................................................... 36

5.6 hostname ......................................................................................................................................... 37

5.7 location ............................................................................................................................................. 38

5.8 contact-info .................................................................................................................................... 38

5.9 ip address ........................................................................................................................................ 39

5.10 ip address-alloc ............................................................................................................................. 40

5.11 reset .................................................................................................................................................. 41

5.12 reboot ............................................................................................................................................... 41

5.13 reboot-schedule ........................................................................................................................... 42

5.14 copy running-config startup-config ....................................................................................... 43

5.15 copy startup-config tftp ............................................................................................................. 43

5.16 copy tftp startup-config ............................................................................................................. 44

5.17 copy backup-config tftp ............................................................................................................. 45

5.18 copy backup-config startup-config ....................................................................................... 45

5.19 copy running-config backup-config ...................................................................................... 46

5.20 copy tftp backup-config ............................................................................................................. 46

5.21 boot application ............................................................................................................................ 47

5.22 boot config ...................................................................................................................................... 48

5.23 remove backup-image ................................................................................................................ 48

5.24 firmware upgrade .......................................................................................................................... 49

5.25 ping .................................................................................................................................................... 50

5.26 tracert ............................................................................................................................................... 51

5.27 show system-info ......................................................................................................................... 52

5.28 show image-info ............................................................................................................................ 52

5.29 show boot ........................................................................................................................................ 53

5.30 show running-config .................................................................................................................... 53

5.31 show startup-config .................................................................................................................... 54

5.32 show system-time ........................................................................................................................ 54

5.33 show system-time dst ................................................................................................................. 55

5.34 show system-time ntp ................................................................................................................ 55

5.35 show cable-diagnostics interface........................................................................................... 56

5.36 show cpu-utilization ..................................................................................................................... 56

III

5.37 show memory-utilization ............................................................................................................ 57

Chapter 6 EEE Configuration Commands ................................................................ 58

6.1 eee ..................................................................................................................................................... 58

6.2 show interface eee ....................................................................................................................... 58

Chapter 7 SDM Template Commands ....................................................................... 60

7.1 sdm prefer ....................................................................................................................................... 60

7.2 show sdm prefer ........................................................................................................................... 61

Chapter 8 Time Range Commands ............................................................................ 62

8.1 time-range ....................................................................................................................................... 62

8.2 absolute ........................................................................................................................................... 62

8.3 periodic ............................................................................................................................................ 63

8.4 holiday (time-range mode) ......................................................................................................... 64

8.5 holiday .............................................................................................................................................. 65

8.6 show holiday ................................................................................................................................... 65

8.7 show time-range ........................................................................................................................... 66

Chapter 9 Port Configuration Commands ............................................................... 67

9.1 interface gigabitEthernet ........................................................................................................... 67

9.2 interface range gigabitEthernet............................................................................................... 67

9.3 description ...................................................................................................................................... 68

9.4 shutdown ......................................................................................................................................... 69

9.5 flow-control .................................................................................................................................... 70

9.6 duplex ............................................................................................................................................... 70

9.7 jumbo-size ....................................................................................................................................... 71

9.8 speed ................................................................................................................................................ 71

9.9 clear counters ................................................................................................................................ 72

9.10 show interface status .................................................................................................................. 73

9.11 show interface counters ............................................................................................................ 73

9.12 show interface configuration .................................................................................................... 74

9.13 show fiber-ports ............................................................................................................................ 75

Chapter 10 Port Isolation Commands ......................................................................... 76

10.1 port isolation................................................................................................................................... 76

10.2 show port isolation interface .................................................................................................... 77

Chapter 11 Loopback Detection Commands ............................................................ 78

11.1 loopback-detection (global) ...................................................................................................... 78

11.2 loopback-detection interval ...................................................................................................... 78

11.3 loopback-detection recovery-time ........................................................................................ 79

11.4 loopback-detection (interface) ................................................................................................ 80

11.5 loopback-detection config process-mode ......................................................................... 80

11.6 loopback-detection recover ..................................................................................................... 81

11.7 show loopback-detection global............................................................................................. 82

11.8 show loopback-detection interface ....................................................................................... 82

Chapter 12 Etherchannel Commands ......................................................................... 84

12.1 channel-group ............................................................................................................................... 84

12.2 port-channel load-balance ........................................................................................................ 85

12.3 lacp system-priority ..................................................................................................................... 86

12.4 lacp port-priority ........................................................................................................................... 87

12.5 show etherchannel ....................................................................................................................... 87

12.6 show etherchannel load-balance ............................................................................................ 88

12.7 show lacp ......................................................................................................................................... 89

12.8 show lacp sys-id ............................................................................................................................ 89

Chapter 13 MAC Address Commands ......................................................................... 91

13.1 mac address-table static ........................................................................................................... 91

13.2 mac address-table aging-time ................................................................................................. 92

13.3 mac address-table filtering ....................................................................................................... 92

13.4 mac address-table max-mac-count ...................................................................................... 93

13.5 show mac address-table ............................................................................................................ 95

13.6 clear mac address-table ............................................................................................................ 95

13.7 show mac address-table aging-time ..................................................................................... 96

13.8 show mac address-table max-mac-count ........................................................................... 96

13.9 show mac address-table interface ......................................................................................... 97

13.10 show mac address-table count ............................................................................................... 97

13.11 show mac address-table address .......................................................................................... 98

13.12 show mac address-table vlan ................................................................................................... 99

Chapter 14 IEEE 802.1Q VLAN Commands .............................................................. 100

14.1 vlan .................................................................................................................................................. 100

14.2 name ............................................................................................................................................... 101

14.3 switchport general allowed vlan ........................................................................................... 101

14.4 switchport pvid ........................................................................................................................... 102

14.5 switchport check ingress ........................................................................................................ 103

14.6 switchport acceptable frame ................................................................................................ 103

14.7 show vlan summary................................................................................................................... 104

14.8 show vlan brief ............................................................................................................................ 105

14.9 show vlan ...................................................................................................................................... 105

14.10 show interface switchport ...................................................................................................... 106

Chapter 15 MAC-based VLAN Commands ............................................................... 107

15.1 mac-vlan mac-address ............................................................................................................ 107

15.2 mac-vlan ....................................................................................................................................... 108

15.3 show mac-vlan ............................................................................................................................ 108

15.4 show mac-vlan interface ......................................................................................................... 109

Chapter 16 Protocol-based VLAN Commands ....................................................... 110

16.1 protocol-vlan template ............................................................................................................ 110

16.2 protocol-vlan vlan ...................................................................................................................... 111

16.3 protocol-vlan group .................................................................................................................. 112

16.4 show protocol-vlan template ................................................................................................. 112

16.5 show protocol-vlan vlan .......................................................................................................... 113

Chapter 17 IGMP Snooping Commands.................................................................... 114

17.1 ip igmp snooping (global) ........................................................................................................ 114

17.2 ip igmp snooping version ........................................................................................................ 114

17.3 ip igmp snooping drop-unknown ......................................................................................... 115

17.4 ip igmp snooping header-validation .................................................................................... 116

17.5 ip igmp snooping vlan-config ................................................................................................ 116

17.6 ip igmp snooping vlan-config (immediate-leave)............................................................ 118

17.7 ip igmp snooping vlan-config (report-suppression) ...................................................... 118

17.8 ip igmp snooping vlan-config (router-ports-forbidden) ............................................... 119

17.9 ip igmp snooping vlan-config (rport interface) ................................................................ 120

17.10 ip igmp snooping vlan-config (static) .................................................................................. 121

17.11 ip igmp snooping vlan-config (querier) ............................................................................... 122

17.12 ip igmp snooping (interface) .................................................................................................. 123

17.13 ip igmp snooping max-groups .............................................................................................. 124

17.14 ip igmp snooping immediate-leave ..................................................................................... 125

17.15 ip igmp profile ............................................................................................................................. 125

17.16 deny ................................................................................................................................................ 126

17.17 permit ............................................................................................................................................. 126

17.18 range .............................................................................................................................................. 127

17.19 ip igmp filter ................................................................................................................................. 128

17.20 clear ip igmp snooping statistics ......................................................................................... 128

17.21 show ip igmp snooping ............................................................................................................ 129

17.22 show ip igmp snooping interface ......................................................................................... 129

17.23 show ip igmp snooping vlan ................................................................................................... 130

17.24 show ip igmp snooping groups ............................................................................................. 131

17.25 show ip igmp profile .................................................................................................................. 132

Chapter 18 MLD Snooping Commands ..................................................................... 133

18.1 ipv6 mld snooping (global) ...................................................................................................... 133

18.2 ipv6 mld snooping drop-unknown ....................................................................................... 133

18.3 ipv6 mld snooping vlan-config .............................................................................................. 134

18.4 ipv6 mld snooping vlan-config (immediate-leave) ......................................................... 135

18.5 ipv6 mld snooping vlan-config (report-suppression) .................................................... 136

18.6 ipv6 mld snooping vlan-config (router-ports-forbidden) ............................................. 137

18.7 ipv6 mld snooping vlan-config (rport interface) .............................................................. 138

18.8 ipv6 mld snooping vlan-config (static) ............................................................................... 138

18.9 ipv6 mld snooping vlan-config (querier) ............................................................................ 139

18.10 ipv6 mld snooping (interface) ................................................................................................ 141

18.11 ipv6 mld snooping max-groups ............................................................................................ 141

18.12 ipv6 mld snooping immediate-leave ................................................................................... 142

18.13 ipv6 mld profile ........................................................................................................................... 143

18.14 deny ................................................................................................................................................ 144

18.15 permit ............................................................................................................................................. 144

18.16 range .............................................................................................................................................. 145

18.17 ipv6 mld filter ............................................................................................................................... 145

18.18 clear ipv6 mld snooping statistics ....................................................................................... 146

18.19 show ipv6 mld snooping .......................................................................................................... 146

18.20 show ipv6 mld snooping interface ....................................................................................... 147

18.21 show ipv6 mld snooping vlan ................................................................................................. 148

18.22 show ipv6 mld snooping groups .......................................................................................... 148

18.23 show ipv6 mld profile ................................................................................................................ 149

Chapter 19 MVR Commands ........................................................................................ 150

19.1 mvr (global) ................................................................................................................................... 150

19.2 mvr group ..................................................................................................................................... 150

19.3 mvr mode ...................................................................................................................................... 151

19.4 mvr querytime ............................................................................................................................. 152

19.5 mvr vlan ......................................................................................................................................... 153

19.6 mvr (interface) ............................................................................................................................. 153

VII

19.7 mvr type ........................................................................................................................................ 154

19.8 mvr immediate ............................................................................................................................ 155

19.9 mvr vlan (group) .......................................................................................................................... 155

19.10 show mvr ...................................................................................................................................... 156

19.11 show mvr interface .................................................................................................................... 157

19.12 show mvr members .................................................................................................................. 157

19.13 show mvr traffic .......................................................................................................................... 158

Chapter 20 MSTP Commands ...................................................................................... 159

20.1 debug spanning-tree ................................................................................................................ 159

20.2 spanning-tree (global) .............................................................................................................. 160

20.3 spanning-tree (interface) ........................................................................................................ 160

20.4 spanning-tree common-config ............................................................................................. 161

20.5 spanning-tree mode ................................................................................................................. 162

20.6 spanning-tree mst configuration ......................................................................................... 163

20.7 instance ......................................................................................................................................... 163

20.8 name ............................................................................................................................................... 164

20.9 revision .......................................................................................................................................... 165

20.10 spanning-tree mst instance ................................................................................................... 166

20.11 spanning-tree mst ..................................................................................................................... 166

20.12 spanning-tree priority .............................................................................................................. 167

20.13 spanning-tree timer .................................................................................................................. 168

20.14 spanning-tree hold-count ....................................................................................................... 169

20.15 spanning-tree max-hops ......................................................................................................... 169

20.16 spanning-tree bpdufilter ......................................................................................................... 170

20.17 spanning-tree bpduflood ........................................................................................................ 171

20.18 spanning-tree bpduguard ....................................................................................................... 171

20.19 spanning-tree guard loop ....................................................................................................... 172

20.20 spanning-tree guard root ........................................................................................................ 173

20.21 spanning-tree guard tc ............................................................................................................ 173

20.22 spanning-tree mcheck ............................................................................................................. 174

20.23 show spanning-tree active ..................................................................................................... 174

20.24 show spanning-tree bridge .................................................................................................... 175

20.25 show spanning-tree interface ............................................................................................... 175

20.26 show spanning-tree interface-security ............................................................................. 176

20.27 show spanning-tree mst ......................................................................................................... 177

VIII

Chapter 21 LLDP Commands ....................................................................................... 179

21.1 lldp................................................................................................................................................... 179

21.2 lldp forward_message .............................................................................................................. 179

21.3 lldp hold-multiplier ..................................................................................................................... 180

21.4 lldp timer ....................................................................................................................................... 181

21.5 lldp receive ................................................................................................................................... 182

21.6 lldp transmit ................................................................................................................................. 182

21.7 lldp snmp-trap ............................................................................................................................. 183

21.8 lldp tlv-select ............................................................................................................................... 184

21.9 lldp management-address ..................................................................................................... 184

21.10 lldp med-fast-count .................................................................................................................. 185

21.11 lldp med-status ........................................................................................................................... 186

21.12 lldp med-tlv-select .................................................................................................................... 186

21.13 lldp med-location ....................................................................................................................... 187

21.14 show lldp ....................................................................................................................................... 188

21.15 show lldp interface .................................................................................................................... 188

21.16 show lldp local-information interface ................................................................................. 189

21.17 show lldp neighbor-information interface ......................................................................... 190

21.18 show lldp traffic interface ....................................................................................................... 190

Chapter 22 Static Routes Commands ....................................................................... 192

22.1 ip routing ....................................................................................................................................... 192

22.2 interface vlan ............................................................................................................................... 192

22.3 interface loopback .................................................................................................................... 193

22.4 switchport .................................................................................................................................... 193

22.5 interface range port-channel ................................................................................................. 194

22.6 description ................................................................................................................................... 195

22.7 shutdown ...................................................................................................................................... 195

22.8 interface port-channel ............................................................................................................. 196

22.9 ip route .......................................................................................................................................... 197

22.10 ipv6 routing .................................................................................................................................. 197

22.11 ipv6 route ...................................................................................................................................... 198

22.12 show interface vlan ................................................................................................................... 199

22.13 show ip interface ........................................................................................................................ 199

22.14 show ip interface brief .............................................................................................................. 200

22.15 show ip route ............................................................................................................................... 200

22.16 show ip route specify ............................................................................................................... 201

22.17 show ip route summary ........................................................................................................... 202

22.18 show ipv6 interface ................................................................................................................... 202

22.19 show ipv6 route .......................................................................................................................... 203

22.20 show ipv6 route summary ...................................................................................................... 203

Chapter 23 IPv6 Address Configuration Commands ............................................ 205

23.1 ipv6 enable ................................................................................................................................... 205

23.2 ipv6 address autoconfig.......................................................................................................... 205

23.3 ipv6 address link-local ............................................................................................................. 206

23.4 ipv6 address dhcp ..................................................................................................................... 207

23.5 ipv6 address ra ........................................................................................................................... 207

23.6 ipv6 address eui-64 .................................................................................................................. 208

23.7 ipv6 address ................................................................................................................................ 209

23.8 show ipv6 interface ................................................................................................................... 210

Chapter 24 ARP Commands ......................................................................................... 211

24.1 arp ................................................................................................................................................... 211

24.2 clear arp-cache .......................................................................................................................... 212

24.3 arp dynamicrenew ..................................................................................................................... 212

24.4 arp timeout ................................................................................................................................... 213

24.5 gratuitous-arp intf-status-up enable .................................................................................. 213

24.6 gratuitous-arp dup-ip-detected enable ............................................................................. 214

24.7 gratuitous-arp learning enable .............................................................................................. 214

24.8 gratuitous-arp send-interval .................................................................................................. 215

24.9 ip proxy-arp.................................................................................................................................. 216

24.10 ip local-proxy-arp ...................................................................................................................... 216

24.11 show arp ........................................................................................................................................ 217

24.12 show ip arp (interface) .............................................................................................................. 218

24.13 show ip arp summary................................................................................................................ 218

24.14 show gratuitous-arp ................................................................................................................. 219

24.15 show ip proxy-arp ...................................................................................................................... 219

Chapter 25 DHCP Server Commands ........................................................................ 221

25.1 service dhcp server .................................................................................................................. 221

25.2 ip dhcp server extend-option capwap-ac-ip.................................................................... 221

25.3 ip dhcp server extend-option vendor-class-id ............................................................... 222

25.4 ip dhcp server exclude-address ........................................................................................... 223

25.5 ip dhcp server pool ................................................................................................................... 224

25.6 ip dhcp server ping timeout ................................................................................................... 224

25.7 ip dhcp server ping packets ................................................................................................... 225

25.8 network ......................................................................................................................................... 226

25.9 lease ............................................................................................................................................... 226

25.10 address hardware-address .................................................................................................... 227

25.11 address client-identifier .......................................................................................................... 228

25.12 default-gateway ......................................................................................................................... 228

25.13 dns-server .................................................................................................................................... 229

25.14 netbios-name-server ............................................................................................................... 230

25.15 netbios-node-type .................................................................................................................... 231

25.16 next-server ................................................................................................................................... 231

25.17 domain-name .............................................................................................................................. 232

25.18 bootfile .......................................................................................................................................... 233

25.19 show ip dhcp server status .................................................................................................... 233

25.20 show ip dhcp server statistics............................................................................................... 234

25.21 show ip dhcp server extend-option .................................................................................... 234

25.22 show ip dhcp server pool ........................................................................................................ 235

25.23 show ip dhcp server excluded-address ............................................................................ 235

25.24 show ip dhcp server manual-binding .................................................................................. 236

25.25 show ip dhcp server binding .................................................................................................. 236

25.26 clear ip dhcp server statistics ............................................................................................... 237

25.27 clear ip dhcp server binding ................................................................................................... 237

Chapter 26 DHCP Relay Commands .......................................................................... 239

26.1 service dhcp relay ..................................................................................................................... 239

26.2 ip dhcp relay hops ..................................................................................................................... 239

26.3 ip dhcp relay time ....................................................................................................................... 240

26.4 ip helper-address....................................................................................................................... 241

26.5 ip dhcp relay information ........................................................................................................ 241

26.6 ip dhcp relay information strategy ....................................................................................... 242

26.7 ip dhcp relay information format .......................................................................................... 243

26.8 ip dhcp relay information circuit-id ...................................................................................... 244

26.9 ip dhcp relay information remote-id .................................................................................... 244

26.10 ip dhcp relay default-interface .............................................................................................. 245

26.11 ip dhcp relay vlan ....................................................................................................................... 246

26.12 show ip dhcp relay ..................................................................................................................... 246

Chapter 27 DHCP L2 Relay Commands .................................................................... 248

27.1 ip dhcp l2relay ............................................................................................................................. 248

27.2 ip dhcp l2relay vlan .................................................................................................................... 248

27.3 ip dhcp l2relay information ..................................................................................................... 249

27.4 ip dhcp l2relay information strategy ................................................................................... 249

27.5 ip dhcp l2relay information format....................................................................................... 250

27.6 ip dhcp l2relay information circuit-id .................................................................................. 251

27.7 ip dhcp l2relay information remote-id ................................................................................ 252

27.8 show ip dhcp l2relay ................................................................................................................. 252

27.9 show ip dhcp l2relay interface .............................................................................................. 253

Chapter 28 QoS Commands ......................................................................................... 254

28.1 qos trust mode ........................................................................................................................... 254

28.2 qos port-priority ......................................................................................................................... 255

28.3 qos cos-map ............................................................................................................................... 255

28.4 qos dot1p-remap ....................................................................................................................... 256

28.5 qos dscp-map ............................................................................................................................. 257

28.6 qos dscp-remap ......................................................................................................................... 258

28.7 qos queue bandwidth ............................................................................................................... 258

28.8 qos queue mode ........................................................................................................................ 259

28.9 show qos cos-map .................................................................................................................... 260

28.10 show qos dot1p-remap ........................................................................................................... 261

28.11 show qos dscp-map ................................................................................................................. 261

28.12 show qos dscp-remap ............................................................................................................. 262

28.13 show qos port-priority interface........................................................................................... 262

28.14 show qos trust interface ......................................................................................................... 263

28.15 show qos queue interface ...................................................................................................... 263

Chapter 29 Bandwidth Control Commands ............................................................. 265

29.1 storm-control rate-mode ........................................................................................................ 265

29.2 storm-control .............................................................................................................................. 266

29.3 storm-control exceed .............................................................................................................. 267

29.4 storm-control recover ............................................................................................................. 268

29.5 bandwidth ..................................................................................................................................... 268

29.6 show storm-control .................................................................................................................. 269

29.7 show bandwidth ......................................................................................................................... 270

Chapter 30 Voice VLAN Commands .......................................................................... 271

30.1 voice vlan ...................................................................................................................................... 271

30.2 voice vlan (interface) ................................................................................................................. 271

30.3 voice vlan priority ....................................................................................................................... 272

30.4 voice vlan oui ............................................................................................................................... 273

XII

30.5 show voice vlan .......................................................................................................................... 273

30.6 show voice vlan oui-table........................................................................................................ 274

30.7 show voice vlan interface ....................................................................................................... 274

Chapter 31 Auto VoIP Commands .............................................................................. 276

31.1 auto-voip ....................................................................................................................................... 276

31.2 auto-voip (interface) ................................................................................................................. 276

31.3 auto-voip dot1p .......................................................................................................................... 277

31.4 auto-voip untagged .................................................................................................................. 278

31.5 auto-voip none ........................................................................................................................... 278

31.6 no auto-voip (interface) ........................................................................................................... 279

31.7 auto-voip dscp ............................................................................................................................ 279

31.8 auto-voip data priority .............................................................................................................. 280

31.9 show auto-voip ........................................................................................................................... 280

Chapter 32 Access Control Commands ................................................................... 282

32.1 user access-control ip-based enable ................................................................................. 282

32.2 user access-control ip-based ............................................................................................... 282

32.3 user access-control mac-based enable ............................................................................ 283

32.4 user access-control mac-based .......................................................................................... 284

32.5 user access-control port-based enable ............................................................................ 285

32.6 user access-control port-based .......................................................................................... 285

Chapter 33 HTTP and HTTPS Commands ................................................................ 287

33.1 ip http server ............................................................................................................................... 287

33.2 ip http port .................................................................................................................................... 288

33.3 ip http max-users ....................................................................................................................... 288

33.4 ip http session timeout ............................................................................................................ 289

33.5 ip http secure-server ................................................................................................................ 290

33.6 ip http secure-port .................................................................................................................... 290

33.7 ip http secure-protocol............................................................................................................ 291

33.8 ip http secure-ciphersuite ...................................................................................................... 292

33.9 ip http secure-max-users ....................................................................................................... 293

33.10 ip http secure-session timeout ............................................................................................. 294

33.11 ip http secure-server download certificate ...................................................................... 294

33.12 ip http secure-server download key ................................................................................... 295

33.13 show ip http configuration ...................................................................................................... 296

33.14 show ip http secure-server .................................................................................................... 296

XIII

Chapter 34 SSH Commands ......................................................................................... 298

34.1 ip ssh server ................................................................................................................................ 298

34.2 ip ssh port ..................................................................................................................................... 298

34.3 ip ssh version .............................................................................................................................. 299

34.4 ip ssh algorithm .......................................................................................................................... 300

34.5 ip ssh timeout .............................................................................................................................. 300

34.6 ip ssh max-client ........................................................................................................................ 301

34.7 ip ssh download .......................................................................................................................... 302

34.8 remove public-key ..................................................................................................................... 302

34.9 show ip ssh................................................................................................................................... 303

Chapter 35 Telnet Commands ..................................................................................... 304

35.1 telnet enable ................................................................................................................................ 304

35.2 telnet port ..................................................................................................................................... 304

35.3 show telnet-status..................................................................................................................... 305

Chapter 36 AAA Commands ........................................................................................ 306

36.1 tacacas-server host .................................................................................................................. 306

36.2 show tacacs-server .................................................................................................................. 307

36.3 radius-server host ..................................................................................................................... 308

36.4 show radius-server ................................................................................................................... 309

36.5 aaa group ...................................................................................................................................... 310

36.6 server ............................................................................................................................................. 311

36.7 show aaa group .......................................................................................................................... 311

36.8 aaa authentication login .......................................................................................................... 312

36.9 aaa authentication enable....................................................................................................... 313

36.10 aaa authentication dot1x default .......................................................................................... 314

36.11 aaa accounting dot1x default ................................................................................................ 315

36.12 show aaa authentication ......................................................................................................... 315

36.13 show aaa accounting ................................................................................................................ 316

36.14 line telnet ...................................................................................................................................... 316

36.15 login authentication (telnet) .................................................................................................... 317

36.16 line ssh ........................................................................................................................................... 318

36.17 login authentication (ssh) ........................................................................................................ 318

36.18 enable authentication (telnet) ................................................................................................ 319

36.19 enable authentication (ssh) .................................................................................................... 320

36.20 ip http login authentication ..................................................................................................... 320

36.21 ip http enable authentication ................................................................................................. 321

XIV

36.22 show aaa global .......................................................................................................................... 322

36.23 enable admin password ........................................................................................................... 322

36.24 enable admin secret ................................................................................................................. 323

36.25 enable-admin .............................................................................................................................. 324

Chapter 37 IEEE 802.1x Commands ........................................................................... 326

37.1 dot1x system-auth-control .................................................................................................... 326

37.2 dot1x handshake ....................................................................................................................... 327

37.3 dot1x auth-protocol .................................................................................................................. 327

37.4 dot1x vlan-assignment ............................................................................................................ 328

37.5 dot1x accounting ....................................................................................................................... 329

37.6 dot1x mab .................................................................................................................................... 330

37.7 dot1x guest-vlan ........................................................................................................................ 330

37.8 dot1x timeout quiet-period .................................................................................................... 331

37.9 dot1x timeout supp-timeout .................................................................................................. 332

37.10 dot1x max- req ........................................................................................................................... 333

37.11 dot1x .............................................................................................................................................. 333

37.12 dot1x port-control ..................................................................................................................... 334

37.13 dot1x port-method .................................................................................................................... 335

37.14 dot1x auth-init ............................................................................................................................. 336

37.15 dot1x auth-reauth ...................................................................................................................... 336

37.16 show dot1x global ..................................................................................................................... 337

37.17 show dot1x interface ................................................................................................................ 338

37.18 show dot1x auth-state ............................................................................................................. 338

Chapter 38 Port Security Commands ........................................................................ 340

38.1 mac address-table max-mac count .................................................................................... 340

38.2 show mac address-table max-mac-count ........................................................................ 340

Chapter 39 Port Mirroring Commands ...................................................................... 342

39.1 monitor session destination interface................................................................................ 342

39.2 monitor session source ........................................................................................................... 343

39.3 show monitor session .............................................................................................................. 344

Chapter 40 ACL Commands ......................................................................................... 345

40.1 access-list create ...................................................................................................................... 345

40.2 access-list resequence ........................................................................................................... 345

40.3 access-list mac .......................................................................................................................... 346

40.4 access-list ip ............................................................................................................................... 348

40.5 access-list combined ............................................................................................................... 349

40.6 access-list ipv6 .......................................................................................................................... 351

40.7 access-list action....................................................................................................................... 353

40.8 redirect .......................................................................................................................................... 354

40.9 s-condition ................................................................................................................................... 355

40.10 s-mirror.......................................................................................................................................... 355

40.11 qos-remark .................................................................................................................................. 356

40.12 access bind .................................................................................................................................. 357

40.13 show access-list ........................................................................................................................ 358

40.14 show access-list bind ............................................................................................................... 358

40.15 show access-list status ........................................................................................................... 359

40.16 show access-list counter ........................................................................................................ 359

40.17 clear access-list ......................................................................................................................... 360

Chapter 41 IPv4 IMPB Commands .............................................................................. 361

41.1 ip source binding ....................................................................................................................... 361

41.2 ip dhcp snooping ....................................................................................................................... 362

41.3 ip dhcp snooping vlan .............................................................................................................. 363

41.4 ip dhcp snooping max-entries .............................................................................................. 363

41.5 show ip source binding ............................................................................................................ 364

41.6 show ip dhcp snooping ............................................................................................................ 365

41.7 show ip dhcp snooping interface ......................................................................................... 365

Chapter 42 IPv6 IMPB Commands .............................................................................. 367

42.1 Ipv6 source binding................................................................................................................... 367

42.2 ipv6 dhcp snooping .................................................................................................................. 368

42.3 ipv6 dhcp snooping vlan ......................................................................................................... 369

42.4 ipv6 dhcp snooping max-entries .......................................................................................... 369

42.5 ipv6 nd snooping ....................................................................................................................... 370

42.6 ipv6 nd snooping vlan .............................................................................................................. 371

42.7 ipv6 nd snooping max-entries ............................................................................................... 371

42.8 show ipv6 source binding ....................................................................................................... 372

42.9 show ipv6 dhcp snooping ....................................................................................................... 373

42.10 show ipv6 dhcp snooping interface .................................................................................... 373

42.11 show ipv6 nd snooping ............................................................................................................ 374

Chapter 43 IP Verify Source Commands .................................................................. 375

43.1 ip verify source ........................................................................................................................... 375

43.2 ip verify source logging ........................................................................................................... 376

XVI

43.3 show ip verify source ................................................................................................................ 376

43.4 show ip verify source interface ............................................................................................. 377

Chapter 44 IPv6 Verify Source Commands ............................................................. 378

44.1 ipv6 verify source ...................................................................................................................... 378

44.2 show ipv6 verify source ........................................................................................................... 379

44.3 show ipv6 verify source interface ........................................................................................ 379

Chapter 45 DHCPv4 Filter Commands ...................................................................... 381

45.1 ip dhcp filter ................................................................................................................................. 381

45.2 ip dhcp filter (interface) ............................................................................................................ 381

45.3 ip dhcp filter mac-verify ........................................................................................................... 382

45.4 ip dhcp filter limit rate ............................................................................................................... 383

45.5 ip dhcp filter decline rate ......................................................................................................... 384

45.6 ip dhcp filter server permit-entry ......................................................................................... 384

45.7 show ip dhcp filter ..................................................................................................................... 385

45.8 show ip dhcp filter interface ................................................................................................... 386

45.9 show ip dhcp filter server permit-entry .............................................................................. 386

Chapter 46 DHCPv6 Filter Commands ...................................................................... 388

46.1 ipv6 dhcp filter ............................................................................................................................ 388

46.2 ipv6 dhcp filter (interface) ....................................................................................................... 388

46.3 ipv6 dhcp filter limit rate .......................................................................................................... 389

46.4 ipv6 dhcp filter decline rate .................................................................................................... 390

46.5 ipv6 dhcp filter server permit-entry .................................................................................... 391

46.6 show ipv6 dhcp filter................................................................................................................. 392

46.7 show ipv6 dhcp filter interface .............................................................................................. 392

46.8 show ip dhcp filter server permit-entry .............................................................................. 393

Chapter 47 DoS Defend Commands .......................................................................... 394

47.1 ip dos-prevent ............................................................................................................................ 394

47.2 ip dos-prevent type................................................................................................................... 394

47.3 show ip dos-prevent ................................................................................................................. 396

Chapter 48 DLDP Commands ...................................................................................... 397

48.1 dldp (global) ................................................................................................................................. 397

48.2 dldp interval ................................................................................................................................. 397

48.3 dldp shut-mode .......................................................................................................................... 398

48.4 dldp(interface) ............................................................................................................................. 399

XVII

48.5 show dldp ..................................................................................................................................... 399

48.6 show dldp interface................................................................................................................... 400

Chapter 49 SNMP Commands ..................................................................................... 401

49.1 snmp-server ................................................................................................................................ 401

49.2 snmp-server view ...................................................................................................................... 401

49.3 snmp-server group ................................................................................................................... 402

49.4 snmp-server user ...................................................................................................................... 404

49.5 snmp-server community ......................................................................................................... 405

49.6 snmp-server host ...................................................................................................................... 406

49.7 snmp-server engineID ............................................................................................................. 408

49.8 snmp-server traps snmp ......................................................................................................... 409

49.9 snmp-server traps ..................................................................................................................... 410

49.10 snmp-server traps vlan ............................................................................................................ 411

49.11 snmp-server traps security .................................................................................................... 412

49.12 snmp-server traps acl .............................................................................................................. 413

49.13 snmp-server traps ip ................................................................................................................ 413

49.14 snmp-server traps link-status ............................................................................................... 414

49.15 rmon history ................................................................................................................................ 414

49.16 rmon event ................................................................................................................................... 415

49.17 rmon alarm ................................................................................................................................... 416

49.18 rmon statistics ............................................................................................................................ 418

49.19 show snmp-server..................................................................................................................... 419

49.20 show snmp-server view ........................................................................................................... 419

49.21 show snmp-server group ........................................................................................................ 420

49.22 show snmp-server user ........................................................................................................... 420

49.23 show snmp-server community ............................................................................................. 421

49.24 show snmp-server host ........................................................................................................... 421

49.25 show snmp-server engineID .................................................................................................. 421

49.26 show rmon history ..................................................................................................................... 422

49.27 show rmon event ....................................................................................................................... 422

49.28 show rmon alarm ........................................................................................................................ 423

49.29 show rmon statistics ................................................................................................................ 424

Chapter 50 ARP Inspection Commands .................................................................... 425

50.1 ip arp inspection ......................................................................................................................... 425

50.2 ip arp inspection validate ........................................................................................................ 425

50.3 ip arp inspection vlan ................................................................................................................ 426

XVIII

50.4 ip arp inspection vlan logging ................................................................................................ 427

50.5 ip arp inspection trust .............................................................................................................. 428

50.6 ip arp inspection limit-rate ...................................................................................................... 428

50.7 ip arp inspection burst-interval ............................................................................................. 429

50.8 ip arp inspection recover ........................................................................................................ 430

50.9 show ip arp inspection ............................................................................................................. 430

50.10 show ip arp inspection interface .......................................................................................... 431

50.11 show ip arp inspection vlan .................................................................................................... 432

50.12 show ip arp inspection statistics .......................................................................................... 432

50.13 clear ip arp inspection statistics ........................................................................................... 433

Chapter 51 ND Detection Commands ....................................................................... 434

51.1 ipv6 nd detection ....................................................................................................................... 434

51.2 ipv6 nd detection vlan .............................................................................................................. 434

51.3 ipv6 nd detection vlan logging .............................................................................................. 435

51.4 ipv6 nd detection trust ............................................................................................................. 435

51.5 show ipv6 nd detection ........................................................................................................... 436

51.6 show ipv6 nd detection interface ......................................................................................... 436

51.7 show ipv6 nd detection vlan .................................................................................................. 437

Chapter 52 System Log Commands .......................................................................... 438

52.1 logging buffer .............................................................................................................................. 438

52.2 logging buffer level .................................................................................................................... 438

52.3 logging file flash ......................................................................................................................... 439

52.4 logging file flash frequency .................................................................................................... 440

52.5 logging file flash level ............................................................................................................... 441

52.6 logging host index ..................................................................................................................... 441

52.7 logging console .......................................................................................................................... 442

52.8 logging console level ................................................................................................................ 443

52.9 logging monitor .......................................................................................................................... 444

52.10 logging monitor level ................................................................................................................ 444

52.11 clear logging ................................................................................................................................ 445

52.12 show logging local-config....................................................................................................... 446

52.13 show logging loghost ............................................................................................................... 446

52.14 show logging buffer .................................................................................................................. 447

52.15 show logging flash ..................................................................................................................... 447

XIX

Preface

This Guide is intended for network administrator to provide referenced information about CLI (Command Line Interface). The device mentioned in this Guide stands for T1700G-28TQ without any explanation. Some models featured in this guide may be unavailable in your country or region. For local sales information, visit https://www.tp-link.com.

Overview of this Guide

Chapter 1: Using the CLI

Provide information about how to use the CLI, CLI Command Modes, Security Levels and some

Conventions.

Chapter 2: User Interface

Provide information about the commands used to switch between five CLI Command Modes.

Chapter 3: Stack

Provide information about the commands used for configuring stack.

Chapter 4: User Management Commands

Provide information about the commands used for user management.

Chapter 5: System Configuration Commands

Provide information about the commands used for configuring the System information and

System IP, reboot and reset the switch, upgrade the switch system and commands used for

cable test.

Chapter 6: EEE Configuration Commands

Provide information about the commands used for configuring EEE.

Chapter 7: SDM Template Commands

Provide information about the commands used for configuring the SDM templates.

Chapter 8: Time Range Commands

Provide information about the commands used for configuring the time range.

Chapter 9: Port Configuration Commands

Provide information about the commands used for configuring the Speed, Negotiation Mode,

and Flow Control for Ethernet ports.

Chapter 10: Port Isolation Commands

Provide information about the commands used for configuring Port Isolation function.

Chapter 11: Loopback Detection Commands

Provide information about the commands used for configuring the Loopback Detection

function.

Chapter 12: Etherchannel Commands

Provide information about the commands used for configuring LAG (Link Aggregation Group)

and LACP (Link Aggregation Control Protocol).

Chapter 13: MAC Address Commands

Provide information about the commands used for Address configuration.

Chapter 14: IEEE 802.1Q VLAN Commands

Provide information about the commands used for configuring IEEE 802.1Q VLAN.

Chapter 15: MAC-based VLAN Commands

Provide information about the commands used for configuring MAC-based VLAN.

Chapter 16: Protocol-based VLAN Commands

Provide information about the commands used for configuring Protocol VLAN.

Chapter 17: IGMP Snooping Commands

Provide information about the commands used for configuring the IGMP Snooping (Internet

Group Management Protocol Snooping).

Chapter 18: MLD Snooping Commands

Provide information about the commands used for configuring the MLD Snooping (Multicast

Listener Discovery Snooping).

Chapter 19: MVR Commands

Provide information about the commands used for configuring the MVR.

Chapter 20: MSTP Commands

Provide information about the commands used for configuring the MSTP (Multiple Spanning

Tree Protocol).

Chapter 21: LLDP Commands

Provide information about the commands used for configuring LLDP function.

Chapter 21: Static Routes Commands

Provide information about the commands used for configuring the Static Route function.

Chapter 23: IPv6 Address Configuration Commands

Provide information about the commands used for configuring the System IPv6 addresses.

Chapter 24: ARP Commands

Provide information about the commands used for configuring the ARP (Address Resolution

Protocol) functions.

Chapter 25: DHCP Server Commands

Provide information about the commands used for configuring the DHCP Server function.

Chapter 26: DHCP Relay Commands

Provide information about the commands used for configuring the DHCP Relay function.

Chapter 27: DHCP L2 Relay Commands

Provide information about the commands used for configuring the DHCP L2 Relay function.

Chapter 28: QoS Commands

Provide information about the commands used for configuring the QoS function.

Chapter 29: Bandwidth Commands

Provide information about the commands used for configuring the Bandwidth Control.

Chapter 30: Voice VLAN Commands

Provide information about the commands used for configuring Voice VLAN.

Chapter 31 Auto VoIP Commands

Provide information about the commands used for configuring Auto VoIP.

Chapter 32 Access Control Commands

Provide information about the commands used for configuring Access Control.

Chapter 33: HTTP and HTTPS Commands

Provide information about the commands used for configuring the HTTP and HTTPS logon.

Chapter 34: SSH Commands

Provide information about the commands used for configuring and managing SSH (Security

Shell).

Chapter 35: Telnet Commands

Provide information about the commands used for configuring and managing SSH (Security

Shell).

Chapter 36: AAA Commands

Provide information about the commands used for configuring AAA (authentication,

authorization and accounting).

Chapter 37: IEEE 802.1X Commands

Provide information about the commands used for configuring IEEE 802.1X function.

Chapter 38 Port Security Commands

Provide information about the commands used for configuring Port Security.

Chapter 39: Port Mirroring Commands

Provide information about the commands used for configuring the Port Mirror function.

Chapter 40: ACL Commands

Provide information about the commands used for configuring the ACL (Access Control List).

Chapter 41: IPv4 IMPB Commands

Provide information about the commands used for binding the IP address, MAC address, VLAN

and the connected Port number of the Host together.

Chapter 42: IPv6 IMPB Commands

Provide information about the commands used for binding the IPv6 address, MAC address,

VLAN and the connected Port number of the Host together.

Chapter 43: IP Verify Source Commands

Provide information about the commands used for guarding the IP Source by filtering the IP

packets based on the IP-MAC Binding entries.

Chapter 44: IPv6 Verify Source Commands

Provide information about the commands used for guarding the IPv6 Source by filtering the IP

packets based on the IP-MAC Binding entries.

Chapter 45: DHCPv4 Filter Commands

Provide information about the commands used for configuring the DHCPv4 Filter.

Chapter 46: DHCPv6 Filter Commands

Provide information about the commands used for configuring the DHCPv6 Filter.

Chapter 47: DoS Defend Command

Provide information about the commands used for DoS defend and detecting the DoS attack.

Chapter 48: DLDP Commands

Provide information about the commands used for configuring the DLDP (Device Link

Detection Protocol).

Chapter 49: SNMP Commands

Provide information about the commands used for configuring the SNMP (Simple Network

Management Protocol) functions.

Chapter 50: ARP Inspection Commands

Provide information about the commands used for protecting the switch from the ARP

cheating or ARP Attack.

Chapter 51: ND Detection Commands

Provide information about the commands used for configuring ND detection.

Chapter 52: System Log Commands

Provide information about the commands used for configuring system log.

Chapter 1 Using the CLI

1.1 Accessing the CLI

You can log on to the switch and access the CLI by logging on to the switch remotely by a

Telnet or SSH connection through an Ethernet port.

1.1.1 Logon by Telnet

To log on to the switch by a Telnet connection, please take the following steps:

1. Click Start and type in cmd in the Search programs and files window and press the Enter

button.

Figure 1-1 Run Window

2. Type in telnet 192.168.0.1 in the cmd window and press Enter.

Figure 1-2 Type in the telnet command

3. Type in the login username and password (both admin by default). Press Enter and you will

enter User EXEC Mode.

Figure 1 3 Log in the Switch

Note: The first time you log in, change the password to better protect your network and

devices.

4. Type in enable command and you will enter Privileged EXEC Mode. By default no password

is needed. Later you can set a password for users who want to access the Privileged EXEC

Mode.

Figure 1-4 Enter into Priviledged EXEC Mode

1.1.2 Logon by SSH

To log on by SSH, a Putty client software is recommended. There are two authentication modes

to set up an SSH connection:

Password Authentication Mode: It requires username and password, which are both admin by default.

Key Authentication Mode: It requires a public key for the switch and a private key for the SSH client software. You can generate the public key and the private key through Putty Key Generator.

Note:

1. Before SSH login, please follow the steps shown in Figure 1-5 to enable the SSH function through Telnet connection.

2. The first time you log in, change the password to better protect your network and devices.

Figure 1-5 Enable SSH function

• Password Authentication Mode

1. Open the software to log on to the interface of PuTTY. Enter the IP address of the switch

into Host Name field; keep the default value 22 in the Port field; select SSH as the

Connection type.

Figure 1-6 SSH Connection Config

2. Click the Open button in the above figure to log on to the switch. Enter the login user name

and password to log on the switch, and then enter enable to enter Privileged EXEC Mode,

so you can continue to configure the switch.

Figure 1-7 Log on the Switch

• Key Authentication Mode

1. Select the key type and key length, and generate SSH key.

Figure 1-8 Generate SSH Key

Note:

1. The key length is in the range of 512 to 3072 bits.

2. During the key generation, randomly moving the mouse quickly can accelerate the key generation.

2. After the key is successfully generated, please save the public key and private key to a

TFTP server.

Figure 1-9 Save the Generated Key

3. Log on to the switch by Telnet and download the public key file from the TFTP server to the

switch, as the following figure shows:

Figure 1-10 Download the Public Key

Note:

1. The key type should accord with the type of the key file.

2. The SSH key downloading can not be interrupted.

4. After the public key is downloaded, please log on to the interface of PuTTY and enter the IP

address for login.

Figure 1-11 SSH Connection Config

5. Click Browse to download the private key file to SSH client software and click Open.

Figure 1-12 Download the Private Key

6. After successful authentication, please enter the login user name. If you log on to the

switch without entering password, it indicates that the key has been successfully

downloaded.

Figure 1-13 Log on the Switch

1.2 CLI Command Modes

The CLI is divided into different command modes: User EXEC Mode, Privileged EXEC Mode,

Global Configuration Mode, Interface Configuration Mode and VLAN Configuration Mode.

Interface Configuration Mode can also be divided into Interface Ethernet, Interface

link-aggregation and some other modes, which is shown as the following diagram.

The following table gives detailed information about the Accessing path, Prompt of each mode

and how to exit the current mode and access the next mode.

mode.

VLAN Configuration mode.

Configuration mode.

Mode Accessing Path Prompt

User EXEC

Mode

Privileged

EXEC Mode

Global

Configuration

Mode

Primary mode once

it is connected with

the switch.

Use the enable

command to enter

this mode from User

EXEC mode.

Use the configure

command to enter

this mode from

Privileged EXEC

mode.

T1700G-28TQ>

T1700G-28TQ#

T1700G-28TQ(config)#

Logout or Access the next

mode

Use the exit command to

disconnect the switch.

Use the enable command to

access Privileged EXEC mode.

Enter the disable or the exit

command to return to User

EXEC mode.

Enter configure command to

access Global Configuration

Use the exit or the end

command or press Ctrl+Z to

return to Privileged EXEC mode.

Use the interface

port

gigabitEthernet

interface range

gigabitEthernet

command to access interface

Configuration mode.

port-list

Interface

Configuration

Mode

Layer 2 Interface:

Use the interface

gigabitEthernet

port,

interface

port-channel

port-channel-id

interface range

gigabitEthernet

port-list

to enter this mode

from Global

command

T1700G-28TQ (config-if)#

T1700G-28TQ(config-if-range)#

Use the vlan

Use the end command or press Ctrl+Z to return to Privileged EXEC mode.

Enter the exit or the # command to return to Global Configuration mode.

A port number must be

specified in the interface

command.

vlan-list

to access

Configuration mode.

list

configuration mode.

Mode Accessing Path Prompt

Layer 3 Interface:

Use the no

switchport

command to enter Routed Port mode from Interface Configuration mode.

Interface

Configuration

Mode

Use the interface

vlan-id

vlan command to enter VLAN Interface mode from Global Configuration mode.

Use the interface

loopback

command to enter

Loopback Interface

mode from Global

T1700G-28TQ (config-if)#

T1700G-28TQ(config-if-range)#

Logout or Access the next

mode

Use the switchport command to switch to the Layer 2 interface mode.

Use the end command or press Ctrl+Z to return to Privileged EXEC mode.

Enter the exit or the # command

to return to Global Configuration

mode.

VLAN

Configuration

Mode

Use the vlan

command to enter

this mode from

Global Configuration

mode.

vlan-

T1700G-28TQ (config-vlan)#

Use the end command or press

Ctrl+Z to return to Privileged

EXEC mode.

Enter the exit command or the #

command to return to Global

Each command mode has its own set of specific commands. To configure some

Interface gigabitEthernet: Configure parameters for an Ethernet port, such as

Display all information of switch, for example: statistic information, port

• history: Display the commands history.

Note:

1. The user is automatically in User EXEC Mode after the connection between the PC and the switch is established by a Telnet/SSH connection.

2. commands, you should access the corresponding command mode firstly.

• Global Configuration Mode: In this mode, global commands are provided, such as the

Spanning Tree, Schedule Mode and so on.

• Interface Configuration Mode: In this mode, users can configure one or several ports,

different ports corresponds to different commands

a).

Duplex-mode, flow control status.

b). Interface range gigabitEthernet: Configure parameters for several Ethernet ports.

c). Interface link-aggregation: Configure parameters for a link-aggregation, such as

broadcast storm.

d). Interface range link-aggregation: Configure parameters for multi-trunks.

e). Interface vlan: Configure parameters for the vlan-port.

• VLAN Configuration Mode: In this mode, users can create a VLAN and add a specified

port to the VLAN.

3. Some commands are global, that means they can be performed in all modes:

• show:

information, VLAN information.

1.3 Privilege Restrictions

This switch’s security is divided into four privilege levels: User level, Power User level, Operator

level and Admin level. You can define username and password pairs, and assign a specific

privilege level to each pair. Different privilege levels have access to specified commands,

which is illustrated in the Privilege Requirement in each command. For details about how to

configure usename and password pairs, please refer to user name (password) and

(secret).

Users can enter Privileged EXEC mode from User EXEC mode by using the enable command. In

default case, no password is needed. In Global Configuration Mode, you can configure

user name

password for Admin level by enable password command. Once password is configured, you

are required to enter it to access Privileged EXEC mode.

1.4 Conventions

1.4.1 Format Conventions

The following conventions are used in this Guide:

• Items in square brackets [ ] are optional

• Items in braces { } are required

• Alternative items are grouped in braces and separated by vertical bars. For example:

speed {10 | 100 | 1000 }

• Bold indicates an unalterable keyword. For example: show logging

• Normal Font indicates a constant (several options are enumerated and only one can be

selected). For example: mode {dynamic | static | permanent}

• Italic Font indicates a variable (an actual value must be assigned). For example: bridge

aging-time

1.4.2 Special Characters

You should pay attentions to the description below if the variable is a character string:

• These six characters ” < > , \ & cannot be input.

• If a blank is contained in a character string, single or double quotation marks should be

used, for example ’hello world’, ”hello world”, and the words in the quotation marks will be

identified as a string. Otherwise, the words will be identified as several strings.

1.4.3 Parameter Format

Some parameters must be entered in special formats which are shown as follows:

• MAC address must be enter in the format of xx:xx:xx:xx:xx:xx.

• One or several values can be typed for a port-list or a vlan-list using comma to separate.

Use a hyphen to designate a range of values, for instance, 1/0/1, 1/0/3-5, 1/0/7 indicates

choosing port 1/0/1, 1/0/3, 1/0/4, 1/0/5, 1/0/7.

Chapter 2 User Interface

2.1 enable

Description

The enable command is used to access Privileged EXEC Mode from User EXEC Mode.

Syntax

enable

Command Mode

User EXEC Mode

Privilege Requirement

None.

Example

If you have set the password to access Privileged EXEC Mode from User EXEC Mode:

T1700G-28TQ>enable

Enter password

T1700G-28TQ#

2.2 service password-encryption

Description

The service password-encryption command is used to encrypt the

password when the password is defined or when the configuration is written,

using the symmetric encryption algorithm. Encryption prevents the password

from being readable in the configuration file. To disable the global encryption

Syntax

function, please use no service password-encryption command.

service password-encryption

no service password-encryption

Command Mode

Global Configuration Mode

Privilege Requirement

Only Admin level users have access to these commands.

Example

Enable the global encryption function:

T1700G-28TQ(config)# service password-encryption

2.3 enable password

Description

The enable password command is used to set or change the password for

users to access Privileged EXEC Mode from User EXEC Mode. To remove the

password, please use no enable password command. This command uses

the symmetric encryption.

Syntax

enable password { [ 0 ]

no enable password

Parameter

0 —— Specify the encryption type. 0 indicates that an unencrypted password

will follow. By default, the encryption type is 0.

password

can contain only English letters (case-sensitive), digits and 17 kinds of special

characters. The special characters are !$%’()*,-./[]_{|}. By default, it is empty.

7 —— Indicates a symmetric encrypted password with fixed length will follow.

encrypted-password

which you can copy from another switch’s configuration file. After the

password

—— Super password, a string with 31 characters at most, which

—— A symmetric encrypted password with fixed length,

| 7

encrypted-password

}

encrypted password is configured, you should use the corresponding

unencrypted password if you re-enter this mode.

Command Mode

Global Configuration Mode

Privilege Requirement

Only Admin level users have access to these commands.

User Guidelines

If the password you configured here is unencrypted and the global

encryption function is enabled in service password-encryption

in the configuration file will be displayed in the symmetric encrypted form.

If both the enable password and enable secret are defined, only the latest

configured password will take effect.

Example

Set the super password as “admin” and unencrypted to access Privileged

EXEC Mode from User EXEC Mode:

T1700G-28TQ(config)#enable password 0 admin

2.4 enable secret

Description

The enable secret command is used to set a secret password, which is using

an MD5 encryption algorithm, for users to access Privileged EXEC Mode from

, the password

User EXEC Mode. To return to the default configuration, please use no enable

secret command. This command uses the MD5 encryption.

Syntax

enable secret { [ 0 ]

no enable secret

Parameter

0 —— Specify the encryption type. 0 indicates that an unencrypted password

will follow. By default, the encryption type is 0.

password

can contain only English letters (case-sensitive), digits and 17 kinds of special

characters. The special characters are !$%’()*,-./[]_{|}. By default, it is empty.

5 —— Indicates an MD5 encrypted password with fixed length will follow.

encrypted-password

which you can copy from another switch’s configuration file. After the

password

—— Super password, a string with 31 characters at most, which

—— An MD5 encrypted password with fixed length,

| 5

encrypted-password

}

encrypted password is configured, you should use the corresponding

unencrypted password if you re-enter this mode.

Command Mode

Global Configuration Mode

Privilege Requirement

Only Admin level users have access to these commands.

User Guidelines

If both the enable password and enable secret are defined, only the latest

configured password will take effect.

Example

Set the secret password as “admin” and unencrypted to access Privileged

EXEC Mode from User EXEC Mode. The password will be displayed in the

encrypted form.

T1700G-28TQ(config)#enable secret 0 admin

2.5 configure

Description

The configure command is used to access Global Configuration Mode from Privileged EXEC Mode.

Syntax

configure

Command Mode

Privileged EXEC Mode

Privilege Requirement

Only Admin, Operator and Power User level users have access to these commands.

Example

Access Global Configuration Mode from Privileged EXEC Mode:

T1700G-28TQ# configure

T1700G-28TQ(config)#

2.6 exit

Description

The exit command is used to return to the previous Mode from the current Mode.

Syntax

exit

Command Mode

Privileged EXEC Mode and Any Configuration Mode

Privilege Requirement

None.

Example

Return to Global Configuration Mode from Interface Configuration Mode, and then return to Privileged EXEC Mode:

T1700G-28TQ(config-if)# exit

T1700G-28TQ(config)#exit

T1700G-28TQ#

2.7 end

Description

The end command is used to return to Privileged EXEC Mode.

Syntax

end

Command Mode

Privileged EXEC Mode and Any Configuration Mode

Privilege Requirement

Only Admin level users have access to these commands.

Example

Return to Privileged EXEC Mode from Interface Configuration Mode:

T1700G-28TQ(config-if)#end

T1700G-28TQ#

2.8 clipaging

Description

The clipaging command is used to enable the pause function for the screen display. If you want to display all the related information of the switch at once when using the show command, please use no clipaging command.

Syntax

clipaging

no clipaging

Command Mode

Privileged EXEC Mode and Any Configuration Mode

Privilege Requirement

None.

Example

Disable the pause function for the screen display:

T1700G-28TQ(config)#no clipaging

2.9 history

Description

The history command is used to show the latest 20 commands you entered

in the current mode since the switch is powered.

Syntax

history

Command Mode

Privileged EXEC Mode and any Configuration Mode

Privilege Requirement

None.

Example

Show the commands you have entered in the current mode:

T1700G-28TQ (config)# history

1 history

2.10 history clear

Description

The history clear command is used to clear the commands you have entered

in the current mode; therefore, these commands will not be shown next time

you use the history command.

Syntax

history clear

Command Mode

Privileged EXEC Mode and any Configuration Mode

Privilege Requirement

Only Admin, Operator and Power User level users have access to these commands.

Example

Clear the commands you have entered in the current mode:

T1700G-28TQ(config)#history clear

Chapter 3 Stack

The stack technology is to connect multiple stackable devices through their StackWise ports,

forming a stack which works as a unified system and presents as a single entity to the network.

This chapter describes how to manage the switch stacks.

3.1 switch priority

Description

The switch priority command is used to specify a new priority value for the

stack member. By default, the priority value is 5. To restore the priority of the

specified stack member to the default value, please use no switch priority

command.

Syntax

swtich

no switch

unitid

priority

Parameter

unitid

—— Specify the unit ID of the stack member whose priority value need

to be changed. Valid values are from 1 to 6.

priority

A higher priority value for a stack member increases its likelihood of being

elected the stack master.

—— Specify the member’s priority value. Valid values are from 1 to 15.

Command Mode

Global Configuration Mode

Privilege Requirement

Only Admin, Operator and Power User level users have access to these

priority

commands.

User Guidelines

The new priority value takes effect immediately but does not affect the

current stack master. The new priority helps determine which stack member

is elected as the new stack master when a re-election occurs.

Example

Specify the unit 1’s priority as 10 in the stack:

T1700G-28TQ(config)# switch 1 priority 10

3.2 switch renumber

Description

The switch renumber command is modify the member number of a specified

stack member.

Syntax

swtich

unitid

renumber {

Parameter

unitid

—— Specify the unit ID of the stack member that you want to renumber.

Valid values are from 1 to 6.

newid

from 1 to 6.

auto-numbering —— The specified member will obtain its stack number

through auto-numbering.

—— Specify the new unit ID for the stack member. Valid values are

Command Mode

Global Configuration Mode

Privilege Requirement

Only Admin, Operator and Power User level users have access to these

commands.

newid

| auto-numbering }

Example

Modify the unit 1’s new member number as 2:

T1700G-28TQ(config)# switch 1 renumber 2

3.3 switch stack-port

Description

The switch stack-port command is used to enable the stack port. To switch

the stack port to Ethernet port, please use no switch stack-port command.

Port 1/0/25 and port 1/0/26 are in Stack Port Group 0 and 1/0/27 and 1/0/28

are in Stack Group 1. Stack feature can only be enabled in one group at a

time.

Syntax

swtich stack-port interface ten-gigabitEthernet

no switch stack-port interface ten-gigabitEthernet

Parameter

port

—— Specify the port number of a ten-gigabit port to configure.

Command Mode

Global Configuration Mode

Privilege Requirement

Only Admin, Operator and Power User level users have access to these

commands.

Example

Specify the ten-gigabit port 1/0/28 as a stack port:

T1700G-28TQ(config)# switch stack-port interface ten-gigabitEthernet

port

1/0/28

3.4 switch provision

Description

The switch provision command is used to configure the provisioned stack

member. The provision configuration feature enables you to configure a new

switch in advance before it joins the stack, which means you can configure

the stack unit number and its switch type which is not currently the stack

member.

The information of the provisioned member is manually created, or

created/updated by the switch member when it joins the stack. The

provisioned configuration retains in the stack when the stack member leaves

the stack.

Syntax

swtich

unitid

provision

type

unitid

no switch

provision

Parameter

unitid

—— Specify a unit ID for the provisioned switch.

type

—— Enter the model number and hardware version of the provisioned

switch. You can enter a question mark ? to view the supported models.

Command Mode

Global Configuration Mode

Privilege Requirement

Only Admin, Operator and Power User level users have access to these

commands.

Privilege Requirement

Only Admin level users have access to these commands.

Example

Create a provisioned switch whose stack member number is 2 and device

type is T1700G-28TQRev3:

T1700G-28TQ(config)# switch 2 provision T1700G-28TQRev3

3.5 show switch

Description

The show switch command is used to display the current stack’s information.

Syntax

show switch [

Parameter

unitid

—— Specify the unit ID of the member.

unitid

| detail | neighbors | stack-ports ]

detail —— Displays the detailed information of the stack, including stack

member, stack port and neighboring information.

neighbors —— Displays the information of the stack neighbor.

stack-ports —— Displays the information of the stack ports.

Command Mode

Privileged EXEC Mode and any Configuration Mode

Privilege Requirement

None.

Example

Display the detailed information of the current stack:

T1700G-28TQ(config)# show switch detail

Chapter 4 User Management Commands

User Management commands are used to manage the user’s logging information by Web,

Telnet or SSH, so as to protect the settings of the switch from being randomly changed.

4.1 user name (password)

Description

The user name command is used to add a new user or modify the existed

users’ information. To delete the existed users, please use no user name

command. This command uses the symmetric encryption.

Syntax

user name

{ [ 0 ]

no user name

Parameter

name

composed of digits, English letters and under dashes only.

admin | operator | power_user | user —— Access level. “admin” means that

you can edit, modify and view all the settings of different functions. “operator”

means that you can edit, modify and view most of the settings of different

functions. “power-user” means that you can edit, modify and view some of

the settings of different functions. “user” means that you can only view some

of the settings of different functions without the right to edit or modify. It is

“admin” by default. For more details about privilege restrictions, please refer

to the Privilege Requirement part in each command.

0 —— Specify the encryption type. 0 indicates that an unencrypted password

name

[ privilege admin | operator | power_user | user ] password

password

| 7

encrypted-password

}

name

——Type a name for users' login, which contains 16 characters at most,

will follow. By default, the encryption type is 0.

password

characters or symbols. The password is case sensitive, allows digits, English

letters (case sensitive), underlines and sixteen special characters

( !$%'()*,-./[]{|} ).

7 —— Indicates a symmetric encrypted password with fixed length will follow.

encrypted-password

which you can copy from another switch’s configuration file. After the

—— Users’ login password, a string from 1 to 31 alphanumeric

—— A symmetric encrypted password with fixed length,

encrypted password is configured, you should use the corresponding

unencrypted password if you re-enter this mode.

Command Mode

Global Configuration Mode

Privilege Requirement

Only Admin level users have access to these commands.

User Guidelines

If the password you configured here is unencrypted and the global

encryption function is enabled in service password-encryption

in the configuration file will be displayed in the symmetric encrypted form.

If both the user name (password) and user name (secret) are defined, only the

latest configured password will take effect.

Example

Add and enable a new admin user named “tplink”, of which the password is

, the password

“admin” and unencrypted:

T1700G-28TQ(config)#user name tplink privilege admin password 0 admin

4.2 user name (secret)

Description

The user name command is used to add a new user or modify the existed

users’ information. To delete the existed users, please use no user name

command. This command uses the MD5 encryption.

Syntax

user name

password

no user name

Parameter

name

[ privilege admin | operator | power_user | user ] secret { [ 0 ]

| 5

encrypted-password

name

}

name

——Type a name for users' login, which contains 16 characters at most,

composed of digits, English letters and under dashes only.

admin | operator | power_user | user —— Access level. “admin” means that

you can edit, modify and view all the settings of different functions. “operator”

means that you can edit, modify and view most of the settings of different

functions. “power-user” means that you can edit, modify and view some of

the settings of different functions. “user” means that you can only view some

of the settings of different functions without the right to edit or modify. It is

“admin” by default.

0 —— Specify the encryption type. 0 indicates that an unencrypted password

will follow. By default, the encryption type is 0.

password

characters or symbols. The password is case sensitive, allows digits, English

letters (case sensitive), underlines and sixteen special characters

( !$%'()*,-./[]{|} ). The password will be saved to the configuration file using the

MD5 encrypted algorithm.

5 —— Indicates an MD5 encrypted password with fixed length will follow.

——Users’ login password, a string from 1 to 31 alphanumeric

encrypted-password

which you can copy from another switch’s configuration file.

Command Mode

Global Configuration Mode

Privilege Requirement

Only Admin level users have access to these commands.

User Guidelines

If both the user name (password) and user name (secret) are defined, only

—— An MD5 encrypted password with fixed length,

the latest configured password will take effect.

Example

Add and enable a new admin user named “tplink”, of which the password is

“admin”. The password will be displayed in the encrypted form.

T1700G-28TQ(config)#user name tplink privilege admin secret 0 admin

4.3 show user account-list

Description

The show user account-list command is used to display the information of

the current users.

Syntax

show user account-list

Command Mode

Privileged EXEC Mode and Any Configuration Mode

Privilege Requirement

Only Admin level users have access to these commands.

Example

Display the information of the current users:

T1700G-28TQ(config)# show user account-list

4.4 show user configuration

Description

The show user configuration command is used to display the security

configuration information of the users, including access-control, max-number

and the idle-timeout, etc.

Syntax

show user configuration

Command Mode

Privileged EXEC Mode and Any Configuration Mode

Privilege Requirement

None.

Example

Display the security configuration information of the users:

T1700G-28TQ(config)# show user configuration

Chapter 5 System Configuration Commands

System Commands can be used to configure the System information and System IP, reboot

and reset the switch, upgrade the switch system and other operations.

5.1 system-time manual

Description

The system-time manual command is used to configure the system time

manually.

Syntax

system-time manual

time

Parameter

time

—— Set the date and time manually, MM/DD/YYYY-HH:MM:SS. The valid

value of the year ranges from 2000 to 2037.

Command Mode

Global Configuration Mode

Privilege Requirement

Only Admin and Operator level users have access to these commands.

Example

Configure the system mode as manual, and the time is 12/20/2010 17:30:35

T1700G-28TQ(config)# system-time manual 12/20/2010-17:30:35

5.2 system-time ntp

Description

The system-time ntp command is used to configure the time zone and the IP address for the NTP Server. The switch will get UTC automatically if it has connected to an NTP Server.

Syntax

system-time ntp {

fetching-rate

{

Parameter

timezone

UTC+13:00.

timezone

}

—— Your local time-zone, and it ranges from UTC-12:00 to

} {

ntp-server

} {

backup-ntp-server

}

The detailed information that each time-zone means are displayed as follow:

UTC-12:00 —— TimeZone for International Date Line West.

UTC-11:00 —— TimeZone for Coordinated Universal Time-11.

UTC-10:00 —— TimeZone for Hawaii.

UTC-09:00 —— TimeZone for Alaska.

UTC-08:00 —— TimeZone for Pacific Time(US Canada).

UTC-07:00 —— TimeZone for Mountain Time(US Canada).

UTC-06:00 —— TimeZone for Central Time(US Canada).

UTC-05:00 —— TimeZone for Eastern Time(US Canada).

UTC-04:30 —— TimeZone for Caracas.

UTC-04:00 —— TimeZone for Atlantic Time(Canada).

UTC-03:30 —— TimeZone for Newfoundland.

UTC-03:00 —— TimeZone for Buenos Aires, Salvador, Brasilia.

UTC-02:00 —— TimeZone for Mid-Atlantic.

UTC-01:00 —— TimeZone for Azores, Cape Verde Is.

UTC —— TimeZone for Dublin, Edinburgh, Lisbon, London.

UTC+01:00 —— TimeZone for Amsterdam, Berlin, Bern, Rome, Stockholm,

Vienna.

UTC+02:00 —— TimeZone for Cairo, Athens, Bucharest, Amman, Beirut,

Jerusalem.

UTC+03:00 —— TimeZone for Kuwait, Riyadh, Baghdad.

UTC+03:30 —— TimeZone for Tehran.

UTC+04:00 —— TimeZone for Moscow, St.Petersburg, Volgograd, Tbilisi,

Port Louis.

UTC+04:30 —— TimeZone for Kabul.

UTC+05:00 —— TimeZone for Islamabad, Karachi, Tashkent.

UTC+05:30 —— TimeZone for Chennai, Kolkata, Mumbai, New Delhi.

UTC+05:45 —— TimeZone for Kathmandu.

UTC+06:00 —— TimeZone for Dhaka,Astana, Ekaterinburg.

UTC+06:30 —— TimeZone for Yangon (Rangoon).

UTC+07:00 —— TimeZone for Novosibrisk, Bangkok, Hanoi, Jakarta.

UTC+08:00—— TimeZone for Beijing, Chongqing, Hong Kong, Urumqi,

Singapore.

UTC+09:00 —— TimeZone for Seoul, Irkutsk, Osaka, Sapporo, Tokyo.

UTC+09:30 —— TimeZone for Darwin, Adelaide.

UTC+10:00 —— TimeZone for Canberra, Melbourne, Sydney, Brisbane.

UTC+11:00 —— TimeZone for Solomon Is., New Caledonia, Vladivostok.

UTC+12:00 —— TimeZone for Fiji, Magadan, Auckland, Welington.

UTC+13:00 —— TimeZone for Nuku'alofa, Samoa.

ntp-server

—— The IP address for the Primary NTP Server.

backup-ntp-server

fetching-rate

—— Specify the rate fetching time from NTP server.

Command Mode

Global Configuration Mode

Privilege Requirement

Only Admin and Operator level users have access to these commands.

Example

Configure the system time mode as NTP, the time zone is UTC-12:00, the

primary NTP server is 133.100.9.2 and the secondary NTP server is

139.78.100.163, the fetching-rate is 11 hours:

T1700G-28TQ(config)# system-time ntp UTC-12:00 133.100.9.2

139.79.100.163 11

—— The IP address for the Secondary NTP Server.

5.3 system-time dst predefined

Description

The system-time dst predefined command is used to select a daylight

saving time configuration from the predefined mode. The configuration can

be used recurrently. To disable DST function, please use no system-time dst

command.

Syntax

system-time dst predefined [ USA

no system-time dst

Parameter

USA

There are 4 options which are USA, Australia, Europe and New-Zealand

respectively. The default value is Europe.

Following are the time ranges of each option:

Australia | Europe | New-Zealand —— The mode of daylight saving time.

Australia | Europe | New-Zealand ]

USA —— Second Sunday in March, 02:00 ~ First Sunday in November, 02:00.

Australia —— First Sunday in October, 02:00 ~ First Sunday in April, 03:00.

Europe —— Last Sunday in March, 01:00 ~ Last Sunday in October, 01:00.

New Zealand —— Last Sunday in September, 02:00 ~ First Sunday in April,

03:00.

Command Mode

Global Configuration Mode

Privilege Requirement

Only Admin and Operator level users have access to these commands.

Example

Configure the daylight saving time as USA standard:

T1700G-28TQ(config)#system-time dst predefined USA

5.4 system-time dst date

Description

The system-time dst date command is used to configure the one-off

daylight saving time. The start date is in the current year by default. The time

range of the daylight saving time must shorter than one year, but you can

configure it spanning years. To disable DST function, please use no

system-time dst command.

Syntax

system-time dst date {

{

etime

no system-time dst

Parameter

smonth

showing as follows: Jan, Feb, Mar, Apr, May, Jun, Jul, Aug, Sep, Oct, Nov, Dec.

sday

you should show special attention to February and the differences between a

solar month and a lunar month.

stime

syear

smonth

} {

eyear }[offset ]

——The start month of the daylight saving time. There are 12 values

—— The start day of the daylight saving time, ranging from 1 to 31. Here

—— The start moment of the daylight saving time, HH:MM.

—— The start year of the daylight saving time.

} {

sday

} {

stime

} {

syear

} {

emonth

} {

eday

}

emonth

showing as follows: Jan, Feb, Mar, Apr, May, Jun, Jul, Aug, Sep, Oct, Nov, Dec.

eday

you should show special attention to February and the differences between a

solar month and a lunar month.

etime

eyear

—— The end month of the daylight saving time. There are 12 values

—— The end day of the daylight saving time, ranging from q to 31. Here

—— The end moment of the daylight saving time, HH:MM.

—— The end year of the daylight saving time.

offset

—— The number of minutes to add during the daylight saving time. It is

60 minutes by default.

Command Mode

Global Configuration Mode

Privilege Requirement

Only Admin and Operator level users have access to these commands.

Example

Configure the daylight saving time from zero clock, Apr 1st to zero clock Oct

1st and the offset is 30 minutes in 2015:

T1700G-28TQ(config)# system-time dst date Apr 1 00:00 2015 Oct 1 00:00

2015 30

5.5 system-time dst recurring

Description

The system-time dst recurring command is used to configure the recurring

daylight saving time. It can be configured spanning years. To disable DST

function, please use no system-time dst command.

Syntax

system-time dst recurring {

{

emonth

no system-time dst

Parameter

sweek

showing as follows: first, second, third, fourth, last.

sday

showing as follows: Sun, Mon, Tue, Wed, Thu, Fri, Sat.

smonth

showing as follows: Jan, Feb, Mar, Apr, May, Jun, Jul, Aug, Sep, Oct, Nov, Dec.

sweek

} {

etime

} [

offset

]

——The start week of the daylight saving time. There are 5 values

—— The start day of the daylight saving time. There are 7 values

—— The start month of the daylight saving time. There are 12 values

} {

sday

} {

smonth

} {

stime

} {

eweek

} {

eday}

stime

—— The start moment of the daylight saving time, HH:MM.

eweek

showing as follows: first, second, third, fourth, last.

eday

showing as follows: Sun, Mon, Tue, Wed, Thu, Fri, Sat.

——The end week of the daylight saving time. There are 5 values

—— The end day of the daylight saving time. There are 5 values

emonth

showing as following: Jan, Feb, Mar, Apr, May, Jun, Jul, Aug, Sep, Oct, Nov,

Dec.

etime

offset

60 minutes by default.

—— The end month of the daylight saving time. There are 12 values

—— The end moment of the daylight saving time, HH:MM.

—— The number of minutes to add during the daylight saving time. It is

Command Mode

Global Configuration Mode

Privilege Requirement

Only Admin and Operator level users have access to these commands.

Example

Configure the daylight saving time from 2:00am, the first Sunday of May to

2:00am, the last Sunday of Oct and the offset is 45 minutes:

T1700G-28TQ(config)# system-time dst recurring first Sun May 02:00 last

Sun Oct 02:00 45

5.6 hostname

Description

The hostname command is used to configure the system name. To clear the

system name information, please use no hostname command.

Syntax

hostname [

no hostname

Parameter

hostname

characters. By default, it is the device name, for example “T1700G-28TQ”.

Command Mode

—— System Name. The length of the name ranges from 1 to 32

hostname

]

Global Configuration Mode

Privilege Requirement

Only Admin and Operator level users have access to these commands.

Example

Configure the system name as TPLINK:

T1700G-28TQ(config)# hostname TPLINK

5.7 location

Description

The location command is used to configure the system location. To clear the

system location information, please use no location command.

Syntax

location [

no location

location

Parameter

location

most. It is “SHENZHEN” by default.

—— Device Location. It consists of 32 characters at

Command Mode

Global Configuration Mode

Privilege Requirement

Only Admin and Operator level users have access to these commands.

Example

Configure the system location as SHENZHEN:

T1700G-28TQ(config)# location SHENZHEN

]

5.8 contact-info

Description

The contact-info command is used to configure the system contact

information. To clear the system contact information, please use no

contact-info command.

Syntax

contact-info [

no contact-info

Parameter

contact_info

is “www.tp-link.com” by default.

contact_info

—— Contact Information. It consists of 32 characters at most. It

]

Command Mode

Global Configuration Mode

Privilege Requirement

Only Admin and Operator level users have access to these commands.

Example

Configure the system contact information as www.tp-link.com:

T1700G-28TQ(config)# contact-info www.tp-link.com

5.9 ip address

Description

This ip address command is used to configure the IP address and IP subnet

mask for the specified interface manually. The interface type includes: routed

port, port-channel interface, loopback interface and VLAN interface.

Syntax

ip address {

no ip address [

ip-addr

Parameter

ip-addr

mask

secondary —— Specify the interface’s secondary IP address. If this

parameter is omitted here, the configured IP address is the interface’s

primary address.

—— The IP address of the Layer 3 interface.

—— The subnet mask of the Layer 3 interface.

Command Mode

Interface Configuration Mode

Privilege Requirement

} {

mask

} [ secondary ]

] [

mask

]

Only Admin, Operator and Power User level users have access to these commands.

Example

Create the VLAN interface 2 with the primary IP address as 192.168.1.1/24

and secondary IP address as 192.168.2.1/24:

T1700G-28TQ(config)# interface vlan 2

T1700G-28TQ(config-if)# ip address 192.168.1.1 255.255.255.0

T1700G-28TQ(config-if)# ip address 192.168.2.1 255.255.255.0 secondary

5.10 ip address-alloc

Description

The IP address-alloc command is used to enable the DHCP Client function or

the BOOTP Protocol. When this function is enabled, the specified interface

will obtain IP from DHCP Server or BOOTP server. To disable the IP obtaining

function on the specified interface, please use the no ip address command.

This command applies to the routed port, the port-channel interface and the

VLAN interface.

Syntax

ip address-alloc { dhcp | bootp }

no ip address

Parameter

dhcp —— Specify the Layer 3 interface to obtain IP address from the DHCP

Server.

bootp

—— Specify the Layer 3 interface to obtain IP address from the

BOOTP Server.

Command Mode

Interface Configuration Mode

Privilege Requirement

Only Admin, Operator and Power User level users have access to these commands.

Example

Enable the DHCP Client function on the Lay 3 routed port 1/0/1:

T1700G-28TQ(config)# interface gigabitEthernet 1/0/1

T1700G-28TQ(config-if)# no switchport

T1700G-28TQ(config-if)# ip address-alloc dhcp

Disable the IP address obtaining function on the VLAN interface 2:

T1700G-28TQ(config)# interface vlan 2

T1700G-28TQ(config-if)# no ip address

5.11 reset

Description

The reset command is used to reset the switch’s software. After resetting, all

configuration of the switch will restore to the factory defaults and your

current settings will be lost.

Syntax

reset

Command Mode

Privileged EXEC Mode

Privilege Requirement

Only Admin level users have access to these commands.

Example

Reset the software of the switch:

T1700G-28TQ# reset

5.12 reboot

Description

The reboot command is used to reboot the Switch. To avoid damage, please

don’t turn off the device while rebooting.

Syntax

reboot

Command Mode

Privileged EXEC Mode

Privilege Requirement

Only Admin level users have access to these commands.

Example

Reboot the switch:

T1700G-28TQ# reboot

5.13 reboot-schedule

Description

This reboot-schedule command is used to configure the switch to reboot at

a certain time point. To delete the reboot schedule settings, please use the

reboot-schedule cancel command.

Syntax

reboot-schedule at

reboot-schedule in

reboot-schedule cancel

Parameter

time

—— Specify the time point for the switch to reboot, in the format of

date

—— Specify the date for the switch to reboot, in the format of

DD:MM:YYYY. The date should be within 30 days.

save_before_reboot

interval

from 1 to 43200 minutes.

cancel —— Delete the reboot schedule settings.

—— Specify a time period after which the switch reboots. It ranges

Command Mode

hh:mm.

time [ date

interval

—— Save the configuration file before the switch

] [ save_before_reboot ]

[ save_before_reboot ]

reboots.

Global Configuration Mode

Privilege Requirement

Only Admin level users have access to these commands.

User Guidelines

In the command reboot-schedule at

no date is specified and the time you set here is later than the time that this

command is executed, the switch will reboot later that day; otherwise the

switch will reboot at the time point the next day.

Example

Specify the switch to save the configuration files and reboot in 200 minutes:

T1700G-28TQ(config)# reboot-schedule in 200 save_before_reboot

time [ date

] [ save_before_reboot ], if

5.14 copy running-config startup-config

Description

The copy running-config startup-config command is used to save the

current settings.

Syntax

copy running-config startup-config

Command Mode

Privileged EXEC Mode

Privilege Requirement

Only Admin and Operator level users have access to these commands.

Example

Save current settings:

T1700G-28TQ# copy running-config startup-config

5.15 copy startup-config tftp

Description

The copy startup-config tftp command is used to backup the configuration

file to TFTP server.

Syntax

copy startup-config tftp ip-address

Parameter

ip-addr

supported, for example 192.168.0.1 or fe80::1234.

name

—— IP Address of the TFTP server. Both IPv4 and IPv6 addresses are

—— Specify the name for the configuration file which would be backup.

Command Mode

ip-addr

filename

name

Privileged EXEC Mode

Privilege Requirement

Only Admin and Operator level users have access to these commands.

Example

Backup the configuration files to TFTP server with the IP 192.168.0.148 and

name this file config.cfg:

T1700G-28TQ# copy startup-config tftp ip-address 192.168.0.148 filename

config

Backup the configuration files to TFTP server with the IP fe80::1234 and name

this file config.cfg:

T1700G-28TQ# copy startup-config tftp ip-address fe80::1234 filename

config

5.16 copy tftp startup-config

Description

The copy tftp startup-config command is used to download the

configuration file to the switch from TFTP server.

Syntax

copy tftp startup-config ip-address

ip-addr

filename

name

Parameter

ip-addr

supported, for example 192.168.0.1 or fe80::1234.

name

downloaded.

—— IP Address of the TFTP server. Both IPv4 and IPv6 addresses are

—— Specify the name for the configuration file which would be

Command Mode

Privileged EXEC Mode

Privilege Requirement

Only Admin level users have access to these commands.

Example

Download the configuration file named as config.cfg to the switch from TFTP

server with the IP 192.168.0.148:

T1700G-28TQ# copy tftp startup-config ip-address 192.168.0.148 filename

config

Download the configuration file named as config.cfg to the switch from TFTP

server with the IP fe80::1234

T1700G-28TQ# copy tftp startup-config ip-address fe80::1234 filename

config

5.17 copy backup-config tftp

Description

The copy backup-config tftp command is used to export the backup

configuration file of the switch to TFTP server.

Syntax

copy backup-config tftp ip-address

Parameter

ip-addr

supported, for example 192.168.0.1 or fe80::1234.

name

—— IP Address of the TFTP server. Both IPv4 and IPv6 addresses are

—— Specify the name for the configuration file which would be exported.

Command Mode

Privileged EXEC Mode

Privilege Requirement

Only Admin level users have access to these commands.

Example

Export the backup configuration file of the switch to the TFTP server with the

IP 192.168.0.148 and name the file config.cfg:

T1700G-28TQ# copy backup-config tftp ip-address 192.168.0.148 filename

ip-addr

filename

name

config

5.18 copy backup-config startup-config

Description

The copy backup-config startup-config command is used to replace the

startup configuration file using the backup configuration file.

Syntax

copy backup-config startup-config

Command Mode

Privileged EXEC Mode

Privilege Requirement

Only Admin level users have access to these commands.

Example

Replace the startup configuration file using the backup configuration file.:

T1700G-28TQ# copy backup-config startup-config

5.19 copy running-config backup-config

Description

The copy running-config backup-config tftp command is used to save the

current running configuration as the backup configuration file.

Syntax

copy running-config backup-config

Command Mode

Privileged EXEC Mode

Privilege Requirement

Only Admin level users have access to these commands.

Example

Save the current running configuration as the backup configuration file.

T1700G-28TQ# copy running-config backup-config

5.20 copy tftp backup-config

Description

The copy tftp backup-config command is used to download the backup

configuration file from a TFTP server.

Syntax

Copy tftp backup-config ip-address

Parameter

ip-addr

filename

name

ip-addr

supported, for example 192.168.0.1 or fe80::1234.

name

downloaded.

—— IP Address of the TFTP server. Both IPv4 and IPv6 addresses are

—— Specify the name for the configuration file which would be

Command Mode

Privileged EXEC Mode

Privilege Requirement

Only Admin level users have access to these commands.

Example

Download the configuration file named config.cfg from the TFTP server with

the IP 192.168.0.148:

T1700G-28TQ# copy tftp backup-config ip-address 192.168.0.148 filename

config

5.21 boot application

Description

The boot application command is used to configure the image file as startup

image or backup image.

Syntax

boot application filename { image1 | image 2 } { startup | backup }

no boot application

Parameter

image1 | image2 —— Specify the image file to be configured. By default, the

image1.bin is the startup image and the image2.bin is the backup image.

startup | backup —— Specify the property of the image, either startup image

or backup image.

Command Mode

Global Configuration Mode

Privilege Requirement

Only Admin level users have access to these commands.

Example

Configure the image2.bin as the startup image:

T1700G-28TQ(config)# boot application filename image2 startup

5.22 boot config

Description

The boot config command is used to configure the configuration file as

startup configuration or backup configuration.

Syntax

boot config filename { config1 | config 2 } { startup | backup }

no boot application

Parameter

config1 | config2 —— Specify the configuration file to be configured. By

default, the config1.cfg is the startup image and the config2.cfg is the backup

image.

startup | backup—— Specify the property of the configuration.

Command Mode

Global Configuration Mode

Privilege Requirement

Only Admin level users have access to these commands.

Example

Configure the config2.cfg as the startup image:

T1700G-28TQ(config)# boot config filename config2 startup

5.23 remove backup-image

Description

The remove backup-image command is used to delete the backup-image.

Syntax

remove backup-image

Command Mode

Privileged EXEC Mode

Privilege Requirement

Only Admin level users have access to these commands.

Example

Delete the backup image file:

T1700G-28TQ# remove backup-image

5.24 firmware upgrade

Description

The firmware upgrade command is used to upgrade the switch’s backup

iamge file via the TFTP server. The uploaded firmware file will take place of

the Backup Image, and user can choose whether to reboot the switch with

the Backup Image.

Syntax

firmware upgrade tftp ip-address

Parameter

ip-addr

supported, for example 192.168.0.1 or fe80::1234.

name

—— IP Address of the TFTP server. Both IPv4 and IPv6 addresses are

—— Specify the name for the firmware file.

Command Mode

Privileged EXEC Mode

Privilege Requirement

Only Admin level users have access to these commands.

Example

Upgrade the switch’s backup iamge file with the file firmware.bin in the TFTP

server with the IP address 192.168.0.148, and reboot the switch with this

firmware:

T1700G-28TQ# firmware upgrade tftp ip-address 192.168.0.148 filename

ip-addr

filename

name

firmware.bin

It will only upgrade the backup image. Continue? (Y/N):y

Operation OK!

Reboot with the backup image? (Y/N): y

Upgrade the switch’s backup iamge file with the file firmware.bin in the TFTP

server with the IP address fe80::1234, but do not reboot the switch:

T1700G-28TQ# firmware upgrade tftp ip-address fe80::1234 filename

firmware.bin

It will only upgrade the backup image. Continue? (Y/N):y

Operation OK!

Reboot with the backup image? (Y/N): n

5.25 ping

Description

The ping command is used to test the connectivity between the switch and

one node of the network.

Syntax

ping [ ip | ipv6 ] {

Parameter

—— The type of the IP address for ping test should be IPv4.

ipv6

—— The type of the IP address for ping test should be IPv6.

ip_addr

parameter ip/ipv6 is not selected, both IPv4 and IPv6 addresses are

supported, for example 192.168.0.100 or fe80::1234.

-n

ranges from 1 to 10. By default, this value is 4.

-l

1500 bytes. By default, this value is 64.

-i

to 1000 milliseconds. By default, this value is 1000.

—— The IP address of the destination node for ping test. If the

count

—— The amount of times to send test data during Ping testing. It

size

—— The size of the sending data during ping testing. It ranges from 1 to

interval

—— The interval to send ICMP request packets. It ranges from 100

Command Mode

Privileged EXEC Mode

ip_addr

} [ -n

count

] [ -l

size

] [ -i

interval

]

Privilege Requirement

None.

Example

To test the connectivity between the switch and the network device with the

IP 192.168.0.131, please specify the

1000 milliseconds. If there is not any response after 8 times’ Ping test, the

connection between the switch and the network device is failed to establish:

count

(-l) as 512 bytes and

count

(-i) as

T1700G-28TQ# ping 192.168.0.131 –n 8 –l 512

To test the connectivity between the switch and the network device with the

IP fe80::1234, please specify the

milliseconds. If there is not any response after 8 times’ Ping test, the

connection between the switch and the network device is failed to establish:

T1700G-28TQ# ping fe80::1234 –n 8 –l 512

5.26 tracert

Description

The tracert command is used to test the connectivity of the gateways during

its journey from the source to destination of the test data.

Syntax

tracert [ ip | ipv6 ]

Parameter

ip —— The type of the IP address for tracert test should be IPv4.

ipv6 —— The type of the IP address for tracert test should be IPv6.

count

ip_addr [ maxHops

(-l) as 512 bytes and

]

count

(-i) as 1000

ip_addr

is not selected, both IPv4 and IPv6 addresses are supported, for example

192.168.0.100 or fe80::1234.

maxHops

though. It ranges from 1 to 30. By default, this value is 4.

—— The IP address of the destination device. If the parameter ip/ipv6

—— The maximum number of the route hops the test data can pass

Command Mode

Privileged EXEC Mode

Privilege Requirement

Only Admin, Operator and Power User level users have access to these commands.

Example

Test the connectivity between the switch and the network device with the IP

192.168.0.131. If the destination device has not been found after 20

maxHops,

the connection between the switch and the destination device is

failed to establish:

T1700G-28TQ# tracert 192.168.0.131 20

Test the connectivity between the switch and the network device with the IP

fe80::1234. If the destination device has not been found after 20

the connection between the switch and the destination device is failed to

establish:

T1700G-28TQ# tracert fe80::1234 20

5.27 show system-info

Description

The show system-info command is used to display System Description,

Device Name, Device Location, System Contact, Hardware Version, Firmware

Version, System Time, Run Time and so on.

Syntax

show system-info

Command Mode

Privileged EXEC Mode and Any Configuration Mode

maxHops,

Privilege Requirement

None.

Example

Display the system information:

T1700G-28TQ# show system-info

5.28 show image-info

Description

The show image-info command is used to display the information of image

files in the system.

Syntax

show image-info

Command Mode

Privileged EXEC Mode and Any Configuration Mode

Privilege Requirement

Only Admin level users have access to these commands.

Example

Display the system image files’ information:

T1700G-28TQ# show image-info

5.29 show boot

Description

The show boot command is used to display the boot configuration of the

system.

Syntax

show boot

Command Mode

Privileged EXEC Mode and Any Configuration Mode

Privilege Requirement

Only Admin level users have access to these commands.

Example

Display the system boot configuration information:

T1700G-28TQ# show boot

5.30 show running-config

Description

The show running-config command is used to display the current operating

configuration of the system or of a specified port.

Syntax

show running-config

Command Mode

Privileged EXEC Mode and Any Configuration Mode

Privilege Requirement

Only Admin level users have access to these commands.

Example

Display the system current operating configuration:

T1700G-28TQ# show running-config

5.31 show startup-config

Description

The show startup-config command is used to display the current

configuration saved in the switch. These configuration settings will not be lost

the next time you reboot the switch.

Syntax

show startup-config

Command Mode

Privileged EXEC Mode and Any Configuration Mode

Privilege Requirement

Only Admin level users have access to these commands.

Example

Display the saved configuration:

T1700G-28TQ# show startup-config

5.32 show system-time

Description

The show system-time command is used to display the time information of

the switch.

Syntax

show system-time

Command Mode

Privileged EXEC Mode and Any Configuration Mode

Privilege Requirement

None.

Example

Display the time information of the switch

T1700G-28TQ# show system-time

5.33 show system-time dst

Description

The show system-time dst command is used to display the DST information

of the switch.

Syntax

show system-time dst

Command Mode

Privileged EXEC Mode and Any Configuration Mode

Privilege Requirement

None.

Example

Display the DST information of the switch

T1700G-28TQ# show system-time dst

5.34 show system-time ntp

Description

The show system-time ntp command is used to display the NTP mode

configuration information.

Syntax

show system-time ntp

Command Mode

Privileged EXEC Mode and Any Configuration Mode

Privilege Requirement

None.

Example

Display the NTP mode configuration information of the switch:

T1700G-28TQ# show system-time ntp

5.35 show cable-diagnostics interface

Description

The show cable-diagnostics interface command is used to display the cable

diagnostics of the connected Ethernet Port., which facilitates you to check

the connection status of the cable connected to the switch, locate and

diagnose the trouble spot of the network.

Syntax

show cable-diagnostics interface { fastEthernet

| ten-gigabitEthernet

port

}

Parameter

port

—— The number of the port which is selected for Cable test.

Command Mode

Privileged EXEC Mode and Any Configuration Mode

Privilege Requirement

None.

Example

Show the cable-diagnostics of port 3:

T1700G-28TQ# show cable-diagnostics interface gigabitEthernet 1/0/3

5.36 show cpu-utilization

port

| gigabitEthernet

port

Description

The show cpu-utilization command is used to display the system’s CPU

utilization in the last 5 seconds/1minute/5minutes.

Syntax

show cpu-utilization

Command Mode

Privileged EXEC Mode and Any Configuration Mode

Privilege Requirement

None.

Example

Display the CPU utilization information of the switch:

T1700G-28TQ# show cpu-utilization

5.37 show memory-utilization

Description

The show memory-utilization command is used to display the current

system’s memory utilization in the last 5 seconds/1minute/5minutes.

Syntax

show memory-utilization

Command Mode

Privileged EXEC Mode and Any Configuration Mode

Privilege Requirement

None.

Example

Display the memory utilization information of the switch:

T1700G-28TQ# show memory-utilization

Chapter 6 EEE Configuration Commands

EEE (Energy Efficient Ethernet) is used to save power consumption of the switch during periods

of low data activity. You can simply enable this feature on ports to allow power reduction.

6.1 eee

Description

The eee command is used to enable EEE on the port. To disable EEE on the

port, please use no eee command.

Syntax

eee

no eee

Command Mode

Interface Configuration Mode

Privilege Requirement

Only Admin, Operator and Power User level users have access to these commands.

Example

Enable EEE on port 1/0/1:

T1700G-28TQ(config)#interface gigabitEthernet 1/0/1

T1700G-28TQ(config-if)#eee

6.2 show interface eee

Description

The show interface eee command is used to display the EEE configuration

on each port.

Syntax

show interface eee [ fastEthernet

ten-gigabitEthernet

Command Mode

Privileged EXEC Mode and Any Configuration Mode

port

| gigabitEthernet

]

port

Privilege Requirement

None.

Example

Display the EEE configuration of each port

T1700G-28TQ# show interface eee

Chapter 7 SDM Template Commands

This chapter describes how to configure the Switch Database Management (SDM) templates to

allocate hardware resources on the switch for different uses.

7.1 sdm prefer

Description

The sdm prefer command is used to configure the SDM template. The SDM

template is used to allocate system resources to best support the features

being used in your application. To return to use the default template, please

use the sdm prefer default command. The template change will takes effect

after a reboot.

Syntax

sdm prefer { default | enterpriseV4 | enterpriseV6 }

Parameter

default —— Specify the SDM template used in the switch as “default”.

enterpriseV4

“enterpriseV4”.

enterpriseV6

“enterpriseV6”.

—— Specify the SDM template used in the switch as

Command Mode

Global Configuration Mode

Privilege Requirement

Only Admin level users have access to these commands.

Example

Specify the SDM template as enterpriseV4:

T1700G-28TQ(config)# sdm prefer enterpriseV4

7.2 show sdm prefer

Description

The show sdm prefer command is used to display resource allocation of the

current SDM template in use, or the SDM templates that can be used.

Syntax

show sdm prefer { used | default | enterpriseV4 | enterpriseV6 }

Parameter

used —— Display the resource allocation of the template currently in use, and

the template that will become active after a reboot.

default

enterpriseV4

template. enterpriseV6

enterpriseV6 template.

—— Display the resource allocation of the default template.

—— Display the resource allocation of the enterpriseV4

Command Mode

Privileged EXEC Mode and Any Configuration Mode

Privilege Requirement

Only Admin level users have access to these commands.

Example

Display the resource allocation of the template currently in use, and the

—— Display the resource allocation of the

template that will become active after a reboot:

T1700G-28TQ(config)#show sdm prefer used

Chapter 8 Time Range Commands

With this feature, you can configure a time range and bind it to an ACL rule.

8.1 time-range

Description

The time-range command is used to create time-range entry for the switch

and enter Time-range Create Configuration Mode. After a time-range entry is

created, you need to specify the date and time. A time-range can implement

multiple time-ranges simultaneously as long as they do not conflict with each

other. To delete the corresponding time-range configuration, please use no

time-range command.

Syntax

time-range

no time-range

Command Mode

Global Configuration Mode

Parameter

name

—— The time-range name, ranging from 1 to 16 characters.

Privilege Requirement

Only Admin, Operator and Power User level users have access to these commands.

Example

Create a time-range named “tRange1” for the switch:

T1700G-28TQ(config)# time-range tRange1

8.2 absolute

name

Description

The absolute command is used to create an absolute time-range for the

time-range of the switch. To delete the corresponding absolute time-range

configuration, please use no absolute command.

Syntax

absolute from

no absolute [

start-date

index

Parameter

start-date

MM/DD/YYYY.

end-date

MM/DD/YYYY.

—— The start date in Absoluteness Mode, in the format of

—— The end date in Absoluteness Mode, in the format of

Command Mode

Time-range Create Configuration Mode

Privilege Requirement

Only Admin, Operator and Power User level users have access to these commands.

Example

Create an absolute time-range for the switch and specify the date extending

from May 5th, 2017 through Oct. 5th, 2017:

end-date

]

T1700G-28TQ(config)#time-range tRange1

T1700G-28TQ(config-time-range)#absolute from 05/05/2017 to

10/05/2017

8.3 periodic

Description

The periodic command is used to create a periodic mode time-range for the

time-range of the switch. To delete the corresponding periodic mode

time-range configuration, please use no periodic command.

Syntax

periodic start

no periodic [

Parameter

start-time

index

]

end

end-time

day-of-the-week

week-day

start-time

end-time

week-day

numbers 1-7 respectively represent Monday, Tuesday, Wednesday,

Thursday, Friday, Saturday and Sunday.

——Specify the start time in the format of HH:MM

——Specify the end time in the format of HH:MM

——Specify the days of a week in the format of 1-3, 7. The

Command Mode

Time-range Create Configuration Mode

Privilege Requirement

Only Admin, Operator and Power User level users have access to these commands.

Example

Configure the time-range named “tRange2” as a periodic time-range and

specify the date and time as 8:30 to 12:00 on weekends:

T1700G-28TQ(config)#time-range tRange2

T1700G-28TQ(config -time-range)#periodic start 08:30 end 12:00

day-of-the-week 6-7

8.4 holiday (time-range mode)

Description

The holiday command is used to create holiday mode time-range for the

time-range of the switch. When the holiday which is excluded from

time-range occurs, the switch will not supply power.

Syntax

holiday { exclude | include }

Parameter

exclude

include

——The time range will not take effect on holiday.

—— The time range will take effect on holiday.

Command Mode

Time-range Create Configuration Mode

Privilege Requirement

Only Admin, Operator and Power User level users have access to these commands.

Example

Create a time-range entry named “tRange3” and configure time-range to

exclude the holiday:

T1700G-28TQ(config)#time-range tRange3

T1700G-28TQ(config-time-range)#holiday exclude

8.5 holiday

Description

The holiday command is used to create holiday for the switch. To delete the

corresponding holiday configuration, please use no holiday command.

Syntax

holiday

no holiday

name

start-date

Parameter

name

—— The holiday name, ranging from 1 to 16 characters.

start-date

instance, 05/01.

end-date

instance, 05/01.

—— The start date of the holiday, in the format of MM/DD, for

——The end date of the holiday, in the format of MM/DD, for

Command Mode

Global Configuration Mode

Privilege Requirement

Only Admin, Operator and Power User level users have access to these commands.

Example

start-date

end-date

Create a holiday named “holiday1” and configure the start date as October

1st and the end date as October 3rd:

T1700G-28TQ(config)# holiday holiday1 start-date 10/01 end-date 10/03

8.6 show holiday

Description

The show holiday command is used to display the defined holiday.

Syntax

show holiday

Command Mode

Privileged EXEC Mode and Any Configuration Mode

Privilege Requirement

None.

Example

Display the defined holiday:

T1700G-28TQ# show holiday

8.7 show time-range

Description

The show time-range command is used to display the defined time-range.

Syntax

show time-range [

Parameter

time-range-name

characters.

Command Mode

Privileged EXEC Mode and Any Configuration Mode

Privilege Requirement

None.

Example

Display the defined time-range:

T1700G-28TQ# show time-range

time-range-name

—— The time-range name, ranging from 1 to 16

]

Chapter 9 Port Configuration Commands

Ethernet Configuration Commands can be used to configure the Bandwidth Control,

Negotiation Mode and Storm Control for Ethernet ports.

9.1 interface gigabitEthernet

Description

The interface gigabitEthernet command is used to enter the Interface

gigabitEthernet Configuration Mode and configure the corresponding Gigabit

Ethernet port.

Syntax

interface gigabitEthernet

Parameter

port

—— The Ethernet port number.

Command Mode

Global Configuration Mode

Privilege Requirement

Only Admin, Operator and Power User level users have access to these commands.

Example

To enter the Interface gigabitEthernet Configuration Mode and configure port

T1700G-28TQ(config)# interface gigabitEthernet 1/0/2

port

9.2 interface range gigabitEthernet

Description

The interface range gigabitEthernet command is used to enter the interface

range gigabitEthernet Configuration Mode and configure multiple Gigabit

Ethernet ports at the same time.

Syntax

interface range gigabitEthernet

Parameter

port-list

—— The list of Ethernet ports.

Command Mode

Global Configuration Mode

Privilege Requirement

Only Admin, Operator and Power User level users have access to these commands.

User Guidelines

Command in the Interface Range gigabitEthernet Mode is executed

independently on all ports in the range. It does not affect the execution on the

other ports at all if the command results in an error on one port.

Example

port-list

To enter the Interface range gigabitEthernet Configuration Mode, and

configure ports 1, 2, 3, 6, 7 and 9 at the same time by adding them to one

port-list:

T1700G-28TQ(config)# interface range gigabitEthernet

1/0/1-3,1/0/6-7,1/0/9

9.3 description

Description

The description command is used to add a description to the Ethernet port.

To clear the description of the corresponding port, please use no

description command.

Syntax

description

string

no description

Parameter

string

—— Content of a port description, ranging from 1 to 16 characters.

Command Mode

Interface Configuration Mode (interface gigabitEthernet / interface range

gigabitEthernet / interface port-channel / interface range port-channel)

Privilege Requirement

Only Admin, Operator and Power User level users have access to these commands.

Example

Add a description Port_5 to port 1/0/5:

T1700G-28TQ(config)# interface gigabitEthernet 1/0/5

T1700G-28TQ(config-if)# description Port_5

9.4 shutdown

Description

The shutdown command is used to disable an Ethernet port. To enable this

port again, please use no shutdown command.

Syntax

shutdown

no shutdown

Command Mode

Interface Configuration Mode (interface gigabitEthernet / interface range

gigabitEthernet / interface port-channel / interface range port-channel)

Privilege Requirement

Only Admin, Operator and Power User level users have access to these commands.

Example

Disable port 1/0/3:

T1700G-28TQ(config)# interface gigabitEthernet 1/0/3

T1700G-28TQ(config-if)# shutdown

9.5 flow-control

Description

The flow-control command is used to enable the flow-control function for a

port. To disable the flow-control function for this corresponding port, please

use no flow-control command. With the flow-control function enabled, the

Ingress Rate and Egress Rate can be synchronized to avoid packet loss in the

network.

Syntax

flow-control

no flow-control

Command Mode

Interface Configuration Mode (interface gigabitEthernet / interface range

gigabitEthernet / interface port-channel / interface range port-channel)

Privilege Requirement

Only Admin and Operator level users have access to these commands.

Example

Enable the flow-control function for port 1/0/3:

T1700G-28TQ(config)# interface gigabitEthernet 1/0/3

T1700G-28TQ(config-if)# flow-control

9.6 duplex

Description

The duplex command is used to configure the Duplex Mode for an Ethernet

port. To return to the default configuration, please use no duplex command.

Syntax

duplex { auto | full | half }

no duplex

Parameter

auto | full | half —— The duplex mode of the Ethernet port. There are three

options: auto-negotiation mode, full-duplex mode and half-duplex mode. By

default the Gigabit Ethernet port is auto-negotiation mode.

Command Mode

Interface Configuration Mode (interface gigabitEthernet / interface range

gigabitEthernet / interface port-channel / interface range port-channel)

Privilege Requirement

Only Admin and Operator level users have access to these commands.

Example

Configure the Duplex Mode as full-duplex for port 1/0/3:

T1700G-28TQ(config)# interface gigabitEthernet 1/0/3

T1700G-28TQ(config-if)# duplex full

9.7 jumbo-size

Description

The jumbo-size command is used to specify the size of jumbo frames.

Syntax

jumbo-size

size

Parameter

size

—— The value of jumbo frames. It ranges from 1518 to 9216 bytes, and

the default is 1518 bytes.

Command Mode

Global Configuration Mode

Privilege Requirement

Only Admin, Operator and Power User level users have access to these commands.

Example

Globally configure the size of jumbo frames as 9216:

T1700G-28TQ(config)# jumbo-size 9216

9.8 speed

Description

The speed command is used to configure the Speed Mode for an Ethernet

port. To return to the default configuration, please use no speed command.

Syntax

speed { 10 | 100 | 1000 | auto }

no speed

Parameter

10 | 100 | 1000 | auto —— The speed mode of the Ethernet port. There are four options: 10Mbps, 100Mbps, 1000Mbps and Auto negotiation mode (default).

Command Mode

Interface Configuration Mode (interface gigabitEthernet / interface range

gigabitEthernet / interface port-channel / interface range port-channel)

Privilege Requirement

Only Admin and Operator level users have access to these commands.

Example

Configure the Speed Mode as 100Mbps for port 1/0/3:

T1700G-28TQ(config)# interface gigabitEthernet 1/0/3

T1700G-28TQ(config-if)# speed 100

9.9 clear counters

Description

The clear counters command is used to clear the statistics information of all

the Ethernet ports and port channels.

Syntax

clear counters

clear counters interface [ gigabitEthernet

port-channel-id

Parameter

port

—— The Ethernet port number.

port-channel-id

Command Mode

Privileged EXEC Mode and Any Configuration Mode

Privilege Requirement

]

—— The ID of the port channel.

port

] [ port-channel

Only Admin and Operator level users have access to these commands.

Example

Clear the statistic information of all ports and port channels:

T1700G-28TQ(config)# clear counters

9.10 show interface status

Description

The show interface status command is used to display the connection

status of the Ethernet port/port channel.

Syntax

show interface status [ gigabitEthernet

port-channel-id ]

Parameter

port

—— The Ethernet port number.

port-channel-id

—— The ID of the port channel.

Command Mode

Privileged EXEC Mode and Any Configuration Mode

Privilege Requirement

None.

Example

Display the connection status of all ports and port channels:

T1700G-28TQ(config)# show interface status

Display the connection status of port 1/0/1:

T1700G-28TQ(config)# show interface status gigabitEthernet 1/0/1

port

] [ port-channel

9.11 show interface counters

Description

The show interface counters command is used to display the statistics

information of all ports/port channels.

Syntax

show interface counters [ gigabitEthernet

port-channel-id ]

Parameter

port

—— The Ethernet port number.

port

] [ port-channel

port-channel-id

—— The ID of the port channel.

Command Mode

Privileged EXEC Mode and Any Configuration Mode

Privilege Requirement

None.

Example

Display the statistics information of all Ethernet ports and port channels:

T1700G-28TQ(config)# show interface counters

Display the statistics information of port 1/0/2:

T1700G-28TQ(config)# show interface counters gigabitEthernet 1/0/2

9.12 show interface configuration

Description

The show interface configuration command is used to display the

configurations of all ports and port channels, including Port-status, Flow

Control, Negotiation Mode and Port-description.

Syntax

show interface configuration [ gigabitEthernet

port-channel-id ]

Parameter

port

—— The Ethernet port number.

port-channel-id

—— The ID of the port channel.

Command Mode

Privileged EXEC Mode and Any Configuration Mode

Privilege Requirement

None.

Example

port

] [ port-channel

Display the configurations of all Ethernet ports and port channels:

T1700G-28TQ(config)# show interface configuration

Display the configurations of port 1/0/2:

T1700G-28TQ(config)# show interface configuration gigabitEthernet

1/0/2

9.13 show fiber-ports

Description

The show fiber-ports command is used to display the information of the SFP

or SFP+ transceivers that are inserted into the fiber ports.

Syntax

show fiber-ports

Command Mode

Privileged EXEC Mode and Any Configuration Mode

Privilege Requirement

None.

Example

Display the information of the inserted transceivers:

T1700G-28TQ# show fiber-ports

Chapter 10 Port Isolation Commands

Port Isolation provides a method of restricting traffic flow to improve the network security by

forbidding the port to forward packets to the ports that are not on its forwarding port list.

10.1 port isolation

Description

The port isolation command is used to configure the forward port/port

channel list of a port/port channel, so that this port/port channel can only

communicate with the ports/port channels on its list. To delete the

corresponding configuration, please use no port isolation command.

Syntax

port isolation { [ fa-forward-list

gi-forward-list

te-forward-list

no port isolation

] [ po-forward-list

] }

Parameter

fa-forward-list / gi-forward-list / te-forward-list

-forward-list —— The list of port channels.

Command Mode

Interface Configuration Mode (interface gigabitEthernet / interface range

gigabitEthernet / interface port-channel / interface range port-channel)

Privilege Requirement

Only Admin and Operator level users have access to these commands.

Example

Set port 1, 2, 4 and port channel 2 to the forward list of port 1/0/5:

fa-forward-list

po-forward-list

—— The list of Ethernet ports.

] [ gi-forward-list

] [ te-forward-list

T1700G-28TQ(config)# interface gigabitEthernet 1/0/5

T1700G-28TQ(config-if)# port isolation gi-forward-list 1/0/1-2,1/0/4

po-forward-list 2

Set all Ethernet ports and port channels to forward list of port 1/0/2, namely

restore to the default setting:

T1700G-28TQ(config)# interface gigabitEthernet 1/0/2

T1700G-28TQ(config-if)# no port isolation

10.2 show port isolation interface

Description

The show port isolation interface command is used to display the forward

port list of a port/port channel.

Syntax

show port isolation interface [fastEthernet

ten-gigabitEthernet

Parameter

port ——

in the format of 1/0/2.

port-channel-id ——

list, ranging from 1 to 6.

The number of Ethernet port you want to show its forward port list,

Command Mode

Privileged EXEC Mode and Any Configuration Mode

Privilege Requirement

None.

Example

Display the forward-list of port 1/0/2:

T1700G-28TQ# show port isolation interface gigabitEthernet 1/0/2

port

| port-channel

The ID of port channel you want to show its forward port

port-channel-id ]

| gigabitEthernet

port

Display the forward-list of all Ethernet ports and port channels:

T1700G-28TQ# show port isolation interface

Chapter 11 Loopback Detection Commands

With loopback detection feature enabled, the switch can detect loops using loopback

detection packets. When a loop is detected, the switch will display an alert or further block the

corresponding port according to the configuration.

11.1 loopback-detection (global)

Description

The loopback-detection command is used to enable the loopback detection

function globally. To disable it, please use no loopback detection command.

Syntax

loopback-detection

no loopback-detection

Command Mode

Global Configuration Mode

Privilege Requirement

Only Admin, Operator and Power User level users have access to these commands.

Example

Enable the loopback detection function globally:

T1700G-28TQ(config)# loopback-detection

11.2 loopback-detection interval

Description

The loopback-detection interval command is used to define the interval of

sending loopback detection packets from switch ports to network, aiming at

detecting network loops periodically.

Syntax

loopback-detection interval

Parameter

interval-time

ranges from 1 to 1000 seconds. By default, this value is 30.

interval-time

—— The interval of sending loopback detection packets. It

Command Mode

Global Configuration Mode

Privilege Requirement

Only Admin, Operator and Power User level users have access to these commands.

Example

Specify the interval-time as 50 seconds:

T1700G-28TQ(config)# loopback-detection interval 50

11.3 loopback-detection recovery-time

Description

The loopback-detection recovery-time command is used to configure the

time after which the blocked port would automatically recover to normal

status.

Syntax

loopback-detection recovery-time

Parameter

recovery-time

recover to normal status, and the loopback detection would restart. It ranges

from 2 to 1000000 seconds. By default, this value is 90.

—— The time after which the blocked port would automatically

Command Mode

Global Configuration Mode

Privilege Requirement

Only Admin, Operator and Power User level users have access to these commands.

Example

Configure the recovery-time as 70 seconds:

recovery-time

T1700G-28TQ(config)# loopback-detection recovery-time 70

11.4 loopback-detection (interface)

Description

The loopback-detection command is used to enable the loopback

detection function of the specified port. To disable it, please use no

loopback-detection command.

Syntax

loopback-detection

no loopback-detection

Command Mode

Interface Configuration Mode (interface gigabitEthernet | interface range

gigabitEthernet | interface port-channel | interface range port-channel )

Privilege Requirement

Only Admin, Operator and Power User level users have access to these commands.

Example

Enable the loopback detection function of ports 1-3:

T1700G-28TQ(config)# interface range gigabitEthernet 1/0/1-3

T1700G-28TQ(Config-if-range)# loopback-detection

11.5 loopback-detection config process-mode

Description

The loopback-detection config process-mode command is used to

configure the process-mode for the ports by which the switch copes with the

detected loops. You also need to configure the recovery mode to remove the

block status of the port or VLAN when the process-mode is Port Based or

VLAN Based.

Syntax

loopback-detection config process-mode { alert | port-based | vlan-based }

recovery-mode { auto | manual }

Parameter

alert generate an entry on the log file. It is the default setting

——

When a loop is detected, the switch will send a trap message and

TP-Link T1700G-28TQ CLI Reference Guide

Specifications and Main Features

Frequently Asked Questions

User Manual

Preface

Chapter 1 Using the CLI

1.1 Accessing the CLI

1.1.1 Logon by Telnet

1.1.2 Logon by SSH

1.2 CLI Command Modes

1.3 Privilege Restrictions

1.4 Conventions

1.4.1 Format Conventions

1.4.2 Special Characters

1.4.3 Parameter Format

Chapter 2 User Interface

2.1 enable

2.2 service password-encryption

2.3 enable password

2.4 enable secret

2.5 configure

2.6 exit

2.7 end

2.8 clipaging

2.9 history

2.10 history clear

Chapter 3 Stack

3.1 switch priority

3.2 switch renumber

3.3 switch stack-port

3.4 switch provision

3.5 show switch

Chapter 4 User Management Commands

4.1 user name (password)

4.2 user name (secret)

4.3 show user account-list

4.4 show user configuration

Chapter 5 System Configuration Commands

5.1 system-time manual

5.2 system-time ntp

5.3 system-time dst predefined

5.4 system-time dst date

5.5 system-time dst recurring

5.6 hostname

5.7 location

5.8 contact-info

5.9 ip address

5.10 ip address-alloc

5.11 reset

5.12 reboot

5.13 reboot-schedule

5.14 copy running-config startup-config

5.15 copy startup-config tftp

5.16 copy tftp startup-config

5.17 copy backup-config tftp

5.18 copy backup-config startup-config

5.19 copy running-config backup-config

5.20 copy tftp backup-config

5.21 boot application

5.22 boot config

5.23 remove backup-image

5.24 firmware upgrade

5.25 ping

5.26 tracert

5.27 show system-info

5.28 show image-info

5.29 show boot

5.30 show running-config

5.31 show startup-config

5.32 show system-time

5.33 show system-time dst

5.34 show system-time ntp

5.35 show cable-diagnostics interface

5.36 show cpu-utilization

5.37 show memory-utilization

Chapter 6 EEE Configuration Commands

6.1 eee

6.2 show interface eee

Chapter 7 SDM Template Commands

7.1 sdm prefer