TL-SL2210/TL-SL2218/TL-SL2428/TL-SL2452
Smart Switch
REV1.2.1
1910011603
COPYRIGHT & TRADEMARKS
Specifications are subject to change without notice. is a registered trademark of TP-LINK TECHNOLOGIES CO., LTD. Other brands and product names are trademarks or registered trademarks of their respective holders.
No part of the specifications may be reproduced in any form or by any means or used to make any derivative such as translation, transformation, or adaptation without permission from TP-LINK TECHNOLOGIES CO., LTD. Copyright © 2016 TP-LINK TECHNOLOGIES CO., LTD. All rights reserved.
http://www.tp-link.com
I
|
CONTENTS |
|
Preface |
.............................................................................................................. |
1 |
Chapter 1 Using the CLI ....................................................................................... |
3 |
|
1.1 Accessing the CLI ............................................................................................................... |
3 |
|
1.1.1. |
Logon by Telnet ................................................................................................... |
3 |
1.1.2. |
Logon by SSH ..................................................................................................... |
4 |
1.2 CLI Command Modes ......................................................................................................... |
9 |
|
1.3 Security Levels.................................................................................................................. |
12 |
|
1.4 Conventions ...................................................................................................................... |
12 |
|
1.4.1 Format Conventions ............................................................................................... |
12 |
|
1.4.2 Special Characters.................................................................................................. |
13 |
|
1.4.3 Parameter Format................................................................................................... |
13 |
|
Chapter 2 |
User Interface .................................................................................... |
14 |
enable...................................................................................................................................... |
|
14 |
enable password ..................................................................................................................... |
14 |
|
enable secret........................................................................................................................... |
15 |
|
service password-encryption .................................................................................................. |
16 |
|
disable ..................................................................................................................................... |
|
17 |
configure.................................................................................................................................. |
|
17 |
exit........................................................................................................................................... |
|
17 |
end........................................................................................................................................... |
|
18 |
history...................................................................................................................................... |
|
18 |
history clear............................................................................................................................. |
19 |
|
Chapter 3 IEEE 802.1Q VLAN Commands ........................................................ |
20 |
|
vlan.......................................................................................................................................... |
|
20 |
interface vlan........................................................................................................................... |
20 |
|
name ....................................................................................................................................... |
|
21 |
switchport general allowed vlan.............................................................................................. |
21 |
|
switchport pvid ........................................................................................................................ |
22 |
|
show vlan summary ................................................................................................................ |
22 |
|
show vlan brief ........................................................................................................................ |
23 |
|
show vlan ................................................................................................................................ |
|
23 |
show interface switchport........................................................................................................ |
24 |
|
Chapter 4 Voice VLAN Commands.................................................................... |
25 |
|
|
II |
|
voice vlan ................................................................................................................................ |
25 |
voice vlan aging time............................................................................................................... |
25 |
voice vlan priority .................................................................................................................... |
26 |
voice vlan mac-address .......................................................................................................... |
27 |
switchport voice vlan mode..................................................................................................... |
27 |
switchport voice vlan security ................................................................................................. |
28 |
show voice vlan....................................................................................................................... |
28 |
show voice vlan oui................................................................................................................. |
29 |
show voice vlan switchport ..................................................................................................... |
29 |
Chapter 5 Etherchannel Commands ................................................................. |
31 |
channel-group ......................................................................................................................... |
31 |
port-channel load-balance ...................................................................................................... |
32 |
lacp system-priority ................................................................................................................. |
32 |
lacp port-priority ...................................................................................................................... |
33 |
show etherchannel.................................................................................................................. |
33 |
show etherchannel load-balance ............................................................................................ |
34 |
show lacp ................................................................................................................................ |
34 |
show lacp sys-id...................................................................................................................... |
35 |
Chapter 6 User Management Commands ......................................................... |
36 |
user name (password) ............................................................................................................ |
36 |
user name (secret) .................................................................................................................. |
37 |
user access-control ip-based .................................................................................................. |
38 |
user access-control mac-based.............................................................................................. |
39 |
user access-control port-based............................................................................................... |
40 |
show user account-list............................................................................................................. |
40 |
show user configuration .......................................................................................................... |
41 |
show telnet-status ................................................................................................................... |
41 |
Chapter 7 System Log Commands.................................................................... |
42 |
logging buffer........................................................................................................................... |
42 |
logging file flash ...................................................................................................................... |
42 |
logging file flash (for TL-SL2452)............................................................................................ |
43 |
logging file flash frequency ..................................................................................................... |
44 |
logging file flash level.............................................................................................................. |
44 |
clear logging............................................................................................................................ |
45 |
logging host index ................................................................................................................... |
46 |
show logging local-config........................................................................................................ |
46 |
III |
|
show logging loghost............................................................................................................... |
47 |
show logging buffer ................................................................................................................. |
47 |
show logging flash................................................................................................................... |
48 |
Chapter 8 SSH Commands................................................................................. |
49 |
ip ssh server............................................................................................................................ |
49 |
ip ssh version .......................................................................................................................... |
49 |
ip ssh timeout .......................................................................................................................... |
50 |
ip ssh algorithm ....................................................................................................................... |
50 |
ip ssh max-client ..................................................................................................................... |
51 |
ip ssh download ...................................................................................................................... |
51 |
show ip ssh.............................................................................................................................. |
52 |
Chapter 9 HTTP and HTTPS Commands........................................................... |
53 |
ip http server............................................................................................................................ |
53 |
ip http max-users..................................................................................................................... |
53 |
ip http session ......................................................................................................................... |
54 |
ip http secure-server ............................................................................................................... |
55 |
ip http secure-protocol............................................................................................................. |
55 |
ip http secure-ciphersuite........................................................................................................ |
56 |
ip http secure-max-users ........................................................................................................ |
56 |
ip http secure-session ............................................................................................................. |
57 |
ip http secure-server download certificate .............................................................................. |
58 |
ip http secure-server download key ........................................................................................ |
58 |
show ip http configuration ....................................................................................................... |
59 |
show ip http secure-server...................................................................................................... |
60 |
Chapter 10 MAC Address Commands................................................................. |
61 |
mac address-table static ......................................................................................................... |
61 |
mac address-table aging-time................................................................................................. |
62 |
mac address-table filtering...................................................................................................... |
62 |
mac address-table max-mac-count......................................................................................... |
63 |
show mac address-table address ........................................................................................... |
64 |
show mac address-table aging-time ....................................................................................... |
64 |
show mac address-table max-mac-count interface................................................................ |
65 |
show mac address-table interface .......................................................................................... |
65 |
show mac address-table mac-num......................................................................................... |
66 |
show mac address-table mac ................................................................................................. |
66 |
show mac address-table vlan ................................................................................................. |
67 |
IV |
|
Chapter 11 System Commands ........................................................................... |
68 |
system-time manual................................................................................................................ |
68 |
system-time ntp....................................................................................................................... |
68 |
system-time dst predefined..................................................................................................... |
70 |
system-time dst date............................................................................................................... |
71 |
system-time dst recurring........................................................................................................ |
72 |
hostname................................................................................................................................. |
73 |
location .................................................................................................................................... |
73 |
contact-info.............................................................................................................................. |
74 |
ip management-vlan................................................................................................................ |
74 |
ip address................................................................................................................................ |
75 |
ip address-alloc dhcp .............................................................................................................. |
75 |
ip address-alloc bootp............................................................................................................. |
76 |
reset ........................................................................................................................................ |
76 |
reboot ...................................................................................................................................... |
77 |
copy running-config startup-config.......................................................................................... |
77 |
copy startup-config tftp............................................................................................................ |
78 |
copy tftp startup-config............................................................................................................ |
78 |
firmware upgrade .................................................................................................................... |
79 |
ping.......................................................................................................................................... |
79 |
tracert ...................................................................................................................................... |
80 |
loopback interface ................................................................................................................... |
81 |
show system-info .................................................................................................................... |
81 |
show running-config................................................................................................................ |
82 |
show system-time ................................................................................................................... |
82 |
show system-time dst.............................................................................................................. |
82 |
show system-time ntp ............................................................................................................. |
83 |
show cable-diagnostics interface............................................................................................ |
83 |
Chapter 12 Ethernet Configuration Commands................................................. |
85 |
interface fastEthernet.............................................................................................................. |
85 |
interface range fastEthernet.................................................................................................... |
85 |
interface gigabitEthernet ......................................................................................................... |
86 |
interface range gigabitEthernet............................................................................................... |
86 |
description............................................................................................................................... |
87 |
shutdown ................................................................................................................................. |
88 |
flow-control.............................................................................................................................. |
88 |
media-type............................................................................................................................... |
89 |
V |
|
duplex...................................................................................................................................... |
89 |
speed....................................................................................................................................... |
90 |
storm-control broadcast .......................................................................................................... |
90 |
storm-control multicast............................................................................................................ |
91 |
storm-control unicast............................................................................................................... |
92 |
bandwidth ................................................................................................................................ |
92 |
rrcp deny ................................................................................................................................. |
93 |
clear counters.......................................................................................................................... |
94 |
show interface status .............................................................................................................. |
94 |
show interface counters .......................................................................................................... |
95 |
show interface description ...................................................................................................... |
95 |
show interface flowcontrol....................................................................................................... |
96 |
show interface configuration ................................................................................................... |
96 |
show storm-control.................................................................................................................. |
97 |
show bandwidth....................................................................................................................... |
97 |
Chapter 13 QoS Commands................................................................................. |
98 |
qos........................................................................................................................................... |
98 |
qos cos .................................................................................................................................... |
98 |
qos dscp .................................................................................................................................. |
99 |
qos queue cos-map............................................................................................................... |
100 |
qos queue dscp-map............................................................................................................. |
100 |
qos queue mode ................................................................................................................... |
101 |
show qos interface ................................................................................................................ |
102 |
show qos cos-map ................................................................................................................ |
103 |
show qos dscp-map .............................................................................................................. |
103 |
show qos queue mode.......................................................................................................... |
104 |
show qos status..................................................................................................................... |
104 |
Chapter 14 Port Mirror Commands ................................................................... |
105 |
monitor session destination interface ................................................................................... |
105 |
monitor session source interface .......................................................................................... |
106 |
show monitor session............................................................................................................ |
107 |
Chapter 15 Port Isolation Commands ............................................................... |
108 |
port isolation.......................................................................................................................... |
108 |
show port isolation interface ................................................................................................. |
108 |
Chapter 16 Loopback Detection Commands..................................................... |
110 |
VI |
|
loopback-detection(global)..................................................................................................... |
110 |
loopback-detection interval .................................................................................................... |
110 |
loopback-detection recovery-time.......................................................................................... |
111 |
loopback-detection(interface)................................................................................................. |
111 |
loopback-detection config ...................................................................................................... |
112 |
loopback-detection recover.................................................................................................... |
112 |
show loopback-detection global............................................................................................. |
113 |
show loopback-detection interface ........................................................................................ |
113 |
Chapter 17 ACL Commands................................................................................ |
115 |
access-list create ................................................................................................................... |
115 |
mac access-list....................................................................................................................... |
115 |
access-list standard ............................................................................................................... |
116 |
access-list extended............................................................................................................... |
117 |
rule.......................................................................................................................................... |
118 |
access-list policy name .......................................................................................................... |
118 |
access-list policy action.......................................................................................................... |
119 |
access-list bind(interface) ..................................................................................................... |
120 |
access-list bind(vlan)............................................................................................................. |
120 |
show access-list .................................................................................................................... |
121 |
show access-list policy.......................................................................................................... |
121 |
show access-list bind ............................................................................................................ |
122 |
Chapter 18 DHCP Filtering Commands............................................................. |
123 |
ip dhcp filtering ...................................................................................................................... |
123 |
ip dhcp filtering trust.............................................................................................................. |
123 |
show ip dhcp filtering............................................................................................................. |
124 |
show ip dhcp filtering interface.............................................................................................. |
124 |
Chapter 19 MSTP Commands ............................................................................ |
125 |
spanning-tree(global) ............................................................................................................ |
125 |
spanning-tree(interface)........................................................................................................ |
125 |
spanning-tree common-config .............................................................................................. |
126 |
spanning-tree mode .............................................................................................................. |
127 |
spanning-tree mst configuration............................................................................................ |
128 |
instance ................................................................................................................................. |
128 |
name ..................................................................................................................................... |
129 |
revision .................................................................................................................................. |
129 |
spanning-tree mst instance................................................................................................... |
130 |
|
VII |
spanning-tree mst ................................................................................................................. |
130 |
spanning-tree priority ............................................................................................................ |
131 |
spanning-tree tc-defend ........................................................................................................ |
132 |
spanning-tree timer ............................................................................................................... |
132 |
spanning-tree hold-count ...................................................................................................... |
133 |
spanning-tree max-hops ....................................................................................................... |
134 |
spanning-tree bpdufilter ........................................................................................................ |
134 |
spanning-tree bpduguard...................................................................................................... |
135 |
spanning-tree guard loop ...................................................................................................... |
135 |
spanning-tree guard root....................................................................................................... |
136 |
spanning-tree guard tc .......................................................................................................... |
136 |
spanning-tree mcheck........................................................................................................... |
137 |
show spanning-tree active .................................................................................................... |
138 |
show spanning-tree bridge.................................................................................................... |
138 |
show spanning-tree interface................................................................................................ |
138 |
show spanning-tree interface-security .................................................................................. |
139 |
show spanning-tree mst........................................................................................................ |
140 |
Chapter 20 IGMP Commands............................................................................. |
141 |
ip igmp snooping(global)....................................................................................................... |
141 |
ip igmp snooping(interface)................................................................................................... |
141 |
ip igmp snooping immediate-leave ....................................................................................... |
142 |
ip igmp snooping drop-unknown........................................................................................... |
142 |
ip igmp snooping vlan-config ................................................................................................ |
143 |
ip igmp snooping multi-vlan-config ....................................................................................... |
144 |
ip igmp snooping filter add-id................................................................................................ |
145 |
ip igmp snooping filter(global)............................................................................................... |
146 |
ip igmp snooping filter(interface)........................................................................................... |
146 |
ip igmp snooping filter maxgroup.......................................................................................... |
147 |
ip igmp snooping filter mode ................................................................................................. |
147 |
show ip igmp snooping.......................................................................................................... |
148 |
show ip igmp snooping interface........................................................................................... |
148 |
show ip igmp snooping vlan.................................................................................................. |
149 |
show ip igmp snooping multi-vlan......................................................................................... |
150 |
show ip igmp snooping groups ............................................................................................. |
150 |
show ip igmp snooping filter.................................................................................................. |
151 |
Chapter 21 SNMP Commands............................................................................ |
152 |
|
VIII |
snmp-server .......................................................................................................................... |
152 |
snmp-server view .................................................................................................................. |
152 |
snmp-server group ................................................................................................................ |
153 |
snmp-server user .................................................................................................................. |
154 |
snmp-server community........................................................................................................ |
156 |
snmp-server host .................................................................................................................. |
156 |
snmp-server engineID........................................................................................................... |
158 |
snmp-server traps snmp ....................................................................................................... |
158 |
snmp-server traps link-status................................................................................................ |
159 |
snmp-server traps ................................................................................................................. |
160 |
snmp-server traps mac ......................................................................................................... |
161 |
snmp-server traps vlan.......................................................................................................... |
161 |
rmon history........................................................................................................................... |
162 |
rmon event ............................................................................................................................ |
163 |
rmon alarm ............................................................................................................................ |
164 |
show snmp-server................................................................................................................. |
165 |
show snmp-server view......................................................................................................... |
166 |
show snmp-server group ...................................................................................................... |
166 |
show snmp-server user......................................................................................................... |
167 |
show snmp-server community .............................................................................................. |
167 |
show snmp-server host......................................................................................................... |
167 |
show snmp-server engineID ................................................................................................. |
168 |
show rmon history ................................................................................................................. |
168 |
show rmon event................................................................................................................... |
169 |
show rmon alarm................................................................................................................... |
169 |
IX
This Guide is intended for network administrator to provide referenced information about CLI (Command Line Interface). The device mentioned in this Guide stands for TL-SL2210/TL-SL2218/TL-SL2428/TL-SL2452 Smart Switch.
The four devices of TL-SL2210, TL-SL2218, TL-SL2428 and TL-SL2452 are sharing this User Guide. For simplicity, we will take TL-SL2428 for example throughout the configuration chapters. TL-SL2210, TL-SL2218, TL-SL2428 and TL-SL2452 just differ in the number of LED indicators and ports and all figures in this guide are ofTL-SL2428.
Overview of this Guide
Chapter 1: Using the CLI
Provide information about how to use the CLI, CLI Command Modes, Security Levels and some Conventions.
Chapter 2: User Interface
Provide information about the commands used to switch between five CLI Command Modes.
Chapter 3: IEEE 802.1Q VLAN Commands
Provide information about the commands used for configuring IEEE 802.1Q VLAN.
Chapter 4: Voice VLAN Commands
Provide information about the commands used for configuring Voice VLAN.
Chapter 5: EtherChannel Commands
Provide information about the commands used for configuring LAG (Link Aggregation Group) and LACP (Link Aggregation Control Protocol)..
Chapter 6: User Manage Commands
Provide information about the commands used for user management.
Chapter 7: System Log Commands
Provide information about the commands used for configuring system log.
Chapter 8: SSH Commands
Provide information about the commands used for configuring and managing SSH (Security Shell).
Chapter 9: HTTP and HTTPS Commands
Provide information about the commands used for configuring the HTTP and HTTPS logon.
Chapter 10: MAC Address Commands
Provide information about the commands used for Address configuration.
1
Chapter 11: System Commands
Provide information about the commands used for configuring the System information and System IP, reboot and reset the switch, upgrade the switch system and other operations.
Chapter 12: Ethernet Configuration Commands
Provide information about the commands used for configuring the Bandwidth Control, Negotiation Mode, and Storm Control for Ethernet ports.
Chapter 13: QoS Commands
Provide information about the commands used for configuring the QoS function.
Chapter 14: Port Mirror Commands
Provide information about the commands used for configuring the Port Mirror function.
Chapter 15: Port Isolation Commands
Provide information about the commands used for configuring the Port Isolation function.
Chapter 16: Loopback Detection Commands
Provide information about the commands used for configuring the Loopback Detection function.
Chapter 17: ACL Commands
Provide information about the commands used for configuring the ACL (Access Control List).
Chapter 18: DHCP Filtering Commands
Provide information about the commands used for configuring the DHCP Filtering function.
Chapter 19: MSTP Commands
Provide information about the commands used for configuring the MSTP (Multiple Spanning Tree Protocol).
Chapter 20: IGMP Commands
Provide information about the commands used for configuring the IGMP Snooping (Internet Group Management Protocol Snooping).
Chapter 21: SNMP Commands
Provide information about the commands used for configuring the SNMP (Simple Network Management Protocol) functions.
2
You can log on to the switch and access the CLI by logging on to the switch remotely by a Telnet or SSH connection through an Ethernet port.
To log on to the switch by a Telnet connection, please take the following steps:
1.Click Start and type in cmd in the Search programs and files window and press the Enter button.
Figure 1-1 Run Window
2.Type in telnet 192.168.0.1 in the prompt cmd window and press Enter.
Figure 1-2 Type in the telnet command
3
3.Type in the User name and Password (the factory default value for both of them are admin) and press the Enter button to enter User EXEC Mode , which is shown as Figure 1-3.
Figure 1-3 Log in the Switch
4.Type in enable command to enter Privileged EXEC Mode.
Figure 1-4 Enter into Priviledged EXEC Mode
To log on by SSH, a Putty client software is recommended. There are two authentication modes to set up an SSH connection:
Password Authentication Mode: It requires username and password, which are both admin by default.
Key Authentication Mode: It requires a public key for the switch and a private key for the SSH client software. You can generate the public key and the private key through Putty Key Generator.
Note:
Before SSH login, please follow the steps shown in Figure 1-4 to enable the SSH function through Telnet connection.
4
Figure 1-5 Enable SSH function
Password Authentication Mode
1.Open the software to log on to the interface of PuTTY. Enter the IP address of the switch into Host Name field; keep the default value 22 in the Port field; select SSH as the Connection type.
Figure 1-6 SSH Connection Config
5
2. Click the Open button in the above figure to log on to the switch. Enter the login user name and password to log on the switch, and then enter enable to enter Privileged EXEC Mode, so you can continue to configure the switch.
Figure 1-7 Log on the Switch
Key Authentication Mode
1.Select the key type and key length, and generate SSH key.
Figure 1-8 Generate SSH Key
Note:
1.The key length is in the range of 512 to 3072 bits.
2.During the key generation, randomly moving the mouse quickly can accelerate the key generation.
6
2.After the key is successfully generated, please save the public key and private key to a TFTP server.
Figure 1-9 Save the Generated Key
3.Log on to the switch by Telnet and download the public key file from the TFTP server to the switch, as the following figure shows:
Figure 1-10 Download the Public Key
7
Note:
1.The key type should accord with the type of the key file.
2.The SSH key downloading can not be interrupted.
4.After the public key is downloaded, please log on to the interface of PuTTY and enter the IP address for login.
Figure 1-11 SSH Connection Config
8
5.Click Browse to download the private key file to SSH client software and click Open.
Figure 1-12 Download the Private Key
6.After successful authentication, please enter the login user name. If you log on to the switch without entering password, it indicates that the key has been successfully downloaded.
Figure 1-13 Log on the Switch
The CLI is divided into different command modes: User EXEC Mode, Privileged EXEC Mode, Global Configuration Mode, Interface Configuration Mode and VLAN Configuration Mode. Interface Configuration Mode can also be divided into Interface fastEthernet, Interface
9
gigabitEthernet, Interface link-aggregation and some other modes, which is shown as the following diagram.
User EXEC Mode
Privileged EXEC |
|
Global Configuration |
Mode |
|
Mode |
|
|
|
Interface Configuration Mode Interface gigabitEthernet Interface link-aggregation Interface range gigabitEthernet Interface range link-aggregation Interface vlan
……
VLAN Configuration Mode
The following table gives detailed information about the Accessing path, Prompt of each mode and how to exit the current mode and access the next mode.
Mode |
Accessing Path |
Prompt |
Logout or Access the |
|||||
next mode |
|
|||||||
|
|
|
|
|
|
|||
|
|
|
|
|
|
|||
User EXEC |
|
|
|
|
Use the exit command to |
|||
Primary |
mode |
once it is |
TL-SL2428> |
disconnect the switch. |
|
|||
Mode |
connected with the switch. |
Use the enable command to |
||||||
|
||||||||
|
|
|
|
|
access Privileged EXEC mode. |
|||
|
|
|
|
|
|
|||
|
|
|
|
|
Enter the disable or the exit |
|||
Privileged |
Use the enable command |
|
command to return to |
User |
||||
TL-SL2428# |
EXEC mode. |
|
|
|||||
to enter |
this |
mode from |
|
|
||||
EXEC Mode |
Enter the configure command |
|||||||
User EXEC mode. |
|
|||||||
|
|
to access Global |
Configuration |
|||||
|
|
|
|
|
||||
|
|
|
|
|
mode. |
|
|
|
|
|
|
|
|
|
|||
|
|
|
|
|
Use the exit or the end |
|||
|
|
|
|
|
command or press Ctrl+Z to |
|||
|
|
|
|
|
return to Privileged EXEC mode. |
|||
Global |
Use |
the |
configure |
|
Use the interface fastEthernet/ |
|||
|
gigabitEthernet |
port |
or |
|||||
Configuratio |
command to |
enter this |
TL-SL2428 (config)# |
|||||
interface |
|
range |
||||||
mode |
from |
Privileged |
|
|||||
n Mode |
|
fastEthernet/gigabitEthernet |
||||||
EXEC mode. |
|
|
||||||
|
|
|
port-list command to access |
|||||
|
|
|
|
|
||||
|
|
|
|
|
interface Configuration mode. |
|||
|
|
|
|
|
Use the vlan vlan-list to access |
|||
|
|
|
|
|
VLAN Configuration mode. |
|||
|
|
|
|
|
|
|
|
10
Mode |
Accessing Path |
|
Prompt |
Logout or Access the |
|||||
|
next mode |
||||||||
|
|
|
|
|
|
|
|
||
|
|
|
|
|
|
|
|||
|
Use |
the |
|
interface |
|
Use the end command or press |
|||
|
fastEthernet/gigabitEther |
TL-SL2428 (config-if)# |
Ctrl+Z to return to Privileged |
||||||
Interface |
net port or interface range |
or |
EXEC mode. |
||||||
Configuratio |
fastEthernet/ |
|
|
|
Enter the exit command or the # |
||||
gigabitEthernet |
port-list |
|
command to return to Global |
||||||
n Mode |
TL-SL2428(config-if-ran |
||||||||
command |
to |
enter |
this |
Configuration mode. |
|||||
|
ge)# |
||||||||
|
mode |
|
from |
|
Global |
A port number must be specified |
|||
|
|
|
|
||||||
|
Configuration mode. |
|
|
in the interface command. |
|||||
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Use the end command or press |
|
VLAN |
Use |
the |
vlan |
vlan-list |
|
Ctrl+Z to return to Privileged |
|||
Configuratio |
command |
to |
enter |
this |
TL-SL2428 (config-vlan)# |
EXEC mode. |
|||
n Mode |
mode |
|
from |
|
Global |
|
Enter the exit command or the # |
||
Configuration mode. |
|
|
command to return to Global |
||||||
|
|
|
|||||||
|
|
|
|
|
|
|
|
configuration mode. |
|
|
|
|
|
|
|
|
|
|
|
Note: |
|
|
|
|
|
|
|
|
1.The user is automatically in User EXEC Mode after the connection between the PC and the switch is established by a telnet connection.
2.Each command mode has its own set of specific commands. To configure some commands, you should access the corresponding command mode firstly.
Global Configuration Mode: In this mode, global commands are provided, such as the Spanning Tree, Schedule Mode and so on.
Interface Configuration Mode: In this mode, users can configure one or several ports, different ports corresponds to different commands
a). Interface fastEthernet/gigabitEthernet: Configure parameters for a Fast/Gigabit Ethernet port, such as Duplex-mode, flow control status.
b). Interface range fastEthernet/gigabitEthernet: The commands contained are the same as that of the Interface fastEthernet/gigabitEthernet. Configure parameters for several Ethernet ports.
c). Interface link-aggregation: Configure parameters for a link-aggregation, such as broadcast storm.
d). Interface range link-aggregation: Configure parameters for multi-trunks. e). Interface vlan: Configure parameters for the vlan-port.
11
Vlan Configuration Mode: In this mode, users can create a VLAN and add a specified port to the VLAN.
3.Some commands are global, that means they can be performed in all modes:
show: display all information of switch, for example: statistic information, port information, VLAN information.
history: Display the commands history.
This switch’s security is divided into two levels: User level and Admin level.
User level only allows users to do some simple operations in User EXEC Mode; Admin level allows you to monitor, configure and manage the switch in Privileged EXEC Mode, Global Configuration Mode, Interface Configuration Mode and VLAN Configuration Mode.
Users get the privilege to the User level once logging in by Telnet. However, Guest users are restricted to access the CLI.
Users can enter Privileged EXEC mode from User EXEC mode by using the enable command. In default case, no password is needed. In Global Configuration Mode, you can configure password for Admin level by enable password command. Once password is configured, you are required to enter it to access Privileged EXEC mode.
The following conventions are used in this Guide:
Items in square brackets [ ] are optional
Items in braces { } are required
Alternative items are grouped in braces and separated by vertical bars. For example: speed {10 | 100 | 1000 }
Bold indicates an unalterable keyword. For example: show logging
Normal Font indicates a constant (several options are enumerated and only one can be selected). For example: mode {dynamic | static | permanent}
Italic Font indicates a variable (an actual value must be assigned). For example: bridge aging-time aging-time
12
You should pay attentions to the description below if the variable is a character string:
These six characters ” < > , \ & can not be input.
If a blank is contained in a character string, single or double quotation marks should be used, for example ’hello world’, ”hello world”, and the words in the quotation marks will be identified as a string. Otherwise, the words will be identified as several strings.
Some parameters must be entered in special formats which are shown as follows:
MAC address must be enter in the format of xx:xx:xx:xx:xx:xx
One or several values can be typed for a port-list or a vlan-list using comma to separate. Use a hyphen to designate a range of values, for instance, 1,3-5,7 indicates choosing 1,3,4,5,7.
13
Description
The enable command is used to access Privileged EXEC Mode from User
EXEC Mode.
Syntax
enable
Command Mode
User EXEC Mode
Example
If you have set the password to access Privileged EXEC Mode from User EXEC
Mode:
TL-SL2428>enable
Enter password
TL-SL2428#
Description
The enable password command is used to set or change the password for users to access Privileged EXEC Mode from User EXEC Mode. To remove the password, please use no enable password command. This command uses the symmetric encryption.
Syntax
enable password { [ 0 ] password | 7 encrypted-password } no enable password
Parameter
0 —— Specify the encryption type. 0 indicates that an unencrypted password will follow. By default, the encryption type is 0.
password —— Super password, a string from 1 to 31 alphanumeric characters or symbols. The password is case sensitive, allows digits, English letters (case sensitive), underlines and sixteen special characters ( !$%'()*,-./[]{|} ). By default, it is empty.
14
7 —— Indicates a symmetric encrypted password with fixed length will follow. encrypted-password —— A symmetric encrypted password with fixed length, which you can copy from another switch’s configuration file. After the encrypted password is configured, you should use the corresponding unencrypted password if you re-enter this mode.
Command Mode
Global Configuration Mode
User Guidelines
If the password you configured here is unencrypted and the global encryption function is enabled in service password-encryption, the password in the configuration file will be displayed in the symmetric encrypted form.
Example
Set the super password as “admin” and unencrypted to access Privileged EXEC Mode from User EXEC Mode:
TL-SL2428(config)# enable password 0 admin
Description
The enable secret command is used to set a secret password, which is using an MD5 encryption algorithm, for users to access Privileged EXEC Mode from User EXEC Mode. To return to the default configuration, please use no enable secret command. This command uses the MD5 encryption.
Syntax
enable secret { [ 0 ] password | 5 encrypted-password } no enable secret
Parameter
0 —— Specify the encryption type. 0 indicates that an unencrypted password will follow. By default, the encryption type is 0.
password —— Super password, a string from 1 to 31 alphanumeric characters or symbols. The password is case sensitive, allows digits, English letters (case sensitive), underlines and sixteen special characters ( !$%'()*,-./[]{|} ). By default, it is empty. The password in the configuration file will be displayed in the MD5 encrypted form.
5 —— Indicates an MD5 encrypted password with fixed length will follow.
15
encrypted-password —— An MD5 encrypted password with fixed length, which you can copy from another switch’s configuration file. After the encrypted password is configured, you should use the corresponding unencrypted password if you re-enter this mode.
Command Mode
Global Configuration Mode
User Guidelines
If both the enable password and enable secret are defined, you must enter the password set in enable secret.
Example
Set the secret password as “admin” and unencrypted to access Privileged EXEC Mode from User EXEC Mode. The password will be displayed in the encrypted form.
TL-SL2428(config)#enable secret 0 admin
Description
The service password-encryption command is used to encrypt the password when the password is defined or when the configuration is written, using the symmetric encryption algorithm. Encryption prevents the password from being readable in the configuration file. To disable the global encryption function, please use no service password-encryption command.
Syntax
service password-encryption no service password-encryption
Command Mode
Global Configuration Mode
Example
Enable the global encryption function:
TL-SL2428(config)# service password-encryption
16
Description
The disable command is used to return to User EXEC Mode from Privileged
EXEC Mode.
Syntax
disable
Command Mode
Privileged EXEC Mode
Example
Return to User EXEC Mode from Privileged EXEC Mode:
TL-SL2428# disable
TL-SL2428>
Description
The configure command is used to access Global Configuration Mode from
Privileged EXEC Mode.
Syntax
configure
Command Mode
Privileged EXEC Mode
Example
Access Global Configuration Mode from Privileged EXEC Mode:
TL-SL2428# configure
TL-SL2428(config)#
Description
The exit command is used to return to the previous Mode from the current
Mode.
Syntax
exit
17
Command Mode
Privileged EXEC Mode and Any Configuration Mode
Example
Return to Global Configuration Mode from Interface Configuration Mode, and then return to Privileged EXEC Mode:
TL-SL2428(config-if)# exit TL-SL2428(config)#exit TL-SL2428#
end
Description
The end command is used to return to Privileged EXEC Mode.
Syntax
end
Command Mode
Privileged EXEC Mode and Any Configuration Mode
Example
Return to Privileged EXEC Mode from Interface Configuration Mode:
TL-SL2428(config-if)#end
TL-SL2428#
Description
The history command is used to show the latest 20 commands you entered in the current mode since the switch is powered.
Syntax
history
Command Mode
Privileged EXEC Mode and any Configuration Mode
Example
Show the commands you have entered in the current mode:
TL-SL2428 (config)# history
1 show history
18
Description
The history clear command is used to clear the commands you have entered in the current mode, therefore these commands will not be shown next time you use the history command.
Syntax
history clear
Command Mode
Privileged EXEC Mode and any Configuration Mode
Example
Clear the commands you have entered in the current mode:
TL-SL2428(config)# history clear
19
VLAN (Virtual Local Area Network) technology is developed for the switch to divide the LAN into multiple logical LANs flexibly. Hosts in the same VLAN can communicate with each other, regardless of their physical locations. VLAN can enhance performance by conserving bandwidth, and improve security by limiting traffic to specific domains.
Description
The vlan command is used to create IEEE 802.1Q VLAN and enter VLAN Configuration Mode. To delete the IEEE 802.1Q VLAN, please use no vlan command.
Syntax
vlan vlan-list no vlan vlan-list
Parameter
vlan-list —— Specify IEEE 802.1Q VLAN ID list, ranging from 2 to 4094, in the format of 2-3, 5. It is multi-optional.
Command Mode
Global Configuration Mode
Example
Create VLAN 2-10 and VLAN 100:
TL-SL2428(config)# vlan 2-10,100
Delete VLAN 2:
TL-SL2428(config)# no vlan 2
Description
The interface vlan command is used to create VLAN Interface and enter Interface VLAN Mode. To delete VLAN Interface, please use no interface vlan command.
Syntax
interface vlan vlan-id no interface vlan vlan-id
20