CLI Reference. SISPM LRT-C and SISPM LRT Managed Hardened PoE+ Switches Rev. B

Transcription

1 SISPM LRT-C and SISPM LRT Managed Hardened PoE+ Switches CLI Reference Rev. B Rev. B Page 1 of 333

2 Safety Warnings and Cautions These products are not intended for use in life support products where failure of a product could reasonably be expected to result in death or personal injury. Anyone using this product in such an application without express written consent of an officer of Transition Networks does so at their own risk, and agrees to fully indemnify Transition Networks for any damages that may result from such use or sale. Attention: this product, like all electronic products, uses semiconductors that can be damaged by ESD (electrostatic discharge). Always observe appropriate precautions when handling. NOTE: Emphasizes important information or calls your attention to related features or instructions. WARNING: Alerts you to a potential hazard that could cause personal injury. CAUTION: Alerts you to a potential hazard that could cause loss of data, or damage the system or equipment. SISPM LRT-C and SISPM LRT CLI Reference, Rev. B Record of Revisions Rev Date Description of Changes A 6/5/17 Release at HW v1.01 and SW v7.10. B 2/21/18 Updated for SISPM LRT-C and SISPM LRT FW v Update the show interface vlan command. Trademark notice: All trademarks and registered trademarks are the property of their respective owners. All other products or service names used in this publication are for identification purposes only, and may be trademarks or registered trademarks of their respective companies. All other trademarks or registered trademarks mentioned herein are the property of their respective holders. Copyright restrictions: 2017, 2018 Transition Networks, Inc. All rights reserved. No part of this work may be reproduced or used in any form or by any means (graphic, electronic, or mechanical) without written permission from Transition Networks. Address comments on this product or manual to: Transition Networks Inc Red Circle Drive, Minnetonka, MN tel: toll free: fax: web: sales@transition.com techsupport@transition.com customerservice@transition.com Rev. B Page 2 of 333

3 CONTENTS 1. CLI MANAGEMENT LOGIN CLI COMMAND MODES GLOBAL CLI COMMANDS CLEAR COMMANDS CONFIGURE COMMANDS COPY COMMANDS DELETE COMMANDS DIR COMMANDS DISABLE COMMANDS DO COMMANDS DOT1X COMMANDS ENABLE COMMANDS FIRMWARE COMMANDS NO COMMANDS PING COMMANDS PTP COMMANDS RELOAD COMMANDS SEND COMMANDS SHOW COMMANDS TERMINAL COMMANDS IP COMMANDS TRACEROUTE COMMANDS DEBUG COMMANDS CLI COMMAND REFERENCE PRIVILEGE LEVELS COMMAND SUMMARY Rev. B Page 3 of 333

4 1. CLI Management This section provides a brief description of the network connection required for the CLI. Locate the correct DB-9 (RS-232) cable with female DB-9 connector. RS-232 cable is used for connecting a terminal or terminal emulator to the Managed Switch s RJ45 port to access the command-line interface. Attach the RJ45 serial port on the switch s front panel which used to connect to the switch for console configuration. Attach the other end of the DB-9 cable to an ASCII terminal emulator or PC Com-1, 2 port. For example, a PC running Microsoft Windows HyperTerminal utility. At the Com Port Properties menu, configure the parameters as below (see the next section). Baud rate Stop bits 1 Data bits 8 Parity N Flow control None 1.1 Login The command-line interface (CLI) is a text-based interface. User can access the CLI through either a direct serial connection to the device or a Telnet session (Default IP address: ). The default user and password to login into the Managed Switch are listed below: Username: admin Password: admin After you login successfully, the prompt will be shown as <sys_name>#. See the following two figures. It means you behave as an administrator and have the privilege for setting the Managed Switch. If log as not the administrator, the prompt will be shown as <sys_name>>, it means you behave as a guest and are only allowed for setting the system under the administrator. Each CLI command has its privilege level. Username: admin Password: SISPM LRT-C# Rev. B Page 4 of 333

5 1.2 CLI Command Modes The CLI is divided into several modes. If a user has enough privilege to run a particular command, the user has to run the command in the correct mode. To see the commands of a mode, enter? after the system prompt, then all commands will be listed in the screen. The command modes are listed below. Command Modes Mode Prompt Command Function in this Mode exec <sys_name># Display current configuration, diagnostics, maintenance config <sys_name>(config)# Configure features other than those below Config-if <sys_name>(config-interface)# Configure ports Config-if-vlan <sys_name>(config-if-vlan)# Configure static vlan Config-line <sys_name>(config-line)# Line Configuration Config-impc-profile <sys_name>(config-impc-profile)# IPMC Profile Config-snmp-host <sys_name>(config-snmp-host)# SNMP Server Host Config-stp-aggr <sys_name>(config-stp-aggr)# STP Aggregation Config-dhcp-pool <sys_name>(config-dhcp-pool)# DHCP Pool Configuration Config-rfc2544-profile <sys_name>(config-rfc2544-profile)# RFC2544 Profile Commands residing in the corresponding modes can run only in that mode. If you want to run a particular command, you must change to the appropriate mode. The command modes are organized as a tree, starting in enable mode. The following table explains how to change from one mode to another. Changing Between Command Modes MODE ENTER MODE LEAVE MODE exec config Configure terminal exit config-interface Interface <port-type> exit <port-type-list> config-vlan Interface vlan <vlan_list> exit Rev. B Page 5 of 333

6 1.3 Global CLI Commands Enter a? and hit Enter at the startup prompt to display the global set of CLI commands. SISPM LRT-C#? clear Reset functions configure Enter configuration mode copy Copy from source to destination delete Delete one file in flash: file system dir Directory of all files in flash: file system disable Turn off privileged commands do To run exec commands in config mode dot1x IEEE Standard for port-based Network Access Control enable Turn on privileged commands erps Ethernet Ring Protection Switching exit Exit from EXEC mode firmware Firmware upgrade/swap help Description of the interactive help system ip IPv4 commands ipv6 IPv6 configuration commands link-oam Link OAM configuration logout Exit from EXEC mode more Display file no Negate a command or set its defaults ping Send ICMP echo messages platform Platform configuration ptp Misc non persistent 1588 settings reload Reload system. send Send a message to other tty lines show Show running system information terminal Set terminal line parameters traceroute traceroute program veriphy Veriphy keyword SISPM LRT-C# At the end of a page you can hit the space bar to show the next page, type the letter g to continue, or type the letter q to quit the session Rev. B Page 6 of 333

7 Exit Exit from EXEC mode. You are logged out of the session. Syntax: exit : None. Example: SISPM LRT-C# exit Username: Password: Rev. B Page 7 of 333

8 ERPS Set up Ethernet Ring Protection Switching in Exec mode. Note that you can also configure ERPS parameters in Config mode. ERPS (Ethernet Ring Protection Switching) is defined in ITU/T G It provides fast protection and recovery switching for Ethernet traffic in a ring topology while also ensuring that the Ethernet layer remains loop-free. Note that Spanning Tree must be disabled for Rapid Ring operation. Syntax: erps <instance> erps command <clear> <force> <manual> : port0 ERPS Port 0 interface port1 ERPS Port 1 interface Example: SISPM LRT-C# erps? 1-64 ERPS group number SISPM LRT-C# erps? erps Ethernet Ring Protection Switching SISPM LRT-C# erps? 1-64 ERPS group number SISPM LRT-C# erps 1? command Administrative Command SISPM LRT-C# erps 1 command? clear Clear command force Force command manual Manual command SISPM LRT-C# erps 1 command clear? port0 ERPS Port 0 interface port1 ERPS Port 1 interface SISPM LRT-C# erps 1 command clear port0? SISPM LRT-C# erps 1 command clear port0 % ERPS group 1: Generic error occurred SISPM LRT-C# Rev. B Page 8 of 333

9 Help Description of the interactive help system. Syntax: help : None. Example: SISPM LRT-C# help Help may be requested at any point in a command by entering a question mark '?'. If nothing matches, the help list will be empty and you must backup until entering a '?' shows the available options. Two styles of help are provided: 1. Full help is available when you are ready to enter a command argument (e.g. 'show?') and describes each possible argument. 2. Partial help is provided when an abbreviated argument is entered and you want to know what arguments match the input (e.g. 'show pr?'.) SISPM LRT-C# logout Exit from EXEC mode. Press ENTER to get started. Syntax: logout Parameter: <Enter> Example: SISPM LRT-C# logout Username: Password: Rev. B Page 9 of 333

10 end Go back to EXEC mode. Syntax: end Example: SISPM LRT(config)# end? end Go back to EXEC mode SISPM LRT(config)# end? SISPM LRT(config)# end SISPM LRT# Rev. B Page 10 of 333

11 veriphy The VeriPHY Cable Diagnostics is for 10/100 and 1G copper ports. This takes approximately 5 seconds for one port; if all ports are selected, this can take about 15 seconds. When completed, you can view the cable diagnostics results. Note that VeriPHY is only accurate for cables of length meters. The 10 and 100 Mbps ports will be linked down while running VeriPHY; running VeriPHY on a 10 or 100 Mbps management port will cause the switch to stop responding until VeriPHY is complete. Example: SISPM LRT-C# veriphy? veriphy Veriphy keyword SISPM LRT-C# veriphy? interface Interface keyword SISPM LRT-C# veriphy interface? * All switches or All ports GigabitEthernet 1 Gigabit Ethernet Port SISPM LRT-C# veriphy interface GigabitEthernet 1/3-4? * All switches or All ports GigabitEthernet 1 Gigabit Ethernet Port SISPM LRT-C# veriphy interface GigabitEthernet 1/3-4 Starting VeriPHY - Please wait Interface Pair A Length Pair B, Length Pair C Length Pair D Length GigabitEthernet 1/3 OK 189 OK 189 OK 189 OK 189 GigabitEthernet 1/4 OK 189 OK 189 OK 189 OK 189 SISPM LRT-C# The length of the cable pair is shown in meters. The resolution is 3 meters. The status of the cable pair can be OK (Correctly terminated pair), Open (Open pair), Short (Shorted pair), or Cross (Abnormal cross-pair coupling with another pair) Rev. B Page 11 of 333

12 2. CLEAR Commands access Table : CLEAR Commands Command Function access Access management access-list Access list dot1x IEEE Standard for port-based Network Access Control eps Ethernet Protection Switching. erps Ethernet Ring Protection Switching evc Ethernet Virtual Connections ip Interface Internet Protocol config ipv6 IPv6 configuration lacp Clear LACP statistics link-oam Clear Link OAM statistics lldp Clears LLDP statistics logging System logging message mac MAC Address Table mep Maintenance Entity Point mvr Multicast VLAN Registration configuration ptp Precision Time Protocol sflow Statistics flow spanning-tree STP Bridge statistics Clear statistics for one or more given interfaces Access management. Syntax: clear access management : management statistics Example: statistics Access management configuration. Statistics data. SISPM LRT-C# clear access management statistics? statistics Statistics data SISPM LRT-C# clear access management statistics? SISPM LRT-C# clear access management statistics SISPM LRT-C# Rev. B Page 12 of 333

13 access-list Access list. Syntax: Clear access-list ace statistics : ace Access list entry statistics Traffic statistics Example: SISPM LRT-C# clear access-list ace statistics? statistics Traffic statistics SISPM LRT-C# clear access-list ace statistics? SISPM LRT-C# clear access-list ace statistics SISPM LRT-C# dot1x IEEE Standard for port-based Network Access Control. Syntax Clear dot1x statistics Clear dot1x statistics interface GigabitEthernet < PORT_TYPE_LIST> statistics interface GigabitEthernet PORT_TYPE_LIST Clears the statistics counters Interface 1 Gigabit Ethernet Port Port list in 1/1-8 for Gigabitethernet SISPM LRT-C# clear dot1x statistics interface? * All switches or All ports GigabitEthernet 1 Gigabit Ethernet Port SISPM LRT-C# clear dot1x statistics interface GigabitEthernet 1/1-8 SISPM LRT-C# Rev. B Page 13 of 333

14 ip Interface Internet Protocol config commands. Syntax clear ip arp clear ip dhcp detailed statistics { server client snooping relay helper all } [ interface ( <port_type> [ <in_port_list> ] ) ] clear ip dhcp relay statistics clear ip dhcp server binding <ip> clear ip dhcp server binding { automatic manual expired } clear ip dhcp server statistics clear ip dhcp snooping statistics [ interface ( <port_type> [ <in_port_list> ] ) ] clear ip igmp snooping [ vlan <v_vlan_list> ] statistics clear ip statistics [ system ] [ interface vlan <v_vlan_list> ] [ icmp ] [ icmp-msg <type> ] arp dhcp igmp statistics relay snooping interface GigabitEthernet vlan <vlan_list> Clear ARP cache Dynamic Host Configuration Protocol Internet Group Management Protocol Traffic statistics DHCP relay agent configuration DHCP snooping Select an interface to configure 1 Gigabit Ethernet Port IPv4 traffic interface VLAN identifier(s): VID SISPM LRT-C# clear ip? arp Clear ARP cache dhcp Dynamic Host Configuration Protocol igmp Internet Group Management Protocol statistics Traffic statistics SISPM LRT-C# clear ip arp SISPM LRT-C# clear ip dhcp? detailed Detailed statistics relay DHCP relay agent configuration server Miscellaneous DHCP server information Rev. B Page 14 of 333

15 snooping DHCP snooping SISPM LRT-C# clear ip igmp? snooping Snooping IGMP SISPM LRT-C# clear ip igmp snooping? statistics Running IGMP snooping counters vlan Search by VLAN SISPM LRT-C# clear ip igmp snooping vlan? <vlan_list> VLAN identifier(s): VID SISPM LRT-C# clear ip igmp snooping statistics SISPM LRT-C# ipv6 IPv6 configuration commands. Syntax clear ipv6 mld snooping [ vlan <v_vlan_list> ] statistics clear ipv6 neighbors clear ipv6 statistics [ system ] [ interface vlan <v_vlan_list> ] [ icmp ] [ icmp-msg <type> ] mld Multicast Listener Discovery neighbors Ipv6 neighbors statistics Traffic statistics snooping Snooping MLD statistics Running MLD snooping counters vlan Ipv6 interface traffic <vlan_list> VLAN identifier(s): VID icmp IPv6 ICMP traffic icmp-msg IPv6 ICMP traffic for designated message type interface Select an interface to configure system IPv6 system traffic < 0~255> ICMP message type ranges from 0 to 255 SISPM LRT-C# clear ipv6? ipv6 IPv6 configuration commands SISPM LRT-C# clear ipv6? mld Multicast Listener Discovery neighbors IPv6 neighbors Rev. B Page 15 of 333

16 statistics Traffic statistics SISPM LRT-C# clear ipv6 mld? snooping Snooping MLD SISPM LRT-C# clear ipv6 mld snooping? statistics Running MLD snooping counters vlan Search by VLAN SISPM LRT-C# clear ipv6 neighbors? SISPM LRT-C# clear ipv6 neighbors SISPM LRT-C# clear ipv6 statistics? icmp IPv6 ICMP traffic icmp-msg IPv6 ICMP traffic for designated message type interface Select an interface to configure system IPv6 system traffic SISPM LRT-C# clear ipv6 statistics SISPM LRT-C# Rev. B Page 16 of 333

17 lacp Clear LACP statistics. Syntax Clear lacp statistics statistics Clear all LACP statistics SISPM LRT-C# clear lacp statistics? SISPM LRT-C# clear lacp statistics SISPM LRT-C# clear lacp statistics? statistics Clear all LACP statistics SISPM LRT-C# clear lacp statistics lldp Clears LLDP statistics. Syntax Clear lldp statistics Clear lldp statistics begin exclude include >< LINE > statistics Clears LLDP statistics. Output modifiers begin Begin with the line that matches exclude Exclude lines that match include Include lines that match <LINE> String to match output lines SISPM LRT-C# clear lldp statistics begin LINE SISPM LRT-C# clear lldp statistics? Output modifiers global Clear global counters interface Interface keyword. SISPM LRT-C# clear lldp statistics Rev. B Page 17 of 333

18 logging Syslog. Syntax clear logging [ info ] [ warning ] [ error ] [ switch <switch_list> ] error Error info Information warning Warning SISPM LRT-C# clear logging? alert Severity 1: Action must be taken immediately crit Severity 2: Critical conditions debug Severity 7: Debug-level messages emerg Severity 0: System is unusable error Severity 3: Error conditions info Severity 6: Informational messages notice Severity 5: Normal but significant condition warning Severity 4: Warning conditions SISPM LRT-C# clear logging info error warning SISPM LRT-C# mac MAC Address Table. Syntax Clear mac address-table address-table Flush MAC Address table. SISPM LRT-C# clear mac? address-table Flush MAC Address table SISPM LRT-C# clear mac address-table? SISPM LRT-C# clear mac address-table Rev. B Page 18 of 333

19 mvr Multicast VLAN Registration configuration. Syntax clear mvr [ vlan <v_vlan_list> name <mvr_name> ] statistics name MVR multicast name statistics Running MVR protocol counters vlan MVR multicast vlan < word16> MVR multicast VLAN name <vlan_list> MVR multicast VLAN list SISPM LRT-C# clear mvr? mvr Multicast VLAN Registration configuration SISPM LRT-C# clear mvr? name MVR multicast name statistics Running MVR protocol counters vlan MVR multicast vlan SISPM LRT-C# clear mvr vlan 25 statistics % Invalid MVR VLAN ID 25. SISPM LRT-C# Rev. B Page 19 of 333

20 ptp Clear clear an existing ptp instance s servo. Syntax see below see below SISPM LRT-C# clear ptp? <0-3> SISPM LRT-C# clear ptp 3? servo SISPM LRT-C# clear ptp 3 servo? SISPM LRT-C# clear ptp 3 servo Clock instance 3 : does not exist %% Failed to set network-clock configuration. SISPM LRT-C# clear ptp 0 servo? SISPM LRT-C# clear ptp 0 servo Clock instance 0 : does not exist %% Failed to set network-clock configuration. SISPM LRT-C# Rev. B Page 20 of 333

21 sflow Statistics flow. Syntax clear sflow statistics { receiver [ <receiver_index_list> ] samplers [ interface [ <samplers_list> ] ( <port_type> [ <v_port_type_list> ] ) ] } interface receiver <port_type> <Samplers : option> <port_type_list> Interface Clear statistics for receiver. GigabitEthernet runtime Port list in 1/1-8 for Gigabitethernet SISPM LRT-C# clear sflow statistics? receiver Clear statistics for receiver. samplers Clear statistics for samplers. SISPM LRT-C# clear sflow statistics receiver SISPM LRT-C# Rev. B Page 21 of 333

22 spanning-tree STP Bridge. Syntax clear spanning-tree { { statistics [ interface ( <port_type> [ <v_port_type_list> ] ) ] } { detected-protocols [ interface ( <port_type> [ <v_port_type_list_1> ] ) ] } } detected-protocols statistics interface <port_type> <port_type_list> Set the STP migration check STP statistics Choose port GigabitEthernet Port list in 1/1-8 for Gigabitethernet SISPM LRT-C# clear spanning-tree? spanning-tree STP Bridge SISPM LRT-C# clear spanning-tree? detected-protocols Set the STP migration check statistics STP statistics SISPM LRT-C# clear spanning-tree detected-protocols? interface Choose port SISPM LRT-C# clear spanning-tree statistics? interface Choose port SISPM LRT-C# clear spanning-tree detected-protocols interface GigabitEthernet 1/1-8 SISPM LRT-C# clear spanning-tree statistics SISPM LRT-C# Rev. B Page 22 of 333

23 statistics Clear statistics for a given interface. Syntax clear clear statistics interface <port_type> <port_type_list> statistics <port_type> <port_type_list> <port_type> <port_type_list> GigabitEthernet Port list in 1/1-8 for Gigabitethernet SISPM LRT-C# clear statistics? * All switches or All ports GigabitEthernet 1 Gigabit Ethernet Port interface Interface SISPM LRT-C# clear statistics GigabitEthernet? <port_type_list> Port list in 1/1-12 SISPM LRT-C# clear statistics GigabitEthernet 1/2-6? * All switches or All ports GigabitEthernet 1 Gigabit Ethernet Port SISPM LRT-C# clear statistics GigabitEthernet 1/2-6 SISPM LRT-C# Rev. B Page 23 of 333

24 3. Configure Commands The Config mode commands are listed and described below. Table: Configure mode Commands Command Function aaa Authentication, Authorization and Accounting access Access management access-list Access list aggregation Aggregation mode banner Define a login banner clock Configure time-of-day clock default Set a command to its defaults dms Enable DMS Master do To run exec commands in config mode dot1x IEEE Standard for port-based Network Access Control enable Modify enable password parameters end Go back to EXEC mode eps Ethernet Protection Switching. erps Ethernet Ring Protection Switching evc Ethernet Virtual Connections event Trap event severity level exit Exit from current mode green-ethernet Green ethernet (Power reduction) gvrp Enable GVRP feature help Description of the interactive help system hostname Set system's network name interface Select an interface to configure ip Internet Protocol ipmc IPv4/IPv6 multicast configuration ipv6 IPv6 configuration commands lacp LACP settings line Configure a terminal line lldp LLDP configurations. logging System logging message loop-protect Loop protection configuration mac MAC table entries/configuration Rev. B Page 24 of 333

25 mep Maintenance Entity Point monitor Monitoring different system events mvr Multicast VLAN Registration configuration no Negate a command or set its defaults ntp Configure NTP poe Power Over Ethernet. port-security Enable/disable port security globally. privilege Command privilege parameters ptp Precision time Protocol (1588) qos Quality of Service radius-server Configure RADIUS rapid-ring Set Rapid Ring's configurations ring-to-ring Set Ring to Ring's configurations rmon Remote Monitoring sflow Statistics flow. smtp Set information snmp-server Set SNMP server's configurations spanning-tree Spanning Tree protocol switchport Set switching mode characteristics system Set Board Configuration tacacs-server Configure TACACS+ tzidx Configure timezone city/area udld Enable UDLD in the aggressive or normal mode and to set the configurable message timer on all fiber-optic ports. upnp Set UPnP configuration username Establish User Name Authentication vlan VLAN commands voice Voice appliance attributes web Web Rev. B Page 25 of 333

26 terminal Configure from the terminal (enter config mode). Syntax configure terminal SISPM LRT-C# configure? terminal Configure from the terminal SISPM LRT-C# configure terminal? SISPM LRT-C# configure terminal SISPM LRT-C(config)# Rev. B Page 26 of 333

27 aaa Configure Authentication, Authorization and Accounting. aaa authentication login { console telnet ssh http } { { local radius tacacs } [ { local radius tacacs } [ { local radius tacacs } ] ] } authentication login console http ssh telnet local radius Authentication Login Configure Console Configure HTTP Configure SSH Configure Telnet Use local database for authentication Use RADIUS for authentication tacacs Use TACACS+ for authentication SISPM LRT-C(config)# aaa? aaa Authentication, Authorization and Accounting SISPM LRT-C(config)# aaa? accounting Accounting authentication Authentication authorization Authorization SISPM LRT-C(config)# aaa accounting? console Configure Console command accounting http Configure HTTP command accounting ssh Configure SSH command accounting telnet Configure Telnet command accounting SISPM LRT-C(config)# aaa authentication? login Login SISPM LRT-C(config)# aaa authentication login? console Configure Console authentication http Configure HTTP authentication ssh Configure SSH authentication telnet Configure Telnet authentication SISPM LRT-C(config)# aaa authentication login console? Rev. B Page 27 of 333

28 local Use local database for authentication radius Use RADIUS for authentication tacacs Use TACACS+ for authentication SISPM LRT-C(config)# aaa authentication login console local? fallback Configure local authentication fallback local Use local database for authentication radius Use RADIUS for authentication tacacs Use TACACS+ for authentication SISPM LRT-C(config)# $thentication login console local fallback? SISPM LRT-C(config)# SISPM LRT-C(config)# aaa authorization? console Configure Console command authorization http Configure HTTP command authorization ssh Configure SSH command authorization telnet Configure Telnet command authorization SISPM LRT-C(config)# Rev. B Page 28 of 333

29 access Configure Access management. access management access management <access_id> <access_vid> <start_addr> [ to <end_addr> ] { [ web ] [ snmp ] [ telnet ] all } management Access management configuration < 1-16> ID of access management entry < > The VLAN ID for the access management entry < ipv4_addr> Start IPv4 address < ipv6_addr> Start IPv6 address all snmp telnet to web All services SNMP service TELNET/SSH service End address of the range Web service SISPM LRT-C(config)# access management? <1-16> ID of access management entry SISPM LRT-C(config)# access management all SISPM LRT-C(config)# access management 1? <1-4095> The VLAN ID for the access management entry SISPM LRT-C(config)# access management 1 20? <ipv4_addr> Start IPv4 address <ipv6_addr> Start IPv6 address SISPM LRT-C(config)# access management ? all All services snmp SNMP service telnet TELNET/SSH service to End address of the range web Web service SISPM LRT-C(config)# Rev. B Page 29 of 333

30 aggregation Configure Aggregation mode. aggregation mode { [ dmac ] [ ip ] [ dmac ] [ port ] } mode dmac ip port smac Traffic distribution mode Destination MAC affects the distribution IP address affects the distribution IP port affects the distribution Source MAC affects the distribution SISPM LRT-C(config)# aggregation? mode Traffic distribution mode SISPM LRT-C(config)# aggregation mode? dmac Destination MAC affects the distribution ip IP address affects the distribution port IP port affects the distribution smac Source MAC affects the distribution SISPM LRT-C(config)# aggregation mode dmac? ip IP address affects the distribution port IP port affects the distribution smac Source MAC affects the distribution SISPM LRT-C(config)# aggregation mode dmac ip? port IP port affects the distribution smac Source MAC affects the distribution SISPM LRT-C(config)# aggregation mode dmac ip port? smac Source MAC affects the distribution SISPM LRT-C(config)# aggregation mode dmac ip port smac? SISPM LRT-C(config)# aggregation mode dmac ip port smac SISPM LRT-C(config)# Rev. B Page 30 of 333

31 banner Define a login banner. banner [ motd ] <banner> banner exec <banner> banner login <banner> <LINE> exec login motd c banner-text c, where 'c' is a delimiting character Set EXEC process creation banner Set login banner Set Message of the Day banner SISPM LRT-C(config)# banner? banner Define a login banner SISPM LRT-C(config)# banner? <line> c banner-text c, where 'c' is a delimiting character exec Set EXEC process creation banner login Set login banner motd Set Message of the Day banner SISPM LRT-C(config)# banner exec? <line> c banner-text c, where 'c' is a delimiting character SISPM LRT-C(config)# banner login? <line> c banner-text c, where 'c' is a delimiting character SISPM LRT-C(config)# banner motd? <line> c banner-text c, where 'c' is a delimiting character SISPM LRT-C(config)# Rev. B Page 31 of 333

32 clock Configure time-of-day clock. clock set <iclidate> <iclitime> clock summer-time <word16> date [ <start_month_var> <start_date_var> <start_year_var> <start_hour_var> <end_month_var> <end_date_var> <end_year_var> <end_hour_var> [ <offset_var> ] ] clock summer-time <word16> recurring [ <start_week_var> <start_day_var> <start_month_var> <start_hour_var> <end_week_var> <end_day_var> <end_month_var> <end_hour_var> [ <offset_var> ] ] clock timezone <word_var> <hour_var> [ <minute_var> ] set set clock summer-time timezone <date> <time> Configure summer (daylight savings) time Configure time zone yyyy/mm/dd hh:mm:ss < > Year to start hh:mm Time to start (hh:mm) <1-12> Month to end <1-31> Date to end < > Year to end hh:mm Time to end (hh:mm) <1-1440> Offset to add in minutes <1-5> Week number to start <1-7> Weekday to start <1-12> Month to start SISPM LRT-C(config)# clock? set set clock summer-time Configure summer (daylight savings) time timezone Configure time zone SISPM LRT-C(config)# clock set? <word10> yyyy/mm/dd SISPM LRT-C(config)# clock set 2017/04/27? <word8> hh:mm:ss SISPM LRT-C(config)# clock set 2017/04/27 10:30:32? Rev. B Page 32 of 333

33 SISPM LRT-C(config)# clock set 2017/04/27 10:30:32 SISPM LRT-C(config)# clock summer-time? <word16> name of time zone in summer SISPM LRT-C(config)# clock summer-time CDST? date Configure absolute summer time recurring Configure recurring summer time SISPM LRT-C(config)# clock time? <word16> name of time zone SISPM LRT-C(config)# clock time CDST? <-23-23> Hours offset from UTC SISPM LRT-C(config)# default Set a command to its defaults. default access-list rate-limiter [ <rate_limiter_list> ] access-list rate-limiter <RateLimiterId : 1-16> Access list Rate limiter Rate limiter ID SISPM LRT-C(config)# default? default Set a command to its defaults SISPM LRT-C(config)# default? access-list Access list SISPM LRT-C(config)# default access-list? rate-limiter Rate limiter SISPM LRT-C(config)# default access-list rate-limiter? <1~16> Rate limiter ID SISPM LRT-C(config)# default access-list rate-limiter 1? SISPM LRT-C(config)# default access-list rate-limiter 1 SISPM LRT-C(config)# Rev. B Page 33 of 333

34 dms Configure DMS mode. Transition Networks DMS (Device Management System) is an intelligent management tool embedded in the switch to intuitively help reduce support time, cost, and effort. dms < enable>{[< disable >]} <mode> Enable/disable DMS mode or set to high priority. SISPM LRT-C(config)# dms? dms Enable DMS Master SISPM LRT-C(config)# dms? mode DMS mode SISPM LRT-C(config)# dms mode? mode DMS mode SISPM LRT-C(config)# dms mode? disabled DMS mode is disabled enabled DMS mode is enabled high-priority DMS mode is high priority SISPM LRT-C(config)# dms mode enabled? enabled DMS mode is enabled SISPM LRT-C(config)# dms mode enabled? SISPM LRT-C(config)# dms mode high-priority? high-priority DMS mode is high priority SISPM LRT-C(config)# dms mode high-priority? SISPM LRT-C(config)# dms mode high-priority SISPM LRT-C(config)# Note: Use the do show dms command in Config mode to display the current DMS config. See the do command example on the next page Rev. B Page 34 of 333

35 do To run Exec commands in Config mode. do < LINE >{[< LINE >]} <LINE> Exec Command SISPM LRT-C(config)# do show dms DMS Controller Capability : On Discovery : Arp->On, UPNP->On, NBNS->On, LLDP->On, Onvif->On, Bonjour->On DMS total device: 2 ======= DMS Entry Information Start ============================= (001),MAC(00-40-c d8),PA_MAC( ),port(0),p_port(0),C_IP( ),C_sub( ),C_gw( ),http_port(80),IP1( ),IP2( ),IP1_U(3),UM(0),vid(1),prio(99),manufacturers( SISPM LRT-C),d_name(SISPM LRT-C),type(1001)(12),status(1),PoE(0),group(0) (0),app_fw(0)(0)(0)(0),time(2344) (002),MAC(00-1b-11-b2-6d-4b),PA_MAC(00-40-c d8),port(2),p_port(0),up_link _MAC( ),up_link_port(0),C_IP( ),C_sub( ),C_gw( ),http_port(80),IP1( ),IP2( ),IP1_U(3),UM(0),vid(1),prio( 99),manufacturers( ),d_name(),auth(/),type(2001)(0),status(1)(0)(0),poe(non),acc ount(),pwd(),media(),profile(),strim(),info/auth(0/0),group(0)(0)(1),app_fw(0)(0 )(0)(0),ver(),time(2346) ======= DMS Entry Information end ============================= ======= DMS Grouping Information start ============================= Grouping Entry Cnt(0) -- more --, next page: Space, continue: g, quit: ^C Rev. B Page 35 of 333

36 dot1x IEEE Standard for port-based Network Access Control. dot1x authentication timer inactivity <v_10_to_100000> dot1x authentication timer re-authenticate <v_1_to_3600> dot1x feature { [ guest-vlan ] [ radius-qos ] [ radius-vlan ] }*1 dot1x guest-vlan <value> dot1x guest-vlan supplicant dot1x max-reauth-req <value> dot1x re-authentication dot1x system-auth-control dot1x timeout quiet-period <v_10_to_ > dot1x timeout tx-period <v_1_to_65535> authentication feature guest-vlan max-reauth-req re-authentication system-auth-control timeout timer inactivity Authentication Globally enables/disables a dot1x feature functionality Guest VLAN Guest VLAN ID used when entering the Guest VLAN. Set Re-authentication state Set the global NAS state timeout timer Time in seconds between check for activity on successfully authenticated MAC addresses. re-authenticate The period between re-authentication attempts in seconds < > seconds <1-3600> seconds guest-vlan radius-qos radius-vlan Globally enables/disables state of guest-vlan Globally enables/disables state of RADIUS-assigned QoS. Globally enables/disables state of RADIUS-assigned VLAN. <1-4095> The number of times a Request Identity EAPOL frame is sent without response before considering entering the Guest VLAN. supplicant The switch remembers if an EAPOL frame has been received on the port for the life-time of the port. Once the switch considers whether to enter the Guest VLAN, it will first check if this option is enabled or disabled. If disabled Rev. B Page 36 of 333

37 (unchecked; default), the switch will only enter the Guest VLAN if an EAPOL frame has not been received on the port for the life-time of the port. If enabled (checked), the switch will consider entering the Guest VLAN even if an EAPOL frame has been received on the port for the life-time of the port. <1-255> number of times quiet-period Time in seconds before a MAC-address that failed authentication gets a new authentication chance. tx-period the time between EAPOL retransmissions. < > seconds < > seconds 1 SISPM LRT-C(config)# dot1x authentication timer inactivity 1000 SISPM LRT-C(config)# dot1x feature guest-vlan radius-qos radius-vlan SISPM LRT-C(config)# dot1x guest-vlan 33 SISPM LRT-C(config)# dot1x max-reauth-req 3 SISPM LRT-C(config)# dot1x re-authentication SISPM LRT-C(config)# dot1x system-auth-control SISPM LRT-C(config)# dot1x timeout quiet-period 3000 SISPM LRT-C(config)# 2 SISPM LRT-C(config)# dot1x? authentication Authentication feature Globally enables/disables a dot1x feature functionality guest-vlan Guest VLAN max-reauth-req The number of times a Request Identity EAPoL frame is sent without response before considering entering the Guest VLAN re-authentication Set Re-authentication state system-auth-control Set the global NAS state timeout timeout SISPM LRT-C(config)# dot1x authentication? timer timer SISPM LRT-C(config)# dot1x authentication timer? inactivity Time in seconds between check for activity on successfully authenticated MAC addresses. re-authenticate The period between re-authentication attempts in seconds SISPM LRT-C(config)# dot1x authentication timer inactivity? < > seconds Rev. B Page 37 of 333

38 SISPM LRT-C(config)# $ot1x authentication timer re-authenticate? <1-3600> seconds SISPM LRT-C(config)# dot1x feature? guest-vlan Globally enables/disables state of guest-vlan radius-qos Globally enables/disables state of RADIUS-assigned QoS. radius-vlan Globally enables/disables state of RADIUS-assigned VLAN. SISPM LRT-C(config)# dot1x max-reauth-req? <1-255> number of times SISPM LRT-C(config)# dot1x re-authentication? SISPM LRT-C(config)# dot1x re-authentication SISPM LRT-C(config)# dot1x system-auth-control? SISPM LRT-C(config)# dot1x system-auth-control SISPM LRT-C(config)# dot1x timeout? quiet-period Time in seconds before a MAC-address that failed authentication gets a new authentication chance. tx-period the time between EAPoL retransmissions. SISPM LRT-C(config)# dot1x timeout quiet-period? < > seconds SISPM LRT-C(config)# dot1x timeout tx-period? < > seconds SISPM LRT-C(config)# Rev. B Page 38 of 333

39 enable Modify enable password parameters. enable password [ <level> <1-15> ] <WORD> enable secret { 0 5 } [< level> <1-15> ] <WORD> password secret WORD level Assign the privileged level clear password. Assign the privileged level secret. The UNENCRYPTED (cleartext) password. Set exec level password. <1-15> Level number. 0 Specifies an UNENCRYPTED password will follow. 5 Specifies an ENCRYPTED secret will follow. SISPM LRT-C(config)# enable? enable Modify enable password parameters SISPM LRT-C(config)# enable? password Assign the privileged level clear password secret Assign the privileged level secret SISPM LRT-C(config)# enable password? password Assign the privileged level clear password SISPM LRT-C(config)# enable password? <word32> The UNENCRYPTED (clear-text) password level Set exec level password SISPM LRT-C(config)# enable secret? secret Assign the privileged level secret SISPM LRT-C(config)# enable secret? 0 Specifies an UNENCRYPTED password will follow 5 Specifies an ENCRYPTED secret will follow SISPM LRT-C(config)# Rev. B Page 39 of 333

40 end Exit config mode and go back to Exec mode. end Go back to EXEC mode. SISPM LRT-C(config)# end? end Go back to EXEC mode SISPM LRT-C(config)# end? SISPM LRT-C(config)# end SISPM LRT-C# Rev. B Page 40 of 333

41 eps Configure Ethernet Protection Switching. eps <inst> domain { port tunnel-tp pw } architecture { 1plus1 1for1 } work-flow { <flow_w> <port_type> <port_w> } protect-flow { <flow_p> <port_type> <port_p> } Instance plus1 command domain holdoff mep-work <bidirectional> <unidirectional> <exercise> < forced> < freeze> < lockout> <lockoutlocal> <manualp> <manualw> <port> <pw> <tunnel-tp>. In Port domain, work-flow and protect-flow must be <port_type_id>. <uint> <uint> revertive <10 s 10 m> SISPM LRT-C(config)# eps? eps Ethernet Protection Switching. SISPM LRT-C(config)# eps? <1-100> The EPS instance number. SISPM LRT-C(config)# eps 1? 1plus1 command domain holdoff mep-work revertive EPS 1+1 architecture. EPS command. The domain of the EPS. Hold off timer. Working MEP instance. Revertive EPS. SISPM LRT-C(config)# eps 1 1plus1? bidirectional unidirectional EPS 1+1 bidirectional protection type. EPS 1+1 unidirectional protection type. SISPM LRT-C(config)# eps 1 command? exercise Exercise of the protocol - not traffic effecting. This is only allowed in case of 'Bidirectional' protection type forced freeze lockout lockoutlocal Force switch normal traffic to protection. Local Freeze of EPS. Lockout of protection. Local lockout of EPS Rev. B Page 41 of 333

42 manualp manualw Manual switch normal traffic to protection. Manual switch normal traffic to working. This is only allowed in case of 'non-revertive' mode. SISPM LRT-C(config)# eps 1 domain? port pw tunnel-tp This EPS is protecting in the Port domain. This EPS is protecting in the MPLS-TP Pseudo-Wire domain. This EPS is protecting in the MPLS-TP tunnel domain. SISPM LRT-C(config)# eps 1 holdoff? <uint> The hold off timer value in 100 ms. Max 10 sec. SISPM LRT-C(config)# eps 1 mep-work? <uint> Working MEP instance number. SISPM LRT-C(config)# eps 1 mep-work 1? mep-protect Protecting MEP instance. SISPM LRT-C(config)# eps 1 mep-work 1 mep-protect? <uint> Protecting MEP instance number. SISPM LRT-C(config)# eps 1 mep-work 1 mep-protect 1? mep-aps APS MEP instance. SISPM LRT-C(config)# eps 1 mep-work 1 mep-protect 1 mep-aps? <uint> APS MEP instance number. SISPM LRT-C(config)# eps 1 mep-work 1 mep-protect 1 mep-aps 1? SISPM LRT-C(config)# eps 1 mep-work 1 mep-protect 1 mep-aps 1 Error: EPS instance is not created SISPM LRT-C(config)# eps 1 revertive? 10m 10s 11m 12m 30s 5m 6m 7m 8m 9m wtr-value WTR is 10 min. WTR is 10 sec. WTR is 11 min. WTR is 12 min. WTR is 30 sec. WTR is 5 min. WTR is 6 min. WTR is 7 min. WTR is 8 min. WTR is 9 min. WTR as value. SISPM LRT-C(config)# eps 1 revertive 10s SISPM LRT-C(config)# Rev. B Page 42 of 333

43 erps Configure Ethernet Ring Protection Switching. Note that you can also configure ERPS in Config mode. erps <guard> <holdoff> <major> <mep> <revertive> <rpl> < sub> <topology-change> <version> < vlan> erps guard Guard time in ms ( ) erps holdoff Hold-off time in ms ( ) erps major rps mep Major ring Maintenance Entity endpoint erps revertive Wait-to-restore time in minutes (1-12) erps rpl erps sub erps topology-change Ring Protection Link <neighbor> < owner> Sub-ring propagate erps version <Version 1> <Version 2> erps vlan 1 SISPM LRT-C# show erps (L=Link Up/Down; B=Blocked/Unblocked) Maj RPL RPL RPL FSM R-APS Gr Typ V Rev Port 0 L B Port 1 L B Grp Role Port Blck State TX RX FOP M-I 2 Rev Gi 1/1 U B Gi 1/2 U U PEND Y N 2 S-I 2 Rev Gi 1/2 U B - U U PEND N N 3 S-I 2 Rev Gi 1/3 U B - U U PEND N N SISPM LRT-C# show erps statistics Grp RAPS RX RAPS Drop L-SF L-SF Cl R-SF RX R-FS RX NR TX SISPM LRT-C# 2 SISPM LRT-C(config)# erps? erps Ethernet Ring Protection Switching SISPM LRT-C(config)# erps? 1-64 ERPS group number Rev. B Page 43 of 333

44 SISPM LRT-C(config)# erps 1? guard holdoff major mep revertive rpl sub topology-change version vlan Guard Hold-off time Major ring MEP Revertive Ring Protection Link Sub-ring Topology Change Version VLAN SISPM LRT-C(config)# erps SISPM LRT-C(config)# erps 1 <tab> guard holdoff major mep revertive rpl sub topology-change version vlan SISPM LRT-C(config)# erps 1 guard? Guard time in ms SISPM LRT-C(config)# erps 1 holdoff? Hold-off time in ms SISPM LRT-C(config)# erps 1 major? major Major ring SISPM LRT-C(config)# erps 1 major? port0 ERPS Port 0 interface SISPM LRT-C(config)# erps 1 major port0? interface Ethernet interface SISPM LRT-C(config)# erps 1 major port0 interface? GigabitEthernet 1 Gigabit Ethernet Port SISPM LRT-C(config)# $s 1 major port0 interface GigabitEthernet? <port_type_id> Port ID in 1/1-12 SISPM LRT-C(config)# $s 1 major port0 interface GigabitEthernet 1/2? port1 ERPS Port 1 interface SISPM LRT-C(config)# $port0 interface GigabitEthernet 1/2 port1? interface Ethernet interface SISPM LRT-C(config)# $ernet 1/2 port1 interface GigabitEthernet? <port_type_id> Port ID in 1/ Rev. B Page 44 of 333

45 SISPM LRT-C(config)# $ernet 1/2 port1 interface GigabitEthernet 1/3? interconnect Major ring is interconnected SISPM LRT-C(config)# $nterface GigabitEthernet 1/3 interconnect? SISPM LRT-C(config)# $nterface GigabitEthernet 1/3 interconnect SISPM LRT-C(config)# erps 1 mep? port0 ERPS Port 0 interface SISPM LRT-C(config)# erps 1 mep port0? sf Signal Fail SISPM LRT-C(config)# erps 1 mep port0 sf? Index of Port 0 SignalFail MEP SISPM LRT-C(config)# erps 1 mep port0 sf 1? aps Automatic Protection Switching SISPM LRT-C(config)# erps 1 mep port0 sf 1 aps? Index of Port 0 APS MEP SISPM LRT-C(config)# erps 1 mep port0 sf 1 aps 1? port1 ERPS Port 1 interface SISPM LRT-C(config)# erps 1 mep port0 sf 1 aps 1 port1? sf Signal Fail SISPM LRT-C(config)# erps 1 mep port0 sf 1 aps 1 port1 sf? Index of Port 1 SignalFail MEP SISPM LRT-C(config)# erps 1 mep port0 sf 1 aps 1 port1 sf 1? aps Automatic Protection Switching SISPM LRT-C(config)# erps 1 mep port0 sf 1 aps 1 port1 sf 1 aps? Index of Port 1 APS MEP SISPM LRT-C(config)# erps 1 mep port0 sf 1 aps 1 port1 sf 1 aps 1? SISPM LRT-C(config)# erps 1 mep port0 sf 1 aps 1 port1 sf 1 aps 1 % ERPS group 1: Given protection group does not exist SISPM LRT-C(config)# erps 1 sub? sub Sub-ring SISPM LRT-C(config)# erps 1 sub? port0 ERPS Port 0 interface SISPM LRT-C(config)# erps 1 sub port0? interface Ethernet interface SISPM LRT-C(config)# erps 1 sub port0 interface? Rev. B Page 45 of 333

46 GigabitEthernet 1 Gigabit Ethernet Port SISPM LRT-C(config)# erps 1 sub port0 interface GigabitEthernet 1/6? interconnect port1 Sub-ring is interconnected ERPS Port 1 interface SISPM LRT-C(config)# $nterface GigabitEthernet 1/6 interconnect? 1-64 Major ring group number SISPM LRT-C(config)# $nterface GigabitEthernet 1/6 interconnect 1? virtual-channel Enable virtual channel for sub-ring SISPM LRT-C(config)# $hernet 1/6 interconnect 1 virtual-channel? SISPM LRT-C(config)# $hernet 1/6 interconnect 1 virtual-channel SISPM LRT-C(config)# SISPM LRT-C(config)# erps 1 topology-change propagate? SISPM LRT-C(config)# erps 1 topology-change propagate SISPM LRT-C(config)# SISPM LRT-C(config)# erps 1 version? version Version SISPM LRT-C(config)# erps 1 version? 1 ERPS version 1 2 ERPS version 2 SISPM LRT-C(config)# erps 1 version 1? SISPM LRT-C(config)# erps 1 version 1 SISPM LRT-C(config)# erps 1 version 2 SISPM LRT-C(config)# erps 1 vlan? vlan VLAN SISPM LRT-C(config)# erps 1 vlan? <vlan_list> add none remove List of VLANs Add to set of included VLANs Do not include any VLANs Remove from set of included VLANs SISPM LRT-C(config)# erps 1 vlan add? <vlan_list> List of VLANs SISPM LRT-C(config)# erps 1 vlan add 2? Rev. B Page 46 of 333

47 SISPM LRT-C(config)# erps 1 vlan add 2 SISPM LRT-C(config)# erps 1 vlan add 3 SISPM LRT-C(config)# erps 1 vlan add 3 SISPM LRT-C(config)# erps 1 vlan add 4 SISPM LRT-C(config)# erps 1 vlan remove? <vlan_list> List of VLANs SISPM LRT-C(config)# erps 1 vlan remove 3 SISPM LRT-C(config)# erps 1 vlan none SISPM LRT-C(config)# Rev. B Page 47 of 333

48 evc Configure Ethernet Virtual Connections. evc <1-256> <ece> <policer> <update> evc instance (1-256) evc ece evc policer evc update evc inner-tag evc interface evc ivid evc learning evc outer-tag evc vid evc EVC Control Entry Policer (ingress bandwidth profile) Update existing entry Setup inner tag options Setup NNI port list Setup internal EVC VLAN ID Setup learning Setup outer tag options Setup EVC VLAN ID 1 SISPM LRT-C(config)# evc? evc Ethernet Virtual Connections SISPM LRT-C(config)# evc? <1-256> EVC identifier ece policer update EVC Control Entry Policer (ingress bandwidth profile) Update existing entry SISPM LRT-C(config)# evc <tab> <1-256> ece policer update SISPM LRT-C(config)# evc 1? inner-tag interface ivid learning outer-tag vid Setup inner tag options Setup NNI port list Setup internal EVC VLAN ID Setup learning Setup outer tag options Setup EVC VLAN ID SISPM LRT-C(config)# evc 1? Rev. B Page 48 of 333