DPtech LSW3600-SI Series Gigabit Ethernet Switches Command Manual

Transcription

1 DPtech LSW3600-SI Series Gigabit Ethernet Switches Manual Manual version:v2.0 Software version:lsw5600-s111c008d010

2 DPtech LSW3600-SI Series Gigabit Ethernet Switches Manualv1.2.docx Declaration Copyright Hangzhou DPtech Technologies Co., Ltd.All rights reserved. No Part of the manual can be extracted or copied by any company or individuals without written permission, and cannot be transmitted by any means. is the trade mark of Hangzhou DPtech Technologies Co., Ltd. All other trademarks that may be mentioned in this manual are the property of their respective owners. Owing to product upgrading or other reasons, information in this manual is subject to change. Hangzhou DPtech Technologies Co., Ltd. has the right to modify the content in this manual, as it is a user guides, Hangzhou DPtech Technologies Co., Ltd. made every effort in the preparation of this document to ensure accuracy of the contents, but all statements, information, and recommendations in this document do not constitute the warranty of any kind express or implied. Hangzhou DPtech Technologies Co., Ltd. Address: 6th floor, Zhongcai Mansion, 68 Tonghelu, Binjiangqu, Hangzhou Zip code: Website: Mailbox: support@dptechnology.net 7x24 hours technical support hotline:

3 DPtech LSW3600-SI Series Gigabit Ethernet Switches Manualv1.2.docx Conventions conventions Convention Boldface italic The keywords of a command line are in Boldface. (It must be entered and cannot be changed). arguments are in italic. (It must be substitute by real value in command line). [ ] Items (keywords and arguments) in square brackets [ ] are optional. { } Items (keywords and arguments) in braces { } emerges one time or several times. ( x y ) Alternative items are grouped in parentheses and separated by vertical bars. One is selected. # A line starting with the # sign is comments. Sign conventions Convention An alert that calls attention to important information that if not understood or followed can result in data loss, data corruption, or damage to hardware or software. An alert that contains additional or supplementary information.

4 DPtech LSW3600-SI Series Gigabit Ethernet Switches Manualv1.2.docx Contents 1 Getting Started Introduction of login method line view System Management Device login Password-control level password ssh ssh access telnet telnet access telnet maxlinks web maxlinks web access http https show telnet Device management reboot sysname clock set conf-mode exit end show cpu-info show device show memory show clock show version show running-config Administrator local-user password role Copyright Hangzhou DPtech Technologies Co. Ltd. I

5 DPtech LSW3600-SI Series Gigabit Ethernet Switches Manualv1.2.docx kick login authentication local login authentication radius show user Configuration file configuration get configuration put configuration clear-all write file Software version boot-file show boot-file SNMP snmp-agent version snmp-agent community snmp-agent v3-user snmp-agent trap snmp-agent trap target-host snmp-agent host SNTP command sntp state mode Diagnostic tool command ping tracert Interface Management Interface configuration command interface speed duplex description mtu shutdown ip address ip address dhcp Port rate-limit Copyright Hangzhou DPtech Technologies Co. Ltd. II

6 DPtech LSW3600-SI Series Gigabit Ethernet Switches Manualv1.2.docx rate-limit Storm control command storm-control show storm-control Bond configuration interface bond bond mode bond load-sharing bond group show bond Port mirroring mirror-group mirroring_port mirror-group source rspan-group source rspan-group rspan-group dest show mirror-group Port isolation port-isolate isolation port-based show port-isolate VLAN Management Basic VLAN command vlan description interface vlan-if port switchport mode switchport access vlan switchport trunk allowed vlan switchport trunk native vlan switchport hybrid allowed switchport hybrid native show vlan show interface vlan-if PVLAN pvlan Copyright Hangzhou DPtech Technologies Co. Ltd. III

7 DPtech LSW3600-SI Series Gigabit Ethernet Switches Manualv1.2.docx no pvlan show pvlan QINQ qinq enable qinq inner-vid qinq inner-priority TPID tpid global port MAC MAC basic command mac-address-table aging-time mac-address-table static mac-address-table learn-count show mac-address-table show mac-address-table address show mac-address-table static show mac-address-table interface show mac-address-table vlan clear mac-address-table dynamic MAC address binding switchport port-security switchport port-security mac-address switchport port-security mac-address sticky switchport port-security maximum switchport port-security aging switchport port-security violation ARP command Basic ARP command arp show arp ARP dynamic detection arp inspection Route Management Basic routing command Copyright Hangzhou DPtech Technologies Co. Ltd. IV

8 DPtech LSW3600-SI Series Gigabit Ethernet Switches Manualv1.2.docx show ip route IPv4 static route command ip route RIP command router rip network redistribute default-information originate passive-interface distance timers basic show ip rip status OSPF command router ospf router-id network distance default-information originate redistribute area default-cost area nssa area stub area range ip ospf area passive-interface ip ospf authentication ip ospf authentication-key ip ospf message-digest-key ip ospf cost ip ospf dead-interval ip ospf hello-interval ip ospf priority show ip ospf interface show ip ospf neighbor show ip ospf database Multicast Routing Basic multicast forwarding command Copyright Hangzhou DPtech Technologies Co. Ltd. V

9 DPtech LSW3600-SI Series Gigabit Ethernet Switches Manualv1.2.docx multicast drop-unknown IGMP Snooping ip igmp snooping(global) ip igmp snooping (VLAN) ip igmp snooping fast-leave ip igmp snooping querier ip igmp snooping mrouter ip igmp snooping static show ip igmp snooping DHCP DHCP server command dhcp server pool address range default-router dns-server lease netbios-name-server dhcp server enable static-bind DHCP Snooping dhcp snooping enable dhcp snooping trust dhcp snooping mac-ip binding dhcp snooping information option DHCP relay dhcp relay enable dhcp relay server-address ip-address QoS QoS qos trust qos map port-cos qos queue rate-limit qos scheduler sp qos scheduler wrr qos scheduler wfq qos wrr queue weight qos wdrr queue weight Copyright Hangzhou DPtech Technologies Co. Ltd. VI

10 DPtech LSW3600-SI Series Gigabit Ethernet Switches Manualv1.2.docx qos remark qos map dscp-cos qos map cos-cos show qos queuing ACL Basic ACL acl mode no rule show acl counter show priority counter clear priority acl resource set MAC ACL rule IPv4 ACL rule MAC-IPv4 ACL rule IPv6 ACL rule MAC-IPv6 ACL rule Authentication Management MAC authentication management mac-authentication enable mac-authentication timer mac-authentication auth-method mac-authentication auth-mode mac-authentication kick show mac-authentication X command dot1x enable (global) dot1x auth-fail-retry dot1x timer silent-period dot1x timer retransmit-period dot1x timer handshake-period dot1x url Copyright Hangzhou DPtech Technologies Co. Ltd. VII

11 DPtech LSW3600-SI Series Gigabit Ethernet Switches Manualv1.2.docx dot1x auth-method dot1x free-ip dot1x guest-vlan dot1x dynamic-vlan dot1x port-method dot1x transmit-times dot1x default dot1x guest-vlan enable dot1x guest-vlan(interface) dot1x dynamic-vlan(interface) dot1x port-method(interface) dot1x kick show dot1x Web authentication web-authentication enable web-authentication auth-type web-authentication timer web-authentication free-ip web-authentication interface web-authentication default web-authentication kick Authentication configuration group-name user-name radius primary radius secondary radius client-ip radius port radius key radius timer radius accounting-on radius user-name-format radius stop-accounting-buffer isp-domain name isp-domain default ldap server-ip ldap server-port Copyright Hangzhou DPtech Technologies Co. Ltd. VIII

12 DPtech LSW3600-SI Series Gigabit Ethernet Switches Manualv1.2.docx ldap base-dn ldap user-attribute ldap login-password ldap login-dn show radius show ldap Spanning Tree spanning-tree mst configuration spanning-tree mode spanning-tree bridge-priority spanning-tree mst bridge-priority spanning-tree mst forward-time spanning-tree mst hello-time spanning-tree mst max-age spanning-tree mst timer-factor spanning-tree mst trans-limit spanning-tree mst max-hops spanning-tree mst type spanning-tree portfast bpduguard instance name revision spanning-tree enable spanning-tree guard root spanning-tree guard loop spanning-tree portfast spanning-tree link-type point-to-point spanning-tree port-priority spanning-tree mst port-priority spanning-tree cost spanning-tree mst cost show spanning-tree interface show spanning-tree show spanning-tree mstp High Availability FLRP command flrp group Copyright Hangzhou DPtech Technologies Co. Ltd. IX

13 DPtech LSW3600-SI Series Gigabit Ethernet Switches Manualv1.2.docx control-vlan protected-vlan port preemption-mode enable flrp enable show flrp Loopback detection loopback-detection enable (global) loopback-detection interval-time loopback-detection action loopback-detection control enable loopback-detection reset loopback-detection action(interface) loopback-detection control enable(interface) loopback-detection reset(interface) loopback-detection recover enable loopback-detection recover-time show loopback-detection Log Management System log log export show log system show log system start_time show log system degree Operation log log export show log operation show log operation start_time show log operation client_type Copyright Hangzhou DPtech Technologies Co. Ltd. X

14 1 Getting Started 1.1 Introduction of login method User can login to the device through the following login methods: Table 1-1 Login method Login method Logging in through the Console port Logging in through Telnet Logging in through SSH Web login NMS login By default, you can log in to the device through the Console port. By default, you cannot log in to the device through Telnet. To do so, log in to the device through the Console port, and complete the following configuration: Enable the Telnet function. By default, the Telnet function is disabled. Configure an IP address for the device interface, ensuring that the device and Telnet client are reachable. By default, the IP address of Ethernet management interface meth0_0 is /24. Disable the Telnet login authentication function or set the Telnet login password. By default, the Telnet login authentication function is enabled, the Telnet login password isn t set. By default, you cannot log in to the device through SSH. To do so, log in to the device through the Console port, and complete the following configuration: Enable the SSH function. By default, the SSH function is disabled. Configure an IP address for the device interface, ensuring that the device and SSH client are reachable. By default, the IP address of Ethernet management interface meth0_0 is /24. Disable the SSH login authentication function or set the SSH login password. By default, the SSH login authentication function is enabled, SSH login password isn t set. By default, the IP address of the VLAN interface 1 is /24. The name of Web user is admin, password is admin_default. By default, you cannot log in to the device through a network management system (NMS). To do so, you log in to the device through the Console port, and complete the following configuration: Configure an IP address for the device interface, ensuring that the device and NMS are reachable. By default, the IP address of Ethernet management interface meth0_0 is /24. Configure SNMP basic parameters. 1.2 line view User can login the device through the following methods: Copyright Hangzhou DPtech Technologies Co. Ltd. 1-1

15 Table 1-2 view summary Login method Display User view The initialization view <DPTECH> VLAN view Physical interface view Enter conf-mode command in the user view Enter vlan vlan-id command in the configuration view Enter interface if-name command in the configuration view [DPTECH] [DPTECH]vlan 10 [DPTECH-vlan10] [DPTECH]interface eth1_2 [DPTECH-eth1_2] Interface view VLAN interface view Enter interface vlan-if vlan-id command in the configuration view [DPTECH]interface vlan-if 10 [DPTECH-vlan-if10] Bond view Enter interface bond bond-id command in the configuration view [DPTECH]interface bond 3 [DPTECH-bond3] Administrator view User configuration view RIP view OSPF view SNTP view TPID view DHCP address pool view User group MSTP view Enter local-user name command in the configuration view Enter local-group groupname command in the configuration view Enter router rip command in the configuration view Enter router ospf command in the configuration view Enter SNTP command in the configuration view Enter TPID command in the configuration view Enter dhcp server pool if-name command in the configuration view Enter user-group command in the configuration view Enter spanning-tree mst configuration command in the configuration view [DPTECH]local-user admin [DPTECH-admin] [DPTECH]local-group admin [DPTECH-admin] [DPTECH]router rip [DPTECH-rip] [DPTECH]router ospf [DPTECH-ospf] [DPTECH]sntp [DPTECH-sntp] [DPTECH]tpid [DPTECH-tpid] [DPTECH]dhcp server pool vlan-if2 [DPTECH-dhcp-if2] [DPTECH]user-group [DPTECH-USER-GROUP] [DPTECH]spanning-tree mst configuration [DPTECH-MST] Copyright Hangzhou DPtech Technologies Co. Ltd. 1-2

16 2 System Management 2.1 Device login Password-control level password-control level ( low high ) None password-control level high command can be used to configure password level to high. password-control level low command can be used to configure password level to low. # Configure the password level to low. [DPTECH]password-control level low [DPTECH] password password ( console conf-mode ) password no password ( console conf-mode ) Copyright Hangzhou DPtech Technologies Co. Ltd. 2-3

17 password: configure the password that login to the configuration view from user view. password console password command used to set the first level password to enter the Console. password conf-mode password command used to set the second level password to enter the Console. no password console command can be used to close the password mode to enter the Console port. no password conf-mode command can be used to close the password mode to enter the configuration view. # Configure the password that login to the configuration view from user view as [DPTECH]password conf-mode ssh ssh enable no ssh enable ssh authentication pubkey no ssh authentication pubkey ssh authentication password no ssh authentication password ssh port port-id port-id: the SSH service port number, this argument can be set in the range of 1 to Default configuration is 22. Copyright Hangzhou DPtech Technologies Co. Ltd. 2-4

18 ssh enable command can be used to enable SSH service. It allows you to use the SSH protocol to log in and configure the device. no ssh enable command can be used to disable the SSH service. ssh port command can be used to set the SSH service port number. ssh authentication pubkey command can be used to enable SSH public-key authentication function. no ssh authentication pubkey command can be used to disable SSH public-key authentication function. ssh authentication password command can be used to enable SSH password authentication. no ssh authentication password command can be used to disable SSH password authentication. By default, the SSH service is in the disabled state. The default port number of SSH service is 22 # Enable SSH service. [DPTECH] ssh enable # Set the SSH service port to 830. [DPTECH] ssh port 830 # Enable SSH public-key authentication function. [DPTECH] ssh authentication pubkey # Enable SSH password authentication function. [DPTECH] ssh authentication password ssh access ssh access ip-address/mask-length no ssh access ( ip-address/mask-length all ) Copyright Hangzhou DPtech Technologies Co. Ltd. 2-5

19 ip-address/mask-length: the allowed IPv4 address of the hosts that can log in to the device. : /24. ssh access command can be used to configure the allowed IP address network segment for SSH login users. no ssh access command can be used to delete the allowed IP address network segment for SSH login users. # Configure the allowed IP address segment of SSH login users as /24. [DPTECH]ssh access / telnet telnet enable no telnet enable telnet port port-id port-id: set the Telnet service port number. This argument can be set in the range of 1 to telnet enable command can be used to enable Telnet service. User can login to the device and control the device through Telnet service. no telnet enable command can be used to disable Telnet service function. telnet port command can be used to set the Telnet service port number. By default, Telnet service is disabled. Default port number of Telnet service is 23. Copyright Hangzhou DPtech Technologies Co. Ltd. 2-6

20 # Enable Telnet service. [DPTECH] telnet enable # Set Telnet service port to 830. [DPTECH] telnet port telnet access telnet access ip-address/mask-length no telnet access ( ip-address/mask-length all ) ip-address/mask-length: IPv4 address segment. Configure the allowed IP address segment for Web login users. : /24. telnet access command can be used to configure the allowed IP address segment, MAC address or time range for Web login users. no telnet access command can be used to delete the allowed IP address segment, MAC address or time range for Web login users. # Configure the allowed IP address segment /24 or Web login users. [DPTECH]telnet access / telnet maxlinks telnet maxlinks maxlinks Copyright Hangzhou DPtech Technologies Co. Ltd. 2-7

21 maxlinks: the maximum number of telnet login users. This argument can be set in the range of 1 to 128 telnet maxlinks command can be used to configure the maximum number of telnet login users. # Configure the maximum number of telnet login user as 4. [DPTECH]telnet maxlinks web maxlinks web maxlinks maxlinks maxlinks: the maximum number of web login users. This argument can be set in the range of 1 to 128. web maxlinks command can be used to configure the maximum number of telnet login users. # Configure the maximum number of telnet login user as 32. [DPTECH]web maxlinks 32 Copyright Hangzhou DPtech Technologies Co. Ltd. 2-8

22 2.1.9 web access web access ip-address/mask-length no telnet access ( ip-address/mask-length all ) ip-address/mask-length: IPv4 address segment. Configure the allowed IP address segment for Web login users. : /24. web access command can be used to configure the allowed IP address segment, MAC address or time range for Web login users. no web access command can be used to delete the allowed IP address segment, MAC address or time range for Web login users. # Configure the allowed IP address segment /24 for Web login users. [DPTECH]web access / http http enable no http enable http port port-id port-id: the HTTP service port. This argument can be set in the range of 1 to Default is 80. http enable command can be used to enable HTTP service. After you enable the HTTP service, Copyright Hangzhou DPtech Technologies Co. Ltd. 2-9

23 you can login to the device and manage the device through Web. no http enable command can be used to disable HTTP service. http port command can be used to set the HTTP service port. By default, the device s HTTP service is enabled. HTTP service port number is 80. # Enable HTTP service. [DPTECH] http enable # Set the HTTP service port as 90. [DPTECH]http port https https enable no https enable https port port-id port-id: the HTTPs service port. This argument can be set in the range of 1~ https enable command can be used to enable the HTTPs service. After you enable this function, you can use the HTTPs protocol to get access to the device. HTTPs protocol is more secure than HTTP protocol. no https enable command can be used to disable HTTPs service https port command can be used to set the HTTPs service port. By default, the HTTPs service is disabled. HTTP service port is 443. # Enable HTTPs service. Copyright Hangzhou DPtech Technologies Co. Ltd. 2-10

24 [DPTECH] https enable # Set the telnet service port to 445. [DPTECH] https port show telnet show telnet Any view None show telnet command can be used to display the Telnet status and configuration. # Display the Telnet status and configuration. [DPTECH] show telnet Telnet server status :disable Telnet server port :23 Telnet server max-links :32 Telnet login by user :enable 2.2 Device management reboot reboot User view Copyright Hangzhou DPtech Technologies Co. Ltd. 2-11

25 none reboot command can be used to reboot the device. # Reboot the device. <DPTECH>reboot System configuration has been modified. Save? (Y/N) [N]: y Proceed with reboot? (Y/N) [N]: y sysname sysname sysname Sysname: system name of the device. You can set the system name within 20 characters, including A-Z, a-z, 0-9,., _ and -. sysname command can be used to set a new system name. By default, the system name is DPTECH. # Set the system name of the device to TEST. [DPTECH]sysname TEST [TEST] clock set clock set date time Copyright Hangzhou DPtech Technologies Co. Ltd. 2-12

26 date: current date in the format of YYYY-MM-DD. This argument can be set in the range of ~ time: current time in the format of HH:MM:SS. This argument can be set in the range of 00:00:00~23:59:59. clock set command can be used to set the date and time of the system. # Set the current system time to :23:30. [DPTECH] clock set :23: conf-mode conf-mode User view None conf-mode command can be used to enter the configuration view from the user view. If you enable the password function, you need to enter password when you enter the configuration view. [DPTECH] Copyright Hangzhou DPtech Technologies Co. Ltd. 2-13

27 2.2.5 exit exit Any view None exit command can be used to return to the upper level view. If you exist in the configuration view, you can execute this command to return to the user view. If you use serial port to login and you exist in the user view, you can execute the exit command to logout. If you use Telnet to login and you exist in the user view, you can execute the exit command to logout. # From the user view to the configuration view, and then back to the user view [DPTECH]exit <DPTECH> end end Any view None End command can be used to return to the user view in any view. # From the SNTP view to the configuration view, and then back to the user view. Copyright Hangzhou DPtech Technologies Co. Ltd. 2-14

28 [DPTECH]sntp [DPTECH-sntp]end <DPTECH> show cpu-info show cpu-info User view none show cpu-info command can be used to view CPU type, temperature and CPU utilization. # Display CPU information. [DPTECH]show cpu-info cpu type : RTL8393M cpu temperature : 51 cpu usage : 8.5% show device show device User view none show device command can be used to display the system name, system time, memory size of Copyright Hangzhou DPtech Technologies Co. Ltd. 2-15

29 the device. # Display the system name, system time, memory size of the device. [DPTECH]show device sys name is : DPTECH sys date is : sys time is : 14:47:08 device name is : LSW GT4GP-SI device location is : beijing contact info is : admin@mail.com ram size is : 256 MB flash size is : 32 MB show memory show memory User view none show memory command can be used to display the memory usage of the device. # Display the current memory usage. <DPTECH]show memory Total Memory : KB Reserved Memory : KB Available Memory : KB Total Used Memory : KB Usage : 32% <DPTECH>show memory total memory : 256 MB free memory : 198 MB memory usage : 22% The above information shows that: the total system memory available capacity is 256MB, the Copyright Hangzhou DPtech Technologies Co. Ltd. 2-16

30 remaining memory is 198MB and the memory usage is 22% show clock show clock Any view None show clock command can be used to display the current system time. # Display the current system time. [DPTECH] show clock Tue May 26 11:48: GMT +8: show version show version User view none show version command can be used to display the system s version information, including the software version and the version number of the hardware device.. # Display the system s version information. [DPTECH]show version Copyright Hangzhou DPtech Technologies Co. Ltd. 2-17

31 Software Release M221S002D095 Smartplat Version is SWV100R002B01D095 Compiled Sat Nov 7 10:04:48 CST 2015 Copyright(c) 2015 Zhejiang DPTECH Technologies Co., Ltd. All rights reserved. Without the owner's prior written consent, neither decompiling nor reverse-engineering shall be allowed LSW GT4GP-SI Uptime is : 0 week(s), 0 day(s), 0 hour(s), 0 minute(s), 4 second(s) CONBOOT version : PCB version : B CPLD version : show running-config show running-config User view None show running-config command to display the current configuration overview of the device. # Display the current configuration overview of the device. [DPTECH]show running-config conf-mode!! sysname DPTECH! local-user admin password 35D2C904076F8714FB210B57A7757C88 permission 0! no http! Copyright Hangzhou DPtech Technologies Co. Ltd. 2-18

32 http port 42! no https! telnet! web access /24 web access /24 web access /8 web access /16! cli access /24! web maxlinks 128! cli ssh maxlinks MORE Administrator local-user local-user username no local-user username username: the name of the administrator. local-user command can be used to create an administrator and to enter the administrator s view. no local-user command can be used to delete the specified administrator. # Create an administrator abc. Copyright Hangzhou DPtech Technologies Co. Ltd. 2-19

33 [DPTECH]local-user abc [DPTECH-abc] password password password Administrator view password: the password of an administrator. High level password: the password length should be 10 digits, which must contain uppercase letters, lowercase letters, digits, special characters Low level password: password length should be no less than 6 digits. password command can be used to set the password of administrator. # Set the password of administrator test1 to <DPTECH> conf-mode [DPTECH]local-user abc [DPTECH-abc]password 1q2w3e4R role role ( super general ) Administrator view super: the administrator is the system administrator. general: the administrator is the general administrator. Copyright Hangzhou DPtech Technologies Co. Ltd. 2-20

34 role command can be used to modify administrator s configuration privilege. # Modify the administrator abc to general administrator. [DPTECH]local-user test1 [DPTECH-test1]role general kick kick webuser username ip-address kick remoteuser ip-address username: the name of the Web login user. ip-address: the IP address of Web/remote login. kick webuser username ip-addresscommand can be used to kick web login user kick remoteuser ip-addresscommand can be used to kick out remote login user. # Kicked out the web user admin who logs in on [DPTECH]kick webuser admin login authentication local login authentication local no login authentication local Copyright Hangzhou DPtech Technologies Co. Ltd. 2-21

35 None login authentication local command can be used to enable the local authentication function of administrator. no login authentication local command can be used to disable the local authentication function of administrator. # Enable the local authentication function of administrator. [DPTECH]login authentication local login authentication radius login authentication radius no login authentication radius None login authentication radius command can be used to configure the Radius authentication function of administrator. no login authentication radius command can be used to disable the Radius authentication function of administrator. # Enable the Radius authentication function of administrator. Copyright Hangzhou DPtech Technologies Co. Ltd. 2-22

36 [DPTECH]login authentication radius show user show user User view None show user command can be used to display the information of online user. # Display the information of all online users. [DPTECH]show user User Load address Type Load time Session id/pid ==================================================================================== admin Web :51:33 B3CB46419B0D5C57F118CD3EC4A86081 <DPTECH> 2.4 Configuration file configuration get configuration get filename tftp ip-address filename: the name of the configuration file to be downloaded. ip-address: remote server IP address. You can get configuration file from the server. The server IP address can be expressed as dot-decimal format, example: Copyright Hangzhou DPtech Technologies Co. Ltd. 2-23

37 configuration get command can be used to download a configuration file from the specified server. # Download aaa configuration file from the server IP address [DPTECH]configuration get aaa tftp configuration put configuration put ( main back ) filename tftp ip-address filename: the name of the configuration file to be uploaded. ip-address: remote server IP address. You can put configuration file to the server. The server IP address can be expressed as dot-decimal format, example: configuration put command can be used to upload configuration file to the specified server. # Upload aaa configuration file to the server IP address [DPTECH]configuration put main aaa tftp configuration clear-all configuration clear-all Copyright Hangzhou DPtech Technologies Co. Ltd. 2-24

38 None configuration clear-all command can be used to clear all configurations on the device, and to reboot the device immediately. # Clear all configurations on the device and reboot the device immediately. [DPTECH]configuration clear-all Warning: clear database, and then reboot the system. Are you sure? (Y/N) [N]: y write file write file Configuration file None write file command can be used to save current configuration on the device. # Save current configurations on the device. [DPTECH]write file Configuration saved to /config/sys/rtm0.conf Copyright Hangzhou DPtech Technologies Co. Ltd. 2-25

39 2.5 Software version boot-file boot-file ( main backup ) download filename ip-address filename: the name of software version. ip-address: the software version of the TFTP server address, in dot-decimal format. : boot-file command can be used to download main or backup software version from the specified TFTP server. # From the TFTP server whose IP address is , download the backup software version filename. [DPTECH]boot-file backup download filename show boot-file show boot-file User view None show boot-file command can be used to display the next-boot software version of the device. Copyright Hangzhou DPtech Technologies Co. Ltd. 2-26

40 # Display the main software version and backup software version of the device. [DPTECH]show boot-file The main boot file for next time is filename.bin. The backup boot file for next time is /boot/ filename.bin. 2.6 SNMP snmp-agent version snmp-agentversion ( v1 v2c v3 all ) nosnmp-agentversion ( v1 v2c v3 all ) v1: SNMP v1 version. It can be applied to SNMPv1 network and is required when SNMPv1 Agent and NMS switches their messages. v2c: SNMP v2c version. It can be applied to SNMPv2c network and is required when SNMPv2c Agent and NMS switches their messages. v3: SNMP v3 version. It can be applied to SNMPv3 network and is required when SNMPv3 Agent and NMS switches their messages. all: the device supports SNMP v1, v2c, v3 version. vrf-name: the name of the VRF instance. snmp-agent version command can be used to configure a version number to enable the relevant SNMP version. In a network, the NMS and Agent of SNMPv1and SNMPv2c use community string to authenticate and the NMS and Agent of SNMPv3 use user name to authenticate. The prerequisite of NMS and Agent connected successfully is that they must use the same SNMP version. no snmp-agent version command can be used to configure a version number to disable the relevant SNMP version. # Enable SNMPv2c version. Copyright Hangzhou DPtech Technologies Co. Ltd. 2-27

41 [DPTECH]snmp-agent version v2c snmp-agent community snmp-agent communitystring ( ro rw ) string: SNMP read community string, SNMP read and write community string. This argument should not be larger than 128 characters and does not contain these special characters: <, >, &,' and ". ro: set the SNMP read-only community string for the device. rw: set the SNMP read and write community string for the device. snmp-agent community string ( ro rw ) command can be used to set the SNMP community string. # Set the community string of SNMP read-only to public. [DPTECH]snmp-agent community public ro # Set the community string of SNMP read and write to private. [DPTECH]snmp-agent community private rw snmp-agent v3-user snmp-agent v3-user user-name username [ authentication-mode ( md5 sha ) auth-password [ privacy-modedespriv-password ] ] no snmp-agent v3-user user-name username Copyright Hangzhou DPtech Technologies Co. Ltd. 2-28

42 username: the user name of SNMPv3. md5: specify the authentication algorithm to MD5. sha: specify the authentication algorithm to SHA-1. auth-password: authentication password. This argument can be set in the range of 8 to 15 characters des: authentication protocol is DES. priv-password: encryption password. This argument can be set in the range of 8 to 15 characters. snmp-agent v3-user user-name command can be used to set the name, authentication protocol, authentication password, encryption protocol, encryption password for SNMPv3 user. This command can be used in SNMPv3 network. The SNMPv3 user should be created if the Agent and NMS communicate through SNMPv3 packets. no snmp-agent v3-user user-name # Set the SNMP-agent v3 username to DPTECH, set the authentication algorithm to MD5, authentication password to , set the encryption algorithm to DES, encryption password to [DPTECH]snmp-agent v3-user user-name DPTECH authentication-mode md privacymode des snmp-agent trap snmp-agent trap no snmp-agent trap Copyright Hangzhou DPtech Technologies Co. Ltd. 2-29

43 None snmp-agent trap command can be used to enable the sending SNMP Trap function when configuration is changed. no snmp-agent trap command can be used to disable the sending SNMP Trap function when the configuration is changed. By default, the device does not send SNMP Trap when configuration is changed. # Enable the sending SNMP Trap function when configuration is changed. [DPTECH]snmp-agent trap snmp-agent trap target-host snmp-agent trap target-host address ip-address target-port port-id ip-address: the SNMP trap destination host address. : port-id: the SNMP trap destination port. Default port ID is 162. snmp-agent trap target-host command can be used to set the SNMP Trap destination host address and destination port ID. #Set the SNMP trap destination host IP address: , and port ID: 162. [DPTECH]snmp-agent trap target-host address target-port 162 Copyright Hangzhou DPtech Technologies Co. Ltd. 2-30

44 2.6.6 snmp-agent host snmp-agent host ( ip-address/mask-length no snmp-agent host ( ip-address/mask-length all ) ip-address/mask-length: configure IPv4 address and sub mask. : /24. snmp-agent host command can be used to configure IP address list. Only the IP address in the IP address list can access to the device s MIB database no snmp-agent host command can be used to delete an IP address or all IP addresses in the IP address list. # Configure the allowed IP address segment /24 to access the device through SNMP. [DPTECH]snmp-agent host / SNTP command sntp sntp None sntp command can be used to enter the SNTP view from the configuration view. Copyright Hangzhou DPtech Technologies Co. Ltd. 2-31

45 # Enter the SNTP view from the configuration view. [DPTECH]sntp [DPTECH-sntp] state state ( enable disable ) SNTP view None state enable command can be used to enable the SNTP function. state disable command can be used to disable the SNTP function. # Enable the SNTP function. [DPTECH]sntp [DPTECH-sntp] [DPTECH-sntp]state enable mode mode server mode client ip ip-address poll_time times SNTP view Copyright Hangzhou DPtech Technologies Co. Ltd. 2-32

46 ip-address: the SNTP server address. times: the time value of polling interval. This argument can be set in the range of 1 to Unit is second. Default is 64 seconds. mode server command can be used to set the device as SNTP server. mode client command can used to set the device as SNTP client, and then specify the SNTP server address and polling interval. # Enable the device as SNTP client mode. SNTP server s IP address is and the polling interval is 20 seconds. [DPTECH]sntp [DPTECH-sntp] [DPTECH-sntp]mode client ip poll_time Diagnostic tool command ping ping ip-address [ -c count -s data-bytes -I source-ip-address ] User view -c count: the number of the specified ICMP echo request message. This argument can be set in the range of from 1 to 1000, and the default value is 5. -s data-bytes: the length of the specified ICMP echo request message. This argument can be set in the range of 20 to I source-address: the specified source IP address. ip-address: the IP address of destination host Copyright Hangzhou DPtech Technologies Co. Ltd. 2-33

47 ping command can be used to test whether a network is reachable. # Ping destination IP address <DPTECH>ping PING ( ): 58 data bytes 66 bytes from : icmp_seq=0 ttl=64 time=0.0 ms 66 bytes from : icmp_seq=1 ttl=64 time=0.0 ms 66 bytes from : icmp_seq=2 ttl=64 time=0.0 ms 66 bytes from : icmp_seq=3 ttl=64 time=10.0 ms 66 bytes from : icmp_seq=4 ttl=64 time=0.0 ms ping statistics packets transmitted, 5 packets received, 0% packet loss round-trip min/avg/max = 0.0/2.0/10.0 ms tracert tracert ip-address User view ip-address: the IP address of destination host. tracert command can be used to specify the route path that will be used for IP data packet to access destination host. # Use tracert command to test. The destination IP address is <DPTECH>tracert traceroute to ( ), 10 hops max, 60 byte packets 1 * * * ( ) 0 ms 0 ms 0 ms Copyright Hangzhou DPtech Technologies Co. Ltd. 2-34

48 3 Interface Management 3.1 Interface configuration command interface interface if-name if-name: the interface type and number. bond means the aggregation interface; gige means gigabit Ethernet interface; vlan-if means the VLAN interface; loopback means loopback interface. interface command can be used to enter the specified interface view. # Enter the VLAN2 interface view. [DPTECH]interface vlan-if 2 [DPTECH-vlan-if2] speed speed ( 10M 100M 1000M auto ) Physical interface view Copyright Hangzhou DPtech Technologies Co. Ltd. 3-35

49 auto: the interface rate is auto-negotiation speed speed-mode command can be used to set the speed of an Ethernet interface. For a electrical interface, use the speed command to set its speed to match the speed of the peer interface; By default, the speed rate on an electrical interface is auto-negotiation. # Set the interface gige0_2 to work at 1000M. [DPTECH]interface gige 0_2 [DPTECH-gige0_0]speed 1000M duplex duplex ( auto half full ) Physical interface view auto: the duplex mode of the interface is auto-negotiation. full: the duplex mode of the interface is full-duplex. half: the duplex mode of the interface is half-duplex. duplex command can be used to set the duplex mode of the Ethernet interface. By default, the duplex mode of the interface is auto-negotiation. # Set the interface gige0_2 to work in full-duplex mode. [DPTECH]interface gige0_2 [DPTECH-gige0_2]duplex full Copyright Hangzhou DPtech Technologies Co. Ltd. 3-36

50 3.1.4 description description string Physical interface view string: the interface s description. Interface description s length should be in the range of 0~80. It allows you to use these characters, such as upper letter, lower letter, digit, space and special characters _. ;:/={}(). For the vlan-if Interface, this parameter can be set in the range of 1 to 20 characters. It contains upper case, lower case and does not contain special characters. description command can be used to configure the interface s description. By default, the interface s description is the interface name. # Configure the description information of interface vlan-if100 as vlan_port100. [DPTECH]interface vlan-if100 [DPTECH-vlan-if100]description Vlan_ mtu mtu mtu-value VLAN interface view mtu-value: the MTU of the interface. This argument can be set in the range of 64 to 1500 bytes. Default is 1500 bytes. Copyright Hangzhou DPtech Technologies Co. Ltd. 3-37

51 mtu command can be used to set the MTU of the interface. # Set the MTU of the interface gige0_0 to 1400 bytes. [DPTECH]interface vlan-if 1 [DPTECH-vlan-if1]mtu shutdown shutdown no shutdown Interface view None shutdown command can be used to shut down an interface. no shutdown command can be used to enable an interface. # Shut down the interface gige0_1. [DPTECH]interface gige0_1 [DPTECH-gige0_1]shutdown ip address ip address ( ip-address/mask-length ip-address/mask-length secondary ) no ip address ( ip-address/mask-length ip-address/mask-length secondary) Copyright Hangzhou DPtech Technologies Co. Ltd. 3-38

52 VLAN interface view ip-address/mask-length: the IPv4 address for the interface, in dot-decimal. : ip-address mask: the IPv4 address of the interface, in dot-decimal format. : ip address command can be used to set primary address for the interface. ip address secondary command can be used to set secondary address for the interface. no ip address command can be used to delete all addresses of the interface. no ip address [ ip-address/mask-length ip-address mask ] command can be used to delete the primary address of the interface. no ip address secondary command can be used to delete the secondary address of the interface. # For the interface vlan-if1, set the primary address /16, set secondary address /16 [DPTECH]interface vlan-if 1 [DPTECH-vlan-if1]ip address /16 [DPTECH-vlan-if1]ip address /16 secondary ip address dhcp ip address dhcp [ default-route ] VLAN interface view None ip address dhcp command can be used to set the interface to obtain IP address by DHCP. Copyright Hangzhou DPtech Technologies Co. Ltd. 3-39

53 # Set vlan-if1 to obtain IP address by DHCP. [DPTECH]interface vlan-if 1 [DPTECH-vlan-if1]ip address dhcp 3.2 Port rate-limit rate-limit rate-limit ( input output ) average-rate no rate-limit ( input output ) Physical interface view average-rate: the rate-limit value of the interface. This parameter can be set in the range of 16 to kbps. rate-limit input command can be used to configure the rate-limit value of the inbound interface. rate-limit output command can be used to configure the rate-limit value of the outbound interface. # For the interface gige0_1, configure the rate-limit value of the inbound interface as 10Mbps. [DPTECH]interface gige0_1 [DPTECH-gige0_1]rate-limit input Copyright Hangzhou DPtech Technologies Co. Ltd. 3-40

54 3.3 Storm control command storm-control storm-control ( broadcast multicast unicast ) speed-value no storm-control ( broadcast multicast unicast all ) Physical interface view speed-value: the storm control value of the interface. storm-control command can be used to configure the storm control value of the interface, including broadcast (broadcast storm control), multicast (unknown multicast storm control), unicast (unknown unicast storm control). no storm-control command can be used to restore to default. Default is no storm control. # Configure the broadcast storm control value of the interface gige0_1 as 100 kbps. [DPTECH]interface gige0_1 [DPTECH-gige0_1]storm-control broadcast show storm-control show storm-control ( ( broadcast unicast multicast ) if-name unit ) User view if-name: storm control interface broadcast: broadcast storm control Copyright Hangzhou DPtech Technologies Co. Ltd. 3-41