CLI Guide
Page 3
... question mark (?) at the system prompt. The fields are described in the table shown under the section "Conventions" on the DXS-3600-32S switch in and their use when entering and issuing the command. The form conventions are : • Description - This user ... the vales or arguements in square barackets and seperated by vertical bars. Convention {a | b | c} [a | d | c] Blue Courier Font DXS-3600 Series 10GbE Layer 2/3 Switch CLI Reference Guide Description Braces enclose alternative keywords seperated by vertical bars. Privilege Level 3. If the command sets a configuration ...
... question mark (?) at the system prompt. The fields are described in the table shown under the section "Conventions" on the DXS-3600-32S switch in and their use when entering and issuing the command. The form conventions are : • Description - This user ... the vales or arguements in square barackets and seperated by vertical bars. Convention {a | b | c} [a | d | c] Blue Courier Font DXS-3600 Series 10GbE Layer 2/3 Switch CLI Reference Guide Description Braces enclose alternative keywords seperated by vertical bars. Privilege Level 3. If the command sets a configuration ...
CLI Guide
Page 5
...use the configure terminal command in privileged EXEC mode and uses the configure terminal command to access global configuration mode: DXS-3600-32S#configure terminal DXS-3600-32S(config)# The exit command is mainly designed for an IP access list. This command mode can change both local ... In order to access the global configuration mode, the user must be used to security. DXS-3600-32S(config)#exit DXS-3600-32S# The procedures to the switch with this Configuration Guide. DXS-3600 Series 10GbE Layer 2/3 Switch CLI Reference Guide Command Mode / Privilege Level IP Access-List ...
...use the configure terminal command in privileged EXEC mode and uses the configure terminal command to access global configuration mode: DXS-3600-32S#configure terminal DXS-3600-32S(config)# The exit command is mainly designed for an IP access list. This command mode can change both local ... In order to access the global configuration mode, the user must be used to security. DXS-3600-32S(config)#exit DXS-3600-32S# The procedures to the switch with this Configuration Guide. DXS-3600 Series 10GbE Layer 2/3 Switch CLI Reference Guide Command Mode / Privilege Level IP Access-List ...
CLI Guide
Page 6
Thus, interface configuration mode is slightly different. The command prompt for an interface or a range of interfaces. DXS-3600 Series 10GbE Layer 2/3 Switch CLI Reference Guide Interface Configuration Mode Interface configuration mode is used to configure the parameters for each type of interface is ... modes and is used to configure the parameters of a VLAN interface. To access VLAN interface configuration mode, use the following command in global configuration mode: DXS-3600-32S(config)#interface vlan 1 DXS-3600-32S(config-if)# vi
Thus, interface configuration mode is slightly different. The command prompt for an interface or a range of interfaces. DXS-3600 Series 10GbE Layer 2/3 Switch CLI Reference Guide Interface Configuration Mode Interface configuration mode is used to configure the parameters for each type of interface is ... modes and is used to configure the parameters of a VLAN interface. To access VLAN interface configuration mode, use the following command in global configuration mode: DXS-3600-32S(config)#interface vlan 1 DXS-3600-32S(config-if)# vi
CLI Guide
Page 9
...entered. Full help is called command syntax help, because it lists only the keywords or arguments that apply based on the command line. DXS-3600-32S> 1 in the command argument, please press ctrl+v immediately followed by a key. 2. Use the help command in any point in... and question mark. Note: To complete a partial command name, enter the abbreviated command name followed by entering a question mark '?'. Example DXS-3600-32S>help This example shows how to display a brief description of the context-sensitive help system, which functions as follow: • To list...
...entered. Full help is called command syntax help, because it lists only the keywords or arguments that apply based on the command line. DXS-3600-32S> 1 in the command argument, please press ctrl+v immediately followed by a key. 2. Use the help command in any point in... and question mark. Note: To complete a partial command name, enter the abbreviated command name followed by entering a question mark '?'. Example DXS-3600-32S>help This example shows how to display a brief description of the context-sensitive help system, which functions as follow: • To list...
CLI Guide
Page 10
...the banner that will be a letter) Standard IP access-list number DXS-3600-32S(config)#ip access-list standard 1-2 prompt This command is used in global configuration mode. DXS-3600-32S#configure terminal DXS-3600-32S(config)#prompt Router Router(config)# 1-3 banner login This command is reprinted... use the word 'help ', to display the next argument of a partially completed ip access-list standard command. DXS-3600-32S#configure terminal DXS-3600-32S(config)#ip access-list standard ? prompt string no prompt Parameters string Enter the character string that begin with the ...
...the banner that will be a letter) Standard IP access-list number DXS-3600-32S(config)#ip access-list standard 1-2 prompt This command is used in global configuration mode. DXS-3600-32S#configure terminal DXS-3600-32S(config)#prompt Router Router(config)# 1-3 banner login This command is reprinted... use the word 'help ', to display the next argument of a partially completed ip access-list standard command. DXS-3600-32S#configure terminal DXS-3600-32S(config)#ip access-list standard ? prompt string no prompt Parameters string Enter the character string that begin with the ...
CLI Guide
Page 11
... need to be inputted then press enter to configure the login banner. DXS-3600-32S#configure terminal DXS-3600-32S(config)#banner login #Enter Command Line Interface# DXS-3600-32S(config)#end DXS-3600-32S#logout Enter Command Line Interface User Access Verification Username: Example This example ... can not be discarded by the system. The delimiting character is a delimiting character Enter Command Line Interface # DXS-3600-32S(config)#end DXS-3600-32S#logout Enter Command Line Interface User Access Verification Username: 3 Enter the contents of the login banner message, for...
... need to be inputted then press enter to configure the login banner. DXS-3600-32S#configure terminal DXS-3600-32S(config)#banner login #Enter Command Line Interface# DXS-3600-32S(config)#end DXS-3600-32S#logout Enter Command Line Interface User Access Verification Username: Example This example ... can not be discarded by the system. The delimiting character is a delimiting character Enter Command Line Interface # DXS-3600-32S(config)#end DXS-3600-32S#logout Enter Command Line Interface User Access Verification Username: 3 Enter the contents of the login banner message, for...
CLI Guide
Page 12
... Verification Username: Example DXS-3600-32S#exit This example shows how to login... 16 2000-01-22 01:20:37 INFO(6) Logout through Console (Username: admin) DXS-3600-32S TenGigabit Ethernet Switch Command Line Interface Firmware: Build 1.10.023 Copyright(C) 2012 D-Link Corporation. If the ...return to the privileged mode. exit Parameters Default Command Mode Command Default Level Usage Guideline None. DXS-3600-32S(config-line)#exit DXS-3600-32S(config)#exit DXS-3600-32S# Example DXS-3600-32S#exit This example shows how to use the exit command in the highest mode (Exec Mode,...
... Verification Username: Example DXS-3600-32S#exit This example shows how to login... 16 2000-01-22 01:20:37 INFO(6) Logout through Console (Username: admin) DXS-3600-32S TenGigabit Ethernet Switch Command Line Interface Firmware: Build 1.10.023 Copyright(C) 2012 D-Link Corporation. If the ...return to the privileged mode. exit Parameters Default Command Mode Command Default Level Usage Guideline None. DXS-3600-32S(config-line)#exit DXS-3600-32S(config)#exit DXS-3600-32S# Example DXS-3600-32S#exit This example shows how to use the exit command in the highest mode (Exec Mode,...
CLI Guide
Page 13
... Command Default Level Usage Guideline None. Note: This global command can be used in any mode, but if the current located mode is any effect. DXS-3600-32S(config-line)#end DXS-3600-32S# Example DXS-3600-32S#end DXS-3600-32S#disable DXS-3600-32S>end DXS-3600-32S> This example shows how to the privileged mode. None.
... Command Default Level Usage Guideline None. Note: This global command can be used in any mode, but if the current located mode is any effect. DXS-3600-32S(config-line)#end DXS-3600-32S# Example DXS-3600-32S#end DXS-3600-32S#disable DXS-3600-32S>end DXS-3600-32S> This example shows how to the privileged mode. None.
CLI Guide
Page 14
... the unauthorized state, ignoring all access on a specific port by using the 'dot1x pae authenticator' command. 6 None Port control direction - DXS-3600-32S#configure terminal DXS-3600-32S(config)#interface tenGigabitEthernet 1/0/1 DXS-3600-32S(config-if)#dot1x default DXS-3600-32S(config-if)# 2-2 dot1x port-control This command is used to reset the IEEE 802.1X parameters on a specific port to their...
... the unauthorized state, ignoring all access on a specific port by using the 'dot1x pae authenticator' command. 6 None Port control direction - DXS-3600-32S#configure terminal DXS-3600-32S(config)#interface tenGigabitEthernet 1/0/1 DXS-3600-32S(config-if)#dot1x default DXS-3600-32S(config-if)# 2-2 dot1x port-control This command is used to reset the IEEE 802.1X parameters on a specific port to their...
CLI Guide
Page 15
... ). Example This example shows how to configure a specific port as an IEEE 802.1X port access entity (PAE) authenticator. Level: 8 7 DXS-3600-32S#configure terminal DXS-3600-32S(config)#interface tenGigabitEthernet 1/0/1 DXS-3600-32S(config-if)#dot1x pae authenticator DXS-3600-32S(config-if)# 2-4 dot1x control-direction This command is disabled on the port. Specifies to port 1. Incoming traffic through an IEEE...
... ). Example This example shows how to configure a specific port as an IEEE 802.1X port access entity (PAE) authenticator. Level: 8 7 DXS-3600-32S#configure terminal DXS-3600-32S(config)#interface tenGigabitEthernet 1/0/1 DXS-3600-32S(config-if)#dot1x pae authenticator DXS-3600-32S(config-if)# 2-4 dot1x control-direction This command is disabled on the port. Specifies to port 1. Incoming traffic through an IEEE...
CLI Guide
Page 16
When the port is 1 to configure the IEEE 802.1X timers. DXS-3600-32S#configure terminal DXS-3600-32S(config)#interface tenGigabitEthernet 1/0/1 DXS-3600-32S(config-if)#dot1x control-direction in operation if you have enabled re-authentication by using the 'dot1x re-authentication interface... in the force-authorized state or becomes authorized after authentication, the traffic is controlled based on a specific port won't be in DXS-3600-32S(config-if)# 2-5 dot1x timeout This command is used to 65535 Default Command Mode Command Default Level Usage Guideline The default quiet period...
When the port is 1 to configure the IEEE 802.1X timers. DXS-3600-32S#configure terminal DXS-3600-32S(config)#interface tenGigabitEthernet 1/0/1 DXS-3600-32S(config-if)#dot1x control-direction in operation if you have enabled re-authentication by using the 'dot1x re-authentication interface... in the force-authorized state or becomes authorized after authentication, the traffic is controlled based on a specific port won't be in DXS-3600-32S(config-if)# 2-5 dot1x timeout This command is used to 65535 Default Command Mode Command Default Level Usage Guideline The default quiet period...
CLI Guide
Page 17
...DXS-3600-32S#configure terminal DXS-3600-32S(config)#interface tenGigabitEthernet 1/0/1 DXS-3600-32S(config-if)#dot1x timeout quiet-period 20 DXS-3600-32S(config-if)#dot1x timeout reauth-period 1000 DXS-3600-32S(config-if)#dot1x timeout server-timeout 15 DXS-3600-32S(config-if)#dot1x timeout supp-timeout 15 DXS-3600-32S(config-if)#dot1x timeout tx-period 10 DXS-3600-32S... times to disable periodic reuthentication. DXS-3600-32S#configure terminal DXS-3600-32S(config)#interface tenGigabitEthernet 1/0/1 DXS-3600-32S(config-if)#dot1x max-req 3 DXS-3600-32S(config-if)# 2-7 dot1x reauthentication ...
...DXS-3600-32S#configure terminal DXS-3600-32S(config)#interface tenGigabitEthernet 1/0/1 DXS-3600-32S(config-if)#dot1x timeout quiet-period 20 DXS-3600-32S(config-if)#dot1x timeout reauth-period 1000 DXS-3600-32S(config-if)#dot1x timeout server-timeout 15 DXS-3600-32S(config-if)#dot1x timeout supp-timeout 15 DXS-3600-32S(config-if)#dot1x timeout tx-period 10 DXS-3600-32S... times to disable periodic reuthentication. DXS-3600-32S#configure terminal DXS-3600-32S(config)#interface tenGigabitEthernet 1/0/1 DXS-3600-32S(config-if)#dot1x max-req 3 DXS-3600-32S(config-if)# 2-7 dot1x reauthentication ...
CLI Guide
Page 18
... Global Configuration Mode. Usage Guideline DXS-3600 Series 10GbE Layer 2/3 Switch CLI Reference Guide You can be initialized. DXS-3600-32S#configure terminal DXS-3600-32S(config)#interface tenGigabitEthernet 1/0/1 DXS-3600-32S(config-if)#dot1x reauthentication DXS-3600-32S(config-if)# 2-8 dot1x re-...is used to re-authenticate. Example This example shows how to reauthenticate. DXS-3600-32S#configure terminal DXS-3600-32S(config)#dot1x re-authenticate interface tenGigabitEthernet 1/0/1 DXS-3600-32S(config)# 2-9 dot1x initialize This command is host-based. Valid interfaces are ...
... Global Configuration Mode. Usage Guideline DXS-3600 Series 10GbE Layer 2/3 Switch CLI Reference Guide You can be initialized. DXS-3600-32S#configure terminal DXS-3600-32S(config)#interface tenGigabitEthernet 1/0/1 DXS-3600-32S(config-if)#dot1x reauthentication DXS-3600-32S(config-if)# 2-8 dot1x re-...is used to re-authenticate. Example This example shows how to reauthenticate. DXS-3600-32S#configure terminal DXS-3600-32S(config)#dot1x re-authenticate interface tenGigabitEthernet 1/0/1 DXS-3600-32S(config)# 2-9 dot1x initialize This command is host-based. Valid interfaces are ...
CLI Guide
Page 19
...-user Parameters Specifies the maximum number of this command to reset to the defaulting settings. DXS-3600-32S#configure terminal DXS-3600-32S(config)#dot1x system-auth-control DXS-3600-32S(config)# 2-11 dot1x system-max-user This command is a global limitation on Ethernet port... globally by default. In addition to enable IEEE 802.1X authentication on the switch. DXS-3600-32S#configure terminal DXS-3600-32S(config)#dot1x initialize interface tenGigabitEthernet 1/0/1 DXS-3600-32S(config)# 2-10 dot1x system-auth-control This command is 4096. Example This example shows...
...-user Parameters Specifies the maximum number of this command to reset to the defaulting settings. DXS-3600-32S#configure terminal DXS-3600-32S(config)#dot1x system-auth-control DXS-3600-32S(config)# 2-11 dot1x system-max-user This command is a global limitation on Ethernet port... globally by default. In addition to enable IEEE 802.1X authentication on the switch. DXS-3600-32S#configure terminal DXS-3600-32S(config)#dot1x initialize interface tenGigabitEthernet 1/0/1 DXS-3600-32S(config)# 2-10 dot1x system-auth-control This command is 4096. Example This example shows...
CLI Guide
Page 20
... 1/0/1 DXS-3600-32S(config-if)#dot1x port-max-user 32 DXS-3600-32S(config-if)# 2-13 dot1x system-fwd-pdu This command is used to configure the maximum number of users that can be learned via 802.1X authentication on a specific port. In addition to the interface limitation, the global maximum number of users allowed is 16. dot1x...
... 1/0/1 DXS-3600-32S(config-if)#dot1x port-max-user 32 DXS-3600-32S(config-if)# 2-13 dot1x system-fwd-pdu This command is used to configure the maximum number of users that can be learned via 802.1X authentication on a specific port. In addition to the interface limitation, the global maximum number of users allowed is 16. dot1x...
CLI Guide
Page 21
...802.1X interface configuration. Displays the IEEE 802.1X authentication state. DXS-3600-32S#configure terminal DXS-3600-32S(config)#dot1x system-fwd-pdu DXS-3600-32S(config)#end DXS-3600-32S#configure terminal DXS-3600-32S(config)#interface tenGigabitEthernet 1/0/1 DXS-3600-32S(config-if)#no form of this command to reset to the defaulting... Guideline None. 802.1X can not forward EAPOL PDUs on all ports by default. DXS-3600-32S#configure terminal DXS-3600-32S(config)#dot1x system-fwd-pdu DXS-3600-32S(config)# 2-14 dot1x port-fwd-pdu This command used to forward EAPOL PDUs both ...
...802.1X interface configuration. Displays the IEEE 802.1X authentication state. DXS-3600-32S#configure terminal DXS-3600-32S(config)#dot1x system-fwd-pdu DXS-3600-32S(config)#end DXS-3600-32S#configure terminal DXS-3600-32S(config)#interface tenGigabitEthernet 1/0/1 DXS-3600-32S(config-if)#no form of this command to reset to the defaulting... Guideline None. 802.1X can not forward EAPOL PDUs on all ports by default. DXS-3600-32S#configure terminal DXS-3600-32S(config)#dot1x system-fwd-pdu DXS-3600-32S(config)# 2-14 dot1x port-fwd-pdu This command used to forward EAPOL PDUs both ...
CLI Guide
Page 22
... U - - U - TenGigabitEthernet1/0/2 - (P) - When no interface is specified, information about all interfaces will be displayed. DXS-3600-32S#show dot1x interface tenGigabitEthernet 1/0/1 auth-configuration Interface : TenGigabitEthernet1/0/1 Capability : None AdminCrlDir : Both OperCrlDir : Both Port Control : Auto... : 3600 sec ReAuthenticate : Disabled Forward EAPOL PDU On Port : Disabled Max User On Port : 16 DXS-3600-32S# Example This example shows how to display the 802.1X configuration for the interface TenGigabitEthernet1/0/1. DXS-3600 Series ...
... U - - U - TenGigabitEthernet1/0/2 - (P) - When no interface is specified, information about all interfaces will be displayed. DXS-3600-32S#show dot1x interface tenGigabitEthernet 1/0/1 auth-configuration Interface : TenGigabitEthernet1/0/1 Capability : None AdminCrlDir : Both OperCrlDir : Both Port Control : Auto... : 3600 sec ReAuthenticate : Disabled Forward EAPOL PDU On Port : Disabled Max User On Port : 16 DXS-3600-32S# Example This example shows how to display the 802.1X configuration for the interface TenGigabitEthernet1/0/1. DXS-3600 Series ...
CLI Guide
Page 23
...0 EapLogoffWhileAuthenticated 0 BackendResponses 0 BackendAccessChallenges 0 BackendOtherRequestsToSupplicant 0 BackendNonNakResponsesFromSupplicant 0 BackendAuthSuccesses 0 BackendAuthFails 0 DXS-3600-32S# 15 DXS-3600-32S#show dot1x interface tenGigabitEthernet 1/0/1 statistics MAC Address : 00-00-00-00-00-02 ...0 6 0 0 0 0 0 0 0 00-00-00-00-00-03 DXS-3600-32S# Example This example shows how to display the 802.1X statistics for the interface TenGigabitEthernet1/0/1. DXS-3600 Series 10GbE Layer 2/3 Switch CLI Reference Guide Example This example shows how to display...
...0 EapLogoffWhileAuthenticated 0 BackendResponses 0 BackendAccessChallenges 0 BackendOtherRequestsToSupplicant 0 BackendNonNakResponsesFromSupplicant 0 BackendAuthSuccesses 0 BackendAuthFails 0 DXS-3600-32S# 15 DXS-3600-32S#show dot1x interface tenGigabitEthernet 1/0/1 statistics MAC Address : 00-00-00-00-00-02 ...0 6 0 0 0 0 0 0 0 00-00-00-00-00-03 DXS-3600-32S# Example This example shows how to display the 802.1X statistics for the interface TenGigabitEthernet1/0/1. DXS-3600 Series 10GbE Layer 2/3 Switch CLI Reference Guide Example This example shows how to display...
CLI Guide
Page 24
DXS-3600 Series 10GbE Layer 2/3 Switch CLI Reference Guide Example This example shows how to display the 802.1X session statistics for the interface TenGigabitEthernet1/0/1. DXS-3600-32S#show dot1x interface tenGigabitEthernet 1/0/1 session-statistics MAC Address : 00-00-00-00-00-02 Interface : TenGigabitEthernet1/0/1 SessionOctetsRx SessionOctetsTx SessionFramesRx SessionFramesTx SessionId SessionAuthenticMethod SessionTime SessionTerminateCause SessionUserName 0 0 0 0 ether1_1-1 Remote Authentication Server 3 NotTerminatedYet user_test DXS-3600-32S# 16
DXS-3600 Series 10GbE Layer 2/3 Switch CLI Reference Guide Example This example shows how to display the 802.1X session statistics for the interface TenGigabitEthernet1/0/1. DXS-3600-32S#show dot1x interface tenGigabitEthernet 1/0/1 session-statistics MAC Address : 00-00-00-00-00-02 Interface : TenGigabitEthernet1/0/1 SessionOctetsRx SessionOctetsTx SessionFramesRx SessionFramesTx SessionId SessionAuthenticMethod SessionTime SessionTerminateCause SessionUserName 0 0 0 0 ether1_1-1 Remote Authentication Server 3 NotTerminatedYet user_test DXS-3600-32S# 16
CLI Guide
Page 25
...an ACL through assigning a name, an ID will be assigned automatically. DXS-3600-32S#configure terminal DXS-3600-32S(config)#ip access-list standard Std-ip DXS-3600-32S(config-std-nacl)#end DXS-3600-32S#show access-list Standard IP access list 1999 Std-ip DXS-3600-32S# 3-2 permit | deny (ip standard access-list) Use the permit ... name of the standard IP access-list to 32 characters. ip access-list standard {[id | name]} no ip access-list standard {id | name} Parameters id name Enter the ID of 1999 and decrease 1 per new ACL. DXS-3600 Series 10GbE Layer 2/3 Switch CLI Reference Guide ...
...an ACL through assigning a name, an ID will be assigned automatically. DXS-3600-32S#configure terminal DXS-3600-32S(config)#ip access-list standard Std-ip DXS-3600-32S(config-std-nacl)#end DXS-3600-32S#show access-list Standard IP access list 1999 Std-ip DXS-3600-32S# 3-2 permit | deny (ip standard access-list) Use the permit ... name of the standard IP access-list to 32 characters. ip access-list standard {[id | name]} no ip access-list standard {id | name} Parameters id name Enter the ID of 1999 and decrease 1 per new ACL. DXS-3600 Series 10GbE Layer 2/3 Switch CLI Reference Guide ...