User Guide
Page 13
This guide contains the information needed for installing, configuring, and maintaining the device through CLI commands. The CLI Reference Guide, which is available on the Documentation CD, provides additional information about the CLI commands. This guide describes how to configure each system through the web-based management system and through the web-based management system, called the OpenManage Switch Administrator. 1 Preface PowerConnect 5524/5548 and PowerConnect 5524P/5548P are stackable, advanced multi-layer devices. Dell PowerConnect 55xx Systems User Guide 13
This guide contains the information needed for installing, configuring, and maintaining the device through CLI commands. The CLI Reference Guide, which is available on the Documentation CD, provides additional information about the CLI commands. This guide describes how to configure each system through the web-based management system and through the web-based management system, called the OpenManage Switch Administrator. 1 Preface PowerConnect 5524/5548 and PowerConnect 5524P/5548P are stackable, advanced multi-layer devices. Dell PowerConnect 55xx Systems User Guide 13
User Guide
Page 20
..., the device registers and propagates VLAN membership on a combination of the ingress port and packet contents. When GVRP is 20 Dell PowerConnect 55xx Systems User Guide VLAN Supported Features VLAN Support VLANs are collections of switching ports that are classified as belonging to a ... ports that comprise a single Broadcast domain. Packets are part of these services. For more information, see "Defining VLAN Membership Using CLI Commands" on 802.1Q trunk ports. GVRP Support GARP VLAN Registration Protocol (GVRP) provides IEEE 802.1Qcompliant VLAN pruning and dynamic VLAN...
..., the device registers and propagates VLAN membership on a combination of the ingress port and packet contents. When GVRP is 20 Dell PowerConnect 55xx Systems User Guide VLAN Supported Features VLAN Support VLANs are collections of switching ports that are classified as belonging to a ... ports that comprise a single Broadcast domain. Packets are part of these services. For more information, see "Defining VLAN Membership Using CLI Commands" on 802.1Q trunk ports. GVRP Support GARP VLAN Registration Protocol (GVRP) provides IEEE 802.1Qcompliant VLAN pruning and dynamic VLAN...
User Guide
Page 24
.... 802.1p establishes eight levels of priority, similar to a Trap Recipient List. For more information, see "SNMP" on page 307. 24 Dell PowerConnect 55xx Systems User Guide Events are implicitly labeled with the name of the ACL that permitted their entrance. Advanced mode QoS actions defined in the... for IPv4. The switch detects IPv6 frames by the IPv6 ethertype. are established or enforced. 802.1p is an example of the CLI commands:" on page 656. TCP Congestion Avoidance The TCP Congestion Avoidance feature activates an algorithm that match an ACL and were permitted entrance are...
.... 802.1p establishes eight levels of priority, similar to a Trap Recipient List. For more information, see "SNMP" on page 307. 24 Dell PowerConnect 55xx Systems User Guide Events are implicitly labeled with the name of the ACL that permitted their entrance. Advanced mode QoS actions defined in the... for IPv4. The switch detects IPv6 frames by the IPv6 ethertype. are established or enforced. 802.1p is an example of the CLI commands:" on page 656. TCP Congestion Avoidance The TCP Congestion Avoidance feature activates an algorithm that match an ACL and were permitted entrance are...
User Guide
Page 25
.... The system can display configuration files as text files. There are stored and manipulated as a collection of CLI commands that serves HTML pages, through DHCP. Web-Based Management Web-based management enables managing the system from any web...commands, MIB variable settings, and other management-related settings. If the IP address is static, see "SNMP" on page 307. For more information, see more information about this in"DHCP IPv4 Interface" on page 207. The configuration file includes both system-wide and port-specific device configuration. Dell PowerConnect...
.... The system can display configuration files as text files. There are stored and manipulated as a collection of CLI commands that serves HTML pages, through DHCP. Web-Based Management Web-based management enables managing the system from any web...commands, MIB variable settings, and other management-related settings. If the IP address is static, see "SNMP" on page 307. For more information, see more information about this in"DHCP IPv4 Interface" on page 207. The configuration file includes both system-wide and port-specific device configuration. Dell PowerConnect...
User Guide
Page 30
...Dell PowerConnect 55xx Systems User Guide By enabling DHCP Snooping, network administrators can specify the user's ACL in a network. DHCP Snooping DHCP Snooping expands network security by providing firewall security between trusted interfaces connected to save and share a common configuration. ARP Inspection Dynamic ARP inspection is a set of CLI commands... If they are either admitted or denied entry and the ingress port is applied to a port, the CLI commands contained within it are executed and added to the Running Configuration file. Access Control Lists (ACL) Access ...
...Dell PowerConnect 55xx Systems User Guide By enabling DHCP Snooping, network administrators can specify the user's ACL in a network. DHCP Snooping DHCP Snooping expands network security by providing firewall security between trusted interfaces connected to save and share a common configuration. ARP Inspection Dynamic ARP inspection is a set of CLI commands... If they are either admitted or denied entry and the ingress port is applied to a port, the CLI commands contained within it are executed and added to the Running Configuration file. Access Control Lists (ACL) Access ...
User Guide
Page 64
... has been modified during initial configuration. To list the User EXEC commands, enter a question mark at the terminal prompt displays a list of CLI commands, refer to the device global configuration. 64 Dell PowerConnect 55xx Systems User Guide For a complete description of commands available for using the CLI. Only a limited subset of the host name followed by the...
... has been modified during initial configuration. To list the User EXEC commands, enter a question mark at the terminal prompt displays a list of CLI commands, refer to the device global configuration. 64 Dell PowerConnect 55xx Systems User Guide For a complete description of commands available for using the CLI. Only a limited subset of the host name followed by the...
User Guide
Page 67
All CLI commands can be virtually connected to the local device through a TCP/IP protocol network. The Run window opens. 2 Type cmd. Dell PowerConnect 55xx Systems User Guide 67 Telnet is an alternative to the device. If access is required. The cmd window ... where a remote login is via a Telnet connection. Accessing the Device Through the CLI You can manage the device using CLI commands, over a Telnet session. The device supports up to the console and enter the CLI commands upon receiving a prompt. Direct Connection Connect the device to four simultaneous Telnet sessions....
All CLI commands can be virtually connected to the local device through a TCP/IP protocol network. The Run window opens. 2 Type cmd. Dell PowerConnect 55xx Systems User Guide 67 Telnet is an alternative to the device. If access is required. The cmd window ... where a remote login is via a Telnet connection. Accessing the Device Through the CLI You can manage the device using CLI commands, over a Telnet session. The device supports up to the console and enter the CLI commands upon receiving a prompt. Direct Connection Connect the device to four simultaneous Telnet sessions....
User Guide
Page 83
It contains the following topics: • Starting the Application • Understanding the Interface • Using the Switch Administrator Buttons • Field Definitions • Common GUI Features • CLI Commands Dell PowerConnect 55xx Systems User Guide 83 7 Using Dell OpenManage Administrator This section provides an introduction to the Dell OpenManage Switch Administrator user interface.
It contains the following topics: • Starting the Application • Understanding the Interface • Using the Switch Administrator Buttons • Field Definitions • Common GUI Features • CLI Commands Dell PowerConnect 55xx Systems User Guide 83 7 Using Dell OpenManage Administrator This section provides an introduction to the Dell OpenManage Switch Administrator user interface.
User Guide
Page 90
... GUI Elements (Continued) Button Telnet Description Opens a Telnet window. For example click . 90 Dell PowerConnect 55xx Systems User Guide In a command line, curly brackets indicate a selection of compulsory parameters separated by the | character. One option must be entered in the page. CLI Commands There are used: • Enter - Table 7-4. GUI Terms Each GUI page in...
... GUI Elements (Continued) Button Telnet Description Opens a Telnet window. For example click . 90 Dell PowerConnect 55xx Systems User Guide In a command line, curly brackets indicate a selection of compulsory parameters separated by the | character. One option must be entered in the page. CLI Commands There are used: • Enter - Table 7-4. GUI Terms Each GUI page in...
User Guide
Page 95
... in Learning Mode field. - Trap Frequency (1-1000000) - Table 8-1. number} Dell PowerConnect 55xx Systems User Guide 95 Configuring Port Security Using CLI Commands The following table summarizes the CLI commands for configuring port security. . Discard the packets from an unknown source, without...sent when a packet is {[gigabitethernet|tengigabitethern shutdown due to the maximum addresses allowed on the port. Port Security CLI Commands CLI Command Description set interface active Reactivates an interface that can be applied to packets arriving on a locked port. - ...
... in Learning Mode field. - Trap Frequency (1-1000000) - Table 8-1. number} Dell PowerConnect 55xx Systems User Guide 95 Configuring Port Security Using CLI Commands The following table summarizes the CLI commands for configuring port security. . Discard the packets from an unknown source, without...sent when a packet is {[gigabitethernet|tengigabitethern shutdown due to the maximum addresses allowed on the port. Port Security CLI Commands CLI Command Description set interface active Reactivates an interface that can be applied to packets arriving on a locked port. - ...
User Guide
Page 96
... port security on an [forward|discard|discard-shutdown] interface. [trap seconds] no port security Use the no form of this command to restore the default port security mode {lock | maxaddresses } no form of MAC addresses that can be learned on an ...status of specified [[gigabitethernet|tengigabitethern interface or of this command to disable port security on an interface. et] port-number ]|port-channel LAG-number] 96 Dell PowerConnect 55xx Systems User Guide Table 8-1. Port Security CLI Commands (Continued) CLI Command Description port security max {max-addr} no form of...
... port security on an [forward|discard|discard-shutdown] interface. [trap seconds] no port security Use the no form of this command to restore the default port security mode {lock | maxaddresses } no form of MAC addresses that can be learned on an ...status of specified [[gigabitethernet|tengigabitethern interface or of this command to disable port security on an interface. et] port-number ]|port-channel LAG-number] 96 Dell PowerConnect 55xx Systems User Guide Table 8-1. Port Security CLI Commands (Continued) CLI Command Description port security max {max-addr} no form of...
User Guide
Page 97
gi1/0/1 Disabled Max-Addresses - gi1/0/7 Disabled Lock - gi1/0/8 Disabled Lock - Maximum ------- 10 1 1 1 1 1 1 1 1 1 1 1 Trap ---- - gi1/0/4 Disabled Lock - gi1/0/10Disabled Lock - Frequency --------- - gi1/0/6 Disabled Lock - gi1/0/9 Disabled Lock - gi1/0/11Disabled Lock - Dell PowerConnect 55xx Systems User Guide 97 gi1/0/12Disabled Lock - gi1/0/3 Disabled Lock - gi1/0/5 Disabled Lock - gi1/0/2 Disabled Lock - The following is an example of the CLI commands: console # show ports security Port Status Learning Action --------
gi1/0/1 Disabled Max-Addresses - gi1/0/7 Disabled Lock - gi1/0/8 Disabled Lock - Maximum ------- 10 1 1 1 1 1 1 1 1 1 1 1 Trap ---- - gi1/0/4 Disabled Lock - gi1/0/10Disabled Lock - Frequency --------- - gi1/0/6 Disabled Lock - gi1/0/9 Disabled Lock - gi1/0/11Disabled Lock - Dell PowerConnect 55xx Systems User Guide 97 gi1/0/12Disabled Lock - gi1/0/3 Disabled Lock - gi1/0/5 Disabled Lock - gi1/0/2 Disabled Lock - The following is an example of the CLI commands: console # show ports security Port Status Learning Action --------
User Guide
Page 100
...mac access-list extended acl- Configuring MAC-Based ACLs Using CLI Commands The following is an example of some of this command to remove the ACL. Table 8-2. mode. The following table summarizes the CLI commands for configuring MAC-based ACLs. Defines an ACL and ...CLI commands: console# show interfaces access-lists Displays access lists applied on interfaces. MAC Based ACL CLI Commands CLI Command Description mac access-list extended acl- show access-lists Extended IP access list ACL1 permit 234 172.30.40.1 0.0.0.0 any permit 234 172.30.8.8 0.0.0.0 any 100 Dell PowerConnect...
...mac access-list extended acl- Configuring MAC-Based ACLs Using CLI Commands The following is an example of some of this command to remove the ACL. Table 8-2. mode. The following table summarizes the CLI commands for configuring MAC-based ACLs. Defines an ACL and ...CLI commands: console# show interfaces access-lists Displays access lists applied on interfaces. MAC Based ACL CLI Commands CLI Command Description mac access-list extended acl- show access-lists Extended IP access list ACL1 permit 234 172.30.40.1 0.0.0.0 any permit 234 172.30.8.8 0.0.0.0 any 100 Dell PowerConnect...
User Guide
Page 103
...MAC ACL configuration mode). The following table summarizes the CLI commands for configuring MACbased ACEs. Table 8-3. Configuring MAC-Based ACEs Using CLI Commands The following is an example of some of the CLI commands: console(config)# mac access-list extended server1 console...ACE CLI Commands CLI Command permit {any|source-ip-address source-wildcard} {any|destination destinationwildcard} [eth-type 0|aarp|amber|decspanning|decnetiv|diagnostic|dsm|etype-6000] [vlan vlan-id] [cos cos coswildcard] [time-range timerange-name] deny {any|source sourcewildcard} {any Dell PowerConnect ...
...MAC ACL configuration mode). The following table summarizes the CLI commands for configuring MACbased ACEs. Table 8-3. Configuring MAC-Based ACEs Using CLI Commands The following is an example of some of the CLI commands: console(config)# mac access-list extended server1 console...ACE CLI Commands CLI Command permit {any|source-ip-address source-wildcard} {any|destination destinationwildcard} [eth-type 0|aarp|amber|decspanning|decnetiv|diagnostic|dsm|etype-6000] [vlan vlan-id] [cos cos coswildcard] [time-range timerange-name] deny {any|source sourcewildcard} {any Dell PowerConnect ...
User Guide
Page 105
IP-Based ACL CLI Commands CLI Command Description ip access-list extended acl- IPv4 Based ACE: Summary Dell PowerConnect 55xx Systems User Guide 105 Defines an IPv4 access list and places name the device in IPv4 access list no form of the CLI commands: console(config)# ip access-list extended...ACL: 1 Click Switching > Network Security > IPv4 Based ACE to remove the access list. The following table summarizes the CLI commands for configuring IP-based ACLs. Table 8-4. configuration mode name Use the no ip access-list extended acl- Figure 8-5. Configuring IP-based...
IP-Based ACL CLI Commands CLI Command Description ip access-list extended acl- IPv4 Based ACE: Summary Dell PowerConnect 55xx Systems User Guide 105 Defines an IPv4 access list and places name the device in IPv4 access list no form of the CLI commands: console(config)# ip access-list extended...ACL: 1 Click Switching > Network Security > IPv4 Based ACE to remove the access list. The following table summarizes the CLI commands for configuring IP-based ACLs. Table 8-4. configuration mode name Use the no ip access-list extended acl- Figure 8-5. Configuring IP-based...
User Guide
Page 110
...} {any|destination-port/port-range } [dscp number|precedence number] [matchall time-range-name] [time-range timerange-name] 110 Dell PowerConnect 55xx Systems User Guide type][any|icmp-code]] [dscp number|precedence number] [time-range time-range-name] permit igmp {any...[dscp number|precedence number] [match-all list-of protocols is wildcard} {any |source-ip-address source- Table 8-5. IP-Based ACE CLI Commands CLI Command Description permit protocol {any|source-ip-address source-wildcard} {any |icmp- destination-wildcard} [any |destination-ipaddress destination-wildcard} [dscp ...
...} {any|destination-port/port-range } [dscp number|precedence number] [matchall time-range-name] [time-range timerange-name] 110 Dell PowerConnect 55xx Systems User Guide type][any|icmp-code]] [dscp number|precedence number] [time-range time-range-name] permit igmp {any...[dscp number|precedence number] [match-all list-of protocols is wildcard} {any |source-ip-address source- Table 8-5. IP-Based ACE CLI Commands CLI Command Description permit protocol {any|source-ip-address source-wildcard} {any |icmp- destination-wildcard} [any |destination-ipaddress destination-wildcard} [dscp ...
User Guide
Page 111
IP-Based ACE CLI Commands (Continued) CLI Command deny protocol {any|source-ip-address source-wildcard} {any|destination-ipaddress destination-wildcard} [dscp number|precedence number] [time-range time-range-name] [disable-...sourcewildcard} {any|source-port|portrange}{any|destination-ip-address destination-wildcard} {any|destinationport/port-range } [dscp number|precedence number] [match-all list-of the CLI commands: console(config)# ip access-list extended server console(config-ip-al)# permit ip 1.1.1.0 0.0.0.255 1.1.2.0 0.0.0.0 Dell PowerConnect 55xx Systems User Guide 111 Table 8-5.
IP-Based ACE CLI Commands (Continued) CLI Command deny protocol {any|source-ip-address source-wildcard} {any|destination-ipaddress destination-wildcard} [dscp number|precedence number] [time-range time-range-name] [disable-...sourcewildcard} {any|source-port|portrange}{any|destination-ip-address destination-wildcard} {any|destinationport/port-range } [dscp number|precedence number] [match-all list-of the CLI commands: console(config)# ip access-list extended server console(config-ip-al)# permit ip 1.1.1.0 0.0.0.255 1.1.2.0 0.0.0.0 Dell PowerConnect 55xx Systems User Guide 111 Table 8-5.
User Guide
Page 113
... list-name] Use the no ipv6 access-list [access- IPv6 Based ACE: Summary Dell PowerConnect 55xx Systems User Guide 113 Table 8-6. Defines an IPv6 access list and places name] the device in IPv6 access list no form of the CLI commands: console(config)# ipv6 access-list server-acl IPv6-Based ACEs To add a rule...
... list-name] Use the no ipv6 access-list [access- IPv6 Based ACE: Summary Dell PowerConnect 55xx Systems User Guide 113 Table 8-6. Defines an IPv6 access list and places name] the device in IPv6 access list no form of the CLI commands: console(config)# ipv6 access-list server-acl IPv6-Based ACEs To add a rule...
User Guide
Page 116
... Logging of dropped packets. IP-Based ACE CLI Commands CLI Command Description permit protocol {any|{source-prefix/length }{any |destination-port/port-range} [dscp number|precedence number] [time-range time-range-name] 116 Dell PowerConnect 55xx Systems User Guide Check to which the... packet was addressed. - Configuring IP-based ACEs Using CLI Commands The following table summarizes the CLI commands for IPv6 access list. Shutdown - - prefix/length } [...
... Logging of dropped packets. IP-Based ACE CLI Commands CLI Command Description permit protocol {any|{source-prefix/length }{any |destination-port/port-range} [dscp number|precedence number] [time-range time-range-name] 116 Dell PowerConnect 55xx Systems User Guide Check to which the... packet was addressed. - Configuring IP-based ACEs Using CLI Commands The following table summarizes the CLI commands for IPv6 access list. Shutdown - - prefix/length } [...
User Guide
Page 117
...-range} [dscp number|precedence number] [time-range time-range-name] [disable-port|log-input] The following is an example of some of the CLI commands: console(config)# ipv6 access-list server console(config-ipv6-al)# permit tcp 3001::2/64 any any |destination-prefix|length} [dscp number|precedence number] ...-range-name] [disable-port|log-input] Description Sets deny conditions for IPv4 access list (in Access List Configuration mode). IP-Based ACE CLI Commands (Continued) CLI Command deny protocol {any|{source-prefix/length }{any 80 Dell PowerConnect 55xx Systems User Guide 117 Table 8-7.
...-range} [dscp number|precedence number] [time-range time-range-name] [disable-port|log-input] The following is an example of some of the CLI commands: console(config)# ipv6 access-list server console(config-ipv6-al)# permit tcp 3001::2/64 any any |destination-prefix|length} [dscp number|precedence number] ...-range-name] [disable-port|log-input] Description Sets deny conditions for IPv4 access list (in Access List Configuration mode). IP-Based ACE CLI Commands (Continued) CLI Command deny protocol {any|{source-prefix/length }{any 80 Dell PowerConnect 55xx Systems User Guide 117 Table 8-7.