CLI Guide
Page 4
... control setting. This administrator user account level can execute less commands than the operator level and administrator level commands. DXS-3600 Series 10GbE Layer 2/3 Switch CLI Reference Guide • Operator - Privilege Level 15. As for security related information such as user accounts, SNMP account settings etc. Privileged EXEC Mode / Power User level This level can monitor all system information and change or monitor system configuration, except for subconfiguration modes, a subset of command modes. In addition to a VLAN. Interface Configuration Mode...
... control setting. This administrator user account level can execute less commands than the operator level and administrator level commands. DXS-3600 Series 10GbE Layer 2/3 Switch CLI Reference Guide • Operator - Privilege Level 15. As for security related information such as user accounts, SNMP account settings etc. Privileged EXEC Mode / Power User level This level can monitor all system information and change or monitor system configuration, except for subconfiguration modes, a subset of command modes. In addition to a VLAN. Interface Configuration Mode...
CLI Guide
Page 7
DXS-3600 Series 10GbE Layer 2/3 Switch CLI Reference Guide Table of Contents Basic CLI Commands...1 802.1X Commands...6 Access Control List (ACL) Commands ...17 Address Resolution Protocol (ARP) Commands ...40 Alternate Store and Forward (ASF) Commands...46 Authentication, Authorization, and Accounting (AAA) Commands 48 Border Gateway Protocol (BGP) Commands ...65 Compound Authentication Commands...172 Configuration Commands...175 Counter Commands ...187 CPU Commands...190 Debug Commands...191 DHCP Relay Commands...199 DHCP Server Commands ...205 Distance Vector Multicast Routing Protocol (...
DXS-3600 Series 10GbE Layer 2/3 Switch CLI Reference Guide Table of Contents Basic CLI Commands...1 802.1X Commands...6 Access Control List (ACL) Commands ...17 Address Resolution Protocol (ARP) Commands ...40 Alternate Store and Forward (ASF) Commands...46 Authentication, Authorization, and Accounting (AAA) Commands 48 Border Gateway Protocol (BGP) Commands ...65 Compound Authentication Commands...172 Configuration Commands...175 Counter Commands ...187 CPU Commands...190 Debug Commands...191 DHCP Relay Commands...199 DHCP Server Commands ...205 Distance Vector Multicast Routing Protocol (...
CLI Guide
Page 14
...on a specific port by using the 'dot1x pae authenticator' command. 6 Specifies to deny all authentication attempts. Port control mode - Interface Configuration Mode. DXS-3600 Series 10GbE Layer 2/3 Switch CLI Reference Guide 802.1X Commands 2-1 dot1x default This command is used to reset the IEEE 802.1X parameters on a specific port to reset the 802.1X parameters on port 1. dot1x default Parameters Default Command Mode Command Default Level Usage Guideline None. Auto Port PAE type - Example This example shows how to their default settings. dot1x port-control {auto...
...on a specific port by using the 'dot1x pae authenticator' command. 6 Specifies to deny all authentication attempts. Port control mode - Interface Configuration Mode. DXS-3600 Series 10GbE Layer 2/3 Switch CLI Reference Guide 802.1X Commands 2-1 dot1x default This command is used to reset the IEEE 802.1X parameters on a specific port to reset the 802.1X parameters on port 1. dot1x default Parameters Default Command Mode Command Default Level Usage Guideline None. Auto Port PAE type - Example This example shows how to their default settings. dot1x port-control {auto...
CLI Guide
Page 20
... the same VLAN to those ports which have 802.1X forwarding EAPOL PDUs enabled and 802.1X is disabled (globally or just for the port, a received EAPOL packet on the maximum number of users that can not forward EAPOL PDUs by default. Use the no form of this command to reset to the defaulting settings. DXS-3600-32S#configure terminal DXS-3600-32S(config)#interface tenGigabitEthernet 1/0/1 DXS-3600-32S(config-if)#dot1x port-max-user 32 DXS-3600-32S(config-if)# 2-13...
... the same VLAN to those ports which have 802.1X forwarding EAPOL PDUs enabled and 802.1X is disabled (globally or just for the port, a received EAPOL packet on the maximum number of users that can not forward EAPOL PDUs by default. Use the no form of this command to reset to the defaulting settings. DXS-3600-32S#configure terminal DXS-3600-32S(config)#interface tenGigabitEthernet 1/0/1 DXS-3600-32S(config-if)#dot1x port-max-user 32 DXS-3600-32S(config-if)# 2-13...
CLI Guide
Page 44
... to 32 characters long. Default Command Mode None. DXS-3600 Series 10GbE Layer 2/3 Switch CLI Reference Guide Example This example shows how to display the expert ACL, applied to create a submap. DXS-3600-32S#show expert access-group Interface tenGigabitEthernet 1/0/2: expert access-group exp1 in DXS-3600-32S# 3-23 vlan access-map This command is used to the interface. This command will be continuously, but not more than 8 times. Specifies the sequence number of this command removes the configuration. Input parameters can be...
... to 32 characters long. Default Command Mode None. DXS-3600 Series 10GbE Layer 2/3 Switch CLI Reference Guide Example This example shows how to display the expert ACL, applied to create a submap. DXS-3600-32S#show expert access-group Interface tenGigabitEthernet 1/0/2: expert access-group exp1 in DXS-3600-32S# 3-23 vlan access-map This command is used to the interface. This command will be continuously, but not more than 8 times. Specifies the sequence number of this command removes the configuration. Input parameters can be...
CLI Guide
Page 64
... form of this command is used to disable the authorization function. DXS-3600-32S#configure terminal DXS-3600-32S(config)#aaa authentication network default group radius local DXS-3600-32S(config)# 6-14 aaa authorization network This command is used to define the AAA authentication method list for authentication. Specifies to delete the network access user authentication method list. "group group_name" means to use AAA for network access user authentication negotiation. none - Global Configuration Mode. The no aaa authorization network default Parameters default When this...
... form of this command is used to disable the authorization function. DXS-3600-32S#configure terminal DXS-3600-32S(config)#aaa authentication network default group radius local DXS-3600-32S(config)# 6-14 aaa authorization network This command is used to define the AAA authentication method list for authentication. Specifies to delete the network access user authentication method list. "group group_name" means to use AAA for network access user authentication negotiation. none - Global Configuration Mode. The no aaa authorization network default Parameters default When this...
CLI Guide
Page 72
... (AAA) RADIUS or TACACS+ server group. Example The following example shows how to configure the VRF user to a VRF. To enable server groups to configure the Virtual Private Network (VPN) routing and forwarding (VRF) reference of this command. DXS-3600 Series 10GbE Layer 2/3 Switch CLI Reference Guide 6-24 ip vrf forwarding This command is configured. This command enables dial access users to specify a VRF for an AAA RADIUS or TACACS+ server group. Default Command Mode Command Default Level Usage Guideline No server is used to use the global (default) routing table, use the...
... (AAA) RADIUS or TACACS+ server group. Example The following example shows how to configure the VRF user to a VRF. To enable server groups to configure the Virtual Private Network (VPN) routing and forwarding (VRF) reference of this command. DXS-3600 Series 10GbE Layer 2/3 Switch CLI Reference Guide 6-24 ip vrf forwarding This command is configured. This command enables dial access users to specify a VRF for an AAA RADIUS or TACACS+ server group. Default Command Mode Command Default Level Usage Guideline No server is used to use the global (default) routing table, use the...
CLI Guide
Page 74
... ip bgp aggregate command. Aggregation combines the characteristics of routing tables. aggregate-address NETWORK-ADDRESS [summary-only] [as-set path information. Use the as-set Specifies the network address and the sub-network mask that only iBGP peers are used to enter the VPNv4 address family and activate a BGP peer. Router Configuration. DXS-3600 Series 10GbE Layer 2/3 Switch CLI Reference Guide Command Mode Command Default Level Usage Guideline Router Configuration. Example This example shows how to minimize the size of several different routes and advertises...
... ip bgp aggregate command. Aggregation combines the characteristics of routing tables. aggregate-address NETWORK-ADDRESS [summary-only] [as-set path information. Use the as-set Specifies the network address and the sub-network mask that only iBGP peers are used to enter the VPNv4 address family and activate a BGP peer. Router Configuration. DXS-3600 Series 10GbE Layer 2/3 Switch CLI Reference Guide Command Mode Command Default Level Usage Guideline Router Configuration. Example This example shows how to minimize the size of several different routes and advertises...
CLI Guide
Page 86
... BGP neighbor will reset. 78 Router Configuration Mode. If the link through which this session is used to reset Border Gateway Protocol (BGP) connections using a hard or soft reconfiguration. DXS-3600 Series 10GbE Layer 2/3 Switch CLI Reference Guide Example This example shows how to enable the security of this command. To disable the BGP fast external fallover option, use the no bgp fast-external-fallover Parameters Default Command Mode Command Default Level Usage Guideline None. The range for 4-byte numbers is an IPv4...
... BGP neighbor will reset. 78 Router Configuration Mode. If the link through which this session is used to reset Border Gateway Protocol (BGP) connections using a hard or soft reconfiguration. DXS-3600 Series 10GbE Layer 2/3 Switch CLI Reference Guide Example This example shows how to enable the security of this command. To disable the BGP fast external fallover option, use the no bgp fast-external-fallover Parameters Default Command Mode Command Default Level Usage Guideline None. The range for 4-byte numbers is an IPv4...
CLI Guide
Page 107
... connection will be torn down, so the following log message will fail. Use the show ip bgp neighbors or show ip bgp peer-group command to 25 characters. DXS-3600 Series 10GbE Layer 2/3 Switch CLI Reference Guide 7-46 neighbor password This command is the address of the peer. To disable this command. Level: 8. (EI Mode Only Command) This command is 16 characters. The maximum length is used to remove a neighbor in a peer group. Router Configuration Mode. Example This example...
... connection will be torn down, so the following log message will fail. Use the show ip bgp neighbors or show ip bgp peer-group command to 25 characters. DXS-3600 Series 10GbE Layer 2/3 Switch CLI Reference Guide 7-46 neighbor password This command is the address of the peer. To disable this command. Level: 8. (EI Mode Only Command) This command is 16 characters. The maximum length is used to remove a neighbor in a peer group. Router Configuration Mode. Example This example...
CLI Guide
Page 121
Default Command Mode Command Default Level Usage Guideline None. Address Family Configuration Mode (IPv4 Unicast and VRF). DXS-3600-32S#configure terminal DXS-3600-32S(config)#router bgp 100 DXS-3600-32S(config-router)#network 10.108.0.0/16 DXS-3600-32S(config-router)# Example This example shows how to set weight 2000 DXS-3600-32S(config-route-map)#exit DXS-3600-32S(config)#router bgp 100 DXS-3600-32S(config-router)#network 133.10.25.0/24 route-map mymap1 DXS-3600-32S(config-router)# 7-64 redistribute This command is enabled. Specifies to redistribute static routes to BGP. 113 ...
Default Command Mode Command Default Level Usage Guideline None. Address Family Configuration Mode (IPv4 Unicast and VRF). DXS-3600-32S#configure terminal DXS-3600-32S(config)#router bgp 100 DXS-3600-32S(config-router)#network 10.108.0.0/16 DXS-3600-32S(config-router)# Example This example shows how to set weight 2000 DXS-3600-32S(config-route-map)#exit DXS-3600-32S(config)#router bgp 100 DXS-3600-32S(config-router)#network 133.10.25.0/24 route-map mymap1 DXS-3600-32S(config-router)# 7-64 redistribute This command is enabled. Specifies to redistribute static routes to BGP. 113 ...
CLI Guide
Page 266
...specific query message to the multicast group manually. DXS-3600-32S#configure terminal DXS-3600-32S(config)#interface vlan 1 DXS-3600-32S(config-if)#ip igmp static-group 233.3.3.3 DXS-3600-32S(config-if)# 23-3 ip igmp last-member-query-interval This command is used to a group. Default Command Mode Command Default Level Usage Guideline 1 second. DXS-3600 Series 10GbE Layer 2/3 Switch CLI Reference Guide Default Command Mode Command Default Level Usage Guideline The switch is not added to 20 seconds on interface VLAN 1. DXS-3600-32S#configure terminal DXS-3600-32S(config...
...specific query message to the multicast group manually. DXS-3600-32S#configure terminal DXS-3600-32S(config)#interface vlan 1 DXS-3600-32S(config-if)#ip igmp static-group 233.3.3.3 DXS-3600-32S(config-if)# 23-3 ip igmp last-member-query-interval This command is used to a group. Default Command Mode Command Default Level Usage Guideline 1 second. DXS-3600 Series 10GbE Layer 2/3 Switch CLI Reference Guide Default Command Mode Command Default Level Usage Guideline The switch is not added to 20 seconds on interface VLAN 1. DXS-3600-32S#configure terminal DXS-3600-32S(config...
CLI Guide
Page 275
... hyphen. DXS-3600 Series 10GbE Layer 2/3 Switch CLI Reference Guide Example This example shows how to be forbidden router interfaces. Specifies the interface type. Specifies a range of this command to be multicast router interface. Interface Configuration Mode. To verify your configuration, use show ip igmp snooping mrouter. Default Command Mode Command Default Level Usage Guideline None. Level: 8 This command specifies the interfaces to be static multicast router interface on VLAN 1. Example This example shows how to configure interface 1 to configure port-channel 5 as...
... hyphen. DXS-3600 Series 10GbE Layer 2/3 Switch CLI Reference Guide Example This example shows how to be forbidden router interfaces. Specifies the interface type. Specifies a range of this command to be multicast router interface. Interface Configuration Mode. To verify your configuration, use show ip igmp snooping mrouter. Default Command Mode Command Default Level Usage Guideline None. Level: 8 This command specifies the interfaces to be static multicast router interface on VLAN 1. Example This example shows how to configure interface 1 to configure port-channel 5 as...
CLI Guide
Page 324
... connectivity of physical interfaces. The Port VLAN ID TLV is selected. DXS-3600 Series 10GbE Layer 2/3 Switch CLI Reference Guide Example This example shows how to send or receive. Specifies the Protocol Identity TLV to disable System Name TLV advertisement. No space before and after the comma. (Optional) Specifies a range of the network. Interface Configuration Mode. To disable transmit the TLVs, use the no form of physical interfaces. DXS-3600-32S#configure terminal DXS-3600-32S(config)#interface tenGigabitEthernet 1/0/1 DXS-3600-32S(config...
... connectivity of physical interfaces. The Port VLAN ID TLV is selected. DXS-3600 Series 10GbE Layer 2/3 Switch CLI Reference Guide Example This example shows how to send or receive. Specifies the Protocol Identity TLV to disable System Name TLV advertisement. No space before and after the comma. (Optional) Specifies a range of the network. Interface Configuration Mode. To disable transmit the TLVs, use the no form of physical interfaces. DXS-3600-32S#configure terminal DXS-3600-32S(config)#interface tenGigabitEthernet 1/0/1 DXS-3600-32S(config...
CLI Guide
Page 326
... settings. DXS-3600 Series 10GbE Layer 2/3 Switch CLI Reference Guide Example This example shows how to send or receive. The MAC/PHY Configuration/Status TLV is an optional TLV that identifies: a) The duplex and bit-rate capability of the sending IEEE 802.3 LAN node that is selected. Specifies the Maximum Frame Size TLV to disable LACP Protocol Identity TLV advertisement. DXS-3600-32S#configure terminal DXS-3600-32S(config)#interface tenGigabitEthernet 1/0/1 DXS-3600-32S(config-if)#lldp dot3-tlv-select mac-phy-config-status DXS-3600...
... settings. DXS-3600 Series 10GbE Layer 2/3 Switch CLI Reference Guide Example This example shows how to send or receive. The MAC/PHY Configuration/Status TLV is an optional TLV that identifies: a) The duplex and bit-rate capability of the sending IEEE 802.3 LAN node that is selected. Specifies the Maximum Frame Size TLV to disable LACP Protocol Identity TLV advertisement. DXS-3600-32S#configure terminal DXS-3600-32S(config)#interface tenGigabitEthernet 1/0/1 DXS-3600-32S(config-if)#lldp dot3-tlv-select mac-phy-config-status DXS-3600...
CLI Guide
Page 481
... the packet. DXS-3600 Series 10GbE Layer 2/3 Switch CLI Reference Guide Example This example shows how to define a traffic class (using the class-map command) and associate the policy with no change. The default action is as same as action for policing. Default None. 473 transmit: Transmits the packet with the match criteria for policing. DXS-3600-32S#configure terminal DXS-3600-32S(config)#class-map class1 DXS-3600-32S(config-cmap)#match access-group 1 DXS-3600-32S(config-cmap)#exit DXS-3600-32S(config...
... the packet. DXS-3600 Series 10GbE Layer 2/3 Switch CLI Reference Guide Example This example shows how to define a traffic class (using the class-map command) and associate the policy with no change. The default action is as same as action for policing. Default None. 473 transmit: Transmits the packet with the match criteria for policing. DXS-3600-32S#configure terminal DXS-3600-32S(config)#class-map class1 DXS-3600-32S(config-cmap)#match access-group 1 DXS-3600-32S(config-cmap)#exit DXS-3600-32S(config...
CLI Guide
Page 576
... 1/0/1 DXS-3600-32S(config-if)#spanning-tree guard root Success DXS-3600-32S(config-if)# 57-20 spanning-tree link-type This command is recommended. Use no spanning-tree tc-guard Parameters Default Command Mode None. Default Command Mode Command Default Level Usage Guideline For a full-duplex interface, its link type is disabled. This configuration will take effect on all the spanning-tree modes. spanning-tree tc-guard no form of this option is set the link type of the interface to shared-media. DXS-3600 Series 10GbE Layer 2/3 Switch CLI Reference Guide Example...
... 1/0/1 DXS-3600-32S(config-if)#spanning-tree guard root Success DXS-3600-32S(config-if)# 57-20 spanning-tree link-type This command is recommended. Use no spanning-tree tc-guard Parameters Default Command Mode None. Default Command Mode Command Default Level Usage Guideline For a full-duplex interface, its link type is disabled. This configuration will take effect on all the spanning-tree modes. spanning-tree tc-guard no form of this option is set the link type of the interface to shared-media. DXS-3600 Series 10GbE Layer 2/3 Switch CLI Reference Guide Example...
CLI Guide
Page 613
... setting the port mode to default setting. switchport access vlan VLAN-ID no switchport access vlan interface command to reset to access or dot1q tunnel, the GVRP status of member ports become inactive. Default Command Mode Command Default Level Usage Guideline VLAN 1. Packets on a trunk port are received and transmitted on physical ports or link aggregation groups that are same as. Packets on a hybrid can only be disabled. dot1q-tunnel DXS-3600 Series 10GbE Layer 2/3 Switch CLI Reference Guide Specifies the port as a trunk port. The PVID is removed from the link...
... setting the port mode to default setting. switchport access vlan VLAN-ID no switchport access vlan interface command to reset to access or dot1q tunnel, the GVRP status of member ports become inactive. Default Command Mode Command Default Level Usage Guideline VLAN 1. Packets on a trunk port are received and transmitted on physical ports or link aggregation groups that are same as. Packets on a hybrid can only be disabled. dot1q-tunnel DXS-3600 Series 10GbE Layer 2/3 Switch CLI Reference Guide Specifies the port as a trunk port. The PVID is removed from the link...
CLI Guide
Page 618
... is an IP subnet-based VLAN classification rule. Usage Guideline DXS-3600 Series 10GbE Layer 2/3 Switch CLI Reference Guide The user can use the mac-base command in the form of x:x:x:x:x:x:x:x/n. If MAC based VLAN entries are configured, the packet received by the switch regardless of A.B.C.D/x IPV6-NETWORK-PREFIX / Specities the IPv6 network prefix and the prefix length in VLAN configuration mode to create the MAC entry that have a source MAC address matching an the entry will...
... is an IP subnet-based VLAN classification rule. Usage Guideline DXS-3600 Series 10GbE Layer 2/3 Switch CLI Reference Guide The user can use the mac-base command in the form of x:x:x:x:x:x:x:x/n. If MAC based VLAN entries are configured, the packet received by the switch regardless of A.B.C.D/x IPV6-NETWORK-PREFIX / Specities the IPv6 network prefix and the prefix length in VLAN configuration mode to create the MAC entry that have a source MAC address matching an the entry will...
CLI Guide
Page 672
... Switch. Password Recovery Procedure This section describes the procedure for the user to press the hotkey [^] (Shift + 6) to the console port of the switch. 2. In the "Password Recovery Mode" only the following steps explain how to use the Password Recovery feature on this switch to 100%, the Switch will restart the switch. 664 DXS-3600 Series 10GbE Layer 2/3 Switch CLI Reference Guide Appendix A - It is loaded to the factory default settings. This includes resetting the user accounts to physically access...
... Switch. Password Recovery Procedure This section describes the procedure for the user to press the hotkey [^] (Shift + 6) to the console port of the switch. 2. In the "Password Recovery Mode" only the following steps explain how to use the Password Recovery feature on this switch to 100%, the Switch will restart the switch. 664 DXS-3600 Series 10GbE Layer 2/3 Switch CLI Reference Guide Appendix A - It is loaded to the factory default settings. This includes resetting the user accounts to physically access...