Management Software ® AT-S63 ◆ Command Line Interface User’s Guide AT-9424T/SP AND AT-9424T/GB LAYER 2+ GIGABIT ETHERNET SWITCHES VERSION 1.0.
Copyright © 2004 Allied Telesyn, Inc. All rights reserved. No part of this publication may be reproduced without prior written permission from Allied Telesyn, Inc. Microsoft and Internet Explorer are registered trademarks of Microsoft Corporation. Netscape Navigator is a registered trademark of Netscape Communications Corporation. All other product names, company names, logos or other designations mentioned herein are trademarks or registered trademarks of their respective owners. Allied Telesyn, Inc.
Contents Tables ...................................................................................................................................................................................................................... 11 Preface .................................................................................................................................................................................................................... 13 Document Conventions ................................
Contents RESET SWITCH .......................................................................................................................................................................................................43 RESET SYSTEM .......................................................................................................................................................................................................44 RESTART REBOOT .........................................................
AT-S63 Management Software Command Line Interface User’s Guide DISABLE INTERFACE LINKTRAP .....................................................................................................................................................................105 DISABLE SWITCH PORT ....................................................................................................................................................................................106 DISABLE SWITCH PORT FLOW .......................
Contents Chapter 14 Quality of Service (QoS) Commands ..................................................................................................................................................... 177 MAP QOS COSP .................................................................................................................................................................................................. 178 SET QOS COSP ..............................................................................
AT-S63 Management Software Command Line Interface User’s Guide Chapter 20 SNMPv3 Commands ......................................................................................................................................................................................245 ADD SNMPV3 USER ...........................................................................................................................................................................................247 CLEAR SNMPV3 ACCESS ........
Contents SET GARP PORT .................................................................................................................................................................................................. 325 SET GARP TIMER ................................................................................................................................................................................................. 326 SHOW GARP ..................................................................
AT-S63 Management Software Command Line Interface User’s Guide DELETE PKI CERTIFICATE .................................................................................................................................................................................393 PURGE PKI .............................................................................................................................................................................................................394 SET PKI CERTIFICATE .....
Contents 10
Tables Table 1: File Name Extensions .....................................................................................................................................................................156 Table 2: File Name Extensions .....................................................................................................................................................................161 Table 3: AT-S63 Modules ..................................................................................
Tables 12
Preface This guide describes how to configure an AT-9400 Series switch using the AT-S63 command line interface. The first page of each chapter lists the commands, and the commands are described in alphabetical order. For more information about the AT-S63 management software, refer to the AT-S63 Management Software Menus Interface User’s Guide and the AT-S63 Management Software Web Browser Interface User’s Guide.
Preface Document Conventions This document uses the following conventions: Note Notes provide additional information. Warning Warnings inform you that performing or omitting a specific action may result in bodily injury. Caution Cautions inform you that performing or omitting a specific action may result in equipment damage or loss of data.
AT-S63 Management Software Command Line Interface User’s Guide Where to Find Web-based Guides The installation and user guides for all Allied Telesyn products are available in portable document format (PDF) from on our web site at www.alliedtelesyn.com. You can view the documents online or download them onto a local workstation or server.
Preface Contacting Allied Telesyn This section provides Allied Telesyn contact information for technical support as well as sales or corporate information. Online Support You can request technical support online by accessing the Allied Telesyn Knowledge Base at www.alliedtelesyn.com/kb. You can use the Knowledge Base to submit questions to our technical support staff and review answers to previously asked questions.
AT-S63 Management Software Command Line Interface User’s Guide Obtaining Management Software Updates New releases of management software for our managed products are available from either of the following Internet sites: ❑ Allied Telesyn web site: www.alliedtelesyn.com ❑ Allied Telesyn FTP server: ftp://ftp.alliedtelesyn.com If you prefer to download new software from the Allied Telesyn FTP server from your workstation’s command prompt, you will need FTP client software and you must log in to the server.
Preface 18
Chapter 1 Starting a Command Line Management Session This chapter contains the following topics: ❑ “Starting a Command Line Management Session” on page 20 ❑ “Command Line Interface Features” on page 21 ❑ “Command Formatting” on page 22 19
Chapter 1: Starting a Command Line Management Session Starting a Command Line Management Session The default management session type is the command line interface (CLI). The prompt differs depending on whether you logged in as manager or operator. If you logged in as manager, you will see “#.” If you logged in as operator, you will see “$.” You can now manage the switch with the command line commands. Note Web browser management does not support the command line interface.
AT-S63 Management Software Command Line Interface User’s Guide Command Line Interface Features The following features are supported in the command line interface: ❑ Command history - Use the up and down arrow keys. ❑ Context-specific help - Press the question mark key at any time to see a list of legal next parameters. ❑ Keyword abbreviations - Any keyword can be recognized by typing an unambiguous prefix, for example, “sh” for “show”. ❑ Tab key - Pressing the Tab key fills in the rest of the keyword.
Chapter 1: Starting a Command Line Management Session Command Formatting The following formatting conventions are used in this manual: ❑ screen text font - This font illustrates the format of a command and command examples. ❑ screen text font - Italicized screen text indicates a variable for you to enter. ❑ [ ] - Brackets indicate optional parameters. ❑ | - Vertical line separates parameter options for you to choose from.
Chapter 2 Basic Command Line Commands This chapter contains the following commands: ❑ “CLEAR SCREEN” on page 24 ❑ “EXIT” on page 25 ❑ “HELP” on page 26 ❑ “LOGOFF, LOGOUT and QUIT” on page 27 ❑ “MENU” on page 28 ❑ “SAVE CONFIGURATION” on page 29 ❑ “SET PROMPT” on page 30 ❑ “SET SWITCH CONSOLEMODE” on page 31 ❑ “SHOW USER” on page 32 Note Remember to save your changes with the SAVE CONFIGURATION command.
Chapter 2: Basic Command Line Commands CLEAR SCREEN Syntax clear screen Parameters None. Description This command clears the screen.
AT-S63 Management Software Command Line Interface User’s Guide EXIT Syntax exit Parameters None. Description This command displays the AT-S63 Main Menu. It performs the same function as the MENU command.
Chapter 2: Basic Command Line Commands HELP Syntax help Parameters None. Description This command displays a list of the CLI keywords with a brief description for each keyword.
AT-S63 Management Software Command Line Interface User’s Guide LOGOFF, LOGOUT and QUIT Syntax logoff logout quit Parameters None. Description These three commands all perform the same function: they end a management session. If you are managing a slave switch, the commands return you to the master switch from which you started the management session.
Chapter 2: Basic Command Line Commands MENU Syntax menu Parameters None. Description This command displays the AT-S63 Main Menu. For instructions on how to use the management menus, refer to Chapter 2, “Starting a Local or Telnet Management Session” in the AT-S63 Management Software Menus Interface User’s Guide.
AT-S63 Management Software Command Line Interface User’s Guide SAVE CONFIGURATION Syntax save configuration Parameters None. Description This command saves your changes to the switch’s active boot configuration file for permanent storage. Whenever you make a change to an operating parameter of the switch, such as enter a new IP address or create a new VLAN, the change is stored in temporary memory. It will be lost the next time you reset the switch or power cycle the unit.
Chapter 2: Basic Command Line Commands SET PROMPT Syntax set prompt="prompt" Parameter prompt Specifies the command line prompt. The prompt can be from one to 12 alphanumeric characters. Spaces and special characters are allowed. The prompt must be enclosed in quotes. Description This command changes the command prompt. Assigning each switch a different command prompt can make it easier for you to identify the different switches in your network when you manage them.
AT-S63 Management Software Command Line Interface User’s Guide SET SWITCH CONSOLEMODE Syntax set switch consolemode=menu|cli Parameter consolemode Specifies the mode you want management sessions to start in. Options are: menu Specifies the AT-S63 Main Menu. cli Specifies the command line prompt. This is the default. Description You use this command to specify whether you want your management sessions to start by displaying the command line interface (CLI) or the AT-S63 Main Menu.
Chapter 2: Basic Command Line Commands SHOW USER Syntax show user Parameter None. Description Displays the user account you used to log on to manage the switch.
Chapter 3 Basic Switch Commands This chapter contains the following commands: ❑ “DISABLE DHCPBOOTP” on page 35 ❑ “DISABLE IP REMOTEASSIGN” on page 36 ❑ “DISABLE TELNET” on page 37 ❑ “ENABLE DHCPBOOTP” on page 38 ❑ “ENABLE IP REMOTEASSIGN” on page 39 ❑ “ENABLE TELNET” on page 40 ❑ “PING” on page 41 ❑ “PURGE IP” on page 42 ❑ “RESET SWITCH” on page 43 ❑ “RESET SYSTEM” on page 44 ❑ “RESTART REBOOT” on page 45 ❑ “RESTART SWITCH” on page 46 ❑ “SET ASYN” on page 48 ❑ “SET IP INTERFACE” on page 49 ❑ “SET IP ROUTE
Chapter 3: Basic Switch Commands ❑ “SET SYSTEM” on page 55 ❑ “SET USER PASSWORD” on page 56 ❑ “SHOW ASYN” on page 57 ❑ “SHOW CONFIG” on page 58 ❑ “SHOW DHCPBOOTP” on page 59 ❑ “SHOW IP INTERFACE” on page 60 ❑ “SHOW IP ROUTE” on page 61 ❑ “SHOW SWITCH” on page 62 ❑ “SHOW SYSTEM” on page 63 Note Remember to save your changes with the SAVE CONFIGURATION command.
AT-S63 Management Software Command Line Interface User’s Guide DISABLE DHCPBOOTP Syntax disable dhcpbootp Parameters None. Description This command deactivates the DHCP and BOOTP client software on the switch. This command is equivalent to “DISABLE IP REMOTEASSIGN” on page 36. The default setting for the client software is disabled. To activate the DHCP and BOOTP client software, refer to “ENABLE DHCPBOOTP” on page 38 or “ENABLE IP REMOTEASSIGN” on page 39.
Chapter 3: Basic Switch Commands DISABLE IP REMOTEASSIGN Syntax disable ip remoteassign Parameters None. Description This command deactivates the DHCP and BOOTP client software on the switch. This command is equivalent to “DISABLE DHCPBOOTP” on page 35. The default setting for the client software is disabled. To activate the DHCP and BOOTP client software, refer to “ENABLE DHCPBOOTP” on page 38 or “ENABLE IP REMOTEASSIGN” on page 39.
AT-S63 Management Software Command Line Interface User’s Guide DISABLE TELNET Syntax disable telnet Parameters None. Description This command disables the Telnet server software on the switch. You might disable the server software if you do not want anyone to manage the switch using the Telnet application protocol or if you plan to use the Secure Shell protocol. The default setting for the Telnet server is enabled.
Chapter 3: Basic Switch Commands ENABLE DHCPBOOTP Syntax enable dhcpbootp Parameters None. Description This command activates the DHCP and BOOTP client software on the switch. This command is equivalent to “ENABLE IP REMOTEASSIGN” on page 39. The default setting for the DHCP and BOOTP client software is disabled. Note When you activate BOOTP/DHCP, the switch immediately begins to query the network for a BOOTP or DHCP server.
AT-S63 Management Software Command Line Interface User’s Guide ENABLE IP REMOTEASSIGN Syntax enable ip remoteassign Parameters None. Description This command activates the DHCP and BOOTP client software on the switch. This command is equivalent to “ENABLE DHCPBOOTP” on page 38. The default setting for the DHCP and BOOTP client software is disabled. Note When you activate BOOTP/DHCP, the switch immediately begins to query the network for a BOOTP or DHCP server.
Chapter 3: Basic Switch Commands ENABLE TELNET Syntax enable telnet Parameters None. Description This command activates the Telnet server on the switch. With the server activated, you can manage the switch using the Telnet application protocol from any management station on your network. To disable the server, refer to “DISABLE TELNET” on page 37. The default setting for the Telnet server is enabled.
AT-S63 Management Software Command Line Interface User’s Guide PING Syntax ping ipaddress Parameter ipaddress Specifies the IP address of an end node you want the switch to ping. Description This command instructs the switch to ping an end node. You can use this command to determine whether a valid link exists between the switch and another device. Note The switch must have an IP address and subnet mask in order for you to use this command.
Chapter 3: Basic Switch Commands PURGE IP Syntax purge ip [ipaddress] [netmask] [route] Parameters ipaddress Returns the switch’s IP address to the default setting 0.0.0.0. netmask Returns the subnet mask to the default setting 0.0.0.0. route Returns the gateway address to the default setting 0.0.0.0. Description This command returns the switch’s IP address, subnet mask, and default gateway address to the default settings.
AT-S63 Management Software Command Line Interface User’s Guide RESET SWITCH Syntax reset switch Parameters None. Description This command does all of the following: ❑ Performs a soft reset on all ports. The reset takes less than a second to complete. The ports retain their current operating parameter settings. To perform this function on a per-port basis, refer to “RESET SWITCH PORT” on page 111. ❑ Resets the statistics counters for all ports to zero.
Chapter 3: Basic Switch Commands RESET SYSTEM Syntax reset system [name] [contact] [location] Parameters name Deletes the switch’s name. contact Deletes the switch’s contact. location Deletes the switch’s location. Description This command delete’s the switch’s name, the name of the network administrator responsible for managing the unit, and the location of the unit. To set these parameters, refer to “SET SYSTEM” on page 55.
AT-S63 Management Software Command Line Interface User’s Guide RESTART REBOOT Syntax restart reboot Parameters None. Description This command resets the switch. The switch runs its internal diagnostics, loads the AT-S63 management software, and configures its parameter settings using the current boot configuration file. The reset takes approximately 20 to 30 seconds to complete.
Chapter 3: Basic Switch Commands RESTART SWITCH Syntax restart switch config=none|filename.cfg Parameters config Specifies the configuration file. The file must already exist on the switch. The NONE option returns the switch to its default values. Description This command loads a different configuration file on the switch or returns the switch’s parameter settings to their default values.
AT-S63 Management Software Command Line Interface User’s Guide This command does not change the assignment of the active boot configuration file, the configuration file the switch uses the next time it is reset. If you reset or power cycle the switch, the switch uses the previous configuration. To change the active boot configuration file, refer to “SET CONFIG” on page 150. Your local or remote management session with the switch ends when you reset the switch.
Chapter 3: Basic Switch Commands SET ASYN Syntax set asyn speed=1200|2400|4800|9600|19200|38400| 57600|115200 [prompt=”prompt”] Parameters speed Sets the speed (baud rate) of the serial terminal port on the switch. The default is 9600 bps. prompt Specifies the command line prompt. The prompt can be from one to 12 alphanumeric characters. Spaces and special characters are allowed. The prompt must be enclosed in double quotes. This parameter performs the same function as “SET PROMPT” on page 30.
AT-S63 Management Software Command Line Interface User’s Guide SET IP INTERFACE Syntax set ip interface=eth0 ipaddress=ipaddress|DHCP mask|netmask=subnetmask Parameters interface Specifies the interface number. This value is always eth0. ipaddress Specifies an IP address for the switch or activates the DHCP and BOOTP client software. mask netmask Specifies the subnet mask for the switch. You must specify a subnet mask if you manually assigned the switch an IP address. These parameters are equivalent.
Chapter 3: Basic Switch Commands Examples The following command sets the switch’s IP address to 140.35.22.22 and the subnet mask to 255.255.255.0: set ip interface=eth0 ipaddress=140.35.22.22 netmask=255.255.255.0 The following command sets just the subnet mask: set ip interface=eth0 netmask=255.255.255.
AT-S63 Management Software Command Line Interface User’s Guide SET IP ROUTE Syntax set ip route ipaddress=ipaddress Parameter ipaddress Specifies the IP address of the default gateway for the switch. Description This command specifies the IP address of the default gateway for the switch. This IP address is required if you intend to remotely manage the device from a remote management station that is separated from the unit by a router. Example The following command sets the default gateway to 140.35.22.
Chapter 3: Basic Switch Commands SET PASSWORD MANAGER Syntax set password manager Parameters None. Description This command sets the manager’s password. Logging in as manager allows you to view and change all switch parameters. The default password is “friend.” The password can be from 0 to 16 alphanumeric characters. Allied Telesyn recommends that you avoid special characters, such as spaces, asterisks, or exclamation points because some web browsers do not accept them in passwords.
AT-S63 Management Software Command Line Interface User’s Guide SET PASSWORD OPERATOR Syntax set password operator Parameters None. Description This command sets the operator’s password. Logging in as operator allows you to only view the switch parameters. The default password is “operator.” The password can be from 0 to 16 alphanumeric characters.
Chapter 3: Basic Switch Commands SET SWITCH CONSOLETIMER Syntax set switch consoletimer=value Parameter consoletimer Specifies the console timer in minutes. The range is 1 to 60 minutes. The default is 10 minutes. Description This command sets the console timer, which is used by the management software to end inactive management sessions.
AT-S63 Management Software Command Line Interface User’s Guide SET SYSTEM Syntax set system [name="name"] [contact="contact"] [location="location"] Parameters name Specifies the name of the switch. The name can be from 1 to 39 alphanumeric characters in length and must be enclosed in double quotes (“ “). Spaces are allowed. contact Specifies the name of the network administrator responsible for managing the switch.
Chapter 3: Basic Switch Commands SET USER PASSWORD Syntax set user manager|operator password=password Parameter password Specifies the password. Description This command sets the manager or operator’s password. The default manager password is “friend.” The default operator password is “operator.” The password can be from 0 to 16 alphanumeric characters.
AT-S63 Management Software Command Line Interface User’s Guide SHOW ASYN Syntax show asyn Parameters None. Description This command displays the settings for the serial terminal port on the switch. To configure the baud rate, refer to “SET ASYN” on page 48.
Chapter 3: Basic Switch Commands SHOW CONFIG Syntax show config [dynamic] [info] Parameters dynamic Displays the settings for all the switch and port parameters in command line format. info Displays the settings for all the switch and port parameters. Description This command, when used without any parameter, displays two pieces of information. The first is the “Boot configuration file.” This is the configuration file the switch uses the next time it is reset or power cycled.
AT-S63 Management Software Command Line Interface User’s Guide SHOW DHCPBOOTP Syntax show dhcpbootp Parameters None. Description This command displays the status of the DHCP and BOOTP client software on the switch. The status will be either “enabled” or “disabled.” The default setting for DHCP and BOOTP is disabled. To enable the DHCP and BOOTP client software, refer to “ENABLE DHCPBOOTP” on page 38 or “ENABLE IP REMOTEASSIGN” on page 39.
Chapter 3: Basic Switch Commands SHOW IP INTERFACE Syntax show ip interface=eth0 Parameter interface Specifies the switch’s interface number. This value is always eth0. Description This command displays the current values for the following switch parameters: ❑ IP address ❑ Subnet mask ❑ Default gateway To manually set the IP address and subnet mask, refer to “SET IP INTERFACE” on page 49. To manually set the default gateway address, refer to “SET IP ROUTE” on page 51.
AT-S63 Management Software Command Line Interface User’s Guide SHOW IP ROUTE Syntax show ip route Parameters None. Description This command displays the switch’s default gateway address. You can also display the gateway address using “SHOW IP INTERFACE” on page 60. To manually set the default gateway address, refer to “SET IP ROUTE” on page 51.
Chapter 3: Basic Switch Commands SHOW SWITCH Syntax show switch Parameters None.
AT-S63 Management Software Command Line Interface User’s Guide SHOW SYSTEM Syntax show system Parameters None. Description This command displays the following information: ❑ MAC address ❑ IP address ❑ Model name ❑ Subnet mask ❑ Serial number ❑ Gateway ❑ System up time ❑ Bootloader version ❑ Bootloader build date ❑ Application software version ❑ Application software build date ❑ System name ❑ Administrator (of the network administrator responsible for managing the unit) ❑ Location (of the unit) ❑ System 1.
Chapter 3: Basic Switch Commands ❑ System 12 V power ❑ System temperature ❑ System fan speed ❑ Main PSU ❑ RPS For instructions on how to set the name, contact, and location of the switch, see “SET SYSTEM” on page 55.
Chapter 4 SNMPv2 and SNMPv2c Commands This chapter contains the following commands: ❑ “ADD SNMP COMMUNITY” on page 66 ❑ “CREATE SNMP COMMUNITY” on page 68 ❑ “DELETE SNMP COMMUNITY” on page 71 ❑ “DESTROY SNMP COMMUNITY” on page 73 ❑ “DISABLE SNMP” on page 74 ❑ “DISABLE SNMP AUTHENTICATETRAP” on page 75 ❑ “DISABLE SNMP COMMUNITY” on page 76 ❑ “ENABLE SNMP” on page 77 ❑ “ENABLE SNMP AUTHENTICATETRAP” on page 78 ❑ “ENABLE SNMP COMMUNITY” on page 79 ❑ “SET SNMP COMMUNITY” on page 80 ❑ “SHOW SNMP” on page 82 No
Chapter 4: SNMPv2 and SNMPv2c Commands ADD SNMP COMMUNITY Syntax add snmp community="community" [traphost=ipaddress] [manager=ipaddress] Parameters community Specifies an existing SNMP community string on the switch. This parameter is case sensitive. The name must be enclosed in double quotes if it contains a space or special character such as an exclamation point. Otherwise, the quotes are optional. traphost Specifies the IP address of a trap receiver.
AT-S63 Management Software Command Line Interface User’s Guide add snmp community=private manager=149.212.11.22 The following command adds the IP address 149.212.10.11 as a trap receiver to the “public” community string: add snmp community=public traphost=149.212.10.
Chapter 4: SNMPv2 and SNMPv2c Commands CREATE SNMP COMMUNITY Syntax create snmp community="community" [access=read|write] [open=yes|no] [traphost=ipaddress] [manager=ipaddress] Parameters 68 community Specifies a new community string. The maximum length of a community string is 15 alphanumeric characters. Spaces are allowed. The name must be enclosed in double quotes if it includes a space or other special character such as an exclamation point. Otherwise, the quotes are optional.
AT-S63 Management Software Command Line Interface User’s Guide Description This command creates a new SNMP community string on the switch. The switch comes with two default community strings, “public,” with an access of read only, and “private,” with an access level of read and write. A switch can support up to eight community strings. The COMMUNITY parameter specifies the new community string. The string can be up to 15 alphanumeric characters. The string is case sensitive.
Chapter 4: SNMPv2 and SNMPv2c Commands The following command creates the new community string “wind11” with read and write access level. To limit the use of the string, its access status is specified as closed and it is assigned the IP address of the management station that will use the string: create snmp community=wind11 access=write open=no manager=149.35.24.22 (The OPEN=NO parameter could be omitted from the example because closed status is the default for a new community string.
AT-S63 Management Software Command Line Interface User’s Guide DELETE SNMP COMMUNITY Syntax delete snmp community="community" traphost=ipaddress manager=ipaddress Parameters community Specifies the SNMP community string on the switch to be modified. The community string must already exist on the switch. This parameter is case sensitive. The name must be enclosed in double quotes if it contains a space or other special character such as an exclamation point. Otherwise, the quotes are optional.
Chapter 4: SNMPv2 and SNMPv2c Commands The following command deletes the IP address 149.212.44.45 of a trap receiver from the community string “public.” delete snmp community=public traphost=149.212.44.
AT-S63 Management Software Command Line Interface User’s Guide DESTROY SNMP COMMUNITY Syntax destroy snmp community="community" Parameter community Specifies an SNMP community string to delete from the switch. This parameter is case sensitive. The name must be enclosed in double quotes if it contains a space or special character, such as an exclamation point. Otherwise, the quotes are optional. Description This command deletes an SNMP community string from the switch.
Chapter 4: SNMPv2 and SNMPv2c Commands DISABLE SNMP Syntax disable snmp Parameters None. Description This command disables SNMP on the switch. You cannot manage the unit from an SNMP management station when SNMP is disabled. The default setting for SNMP is disabled.
AT-S63 Management Software Command Line Interface User’s Guide DISABLE SNMP AUTHENTICATETRAP Syntax disable snmp authenticatetrap|authenticate_trap Parameters None. Description This command stops the switch from sending authentication failure traps to trap receivers. However, the switch will continue to send other system traps, such as alarm traps. The default setting for sending authentication failure traps is disabled. The AUTHENTICATETRAP and AUTHENTICATE_TRAP keywords are equivalent.
Chapter 4: SNMPv2 and SNMPv2c Commands DISABLE SNMP COMMUNITY Syntax disable snmp community="community" Parameter community Specifies an SNMP community string to disable on the switch. This parameter is case sensitive. The string must be enclosed in double quotes if it contains a space or other special character such as an exclamation point. Otherwise, the quotes are optional. Description This command disables a community string on the switch, while leaving SNMP and all other community strings active.
AT-S63 Management Software Command Line Interface User’s Guide ENABLE SNMP Syntax enable snmp Parameters None. Description This command activates SNMP on the switch. After activated, you can remotely manage the unit with an SNMP application program from a management station on your network. The default setting for SNMP on the switch is disabled.
Chapter 4: SNMPv2 and SNMPv2c Commands ENABLE SNMP AUTHENTICATETRAP Syntax enable snmp authenticatetrap|authenticate_trap Parameters None. Description This command configures the switch to send authentication failure traps to trap receivers.
AT-S63 Management Software Command Line Interface User’s Guide ENABLE SNMP COMMUNITY Syntax enable snmp community="community" Parameter community Specifies an SNMP community string. This parameter is case sensitive. The name must be enclosed in double quotes if it contains a space or other special character such as an exclamation point. Otherwise, the quotes are optional. Description This command activates a community string on the switch. The default setting for a community string is enabled.
Chapter 4: SNMPv2 and SNMPv2c Commands SET SNMP COMMUNITY Syntax set snmp community="community" [access=read|write] [open=yes|no] Parameters community Specifies the SNMP community string whose access level or access status is to be changed. This community string must already exist on the switch. This parameter is case sensitive. The name must be enclosed in double quotes if it contains a space or other special character such as an exclamation point. Otherwise, the quotes are optional.
AT-S63 Management Software Command Line Interface User’s Guide set snmp community=sw44 open=no The following command changes the access level for the SNMP community string “serv12” to read and write with open access: set snmp community=serv12 access=write open=yes 81
Chapter 4: SNMPv2 and SNMPv2c Commands SHOW SNMP Syntax show snmp [community="community"] Parameter community Specifies a community string on the switch. This parameter is case sensitive. The name must be enclosed in double quotes if it contains a space or other special character such as an exclamation point. Otherwise, the quotes are optional. Default community strings are “public” and “private.
AT-S63 Management Software Command Line Interface User’s Guide ❑ Management station IP addresses - These are the IP addresses of management stations that can access the switch through a community string that has a closed access status. (Management station IP addresses are displayed only when you specify a specific community string using the COMMUNITY parameter in this command.) To add IP addresses of management stations to a community string, refer to “ADD SNMP COMMUNITY” on page 66.
Chapter 4: SNMPv2 and SNMPv2c Commands 84
Chapter 5 Simple Network Time Protocol (SNTP) Commands This chapter contains the following commands: ❑ “ADD SNTPSERVER PEER|IPADDRESS” on page 86 ❑ “DELETE SNTPSERVER PEER|IPADDRESS” on page 87 ❑ “DISABLE SNTP” on page 88 ❑ “ENABLE SNTP” on page 89 ❑ “PURGE SNTP” on page 90 ❑ “SET DATE” on page 91 ❑ “SET SNTP” on page 92 ❑ “SET TIME” on page 93 ❑ “SHOW SNTP” on page 94 ❑ “SHOW TIME” on page 95 Note Remember to save your changes with the SAVE CONFIGURATION command.
Chapter 5: Simple Network Time Protocol (SNTP) Commands ADD SNTPSERVER PEER|IPADDRESS Syntax add sntpserver peer|ipaddress=ipaddress Parameter peer ipaddress Specifies the IP address of an SNTP server. These parameters are equivalent. Description This command adds the IP address of an SNTP server to the SNTP client software on the switch. The switch uses the SNTP server to set its date and time. If an IP address has already been assigned, the new address overwrites the old address.
AT-S63 Management Software Command Line Interface User’s Guide DELETE SNTPSERVER PEER|IPADDRESS Syntax delete sntpserver peer|ipaddress=ipaddress Parameter peer ipaddress Specifies the IP address of an SNTP server. The parameters are equivalent. Description This command deletes the IP address of the SNTP server from the SNTP client software on the switch and returns the parameter to the default value of 0.0.0.0. To view the IP address, refer to “SHOW SNTP” on page 94.
Chapter 5: Simple Network Time Protocol (SNTP) Commands DISABLE SNTP Syntax disable sntp Parameters None. Description This command disables the SNTP client software on the switch. The default setting for SNTP is disabled.
AT-S63 Management Software Command Line Interface User’s Guide ENABLE SNTP Syntax enable sntp Parameters None. Description This command enables the SNTP client software on the switch. The default setting for SNTP is disabled. After enabled, the switch will obtain its date and time from an SNTP server, assuming that you have specified a server IP address with “ADD SNTPSERVER PEER|IPADDRESS” on page 86.
Chapter 5: Simple Network Time Protocol (SNTP) Commands PURGE SNTP Syntax purge sntp Parameters None. Description This command clears the SNTP configuration and disables the SNTP server. To disable SNTP and retain the configuration, see “DISABLE SNTP” on page 88.
AT-S63 Management Software Command Line Interface User’s Guide SET DATE Syntax set date=dd-mm-yyyy Parameter date Specifies the date for the switch in day-month-year format. Description This command sets the date on the switch. You can use this command to set the switch’s date if you are not using an SNTP server. Note The system’ date, when set with this command, is lost whenever you power cycle or reset the switch.
Chapter 5: Simple Network Time Protocol (SNTP) Commands SET SNTP Syntax set sntp [dst=enabled|disabled] [pollinterval=value] [utcoffset=value] Parameters dst Enables or disables daylight savings time. pollinterval Specifies the time interval between two successive queries to the SNTP server. The range is 60 to 1200 seconds. The default is 600 seconds. utcoffset Specifies the time difference in hours between UTC and local time. The range is -12 to +12 hours. The default is 0 hours.
AT-S63 Management Software Command Line Interface User’s Guide SET TIME Syntax set time=hh:mm:ss Parameter time Specifies the hour, minute, and second for the switch’s time in 24-hour format. Description This command sets the time on the switch. You can use this command to set the switch’s time if you are not using an SNTP server. Note The system time, when set with this command, is lost whenever you power cycle or reset the switch.
Chapter 5: Simple Network Time Protocol (SNTP) Commands SHOW SNTP Syntax show sntp Parameters None. Description This command displays the following information: ❑ Status of the SNTP client software ❑ SNTP server IP address ❑ UTC Offset ❑ Daylight Savings Time (DST) - enabled or disabled ❑ Poll interval ❑ Last Delta - The last adjustment that had to be applied to the system time. It is the drift in the system clock between two successive queries to the SNTP server.
AT-S63 Management Software Command Line Interface User’s Guide SHOW TIME Syntax show time Parameters None. Description This command shows the system’s current date and time. Example The following command shows the system’s date and time.
Chapter 5: Simple Network Time Protocol (SNTP) Commands 96
Chapter 6 Enhanced Stacking Commands This chapter contains the following commands: ❑ “ACCESS SWITCH” on page 98 ❑ “SET SWITCH STACKMODE” on page 100 ❑ “SHOW REMOTELIST” on page 102 Note Remember to save your changes with the SAVE CONFIGURATION command. Note For background information on enhanced stacking, refer to Chapter 5, “Enhanced Stacking” in the AT-S63 Management Software Menus Interface User’s Guide.
Chapter 6: Enhanced Stacking Commands ACCESS SWITCH Syntax access switch number=number|macaddress=macaddress Parameters number Specifies the number of the switch in an enhanced stack that you want to manage. You view this number using the SHOW REMOTELIST command. macaddress Specifies the MAC address of the switch you want to manage. This can also be displayed using the SHOW REMOTELIST command.
AT-S63 Management Software Menus Interface User’s Guide Examples The following command starts a management session on switch number 12: access switch number=12 The following command starts a management session on a switch with the MAC address 00:30:84:52:02:11 access switch macaddress=003084520211 99
Chapter 6: Enhanced Stacking Commands SET SWITCH STACKMODE Syntax set switch stackmode=master|slave|unavailable Parameter stackmode Specifies the enhanced stacking mode of the switch. The options are: master Specifies the switch’s stacking mode as master. A master switch must be assigned an IP address and subnet mask. slave Specifies the switch’s stacking mode as slave. A slave does not need an IP address. This is the default setting for a switch.
AT-S63 Management Software Menus Interface User’s Guide Example The following command sets the switch’s stacking status to master: set switch stackmode=master 101
Chapter 6: Enhanced Stacking Commands SHOW REMOTELIST Syntax show remotelist [sorted by=macaddress|name] Parameter sorted Sorts the list either by MAC address or by name. The default is by MAC address. Description This command displays a list of the switches in an enhanced stack. This command can only be performed from a management session on a master switch. The list does not include the master switch on which you started the management session.
Chapter 7 Port Parameter Commands This chapter contains the following commands: ❑ “ACTIVATE SWITCH PORT” on page 104 ❑ “DISABLE INTERFACE LINKTRAP” on page 105 ❑ “DISABLE SWITCH PORT” on page 106 ❑ “DISABLE SWITCH PORT FLOW” on page 107 ❑ “ENABLE INTERFACE LINKTRAP” on page 108 ❑ “ENABLE SWITCH PORT” on page 109 ❑ “ENABLE SWITCH PORT FLOW” on page 110 ❑ “RESET SWITCH PORT” on page 111 ❑ “SET SWITCH PORT” on page 112 ❑ “SET SWITCH PORT RATELIMITING” on page 117 ❑ “SHOW INTERFACE” on page 120 ❑ “SHOW SWITCH
Chapter 7: Port Parameter Commands ACTIVATE SWITCH PORT Syntax activate switch port=port autonegotiate Parameter port Specifies a port. You can specify more than one port at a time. You can specify the ports individually (for example, 5,7,22), as a range (for example, 18-23), or both (for example, 1,5,14-22). Description If a port is using autonegotiation to set its speed and duplex mode, you can use this command to prompt the port to renegotiate its settings with its end node.
AT-S63 Management Software Command Line Interface User’s Guide DISABLE INTERFACE LINKTRAP Syntax disable interface=port linktrap Parameter port Specifies the port on which you want to disable link traps. You can specify more than one port at a time. You can specify the ports individually (for example, 5,7,22), as a range (for example, 18-23), or both (for example, 1,5,14-22). Description This command disables link traps on the port.
Chapter 7: Port Parameter Commands DISABLE SWITCH PORT Syntax disable switch port=port Parameter port Specifies the port to disable. You can specify more than one port at a time. You can specify the ports individually (for example, 5,7,22), as a range (for example, 18-23), or both (for example, 1,5,14-22). Description This command disables a port. After disabled, a port stops forwarding traffic. The default setting for a port is enabled.
AT-S63 Management Software Command Line Interface User’s Guide DISABLE SWITCH PORT FLOW Syntax disable switch port=port flow=pause Parameter port Specifies the port where you want to deactivate flow control. You can specify more than one port at a time. You can specify the ports individually (for example, 5,7,22), as a range (for example, 18-23), or both (for example, 1,5,14-22). Description This command deactivates flow control on a port.
Chapter 7: Port Parameter Commands ENABLE INTERFACE LINKTRAP Syntax enable interface=port linktrap Parameter port Specifies the port on which you want to enable link traps. You can specify more than one port at a time. You can specify the ports individually (for example, 5,7,22), as a range (for example, 18-23), or both (for example, 1,5,14-22). Description This command enables link traps on the port.
AT-S63 Management Software Command Line Interface User’s Guide ENABLE SWITCH PORT Syntax enable switch port=port Parameter port Specifies the port to enable. You can specify more than one port at a time. You can specify the ports individually (for example, 5,7,22), as a range (for example, 18-23), or both (for example, 1,5,14-22). Description This command enables a port. After enabled, a port begins to forward traffic. The default setting for a port is enabled.
Chapter 7: Port Parameter Commands ENABLE SWITCH PORT FLOW Syntax enable switch port=port flow=pause Parameter port Specifies the port where you want to activate flow control. You can specify more than one port at a time. You can specify the ports individually (for example, 5,7,22), as a range (for example, 18-23), or both (for example, 1,5,14-22). Description This command activates flow control on a port. Flow control only applies to ports operating in full duplex mode.
AT-S63 Management Software Command Line Interface User’s Guide RESET SWITCH PORT Syntax reset switch port=port Parameter port Specifies the port to reset. You can specify the ports individually (for example, 5,7,22), as a range (for example, 18-23), or both (for example, 1,5,14-22). Description This command resets a port. The reset takes less that a second to complete. You might reset a port if it is experiencing a problem establishing a link with its end node.
Chapter 7: Port Parameter Commands SET SWITCH PORT Syntax set switch port=port [description=description] [status=enabled|disabled] [speed=autonegotiate|10mhalf|10mfull||100mhalf|100mfull [mdimode=mdi|mdix] [renegotiation=auto] [flowcontrol=disable|enable] [fctrllimit=value] [backpressure=yes|no|on|off|true|false|enabled|disabled] [bplimit=value] [holbplimit=value] [bcastfiltering=yes|no|on|off|true|false|enabled|disabled] [unkmcastfiltering=yes|no|on|off|true|false|enabled| disabled] [unkucastfiltering=yes
AT-S63 Management Software Command Line Interface User’s Guide 100mfull 100 Mbps and full-duplex mode. Note A speed of 1000 Mbps is only available when you set the port to autonegotiate. Note When a transceiver is inserted into an uplink slot and a link is established, that slot becomes a primary uplink port and the corresponding backup port, 23R or 24R, automatically transitions to redundant uplink status.
Chapter 7: Port Parameter Commands fctrllimit Specifies the number of cells for flow control. A cell represents 64 bytes. The range is 1 to 57,344 cells. The default value is 8192 cells. backpressure Controls back pressure on the port. Back pressure applies only to ports operating in half-duplex mode. The options are: yes, on, true, enabled Activates back pressure on the port. These options are equivalent. no, off, false, disabled Deactivates back pressure on the port. This is the default.
AT-S63 Management Software Command Line Interface User’s Guide no, off, false, disabled The port discards all unknown unicast frames. These options are equivalent. holbplimit Specifies the threshold at which the switch signals a head of line blocking event on a port. The threshold is specified in cells. A cell is 64 bytes. The range is 1 to 61,440 cells; the default is 7,168. softreset Resets the port. This parameter does not change any of a port’s operating parameters.
Chapter 7: Port Parameter Commands The following command configures port 8 to operate at 10 Mbps, half duplex: set switch port=8 speed=10mhalf The following command sets the speed to 100 Mbps, the duplex mode to full duplex, the wiring configuration to MDI-X, and flow control to enabled for ports 2 to 6: set switch port=2-6 speed=100mfull mdimode=mdix flowcontrol=enabled The following command sets port priority to 5 and activates the broadcast filter for ports 5, 8, and 12: set switch port=5,8,12 priorit
AT-S63 Management Software Command Line Interface User’s Guide SET SWITCH PORT RATELIMITING Syntax set switch port=1 [bcastratelimiting=yes|no|on|off|true|false|enabled| disabled] [bcastrate=value] [mcastratelimiting=yes|no|on|off|true|false|enabled| disabled] [mcastrate=value] [unkucastratelimiting=yes|no|on|off|true|false|enabled| disabled] [unkucastrate=value] Parameters port Specifies the port you want to configure.
Chapter 7: Port Parameter Commands unkucastratelimiting yes, on, true, enabled Activates multicast packet rate limit on the port. The options are equivalent. no, off, false, disabled Deactivates multicast packet rate limit on the port. The options are equivalent. Enables or disables rate limit for ingress unicast packets. The options are: yes, on, true, enabled Activates unicast packet rate limit on the port. The options are equivalent.
AT-S63 Management Software Command Line Interface User’s Guide Examples The following command sets a rate limit of 40,000 ingress packets and activates broadcast and multicast rate limiting on all switch ports: set switch port=1 ratelimit=40000 bclimit=enabled mclimit=enabled The following command activates unicast rate filtering on all ports without changing the current rate limit: set switch port=1 uclimit=enabled The following command changes the rate limit to 15,000 packets: set switch port=1 ratelim
Chapter 7: Port Parameter Commands SHOW INTERFACE Syntax show interface=port Parameter port Specifies the port whose interface information you want to display. You can specify more than one port at a time. You can specify the ports individually (for example, 5,7,22), as a range (for example, 18-23), or both (for example, 1,5,14-22).
AT-S63 Management Software Command Line Interface User’s Guide disabled - Link traps are disabled. To enable link traps, see “ENABLE INTERFACE LINKTRAP” on page 108.
Chapter 7: Port Parameter Commands SHOW SWITCH PORT Syntax show switch port[=port] Parameter port Specifies the port whose parameter settings you want to view. You can specify more than one port at a time. You can specify the ports individually (for example, 5,7,22), as a range (for example, 18-23), or both (for example, 1,5,14-22). All ports are displayed if you omit the port number. Description This command displays a port’s operating parameters, such as speed and duplex mode.
Chapter 8 MAC Address Table Commands This chapter contains the following commands: ❑ “ADD SWITCH FDB|FILTER” on page 124 ❑ “DELETE SWITCH FDB|FILTER” on page 126 ❑ “RESET SWITCH FDB” on page 127 ❑ “SET SWITCH AGINGTIMER|AGEINGTIMER” on page 128 ❑ “SHOW SWITCH FDB” on page 129 Note Remember to save your changes with the SAVE CONFIGURATION command.
Chapter 8: MAC Address Table Commands ADD SWITCH FDB|FILTER Syntax add switch fdb|filter destaddress|macaddress=macaddress port=port vlan=name|vid Note The FDB and FILTER keywords are equivalent. Parameters destaddress macaddress Specifies the static unicast or multicast address to be added to the switch’s MAC address table. The parameters are equivalent.
AT-S63 Management Software Command Line Interface User’s Guide add switch fdb macaddress=00A0D2181A11 port=7 vlan=default_vlan The following command adds the multicast MAC address 01:00:51:00:00 10 to ports 1 to 5.
Chapter 8: MAC Address Table Commands DELETE SWITCH FDB|FILTER Syntax delete switch fdb|filter macaddress=macaddress vlan=name|vid Note The FDB and FILTER keywords are equivalent. Parameters macaddress Specifies the dynamic or static unicast or multicast MAC address to delete from the MAC address table. The address can be entered in either of the following formats: xxxxxxxxxxxx or xx:xx:xx:xx:xx:xx vlan Specifies the VLAN containing the port(s) where the address was learned or assigned.
AT-S63 Management Software Command Line Interface User’s Guide RESET SWITCH FDB Syntax reset switch fdb port=port Parameter port Specifies the port whose dynamic MAC addresses you want to delete from the MAC address table. You can specify more than one port at a time. Description This command deletes the dynamic MAC addresses learned on a specified port. After a port’s dynamic MAC addresses have been deleted, the port begins to learn new addresses.
Chapter 8: MAC Address Table Commands SET SWITCH AGINGTIMER|AGEINGTIMER Syntax set switch agingtimer|ageingtimer=value Parameter agingtimer ageingtimer Specifies the aging timer for the MAC address table. The value is in seconds. The range is 0 to 1048575. The default is 300 seconds (5 minutes). The parameters are equivalent. Description The switch uses the aging timer to delete inactive dynamic MAC addresses from the MAC address table.
AT-S63 Management Software Command Line Interface User’s Guide SHOW SWITCH FDB Syntax show switch fdb [address=macaddress] [port=port] [status=static|dynamic|multicast] [vlan=name] Parameters address Specifies a MAC address. Use this parameter to determine the port on the switch on which a particular MAC address was learned (dynamic) or assigned (static). The address can be entered in either of the following formats: xxxxxxxxxxxx or xx:xx:xx:xx:xx:xx port Specifies a port on the switch.
Chapter 8: MAC Address Table Commands The following command displays the static and dynamic multicast addresses: show switch fdb status=multicast The following command displays the port on which the MAC address 00:A0:D2:18:1A:11 was learned (dynamic) or added (static): show switch fdb address=00A0D2181A11 The following command displays the MAC addresses learned on port 2: show switch fdb port=2 The following command displays the MAC addresses learned on the ports in the Sales VLAN: show switch fdb vlan=
Chapter 9 Port Trunking Commands This chapter contains the following commands: ❑ “ADD SWITCH TRUNK” on page 132 ❑ “CREATE SWITCH TRUNK” on page 133 ❑ “DELETE SWITCH TRUNK” on page 135 ❑ “DESTROY SWITCH TRUNK” on page 136 ❑ “SET SWITCH TRUNK” on page 137 ❑ “SHOW SWITCH TRUNK” on page 138 Note Remember to save your changes with the SAVE CONFIGURATION command.
Chapter 9: Port Trunking Commands ADD SWITCH TRUNK Syntax add switch trunk=name port=port Parameters trunk Specifies the name of the port trunk to be modified. port Specifies the port to be added to the port trunk. You can add more than one port at a time. You can specify the ports individually (for example, 5,7,22), as a range (for example, 18-20), or both (for example, 1,14-16). Description This command adds ports to an existing port trunk.
AT-S63 Management Software Command Line Interface User’s Guide CREATE SWITCH TRUNK Syntax create switch trunk=name port=ports [select=macsrc|macdest|macboth|ipsrc|ipdest|ipboth] Parameters trunk Specifies the name of the trunk. The name can be up to 16 alphanumeric characters. No spaces or special characters are allowed. port Specifies the ports to be added to the port trunk.
Chapter 9: Port Trunking Commands Caution Do not connect the cables to the trunk ports on the switches until after you have created the trunk in the management software. Connecting the cables before configuring the software will create a loop in your network topology. Data loops can result in broadcast storms and poor network performance. Examples The following command creates a port trunk using ports 3 through 6.
AT-S63 Management Software Command Line Interface User’s Guide DELETE SWITCH TRUNK Syntax delete switch trunk=name port=port Parameters trunk Specifies the name of the trunk to be modified. port Specifies the port to be removed from the existing port trunk. You can specify more than one port at a time. Description This command removes ports from a port trunk. To completely remove a port trunk from a switch, see “DESTROY SWITCH TRUNK” on page 136.
Chapter 9: Port Trunking Commands DESTROY SWITCH TRUNK Syntax destroy switch trunk=name Parameter trunk Specifies the name of the trunk to be deleted. Description This command deletes a port trunk from a switch. After a port trunk has been deleted, the ports that made up the trunk can be connected to different end nodes. Caution Disconnect the cables from the port trunk on the switch before destroying the trunk.
AT-S63 Management Software Command Line Interface User’s Guide SET SWITCH TRUNK Syntax set switch trunk=name select=[macsrc|macdest|macboth|ipsrc|ipdest|ipboth] Parameters trunk Specifies the name of the port trunk. select Specifies the load distribution method. Options are: macsrc Source MAC address. macdest Destination MAC address. macboth Source address/destination MAC address. ipsrc Source IP address. ipdest Destination IP address. ipboth Source address/destination IP address.
Chapter 9: Port Trunking Commands SHOW SWITCH TRUNK Syntax show switch trunk Parameters None. Description This command displays the names, ports, and load distribution methods of the port trunks on the switch.
Chapter 10 Port Mirroring Commands This chapter contains the following commands: ❑ “SET SWITCH MIRROR” on page 140 ❑ “SET SWITCH PORT MIRROR” on page 141 ❑ “SHOW SWITCH MIRROR” on page 143 Note Remember to save your changes with the SAVE CONFIGURATION command. Note For background information and guidelines on port mirroring, refer to Chapter 9, “Port Mirroring” in the AT-S63 Management Software Menus Interface User’s Guide.
Chapter 10: Port Mirroring Commands SET SWITCH MIRROR Syntax set switch mirror=port Parameter mirror Specifies the destination port for the port mirror. This is the port to where the traffic from the source ports will be copied. You can specify only one port as the destination port. Specifying “0” (zero) disables port mirroring. Description This command enables mirroring and specifies the destination port, or disables mirroring. To select the source ports, refer to “SET SWITCH PORT MIRROR” on page 141.
AT-S63 Management Software Command Line Interface User’s Guide SET SWITCH PORT MIRROR Syntax set switch port=port mirror=none|rx|tx|both Parameters port Specifies the source port of a port mirror. You can specify more than one port. You can specify the ports individually (for example, 5, 7, 22), as a range (for example, 18-23), or both (for example, 1, 5, 14-22). mirror Specifies which traffic on the source ports is to be mirrored to the destination port.
Chapter 10: Port Mirroring Commands The following command removes ports 5, 7, and 10 as source ports of a port mirror: set switch port=5,7,10 mirror=none 142
AT-S63 Management Software Command Line Interface User’s Guide SHOW SWITCH MIRROR Syntax show switch mirror Parameters None. Description This command displays the source and destination ports of a port mirror on the switch.
Chapter 10: Port Mirroring Commands 144
Chapter 11 File System Commands This chapter contains the following commands: ❑ “COPY” on page 146 ❑ “CREATE CONFIG” on page 147 ❑ “DELETE FILE” on page 148 ❑ “RENAME” on page 149 ❑ “SET CONFIG” on page 150 ❑ “SHOW FILE” on page 152 Note For background information on the switch’s file system, refer to Chapter 10, “File System” in the AT-S63 Management Software Menus Interface User’s Guide.
Chapter 11: File System Commands COPY Syntax copy "filename1.ext" "filename2.ext" Parameters filename1.ext Specifies the name of the file to be copied. If the name contains spaces, it must be enclosed in double quotes. Otherwise, the quotes are optional. filename2.ext Specifies the name of the copy. If the name contains spaces, it must be enclosed in double quotes. Otherwise, the quotes are optional. Description This command creates a copy of an existing file.
AT-S63 Management Software Command Line Interface User’s Guide CREATE CONFIG Syntax create config="filename.cfg" Parameter config Specifies the name of a new configuration file. If the filename contains spaces, it must be enclosed in double quotes. Otherwise, the quotes are optional. Description This command creates a new configuration file containing the commands required to recreate the current configuration of the switch. The CONFIG parameter specifies the name of the configuration file to create.
Chapter 11: File System Commands DELETE FILE Syntax delete file="filename" Parameter file Specifies the name of the file to be deleted. A name with spaces must be enclosed in double quotes. Otherwise, the quotes are optional. You cannot use wildcards. Description This command deletes a file from the file system. To list the files in the file system, refer to “SHOW FILE” on page 152.
AT-S63 Management Software Command Line Interface User’s Guide RENAME Syntax rename "filename1.ext" "filename2.ext" Parameters filename1.ext Specifies the name of the file to be renamed. If the name contains spaces, enclose it in double quotes. Otherwise, the quotes are optional. filename2.ext Specifies the new name for the file. The filename can be from 1 to 15 alphanumeric characters, not including the filename extension. Spaces are allowed.
Chapter 11: File System Commands SET CONFIG Syntax set config="filename.cfg" Parameter config Specifies the name of the configuration file to act as the active configuration file for the switch. The name can be from 1 to 15 alphanumeric characters, not including the extension “.cfg”. If the filename contains spaces, it must be enclosed in double quotes. Description This command sets the active configuration file for a switch.
AT-S63 Management Software Command Line Interface User’s Guide Example The following command sets the boot configuration file to switch22.cfg: set config=switch22.cfg The switch uses the switch22.cfg configuration file the next time it is reset.
Chapter 11: File System Commands SHOW FILE Syntax show file="filename" Parameter file Specifies the name of the file to be displayed. Use double quotes to enclose the name if it contains spaces. Otherwise, the quotes are optional. Description This command displays a list of the files in the switch’s file system. You can use the wildcard “*” to replace any part of the filename to allow a more selective display. You can also use this command to display the contents of a configuration file.
Chapter 12 File Download and Upload Commands This chapter contains the following commands: ❑ “LOAD” on page 154 ❑ “UPLOAD” on page 160 Note For background information on downloading and uploading software images and configuration files, refer to Chapter 11, “File Downloads and Uploads” in the AT-S63 Management Software Menus Interface User’s Guide.
Chapter 12: File Download and Upload Commands LOAD Syntax load method=tftp|xmodem|remoteswitch destfile=filename server=ipaddress srcfile|file=filename switchlist=switches verbose=yes|no|on|off|true|false Parameters method 154 Specifies the method of download. Options are: tftp Specifies a TFTP download. To use this option, there must be a network node with TFTP server software. The file to download onto the switch must be stored on the TFTP server.
AT-S63 Management Software Command Line Interface User’s Guide srcfile file Specifies the filename of the file you are downloading onto the switch. The parameter is required for a TFTP download. switchlist Specifies the switches in an enhanced stack to which to download the software image or file from the master switch. To view the switches in an enhanced stack, see “SHOW REMOTELIST” on page 102. This parameter is used with the REMOTESWITCH parameter.
Chapter 12: File Download and Upload Commands The METHOD parameter states the type of download. There are three possible types of downloads. A TFTP download uses the TFTP client software on the switch to download a file from a TFTP server on your network. The file that you are downloading must be stored on the TFTP server. You can perform this type of download from either a local or Telnet management session of a slave or master switch.
AT-S63 Management Software Command Line Interface User’s Guide The VERBOSE parameter can be used when you are downloading a file switch to switch to monitor the progress of the download process. The parameter is viable only when teamed with the REMOTESWITCH parameter. Before downloading files, note the following: ❑ When you download a new version of the AT-S63 management software image onto a switch, be sure to specify the DESTFILE filename as “ATS63.IMG”. Do not give the image file any other name.
Chapter 12: File Download and Upload Commands For a TFTP download, note the following: ❑ There must be a node on your network that contains the TFTP server software and the file to be downloaded must be stored on that server. ❑ Start the TFTP server software before you perform the download command. ❑ The switch on which you are downloading the file must have an IP address and subnet mask, such as a master switch of an enhanced stack.
AT-S63 Management Software Command Line Interface User’s Guide Because this is another Xmodem transfer, it must be performed from a local management session. After entering this command, you must specify the location of the configuration file stored on your workstation using your terminal emulation program. TFTP Download Examples The following command downloads a new AT-S63 image to the switch using TFTP. You can perform a TFTP download from either a local or Telnet management session.
Chapter 12: File Download and Upload Commands UPLOAD Syntax upload method=tftp|xmodem destfile=filename server=ipaddress file=filename Parameters method Specifies the method of the upload. The options are: tftp Specifies a TFTP upload. To use this option, there must be TFTP server software on a network node. You can use this option from either a local or Telnet management session. xmodem Indicates that the upload will be performed using Xmodem.
AT-S63 Management Software Command Line Interface User’s Guide ❑ Encryption key The METHOD parameter states the type of upload. There are two possible types of uploads. A TFTP upload uses the TFTP client software on the switch to upload a file from the switch to a TFTP server on your network. You can perform this type of upload from either a local or Telnet management session.
Chapter 12: File Download and Upload Commands For an Xmodem upload, note the following: ❑ Xmodem can download a file only onto the switch on which you started the local management session. You cannot use Xmodem to download a file onto a switch accessed through enhanced stacking. For a TFTP upload, note the following: ❑ There must be a node on your network that contains the TFTP server software and the file to be downloaded must be stored on that server.
Chapter 13 Event Log Commands This chapter contains the following commands: ❑ “DISABLE LOG” on page 164 ❑ “ENABLE LOG” on page 165 ❑ “PURGE LOG” on page 166 ❑ “SAVE LOG” on page 167 ❑ “SET LOG FULLACTION” on page 169 ❑ “SHOW LOG” on page 170 ❑ “SHOW LOG STATUS” on page 175 Note Remember to save your changes with the SAVE CONFIGURATION command. For more information about the event log, refer to Chapter 12, “Event Log” in the AT-S63 Management Software Menus Interface User’s Guide.
Chapter 13: Event Log Commands DISABLE LOG Syntax disable log Parameters None. Description This command disables the event logs. This is the default setting for the event log. Note The event logs, even when disabled, log all AT-S63 initialization events that occur when the switch is reset or power cycled. Any switch events that occur after AT-S63 initialization are recorded only if the event logs are enabled.
AT-S63 Management Software Command Line Interface User’s Guide ENABLE LOG Syntax enable log Parameters None. Description This command activates the event logs. After the logs are activated, the switch immediately starts to store events. The default setting for the event logs is disabled.
Chapter 13: Event Log Commands PURGE LOG Syntax purge log[=permanent|temporary] Parameter log The type of memory on the switch where the log file you want to purge is located. The options are: permanent Permanent (nonvolatile) memory. Deletes all events stored in nonvolatile memory, which can contain up to 2,000 events. temporary Temporary memory. Deletes all events stored in temporary memory, which can contain up to 4,000 events. This is the default if you do not specify the “permanent” option.
AT-S63 Management Software Command Line Interface User’s Guide SAVE LOG Syntax save log[=permanent|temporary] filename="filename.log" [full] [module=module] [reverse] [severity=severity] [overwrite] Parameters log The source of the events you want to save to the log file. The options are: permanent Permanent (nonvolatile) memory. Saves events stored in nonvolatile memory, which can contain up to 2,000 events. temporary Temporary memory.
Chapter 13: Event Log Commands severity Saves events of a selected severity. Choices are I for Informational, E for Error, W for Warning, D for Debug, and ALL for All. The default is informational, error, and warning. You can select more than one severity at a time (for example, E,W). overwrite Overwrites the file if it already exists. Without this option, the command displays an error if the file already exists.
AT-S63 Management Software Command Line Interface User’s Guide SET LOG FULLACTION Syntax set log fullaction=halt|wrap Parameters fullaction Defines what the logs will do when they reach maximum capacity. Actions are: halt The logs stop storing new events. wrap The logs delete the oldest entries as new ones are added. This is the default. Description This command defines what the event logs will do after they have stored the maximum number of entries.
Chapter 13: Event Log Commands SHOW LOG Syntax show log=permanent|temporary [full] [module=module] [reverse] [severity=severity] Parameters log Specifies which of the two event logs you want to view. The options are: permanent Displays the events stored in permanent memory. temporary Displays the events stored in temporary memory. full Specifies the amount of information displayed by the log. Without this option, the log displays the time, module, severity, and description for each entry.
AT-S63 Management Software Command Line Interface User’s Guide The MODULE parameter displays entries generated by a particular AT-S63 module. You can specify more than one module at a time. If you omit this parameter, the log displays the entries for all the modules. Table 3 lists the modules and their abbreviations. Table 3.
Chapter 13: Event Log Commands Table 3. AT-S63 Modules Module Name Description SSH Secure Shell protocol SSL Secure Sockets Layer protocol STP Spanning Tree, Rapid Spanning, and Multiple Spanning Tree protocols SYSTEM Hardware status; Manager and Operator log in and log off events.
AT-S63 Management Software Command Line Interface User’s Guide An example of the event log is shown in Figure 1. The example uses the full display mode. S Date Time EventID Source File:Line Number Event -----------------------------------------------------------------I 2/01/04 09:11:02 073001 garpmain.c:259 garp: GARP initialized I 2/01/04 09:55:15 083001 portconfig.c:961 pcfg: PortConfig initialized I 2/01/04 10:22:11 063001 vlanapp.
Chapter 13: Event Log Commands The following command displays the error and warning entries for the AT-S63 module VLAN: show log module=vlan severity=e,w 174
AT-S63 Management Software Command Line Interface User’s Guide SHOW LOG STATUS Syntax show log status Parameter None. Description This command displays information about the event log feature. Following is an example of what is displayed with this command: Event Log Configuration: Event Logging ........... Enabled Log Full Action ............ Wrap The Event Logging field indicates whether the feature is enabled or disabled.
Chapter 13: Event Log Commands 176
Chapter 14 Quality of Service (QoS) Commands This chapter contains the following commands: ❑ “MAP QOS COSP” on page 178 ❑ “SET QOS COSP” on page 180 ❑ “SET QOS SCHEDULING” on page 181 ❑ “SHOW QOS CONFIG” on page 182 Note Remember to save your changes with the SAVE CONFIGURATION command. Note For background information on Quality of Service, refer to Chapter 13, “Quality of Service” in the AT-S63 Management Software Menus Interface User’s Guide.
Chapter 14: Quality of Service (QoS) Commands MAP QOS COSP Syntax map qos cosp=priority-number qid=queue-number Parameters cosp Specifies the Class of Service (CoS) priority level. The CoS priority levels are 0 through 7, with 0 as the lowest priority and 7 as the highest. You can specify more than one priority to assign to the same egress queue. qid Specifies the egress queue number. The egress queues are numbered 0 through 7, with queue 0 as the lowest priority and 7 as the highest.
AT-S63 Management Software Command Line Interface User’s Guide Example The following command maps priorities 4 and 5, to queue 3: map qos cosp=4,5 qid=3 179
Chapter 14: Quality of Service (QoS) Commands SET QOS COSP Syntax set qos cosp=priority-number qid=queue-number Parameters cosp Specifies the Class of Service (CoS) priority level. The CoS priority levels are 0 through 7, with 0 as the lowest priority and 7 as the highest. You can specify more than one priority to assign to the same egress queue. qid Specifies the egress queue number. The egress queues are numbered 0 through 7, with queue 0 as the lowest priority and 7 as the highest.
AT-S63 Management Software Command Line Interface User’s Guide SET QOS SCHEDULING Syntax set qos scheduling=strict|wrr weights=weights Parameters scheduling weights Specifies the type of scheduling. The options are: strict Strict priority. The port transmits all packets out of the higher priority queues before it transmits any from the low priority queues. This is the default. wrr Weighted round robin. The port transmits a set number of packets from each queue in a round robin manner.
Chapter 14: Quality of Service (QoS) Commands SHOW QOS CONFIG Syntax show qos config Parameters None. Description Displays the QoS priority queues and scheduling.
Chapter 15 IGMP Snooping Commands This chapter contains the following commands: ❑ “DISABLE IGMPSNOOPING” on page 184 ❑ “ENABLE IGMPSNOOPING” on page 185 ❑ “SET IP IGMP” on page 186 ❑ “SHOW IGMPSNOOPING” on page 188 ❑ “SHOW IP IGMP” on page 189 Note Remember to use the SAVE CONFIGURATION command to save your changes on the switch. Note For background information on IGMP Snooping, refer to Chapter 14, “IGMP Snooping” in the AT-S63 Management Software Menus Interface User’s Guide.
Chapter 15: IGMP Snooping Commands DISABLE IGMPSNOOPING Syntax disable igmpsnooping Parameters None. Description This command deactivates IGMP snooping on the switch. This command performs the same function as the SNOOPINGSTATUS option in the command “SET IP IGMP” on page 186.
AT-S63 Management Software Command Line Interface User’s Guide ENABLE IGMPSNOOPING Syntax enable igmpsnooping Parameters None. Description This command activates IGMP snooping on the switch. This command performs the same function as the SNOOPINGSTATUS option in the command “SET IP IGMP” on page 186.
Chapter 15: IGMP Snooping Commands SET IP IGMP Syntax set ip igmp [snoopingstatus=enabled|disabled] [hoststatus=singlehost|multihost] [timeout=value] [numbermulticastgroups=value] [routerport=port|all|none|auto] Parameters snoopingstatus hoststatus Activates and deactivates IGMP snooping on the switch. The options are: enabled Activates IGMP snooping. disabled Deactivates IGMP snooping. This is the default setting Specifies the IGMP host node topology.
AT-S63 Management Software Command Line Interface User’s Guide numbermulticastgroups Specifies the maximum number of multicast addresses the switch learns. This parameter is useful with networks that contain a large number of multicast groups. You can use the parameter to prevent the switch’s MAC address table from filling up with multicast addresses, leaving no room for dynamic or static MAC addresses. The range is 1 to 256 addresses; the default is 64 addresses.
Chapter 15: IGMP Snooping Commands SHOW IGMPSNOOPING Syntax show igmpsnooping Parameters None. Description This command displays the following IGMP parameters: ❑ IGMP snooping status ❑ Multicast host topology ❑ Host/router timeout interval ❑ Maximum multicast groups Note For instructions on how to set the IGMP parameters, refer to “SET IP IGMP” on page 186.
AT-S63 Management Software Command Line Interface User’s Guide SHOW IP IGMP Syntax show ip igmp [hostlist] [routerlist] Parameters hostlist Displays a list of the multicast groups learned by the switch, as well as the ports on the switch that are connected to host nodes. This parameter displays information only there are active host nodes. routerlist Displays the ports on the switch where multicast routers are detected. This parameter displays information only when there are active multicast routers.
Chapter 15: IGMP Snooping Commands The following command displays a list of active multicast routers: show ip igmp routerlist 190
Chapter 16 RRP Snooping Commands This chapter contains the following commands: ❑ “DISABLE RRPSNOOPING” on page 192 ❑ “ENABLE RRPSNOOPING” on page 193 ❑ “SHOW RRPSNOOPING” on page 194 Note Remember to save your changes with the SAVE CONFIGURATION command. Note For background information on RRP snooping, refer to Chapter 15, “RRP Snooping” in the AT-S63 Management Software Menus Interface User’s Guide.
Chapter 16: RRP Snooping Commands DISABLE RRPSNOOPING Syntax disable rrpsnooping Parameters None. Description This command disables RRP snooping. This is the default setting.
AT-S63 Management Software Command Line Interface User’s Guide ENABLE RRPSNOOPING Syntax enable rrpsnooping Parameters None. Description This command enables RRP snooping.
Chapter 16: RRP Snooping Commands SHOW RRPSNOOPING Syntax show rrpsnooping Parameter None. Description This command displays the status of RRP snooping, enabled or disabled.
Chapter 17 STP Commands This chapter contains the following commands: ❑ “ACTIVATE STP” on page 196 ❑ “DISABLE STP” on page 197 ❑ “ENABLE STP” on page 198 ❑ “PURGE STP” on page 199 ❑ “SET STP” on page 200 ❑ “SET STP PORT” on page 203 ❑ “SHOW STP” on page 205 Note Remember to save your changes with the SAVE CONFIGURATION command. Note For background information on the Spanning Tree Protocol (STP)., refer to Chapter 16, “STP and RSTP” in the AT-S63 Management Software Menus Interface User’s Guide.
Chapter 17: STP Commands ACTIVATE STP Syntax activate stp Parameters None. Description Use this command to designate STP as the active spanning tree on the switch. You cannot enable STP or configure its parameters until you have designated it as the active spanning tree with this command. Only one spanning tree protocol, STP, RSTP, or MSTP, can be active on the switch at a time.
AT-S63 Management Software Command Line Interface User’s Guide DISABLE STP Syntax disable stp Parameters None. Description This command disables the Spanning Tree Protocol on the switch. The default setting for STP is disabled. To view the current status of STP, refer to “SHOW STP” on page 205.
Chapter 17: STP Commands ENABLE STP Syntax enable stp Parameters None. Description This command enables the Spanning Tree Protocol on the switch. The default setting for STP is disabled. To view the current status of STP, refer to “SHOW STP” on page 205. Note You cannot enable STP until after you have activated it with “ACTIVATE STP” on page 196.
AT-S63 Management Software Command Line Interface User’s Guide PURGE STP Syntax purge stp Parameters None. Description This command returns all STP bridge and port parameters to the default settings. STP must be disabled in order for you to use this command. To disable STP, see “DISABLE STP” on page 197.
Chapter 17: STP Commands SET STP Syntax set stp [default] [priority=priority] [hellotime=hellotime] [forwarddelay=forwarddelay] [maxage=maxage] Parameters default Disables STP and returns all bridge and port STP settings to the default values. This parameter cannot be used with any other command parameter and can only be used when STP is disabled. (This parameter performs the same function as the PURGE STP command.) priority Specifies the priority number for the bridge.
AT-S63 Management Software Command Line Interface User’s Guide hellotime Specifies the time interval between generating and sending configuration messages by the bridge. This parameter can be from 1 to 10 seconds. The default is 2 seconds. forwarddelay Specifies the waiting period before a bridge changes to a new state, for example, becomes the new root bridge after the topology changes.
Chapter 17: STP Commands Examples The following command sets the switch’s bridge priority value to 45,056 (increment 11): set stp priority=11 The following command sets the hello time to 7 seconds and the forwarding delay to 25 seconds: set stp hellotime=7 forwarddelay=25 The following command returns all STP parameters on the switch to the default values: set stp default 202
AT-S63 Management Software Command Line Interface User’s Guide SET STP PORT Syntax set stp port=port [pathcost|portcost=auto|portcost] [portpriority=portpriority] Parameters port Specifies the port you want to configure. You can configure more than one port at a time. You can specify the ports individually (for example, 5, 7, 22), as a range (for example, 18-23), or both (for example, 1, 5, 14-22). pathcost portcost Specifies the port’s cost. The parameters are equivalent.
Chapter 17: STP Commands portpriority Specifies the port’s priority. This parameter is used as a tie breaker when two or more ports are determined to have equal costs to the root bridge. The range is 0 to 240 in increments of 16, for a total of 16 increments as shown in Table 9. You specify the increment of the desired value. The default is 128 (increment 8). Table 9.
AT-S63 Management Software Command Line Interface User’s Guide SHOW STP Syntax show stp [port=port] Parameter port Specifies the port whose STP parameters you want to view. You can view more than one port at a time.You can specify the ports individually (for example, 5, 7, 22), as a range (for example, 18-23), or both (for example, 1, 5, 14-22).
Chapter 17: STP Commands 206
Chapter 18 RSTP Commands This chapter contains the following commands: ❑ “ACTIVATE RSTP” on page 208 ❑ “DISABLE RSTP” on page 209 ❑ “ENABLE RSTP” on page 210 ❑ “PURGE RSTP” on page 211 ❑ “SET RSTP” on page 212 ❑ “SET RSTP PORT” on page 216 ❑ “SHOW RSTP” on page 219 Note Remember to save your changes with the SAVE CONFIGURATION command. Note For background information on the Rapid Spanning Tree Protocol (RSTP).
Chapter 18: RSTP Commands ACTIVATE RSTP Syntax activate rstp Parameters None. Description Use this command to designate RSTP as the active spanning tree on the switch. After you have selected RSTP, you can enable or disable it using the ENABLE RSTP and DISABLE RSTP commands. RSTP is active on a switch only after you have designated it as the active spanning tree with this command and enabled it with the ENABLE RSTP command.
AT-S63 Management Software Command Line Interface User’s Guide DISABLE RSTP Syntax disable rstp Parameters None. Description This command disables the Rapid Spanning Tree Protocol on the switch. To view the current status of RSTP, use “SHOW RSTP” on page 219.
Chapter 18: RSTP Commands ENABLE RSTP Syntax enable rstp Parameters None. Description This command enables the Rapid Spanning Tree Protocol on the switch. The default setting for RSTP is disabled. To view the current status of RSTP, use “SHOW RSTP” on page 219. You cannot enable RSTP until you have activated it with the ACTIVATE RSTP command.
AT-S63 Management Software Command Line Interface User’s Guide PURGE RSTP Syntax purge rstp Parameters None. Description This command returns all RSTP bridge and port parameters to the default settings. RSTP must be disabled before you can use this command. To disable RSTP, refer to “DISABLE RSTP” on page 209.
Chapter 18: RSTP Commands SET RSTP Syntax set rstp [default] [priority=priority] [hellotime=hellotime] [forwarddelay=forwarddelay] [maxage=maxage] [rstptype|forceversion=stpcompatible| forcestpcompatible|normalrstp] Parameters default Returns all bridge and port RSTP settings to the default values. This parameter cannot be used with any other command parameter and only when RSTP is disabled. (This parameter performs the same function as the PURGE RSTP command.
AT-S63 Management Software Command Line Interface User’s Guide hellotime Specifies the time interval between generating and sending configuration messages by the bridge. This parameter can be from 1 to 10 seconds. The default is 2 seconds. forwarddelay Specifies the waiting period before a bridge changes to a new state, for example, becomes the new root bridge after the topology changes. If the bridge transitions too soon, not all links may have yet adapted to the change, resulting in network loops.
Chapter 18: RSTP Commands forcestpcompatible The bridge uses the RSTP parameter settings, but transmits only STP BPDU packets from the ports. This option is equivalent to the STPCOMPATIBLE option. normalrspt The bridge uses RSTP. It transmits RSTP BPDU packets, except on ports connected to bridges running STP. This is the default setting. Description This command configures the following RSTP parameter settings.
AT-S63 Management Software Command Line Interface User’s Guide The following command returns all RSTP parameter settings to their default values: set rstp default 215
Chapter 18: RSTP Commands SET RSTP PORT Syntax set rstp port=port [pathcost|portcost=cost|auto] [portpriority=portpriority] [edgeport=yes|no|on|off|true|false] [ptp|pointtopoint=yes|no|on|off|true|false|autoupdate] [migrationcheck=yes|no|on|off|true|false] Parameters port Specifies the port you want to configure. You can specify more than one port at a time. You can specify the ports individually (for example, 5, 7, 22), as a range (for example, 18-23), or both (for example, 1, 5, 14-22).
AT-S63 Management Software Command Line Interface User’s Guide Table 12 lists the RSTP port costs with Auto-Detect when the port is part of a port trunk. Table 12. RSTP Auto-Detect Port Trunk Costs portpriority Port Speed Port Cost 10 Mbps 20,000 100 Mbps 20,000 1000 Mbps 2,000 Specifies the port’s priority. This parameter is used as a tie breaker when two or more ports are determined to have equal costs to the root bridge.
Chapter 18: RSTP Commands ptp pointtopoint yes, on, true The port is an edge port. The options are equivalent. This is the default. no, off, false The port is not an edge port. The options are equivalent. Defines whether the port is functioning as a pointto-point port. The parameters are equivalent. This type of port is connected to a device operating at full-duplex mode. The options are: yes, on, true The port is an point-to-point port. The options are equivalent.
AT-S63 Management Software Command Line Interface User’s Guide SHOW RSTP Syntax show rstp [portconfig=port|portstate=port] Parameters portconfig Displays the RSTP port settings. You can specify more than one port at a time. portstate Displays the RSTP port status. You can specify more than one port at a time. Description You can use this command to display the RSTP parameter settings.
Chapter 18: RSTP Commands The following command displays RSTP port status for port 15: show rstp portstate=15 220
Chapter 19 MSTP Commands This chapter contains the following commands: ❑ “ACTIVATE MSTP” on page 223 ❑ “ADD MSTP” on page 224 ❑ “CREATE MSTP” on page 225 ❑ “DELETE MSTP” on page 226 ❑ “DESTROY MSTP MSTIID” on page 227 ❑ “DISABLE MSTP” on page 228 ❑ “ENABLE MSTP” on page 229 ❑ “PURGE MSTP” on page 230 ❑ “SET MSTP” on page 231 ❑ “SET MSTP CIST” on page 234 ❑ “SET MSTP MSTI” on page 236 ❑ “SET MSTP MSTIVLANASSOC” on page 238 ❑ “SET MSTP PORT” on page 239 ❑ “SHOW MSTP” on page 242 Note Remember to save your c
Chapter 19: MSTP Commands Note For background information on the Multiple Spanning Tree Protocol (MSTP)., refer to Chapter 17, “MSTP” in the AT-S63 Management Software Menus Interface User’s Guide.
AT-S63 Management Software Command Line Interface User’s Guide ACTIVATE MSTP Syntax activate mstp Parameters None. Description This command designates MSTP as the active spanning tree on the switch. You cannot enable MSTP or configure its parameters until after you have designated it as the active spanning tree with this command. Only one spanning tree protocol can be active on the switch at a time.
Chapter 19: MSTP Commands ADD MSTP Syntax add mstp mstiid=mstiid mstivlanassoc=vids Parameters mstiid Specifies the ID of the multiple spanning tree instance (MSTI) to which you want to associate VLANs. You can specify only one MSTI ID at a time. The range is 1 to 15. mstivlanassoc Specifies the VID of the VLAN you want to associate with the MSTI ID. You can specify more than one VID at a time (for example, 2,5,44). Description This command associates VLANs to a MSTI.
AT-S63 Management Software Command Line Interface User’s Guide CREATE MSTP Syntax create mstp mstiid=mstiid [mstivlanassoc=vids] Parameters mstiid Specifies the MSTI ID of the spanning tree instance you want to create. You can specify only one MSTI ID at a time. The range is 1 to 15. mstivlanassoc Specifies the VID of the VLAN you want to associate with the MSTI ID. You can specify more than one VID at a time (for example, 2,5,44).
Chapter 19: MSTP Commands DELETE MSTP Syntax delete mstp mstiid=mstiid mstivlanassoc=vids Parameters mstiid Specifies the MSTI ID of the spanning tree instance where you want to remove VLANs. You can specify only one MSTI ID at a time. The range is 1 to 15. mstivlanassoc Specifies the VID of the VLAN you want to remove from the spanning tree instance. You can specify more than one VID at a time (for example, 2,5,44). Description This command removes a VLAN from a spanning tree instance.
AT-S63 Management Software Command Line Interface User’s Guide DESTROY MSTP MSTIID Syntax destroy mstp mstiid=mstiid Parameter mstiid Specifies the MSTI ID of the spanning tree instance you want to delete. You can specify only one MSTI ID at a time. The range is 1 to 15. Description This command deletes a spanning tree instance. VLANs associated with a deleted MSTI are returned to CIST.
Chapter 19: MSTP Commands DISABLE MSTP Syntax disable mstp Parameters None. Description This command disables the Multiple Spanning Tree Protocol on the switch. To view the current status of MSTP, refer to “SHOW MSTP” on page 242.
AT-S63 Management Software Command Line Interface User’s Guide ENABLE MSTP Syntax enable mstp Parameters None. Description This command enables Multiple Spanning Tree Protocol on the switch. To view the current status of MSTP, refer to “SHOW MSTP” on page 242. You must select MSTP as the active spanning tree on the switch before you can enable it with this command. To activate MSTP, see “ACTIVATE MSTP” on page 223.
Chapter 19: MSTP Commands PURGE MSTP Syntax purge mstp Parameters None. This command returns all MSTP bridge and port parameters settings to their default values. In order for you to use this command, MSTP must be the active spanning tree protocol on the switch and the protocol must be disabled. To select MSTP as the active spanning tree protocol on the switch, see “ACTIVATE MSTP” on page 223. To disable MSTP, refer to “DISABLE MSTP” on page 228.
AT-S63 Management Software Command Line Interface User’s Guide SET MSTP Syntax set mstp [default] [forceversion=stpcompatible|forcestpcompatible| normalmstp] [hellotime=hellotime] [forwarddelay=forwarddelay] [maxage=maxage] [maxhops=maxhops] [configname="name"] [revisionlevel=number] Parameters default Disables MSTP and returns all bridge and port MSTP settings to the default values. This parameter cannot be used with any other parameter.
Chapter 19: MSTP Commands normalmspt The bridge uses MSTP. The bridge sends out MSTP BPDU packets from all ports except for those ports connected to bridges running STP. This is the default setting. hellotime Specifies the time interval between generating and sending configuration messages by the bridge. This parameter can be from 1 to 10 seconds. The default is 2 seconds.
AT-S63 Management Software Command Line Interface User’s Guide revisionlevel Specifies the version number of an MSTP region. The range is 0 (zero) to 255. This is an arbitrary number that you assign to a region. The version level must be the same on all bridges in a region. Different regions can have the same version level without conflict. Description This command configures the following MSTP parameter settings.
Chapter 19: MSTP Commands SET MSTP CIST Syntax set mstp cist priority=priority Parameter priority Specifies the CIST priority number for the switch. The range is 0 to 61,440 in increments of 4,096. The range is divided into sixteen increments, as shown in Table 14. You specify the increment that represents the desired bridge priority value. The default value is 32,768, which is increment 8. Table 14.
AT-S63 Management Software Command Line Interface User’s Guide Example The following command sets the CIST priority value to 45,056, which is increment 11: set mstp cist priority=11 235
Chapter 19: MSTP Commands SET MSTP MSTI Syntax set mstp msti mstiid=mstiid priority=priority Parameters mstiid Specifies a MSTI ID. You can specify only one MSTI ID at a time. The range is 1 to 15. priority Specifies the MSTI priority value for the switch. The range is 0 to 61,440 in increments of 4,096. The range is divided into sixteen increments, as shown in Table 15. You specify the increment that represents the desired bridge priority value. The default value is 32,768, which is increment 8.
AT-S63 Management Software Command Line Interface User’s Guide The PRIORITY parameter specifies the new MSTI priority value. The range is 0 (zero) to 61,440 in increments of 4,096, with 0 being the highest priority.
Chapter 19: MSTP Commands SET MSTP MSTIVLANASSOC Syntax set mstp mstivlanassoc mstiid=mstiid vlanlist=vids Parameters mstiid Specifies the ID of the spanning tree instance where you want to associate VLANs. You can specify only one MSTI ID at a time. The range is 1 to 15. vlanlist Specifies the VID of the VLAN you want to associate with the MSTI ID. You can specify more than one VID at a time (for example, 2,5,44). If VLANs have already been associated with the MSTI, they are overwritten.
AT-S63 Management Software Command Line Interface User’s Guide SET MSTP PORT Syntax set mstp port=port|all [intportcost=auto|portcost] [extportcost=portcost] [portpriority=priority] [edgeport=yes|no|no|on|off|true|false] [ptp|pointtopoint=yes|no|on|off|true|false|autoupdate] [migrationcheck=yes|no|on|off|true|false] Parameters port Specifies the port you want to configure. You can specify more than one port at a time. To configure all ports in the switch, enter ALL.
Chapter 19: MSTP Commands Table 16. Port Priority Value Increments Increment Port Priority Increment Port Priority 0 0 8 128 1 16 9 144 2 32 10 160 3 48 11 176 4 64 12 192 5 80 13 208 6 96 14 224 7 112 15 240 edgeport ptp pointtopoint 240 Defines whether the port is functioning as an edge port. An edge port is connected to a device operating at half-duplex mode and is not connected to any device running STP or MSTP.
AT-S63 Management Software Command Line Interface User’s Guide migrationcheck This parameter resets a MSTP port, allowing it to send MSTP BPDUs. When a MSTP bridge receives STP BPDUs on an MSTP port, the port transmits STP BPDUs. The MSTP port continues to transmit STP BPDUs indefinitely. Set the migrationcheck parameter to yes to reset the MSTP port to transmit MSTP BPDUs. yes, on, true Enable migration check. The options are equivalent. no, off, false Disable migration check.
Chapter 19: MSTP Commands SHOW MSTP Syntax show mstp [portconfig=ports] [portstate=ports] [msti] [cist] [mstivlanassoc] Parameters portconfig Specifies a port. You can specify more than one port at a time. For a list of the MSTP information displayed by this parameter, refer to Description below. portstate Specifies a port. You can specify more than one port at a time. For a list of the MSTP information displayed by this parameter, refer to Description below.
AT-S63 Management Software Command Line Interface User’s Guide ❑ Configuration name ❑ Reversion level ❑ Bridge identifier The PORTCONFIG parameter displays the following MSTP port parameter settings: ❑ Edge-port status ❑ Point-to-point status ❑ External and internal port costs ❑ Port priority The PORTSTATE parameter displays the following MSTP port status information: ❑ MSTP port state ❑ MSTI ID ❑ MSTP role ❑ Point-to-point status ❑ Spanning tree version ❑ Port cost The MSTI parameter displays the followin
Chapter 19: MSTP Commands 244
Chapter 20 SNMPv3 Commands This chapter contains the following commands: ❑ “ADD SNMPV3 USER” on page 247 ❑ “CLEAR SNMPV3 ACCESS” on page 249 ❑ “CLEAR SNMPV3 COMMUNITY” on page 251 ❑ “CLEAR SNMPV3 NOTIFY” on page 252 ❑ “CLEAR SNMPV3 TARGETADDR” on page 253 ❑ “CLEAR SNMPV3 VIEW” on page 254 ❑ “CREATE SNMPV3 ACCESS” on page 255 ❑ “CREATE SNMPV3 COMMUNITY” on page 258 ❑ “CREATE SNMPV3 GROUP” on page 260 ❑ “CREATE SNMPV3 NOTIFY” on page 262 ❑ “CREATE SNMPV3 TARGETADDR” on page 264 ❑ “CREATE SNMPV3 TARGETPARAMS
Chapter 20: SNMPv3 Commands ❑ “DESTROY SNMPv3 TARGETADDR” on page 276 ❑ “DESTROY SNMPv3 TARGETPARMS” on page 277 ❑ “DESTROY SNMPV3 VIEW” on page 278 ❑ “SET SNMPV3 ACCESS” on page 279 ❑ “SET SNMPV3 COMMUNITY” on page 281 ❑ “SET SNMPV3 GROUP” on page 283 ❑ “SET SNMPV3 NOTIFY” on page 285 ❑ “SET SNMPV3 TARGETADDR” on page 287 ❑ “SET SNMPV3 TARGETPARAMS” on page 289 ❑ “SET SNMPV3 USER” on page 291 ❑ “SET SNMPV3 VIEW” on page 293 ❑ “SHOW SNMPV3 ACCESS” on page 295 ❑ “SHOW SNMPV3 COMMUNITY” on page 296 ❑ “SHOW S
AT-S63 Management Software Command Line Interface User’s Guide ADD SNMPV3 USER Syntax add snmpv3 user=user [authentication=md5|sha] authpassword=password privpassword=password [storagetype=volatile|nonvolatile] Parameters user Specifies the name of an SNMPv3 user, up to 32 alphanumeric characters. authentication Specifies the authentication protocol that is used to authenticate this user with an SNMP entity (manager or NMS).
Chapter 20: SNMPv3 Commands nonvolatile Allows you to save the table entry to the configuration file on the switch. Description This command creates an SNMPv3 User Table entry. Examples The following command creates an SNMPv3 user with the name “steven142” with an authentication protocol of MD5, an authentication password of “99doublesecret12”, a privacy password of “encrypt178” and a storage type of nonvolatile.
AT-S63 Management Software Command Line Interface User’s Guide CLEAR SNMPV3 ACCESS Syntax clear snmpv3 access=access [securitymodel=v1|v2c|v3] [securitylevel=noauthentication|authentication| privacy] readview writeview notifyview Parameters access Specifies the name of the security group, up to 32 alphanumeric characters. securitymodel Specifies the security model. The options are: v1 Associates the Security Name, or User Name, with the SNMPv1 protocol.
Chapter 20: SNMPv3 Commands Description This command clears the specified fields in an SNMPv3 Access Table entry. Examples The following command clears the readview parameter in a security group called “Engineering” which has a security model of the SNMPv3 protocol and a security level of privacy.
AT-S63 Management Software Command Line Interface User’s Guide CLEAR SNMPV3 COMMUNITY Syntax clear snmpv3 community index=index transporttag Parameters index Specifies the name of an existing SNMPv3 Community Table entry, up to 32 alphanumeric characters. transporttag Specifies the transport tag, up to 32 alphanumeric characters. Description This command clears the transporttag parameter in an SNMPv3 Community Table entry.
Chapter 20: SNMPv3 Commands CLEAR SNMPV3 NOTIFY Syntax clear snmpv3 notify=notify tag Parameters notify Specifies the name of an SNMPv3 Notify Table entry, up to 32 alphanumeric characters. tag Specifies the notify tag name, up to 32 alphanumeric characters. Description This command clears the value of the tag parameter in an SNMPv3 Notify Table entry.
AT-S63 Management Software Command Line Interface User’s Guide CLEAR SNMPV3 TARGETADDR Syntax clear snmpv3 targetaddr=targetaddr taglist Parameters targetaddr Specifies the name of the SNMPv3 Target Address Table entry, up to 32 alphanumeric characters. taglist Specifies a tag or list of tags, up to 256 alphanumeric characters. Description This command clears the value of the taglist parameter in an SNMPv3 Target Address Table entry.
Chapter 20: SNMPv3 Commands CLEAR SNMPV3 VIEW Syntax clear snmpv3 view=view [subtree=OID|text] mask Parameters view Specifies the name of the SNMPv3 view, up to 32 alphanumeric characters. subtree Specifies the view of the MIB Tree. Options are: OID A numeric value in hexadecimal format. text Text name of the view. mask Specifies the subtree mask, in hexadecimal format. Description This command clears the value of the mask parameter in an SNMPv3 View Table entry.
AT-S63 Management Software Command Line Interface User’s Guide CREATE SNMPV3 ACCESS Syntax create snmpv3 access=access [securitymodel=v1|v2c|v3] [securitylevel=noauthentication|authentication| privacy] readview=readview writeview=writeview notifyview=notifyview [storagetype=volatile|nonvolatile] Parameters access Specifies the name of the security group, up to 32 alphanumeric characters. securitymodel Specifies the security model.
Chapter 20: SNMPv3 Commands to this parameter, then the writeview parameter defaults to none. notifyview Specifies a Notify View Name that allows the users assigned to this Group Name to send traps permitted in the specified View. This is an optional parameter. If you do not assign a value to this parameter, then the notifyview parameter defaults to none. storagetype Specifies the storage type of this table entry. This is an optional parameter.
AT-S63 Management Software Command Line Interface User’s Guide create snmpv3 access=hwengineering securitymodel=v3 securitylevel=authentication readview=internet Note In the above example, the storage type has not been specified. As a result, the storage type for the hwengineering security group is volatile storage.
Chapter 20: SNMPv3 Commands CREATE SNMPV3 COMMUNITY Syntax create snmpv3 community index=index communityname=communityname securityname=securityname transporttag=transporttag [storagetype=volatile|nonvolatile] Parameters index Specifies the name of this SNMPv3 Community Table entry, up to 32 alphanumeric characters. communityname Specifies a password for this community entry, up to 32 alphanumeric characters.
AT-S63 Management Software Command Line Interface User’s Guide create snmpv3 community index=95 communityname=12sacramento49 securityname=regina transporttag=trainingtag storagetype=nonvolatile 259
Chapter 20: SNMPv3 Commands CREATE SNMPV3 GROUP Syntax create snmpv3 group username=username [securitymodel=v1|v2c|v3] groupname=groupname [storagetype=volatile|nonvolatile] Parameter username Specifies a user name configured in the SNMPv3 User Table. securitymodel Specifies the security model of the above user name. The options are: v1 Associates the Security Name, or User Name, with the SNMPv1 protocol. v2c Associates the Security Name, or User Name, with the SNMPv2c protocol.
AT-S63 Management Software Command Line Interface User’s Guide Examples The following command creates the SNMPv3 SecurityToGroup Table entry for a user named Nancy. The security model is set to the SNMPv3 protocol. The group name, or security group, for this user is the “admin” group. The storage type is set to nonvolatile storage.
Chapter 20: SNMPv3 Commands CREATE SNMPV3 NOTIFY Syntax create snmpv3 notify=notify tag=tag [type=trap|inform] [storagetype=volatile|nonvolatile] Parameters notify Specifies the name of an SNMPv3 Notify Table entry, up to 32 alphanumeric characters. tag Specifies the notify tag name, up to 32 alphanumeric characters. This is an optional parameter. type Specifies the message type. This is an optional parameter.
AT-S63 Management Software Command Line Interface User’s Guide Examples The following command creates the SNMPv3 Notify Table entry called “testengtrap1” and the notify tag is “testengtag1.” The message type is defined as a trap message and the storage type for this entry is nonvolatile storage. create snmpv3 notify=testengtrap1 tag=testengtag1 type=trap storagetype=nonvolatile The following command creates the SNMPv3 Notify Table entry called “testenginform5” and the notify tag is “testenginformtag5.
Chapter 20: SNMPv3 Commands CREATE SNMPV3 TARGETADDR Syntax create snmpv3 targetaddr=targetaddr params=params ipaddress=ipaddress udpport=udpport timeout=timeout retries=retries taglist=taglist [storagetype=volatile|nonvolatile] Parameters targetaddr Specifies the name of the SNMP manager, or host, that manages the SNMP activity on the switch, up to 32 alphanumeric characters. params Specifies the target parameters name, up to 32 alphanumeric characters.
AT-S63 Management Software Command Line Interface User’s Guide Examples In the following command, the name of the Target Address Table entry is “snmphost1.” In addition, the params parameter is assigned to “snmpv3manager” and the IP address is 198.1.1.1. The tag list consists of “swengtag,” “hwengtag,” and “testengtag.” The storage type for this table entry is nonvolatile storage. create snmpv3 targetaddr=snmphost1 params=snmpv3manager ipaddress=198.1.1.
Chapter 20: SNMPv3 Commands CREATE SNMPV3 TARGETPARAMS Syntax create snmpv3 targetparams=targetparams username=username [securitymodel=v1|v2c|v3] [messageprocessing=v1|v2c|v3] [securitylevel=noauthentication|authentication| privacy] [storagetype=volatile|nonvolatile] Parameters targetparams Specifies the name of the SNMPv3 Target Parameters Table entry, up to 32 alphanumeric characters. username Specifies a user name configured in the SNMPv3 User Table.
AT-S63 Management Software Command Line Interface User’s Guide noauthentication This option provides no authentication protocol and no privacy protocol. authentication This option provides an authentication protocol, but no privacy protocol. privacy This option provides an authentication protocol and the privacy protocol. storagetype Specifies the storage type of this table entry. This is an optional parameter.
Chapter 20: SNMPv3 Commands CREATE SNMPV3 VIEW Syntax create snmpv3 view=view [subtree=OID|text] mask=mask [type=included|excluded] [storagetype=volatile|nonvolatile] Parameters view Specifies the name of the view, up to 32 alphanumeric characters. subtree Specifies the view of the MIB Tree. The options are: OID A numeric value in hexadecimal format. text Text name of the view. mask Specifies the subtree mask, in hexadecimal format. type Specifies the view type. This is an optional parameter.
AT-S63 Management Software Command Line Interface User’s Guide Examples The following command creates an SNMPv3 View Table entry called “internet1” with a subtree value of the Internet MIBs and a view type of included. The storage type for this table entry is nonvolatile storage. create snmpv3 view=internet1 subtree=internet type=included storagetype=nonvolatile The following command creates an SNMPv3 View Table entry called “tcp1” with a subtree value of the TCP/IP MIBs and a view type of excluded.
Chapter 20: SNMPv3 Commands DELETE SNMPV3 USER Syntax delete snmpv3 user=user Parameters user Specifies the name of an SNMPv3 user to delete from the switch. Description This command deletes an SNMPv3 User Table entry. After you delete an SNMPv3 user from the switch, you cannot recover it. Examples The following command deletes the user named “wilson890.” delete snmpv3 user=wilson890 The following command deletes the user named “75murthy75.
AT-S63 Management Software Command Line Interface User’s Guide DESTROY SNMPv3 ACCESS Syntax destroy snmpv3 access=access [securitymodel=v1|v2c|v3] [securitylevel=noauthentication|authentication| privacy] Parameter access Specifies an SNMPv3 Access Table entry. securitymodel Specifies the security model of the user name specified above. The options are: v1 Associates the Security Name, or User Name, with the SNMPv1 protocol. v2c Associates the Security Name, or User Name, with the SNMPv2c protocol.
Chapter 20: SNMPv3 Commands Examples The following command deletes the SNMPv3 Access Table entry called “swengineering” with a security model of the SNMPv3 protocol and a security level of authentication. destroy snmpv3 access=swengineering securitymodel=v3 securitylevel=authentication The following command deletes the SNMPv3 Access Table entry called “testengineering” with a security model of the SNMPv3 protocol and a security level of privacy.
AT-S63 Management Software Command Line Interface User’s Guide DESTROY SNMPv3 COMMUNITY Syntax destroy snmpv3 community index=index Parameter index Specifies the name of this SNMPv3 Community Table entry, up to 32 alphanumeric characters. Description This command deletes an SNMPv3 Community Table entry. After you delete an SNMPv3 Community Table entry, you cannot recover it. Examples The following command deletes an SNMPv3 Community Table entry with an index of 1001.
Chapter 20: SNMPv3 Commands DESTROY SNMPv3 GROUP Syntax destroy snmpv3 group username=username [securitymodel=v1|v2c|v3] Parameter username Specifies a user name configured in the SNMPv3 User Table. securitymodel Specifies the security model of the above user name. The options are: v1 Associates the Security Name, or User Name, with the SNMPv1 protocol. v2c Associates the Security Name, or User Name, with the SNMPv2c protocol.
AT-S63 Management Software Command Line Interface User’s Guide DESTROY SNMPv3 NOTIFY Syntax destroy snmpv3 notify=notify Parameter notify Specifies an SNMPv3 Notify Table entry. Description This command deletes an SNMPv3 Notify Table entry. After you delete an SNMPv3 Notify Table entry, you cannot recover it. Examples The following command deletes an SNMPv3 Notify Table entry called “systemtestnotifytrap.
Chapter 20: SNMPv3 Commands DESTROY SNMPv3 TARGETADDR Syntax destroy snmpv3 targetaddr=target Parameter targetaddr Specifies an SNMPv3 Target Address table entry. Description This command deletes an SNMPv3 Target Address Table entry. After you delete an SNMPv3 Target Address Table entry, you cannot recover it. Example The following command deletes an SNMPv3 Address Table entry called “snmpmanager.
AT-S63 Management Software Command Line Interface User’s Guide DESTROY SNMPv3 TARGETPARMS Syntax destroy snmpv3 targetparams=targetparams Parameter targetparams Specifies an SNMPv3 Target Parameters table entry. Description This command deletes an SNMPv3 Target Parameters Table entry. After you delete an SNMPv3 Target Parameters Table entry, you cannot recover it. Examples The following command deletes the SNMPv3 Target Parameters Table entry called “targetparameter1.
Chapter 20: SNMPv3 Commands DESTROY SNMPV3 VIEW Syntax destroy snmpv3 view=view [subtree=OID|text] Parameters view Specifies the name of the view, up to 32 alphanumeric characters. subtree Specifies the view subtree view. The options are: OID A numeric value in hexadecimal format. text Text name of the view. Description This command deletes an SNMPv3 View Table entry. After you delete an SNMPv3 View Table entry, you cannot recover it.
AT-S63 Management Software Command Line Interface User’s Guide SET SNMPV3 ACCESS Syntax set snmpv3 access=access [securitymodel=v1|v2c|v3] [securitylevel=noauthentication|authentication| privacy] readview=readview writeview=writeview notifyview=notifyview [storagetype=volatile|nonvolatile] Parameters access Specifies the name of the group, up to 32 alphanumeric characters. securitymodel Specifies the security model. Options are: v1 Associates the Security Name, or User Name, with the SNMPv1 protocol.
Chapter 20: SNMPv3 Commands volatile Does not allow you to save the table entry to the configuration file on the switch. This is the default. nonvolatile Allows you to save the table entry to the configuration file on the switch. Description This command modifies an SNMPv3 Access Table entry. Examples The following command modifies the group called engineering. The new read view is the Internet MIBs and the storage type is volatile storage.
AT-S63 Management Software Command Line Interface User’s Guide SET SNMPV3 COMMUNITY Syntax set snmpv3 community index=index communityname=communityname securityname=securityname transporttag=transporttag [storagetype=volatile|nonvolatile] Parameters index Specifies the name of this SNMPv3 Community Table entry, up to 32 alphanumeric characters. communityname Specifies a password of this community, up to 32 alphanumeric characters.
Chapter 20: SNMPv3 Commands The following command modifies the community table entry with an index of 52. The community has a password of “oldmiss71” and a security name of “jjhuser234.” The transport tag is set to “testtag40.
AT-S63 Management Software Command Line Interface User’s Guide SET SNMPV3 GROUP Syntax set snmpv3 group username=username [securitymodel=v1|v2c|v3] groupname=groupname [storagetype=volatile|nonvolatile] Parameter username Specifies a user name configured in the SNMPv3 User Table. securitymodel Specifies the security model of the above user name. The options are: v1 Associates the Security Name, or User Name, with the SNMPv1 protocol.
Chapter 20: SNMPv3 Commands Examples The following command modifies the SecurityToGroup Table entry with a user name of “nancy28.” The security model is the SNMPv3 protocol. and the group name is set to engineering. set snmpv3 group username=nancy28 securitymodel=v3 groupname=engineering The following command modifies the SecurityToGroup Table entry with a user name of “nelvid.” The security model is the SNMPv3 protocol and the group name “systemtest.
AT-S63 Management Software Command Line Interface User’s Guide SET SNMPV3 NOTIFY Syntax set snmpv3 notify=notify tag=tag [type=trap|inform] [storagetype=volatile|nonvolatile] Parameters notify Specifies the name associated with the trap message, up to 32 alphanumeric characters. tag Specifies the notify tag name, up to 32 alphanumeric characters. type Specifies the message type. Options are: trap Trap messages are sent, with no response expected from the host.
Chapter 20: SNMPv3 Commands The following command modifies an SNMPv3 Notify Table entry called “systemtestinform5.” The notify tag is “systemtestinform5tag” and the message type is an inform message.
AT-S63 Management Software Command Line Interface User’s Guide SET SNMPV3 TARGETADDR Syntax set snmpv3 targetaddr=targetaddr params=params ipaddress=ipaddress udpport=udpport timeout=timeout retries=retries taglist=taglist [storagetype=volatile|nonvolatile] Parameters targetaddr Specifies the name of the SNMP entity (NMS or manager) that manages the SNMP activity on the switch, up to 32 alphanumeric characters. params Specifies the target parameters name, up to 32 alphanumeric characters.
Chapter 20: SNMPv3 Commands Description This command modifies an SNMPv3 Target Address Table entry. Examples The following command modifies the Target Address Table entry with a value of “snmphost.” The params parameter is set to “targetparameter7” and the IP address is 198.1.1.1. The taglist is set to “systemtesttraptag” and “systemtestinformtag.” set snmpv3 targetaddr=snmphost params=targetparameter7 ipaddress=198.1.1.
AT-S63 Management Software Command Line Interface User’s Guide SET SNMPV3 TARGETPARAMS Syntax set snmpv3 targetparams=targetparams username=username [securitymodel=v1|v2c|v3] [messageprocessing=v1|v2c|v3] [securitylevel=noauthentication|authentication| privacy] [storagetype=volatile|nonvolatile] Parameters targetparams Specifies the target parameters name, up to 32 alphanumeric characters. username Specifies the user name. securitymodel Specifies the security model of the above user name.
Chapter 20: SNMPv3 Commands noauthentication This option provides no authentication protocol and no privacy protocol. storagetype authentication This option provides an authentication protocol, but no privacy protocol. privacy This option provides an authentication protocol and the privacy protocol. Specifies the storage type of this table entry. This is an optional parameter. The options are: volatile Does not allow you to save the table entry to the configuration file on the switch.
AT-S63 Management Software Command Line Interface User’s Guide SET SNMPV3 USER Syntax set snmpv3 user=user [authentication=md5|sha] authpassword=password privpassword=password [storagetype=volatile|nonvolatile] Parameters user Specifies the name of an SNMPv3 user, up to 32 alphanumeric characters. authentication Specifies the authentication protocol that is used to authenticate this user with an SNMPv3 entity (or NMS). The default is no authentication.
Chapter 20: SNMPv3 Commands Examples The following command modifies a User Table entry called “atiuser104”. The authentication protocol is set to the MD5 protocol and the authentication password is “atlanta45denver.” The DES privacy protocol is on and the privacy password is “denvertoatlanta3.” set snmpv3 user=atiuser104 authentication=md5 authpassword=atlanta45denver privpassword=denvertoatlanta3 The following command modifies a User Table entry called “atiuser104.
AT-S63 Management Software Command Line Interface User’s Guide SET SNMPV3 VIEW Syntax set snmpv3 view=view [subtree=OID|text] mask=mask [type=included|excluded] [storagetype=volatile|nonvolatile] Parameters view Specifies the name of the view, up to 32 alphanumeric characters. subtree Specifies the view subtree view. Options are: OID A numeric value in hexadecimal format. text Text name of the view. mask Specifies the subtree mask, in hexadecimal format. type Specifies the view type.
Chapter 20: SNMPv3 Commands Examples The following command modifies the view called “internet1.” The subtree is set to the Internet MIBs and the view type is included. set snmpv3 view=internet1 subtree=internet type=included The following command modifies the view called system. The subtree is set to 1.3.6.1.2.1 (System MIBs) and the view type is excluded. set snmpv3 view=system subtree=1.3.6.1.2.
AT-S63 Management Software Command Line Interface User’s Guide SHOW SNMPV3 ACCESS Syntax show snmpv3 access=access Parameter access Specifies an SNMPv3 Access Table entry. Description This command displays the SNMPv3 Access Table. You can display one or all of the table entries. Examples The following command displays the SNMPv3 Access Table entry called “production.
Chapter 20: SNMPv3 Commands SHOW SNMPV3 COMMUNITY Syntax show snmpv3 community index=index Parameter index Specifies the name of this SNMPv3 Community Table entry, up to 32 alphanumeric characters. Description This command displays the SNMPv3 Community Table. You can display one or all of the SNMPv3 Community Table entries.
AT-S63 Management Software Command Line Interface User’s Guide SHOW SNMPv3 GROUP Syntax show snmpv3 group username=username [securitymodel=v1|v2c|v3] Parameter username Specifies a user name configured in the SNMPv3 User Table. securitymodel Specifies the security model of the above user name. The options are: v1 Associates the Security Name, or User Name, with the SNMPv1 protocol. v2c Associates the Security Name, or User Name, with the SNMPv2c protocol.
Chapter 20: SNMPv3 Commands SHOW SNMPV3 NOTIFY Syntax show snmpv3 notify=notify Parameter notify Specifies an SNMPv3 Notify Table entry. Description This command displays SNMPv3 Notify Table entries. You can display one or all of the table entries.
AT-S63 Management Software Command Line Interface User’s Guide SHOW SNMPV3 TARGETADDR Syntax show snmpv3 targetaddr=targetaddr Parameter targetaddr Specifies an SNMPv3 Target Address Table entry. Description This command displays SNMPv3 Target Address Table entries. You can display one or all of the table entries.
Chapter 20: SNMPv3 Commands SHOW SNMPV3 TARGETPARAMS Syntax show snmpv3 targetparams=targetparams Parameter targetparams Specifies an SNMPv3 Target Parameters Table entry. Description This command displays SNMPv3 Target Parameters Table entries. You can display one or all of the table entries.
AT-S63 Management Software Command Line Interface User’s Guide SHOW SNMPV3 USER Syntax show snmpv3 user=user Parameters user Specifies the name of an SNMPv3 user, up to 32 alphanumeric characters. Description This command displays SNMPv3 User Table entries. You can display one or all of the table entries.
Chapter 20: SNMPv3 Commands SHOW SNMPV3 VIEW Syntax show snmpv3 view=view [subtree=OID|text] Parameter view Specifies an SNMPv3 View Table entry. subtree Specifies the view subtree view. Options are: OID A numeric value in hexadecimal format. text Text name of the view. Description This command displays the SNMPv3 View Table entries. You can display one or all of the table entries.
Chapter 21 VLANs and Multiple VLAN Mode Commands This chapter contains the following commands: ❑ “ADD VLAN” on page 304 ❑ “CREATE VLAN” on page 307 ❑ “DELETE VLAN” on page 311 ❑ “DESTROY VLAN” on page 314 ❑ “SET SWITCH INFILTERING” on page 315 ❑ “SET SWITCH MANAGEMENTVLAN” on page 316 ❑ “SET SWITCH VLANMODE” on page 317 ❑ “SET VLAN” on page 319 ❑ “SHOW VLAN” on page 320 Note Remember to use the SAVE CONFIGURATION command to save your changes on the switch.
Chapter 21: VLANs and Multiple VLAN Mode Commands ADD VLAN Syntax 1 add vlan=name [vid=vid] port=ports|all frame=untagged|tagged Syntax 2 add vlan=name [vid=vid] taggedports=ports|all untaggedports=ports|all Parameters vlan Specifies the name of the VLAN you want to modify. The name can be from 1 to 20 characters in length. vid Specifies the VID of the VLAN you want to modify. This parameter is optional. port Specifies the ports to be added to the VLAN.
AT-S63 Management Software Command Line Interface User’s Guide Note When a transceiver is inserted into an uplink slot and a link is established, that slot becomes a primary uplink port and the corresponding backup port, 23R or 24R, automatically transitions to redundant uplink status. Any VLAN settings remain intact when the backup port makes the transition to a redundant uplink state. This command has two syntaxes. You can use either command to add ports to a VLAN.
Chapter 21: VLANs and Multiple VLAN Mode Commands Adding both tagged and untagged ports to a VLAN using Syntax 1 takes two commands, one command for each port type.
AT-S63 Management Software Command Line Interface User’s Guide CREATE VLAN Syntax 1 create vlan=name vid=vid port=ports|all frame=untagged|tagged Syntax 2 create vlan=name vid=vid taggedports=ports|all untaggedports=ports|all Parameters vlan Specifies the name of the VLAN. You must assign a name to a VLAN. The name can be from 1 to 20 characters in length and should reflect the function of the nodes that will be a part of the VLAN (for example, Sales or Accounting).
Chapter 21: VLANs and Multiple VLAN Mode Commands port Specifies the ports on the switch that are either tagged or untagged members of the new VLAN. You can specify the ports individually (for example, 5, 7, 22), as a range (for example, 18-23), or both (for example, 1, 5, 14-22). To specify all ports on the switch, use ALL. This parameter must be followed by the FRAME parameter. frame Specifies whether the ports of the VLAN are to be tagged or untagged.
AT-S63 Management Software Command Line Interface User’s Guide Tagged ports of the new VLAN remain as tagged and untagged members of their current VLAN assignments. No change is made to a tagged port’s current VLAN assignments, other than its addition to the new VLAN. This is because a tagged port can belong to more than one VLAN at a time. For example, if you add port 6 as a tagged port to a new VLAN, port 6 remains a member of its other current untagged and tagged VLAN assignments.
Chapter 21: VLANs and Multiple VLAN Mode Commands The advantage of Syntax 2 over Syntax 1 is that you can create VLANs containing both types of ports with one rather than two commands.
AT-S63 Management Software Command Line Interface User’s Guide DELETE VLAN Syntax 1 delete vlan=name [vid=vid] port=ports frame=untagged|tagged Syntax 2 delete vlan=name [vid=vid] taggedports=ports untaggedports=ports Parameters vlan Specifies the name of the VLAN to be modified. vid Specifies the VID of the VLAN to be modified. This parameter is optional. port Specifies the ports to be removed from the VLAN. This parameter must be used with the FRAME parameter.
Chapter 21: VLANs and Multiple VLAN Mode Commands Note You cannot change a VLAN’s name or VID. When you remove an untagged port from a VLAN, the following happens: ❑ The port is returned to the Default_VLAN as an untagged port. ❑ If the port is also a tagged member of other VLANS, those VLAN assignments are not changed. The port remains a tagged member of the other VLANs. For example, if you remove Port 4 from a VLAN, the port is automatically returned as an untagged port to the Default VLAN.
AT-S63 Management Software Command Line Interface User’s Guide delete vlan=Service port=6-8 frame=untagged Using Syntax 2, you can do the whole thing with just one command: delete vlan=Service untaggedports=6-8 taggedports=2 313
Chapter 21: VLANs and Multiple VLAN Mode Commands DESTROY VLAN Syntax destroy vlan vlan=name|all [vid=vid] Parameters vlan Specifies the name of the VLAN to be deleted. To delete all VLANs, use the ALL option. vid Specifies the VID of the VLAN to be deleted. This parameter is optional. Description When the switch is operating in the user-configured VLAN mode, you can use this command to delete port-based and tagged VLANs from a switch.
AT-S63 Management Software Command Line Interface User’s Guide SET SWITCH INFILTERING Syntax set switch infiltering=yes|no|on|off|true|false Parameters infiltering Specifies the operating status of ingress filtering. The options are: yes, on, true no, off, false Activates ingress filtering. The options are equivalent. This is the default. Deactivates ingress filtering. The options are equivalent. Description This command controls the status of ingress filtering.
Chapter 21: VLANs and Multiple VLAN Mode Commands SET SWITCH MANAGEMENTVLAN Syntax set switch managementvlan=name|VID Parameter managementvlan Specifies the management VLAN. You can specify the VLAN by name or by its VID. You can specify only one management VLAN. The default management VLAN is Default_VLAN (VID 1). Description This command sets the management VLAN. The switch uses this VLAN to watch for management packets from Telnet and web browser management sessions.
AT-S63 Management Software Command Line Interface User’s Guide SET SWITCH VLANMODE Syntax set switch vlanmode=userconfig|dotqmultiple| multiple [uplinkport=port] Parameters vlanmode uplinkport Controls the switch’s VLAN mode. Options are: userconfig This mode allows you to create your own port-based and tagged VLANs. This is the default setting. dotqmultiple This option configures the switch for the 802.1Q-compliant multiple VLAN mode. multiple This option configures the switch for the non-802.
Chapter 21: VLANs and Multiple VLAN Mode Commands The following command sets the switch so that you can create your own port-based and tagged VLANs: set switch vlanmode=userconfig 318
AT-S63 Management Software Command Line Interface User’s Guide SET VLAN Syntax set vlan=name [vid=vid] type=portbased Parameter vlan Specifies the name of the dynamic GVRP VLAN you want to convert into a static VLAN. To view VLAN names, refer to “SHOW VLAN” on page 320. vid Specifies the VID of the dynamic VLAN. To view VIDs, refer to “SHOW VLAN” on page 320. This parameter is optional. type Specifies the type of static VLAN to which the dynamic VLAN is to be converted.
Chapter 21: VLANs and Multiple VLAN Mode Commands SHOW VLAN Syntax show vlan[=name|vid] Parameter vlan Specifies the name or VID of the VLAN.
Chapter 22 GARP VLAN Registration Protocol Commands This chapter contains the following commands: ❑ “DISABLE GARP” on page 322 ❑ “ENABLE GARP” on page 323 ❑ “PURGE GARP” on page 324 ❑ “SET GARP PORT” on page 325 ❑ “SET GARP TIMER” on page 326 ❑ “SHOW GARP” on page 328 ❑ “SHOW GARP COUNTER” on page 329 ❑ “SHOW GARP DATABASE” on page 331 ❑ “SHOW GARP GIP” on page 332 ❑ “SHOW GARP MACHINE” on page 333 Note Remember to save your changes with the SAVE CONFIGURATION command.
Chapter 22: GARP VLAN Registration Protocol Commands DISABLE GARP Syntax disable garp=gvrp [gip] Parameters garp Specifies the GARP application you want to disable. The only GARP application supported by AT-S63 management software is GVRP. gip Disables GARP Information Propagation (GIP). Note The online help for this command contains an STP option. The option is not supported. Description This command disables GVRP on the switch.
AT-S63 Management Software Command Line Interface User’s Guide ENABLE GARP Syntax enable garp=gvrp [gip] Parameters garp Specifies the GARP application you want to enable. The only GARP application supported by AT-S63 management software is GVRP. gip Enables GARP Information Propagation (GIP). Note The online help for this command contains an STP option. This option is not supported. Description This command enables GVRP on the switch.
Chapter 22: GARP VLAN Registration Protocol Commands PURGE GARP Syntax purge garp=gvrp Parameter garp Specifies the GARP application you want to reset. The only GARP application supported by AT-S63 management software is GVRP. Note The online help for this command contains an STP option. This option is not supported. Description This command disables GVRP and returns all GVRP parameters to their default settings. All GVRP-related statistics counters are returned to zero.
AT-S63 Management Software Command Line Interface User’s Guide SET GARP PORT Syntax set garp=gvrp port=port mode=normal|none Parameters garp Specifies the GARP application you want to configure. The only GARP application supported by AT-S63 management software is GVRP. port Specifies the port you want to configure on the switch. You can specify more than one port at a time. mode Specifies the GVRP mode of the port. Modes are: normal The port will participate in GVRP.
Chapter 22: GARP VLAN Registration Protocol Commands SET GARP TIMER Syntax set garp=gvrp timer [default] [jointime=value] [leavetime=value] [leavealltime=value] Parameters garp Specifies the GARP application you want to configure. The only GARP application supported by AT-S63 management software is GVRP. default Returns the GARP timers to their default settings. jointime Specifies the Join Timer in centi seconds, which are one hundredths of a second. The default is 20 centi seconds.
AT-S63 Management Software Command Line Interface User’s Guide Examples The following command sets the Join Period timer to 0.1 second, Leave Period timer to 0.
Chapter 22: GARP VLAN Registration Protocol Commands SHOW GARP Syntax show garp=gvrp Parameter garp Specifies the GARP application you want to display. The only GARP application supported by AT-S63 management software is GVRP. Note The online help for this command contains an STP option. This option is not supported.
AT-S63 Management Software Command Line Interface User’s Guide SHOW GARP COUNTER Syntax show garp=gvrp counter Parameter garp Specifies the GARP application you want to display. The only GARP application supported by AT-S63 management software is GVRP. Note The online help for this command contains an STP option. This option is not supported.
Chapter 22: GARP VLAN Registration Protocol Commands ❑ Receive GARP Messages: JoinIn ❑ Transmit GARP Messages: JoinIn ❑ Receive GARP Messages: LeaveEmpty ❑ Transmit GARP Messages: LeaveEmpty ❑ Receive GARP Messages: LeaveIn ❑ Transmit GARP Messages: LeaveIn ❑ Receive GARP Messages: Empty ❑ Transmit GARP Messages: Empty ❑ Receive GARP Messages: Bad Message ❑ Receive GARP Messages: Bad Attribute Example The following command displays information for all GARP application counters: show garp=gvrp counter 330
AT-S63 Management Software Command Line Interface User’s Guide SHOW GARP DATABASE Syntax show garp=gvrp database Parameters garp Specifies the GARP application you want to display. The only GARP application supported by AT-S63 management software is GVRP. Note The online help for this command contains an STP option. This option is not supported. Description This command displays the following parameters for the internal database for the GARP application.
Chapter 22: GARP VLAN Registration Protocol Commands SHOW GARP GIP Syntax show garp=gvrp gip Parameter garp Specifies the GARP application you want to display. The only GARP application supported by AT-S63 management software is GVRP. Note The online help for this command contains an STP option. This option is not supported.
AT-S63 Management Software Command Line Interface User’s Guide SHOW GARP MACHINE Syntax show garp=gvrp machine Parameter garp Specifies the GARP application you want to display. The only GARP application supported by AT-S63 management software is GVRP. Note The online help for this command contains an STP option. This option is not supported. Description This command displays the following parameters for the GID state machines for the GARP application.
Chapter 22: GARP VLAN Registration Protocol Commands 334
Chapter 23 Protected Ports VLAN Commands This chapter contains the following commands: ❑ “ADD VLAN GROUP” on page 336 ❑ “CREATE VLAN PORTPROTECTED” on page 339 ❑ “DELETE VLAN” on page 340 ❑ “DESTROY VLAN” on page 342 ❑ “SET VLAN” on page 343 ❑ “SHOW VLAN” on page 344 Note Remember to save your changes with the SAVE CONFIGURATION command. Note For background information on protected ports VLANs, refer to Chapter 22, “Protected Ports VLANs” in the AT-S63 Management Software Menus Interface User’s Guide.
Chapter 23: Protected Ports VLAN Commands ADD VLAN GROUP Syntax 1 add vlan=name|vid ports=ports frame=tagged|untagged group=uplink|1..256 Syntax 2 add vlan=name|vid [taggedports=ports] [untaggedports=ports] group=uplink|1..256 Parameters vlan Specifies the name or VID of the protected ports VLAN where ports are to be added. You can identify the VLAN by either its name or VID. ports Specifies the uplink port(s) or the ports of a group.
AT-S63 Management Software Command Line Interface User’s Guide Note the following before using this command: ❑ You must first create the protected ports VLAN by giving it a name and a VID before you can add ports. Creating a VLAN is accomplished with “CREATE VLAN PORTPROTECTED” on page 339. ❑ Both command syntaxes perform the same function. The difference is that with syntax 1 you can add ports of only one type, tagged or untagged, at a time. With syntax 2, you can add both at the same time.
Chapter 23: Protected Ports VLAN Commands The following command does the same thing using Syntax 2: add vlan=InternetGroups untaggedports=5,6 group=4 338
AT-S63 Management Software Command Line Interface User’s Guide CREATE VLAN PORTPROTECTED Syntax create vlan=name vid=vid portprotected Parameters vlan Specifies the name of the new protected ports VLAN. The name can be from one to fifteen alphanumeric characters in length. The name should reflect the function of the nodes that will be a part of the protected ports VLAN (for example, InternetGroups). The name cannot contain spaces or special characters, such as an asterisk (*) or exclamation point (!).
Chapter 23: Protected Ports VLAN Commands DELETE VLAN Syntax 1 delete vlan=name|vid ports=ports frame=tagged|untagged Syntax 2 delete vlan=name|vid [taggedports=ports] [untaggedports=ports] Parameters vlan Specifies the name or VID of the VLAN to be modified. You can specify the VLAN by its name or VID. port Specifies the port to be removed from the VLAN. You can specify more than one port at a time. This parameter must be used with the FRAME parameter.
AT-S63 Management Software Command Line Interface User’s Guide Examples The following command uses Syntax 1 to delete untagged port 12 from the InternetGroups VLAN: delete vlan=InternetGroups port=12 frame=untagged The following command accomplishes the same thing using Syntax 2: delete vlan=InternetGroups untagged=12 341
Chapter 23: Protected Ports VLAN Commands DESTROY VLAN Syntax destroy vlan=name|vid|all Parameters vlan Specifies the name or VID of the VLAN to be destroyed. To delete all tagged, port-based, and protected ports VLANs on the switch, use the ALL option. Description This command deletes VLANs from the switch. You can use this command to delete tagged, port-based, and protected port VLANs. All untagged ports in a deleted VLAN are automatically returned to the Default_VLAN.
AT-S63 Management Software Command Line Interface User’s Guide SET VLAN Syntax set vlan=name|vid port=ports frame=tagged|untagged Parameters vlan Specifies the name or VID of the VLAN to be modified. ports Specifies the port whose VLAN type is to be changed. You can specify more than one port at a time. You can specify the ports individually (for example, 5, 7, 22), as a range (for example, 18-22), or both (for example, 1, 5, 14-22). frame Identifies the new VLAN type for the port.
Chapter 23: Protected Ports VLAN Commands SHOW VLAN Syntax show vlan[=name|vid] Parameter vlan Specifies the name or VID of the VLAN you want to view. Omitting this displays all VLANs. Description This command displays information about the VLANs on the switch. The information includes the names and VIDs of the VLANs, and the tagged and untagged port members. If you are displaying a protected ports VLAN, the information also includes the group and port associations.
Chapter 24 Statistics Commands This chapter contains the following commands: ❑ “RESET SWITCH PORT COUNTER” on page 346 ❑ “SHOW SWITCH COUNTER” on page 347 ❑ “SHOW SWITCH PORT COUNTER” on page 348 Note Remember to save your changes with the SAVE CONFIGURATION command.
Chapter 24: Statistics Commands RESET SWITCH PORT COUNTER Syntax reset switch port=port counter Parameter port Specifies the port whose statistics counters you want to return to zero. You can specify more than one port at a time. You can specify the ports individually (for example, 5,7,22), as a range (for example, 18-23), or both (for example, 1,5,14-22). Description This command returns a port’s statistics counters to zero.
AT-S63 Management Software Command Line Interface User’s Guide SHOW SWITCH COUNTER Syntax show switch counter Parameters None. Description This command displays operating statistics, such as the number of packets received and transmitted, and the number of CRC errors, for the entire switch. For a list of and definitions for the statistics, refer to Chapter 3, “Basic Switch Parameters” in the AT-S63 Management Software Menus Interface User’s Guide.
Chapter 24: Statistics Commands SHOW SWITCH PORT COUNTER Syntax show switch port=port counter Parameter port Specifies the port whose statistics you want to view. You can specify more than one port at a time. To view all ports, do not specify a port. Description This command displays the operating statistics for a port on the switch. Examples of the statistics include the number of packets transmitted and received, and the number of CRC errors.
Chapter 25 Port Security Commands This chapter contains the following command: ❑ “SET SWITCH PORT INTRUSION” on page 350 ❑ “SET SWITCH PORT SECURITYMODE” on page 351 ❑ “SHOW SWITCH PORT INTRUSION” on page 354 ❑ “SHOW SWITCH PORT SECURITYMODE” on page 355 Note Remember to save your changes with the SAVE CONFIGURATION command. Note For background information on port security, refer to Chapter 23, “Port Security” in the AT-S63 Management Software Menus Interface User’s Guide.
Chapter 25: Port Security Commands SET SWITCH PORT INTRUSION Syntax set switch port=port intrusion=discard|trap|disable Parameters port Specifies the port where you want to change the intrusion action. You can specify more than one port at a time. You can specify the ports individually (for example, 5,7,22), as a range (for example, 18-23), or both (for example, 1,5,14-22). Description This command changes the security intrusion action on a port.
AT-S63 Management Software Command Line Interface User’s Guide SET SWITCH PORT SECURITYMODE Syntax set switch port=port [securitymode=automatic|limited|secured|locked] [intrusionaction=discard|trap|disable] [learn=value] [participate=yes|no|on|off|true|false] Parameters port Specifies the port where you want to set security. You can specify more than one port at a time.You can specify the ports individually (for example, 5,7,22), as a range (for example, 18-23), or both (for example, 1,5,14-22).
Chapter 25: Port Security Commands intrusionaction Specifies the action taken by the port in the event port security is violated. This parameter applies only to the Limited security mode. Intrusion actions are: discard Discards invalid frames. This is the default setting. trap Discards invalid frames and sends a management trap. disable Discards invalid frames, sends a management trap, and disables the port. learn Specifies the maximum number of dynamic MAC addresses a port on the switch can learn.
AT-S63 Management Software Command Line Interface User’s Guide The management software displays a confirmation prompt whenever you perform this command. Responding with Y for yes completes your command, while N for no cancels the command. Examples The following command sets the security level for port 8 to the Limited mode and specifies a limit of 5 dynamic MAC addresses.
Chapter 25: Port Security Commands SHOW SWITCH PORT INTRUSION Syntax show switch port=port intrusion Parameter port Specifies the port where you want to view the number of intrusions that have occurred. You can specify more than one port at a time. Description This command displays the number of times a port has detected an intrusion violation.
AT-S63 Management Software Command Line Interface User’s Guide SHOW SWITCH PORT SECURITYMODE Syntax show switch port=port securitymode Parameters port Specifies the port whose security mode settings you want to view. You can specify the ports individually (for example, 5,7,22), as a range (for example, 18-23), or both (for example, 1,5,14-22). Description This command displays the security mode settings for the ports on the switch.
Chapter 25: Port Security Commands 356
Chapter 26 Management ACL Commands This chapter contains the following commands: ❑ “ADD MGMTACL” on page 358 ❑ “DELETE MGMTACL” on page 361 ❑ “DISABLE MGMTACL” on page 362 ❑ “ENABLE MGMTACL” on page 363 ❑ “SET MGMTACL STATE” on page 364 ❑ “SHOW MGMTACL” on page 365 Note Remember to save your changes with the SAVE CONFIGURATION command. Note For background information on the Management ACL, refer to Chapter 19, “Port-based and Tagged VLANs” in the AT-S63 Management Software Menus Interface User’s Guide.
Chapter 26: Management ACL Commands ADD MGMTACL Syntax add mgmtacl ipddress=ipaddress mask=string protocol=tcp|udp|all interface=telnet|web|all Parameters ipaddress Specifies the IP address of a specific management station or of a subnet. mask Specifies the mask used by the switch to filter the IP address. A binary “1” indicates the switch should filter on the corresponding bit of the address, while a “0” indicates that it should not.
AT-S63 Management Software Command Line Interface User’s Guide Description This command adds an access control entry to the Management ACL. There can be up to 256 ACEs in a Management ACL. An ACE is an implicit “permit” statement. A workstation that meets the criteria of the ACE will be allowed to remotely manage the switch. The IPADDRESS parameter specifies the IP address of a specific management station or a subnet. The MASK parameter indicates the parts of the IP address the switch should filter on.
Chapter 26: Management ACL Commands The following command allows all management stations in the Class A subnet 169.24.144.128 to manage the switch using a Telnet protocol application: add mgmtacl ipaddress=169.24.144.128 mask=255.255.255.
AT-S63 Management Software Command Line Interface User’s Guide DELETE MGMTACL Syntax delete mgmtacl ipaddress=ipaddress mask=string protocol=tcp|udp|all interface=telnet|web|all Parameters ipaddress Specifies the IP address to be deleted. mask Specifies the mask of the IP address. protocol Specifies the protocol of the management packets. The options are: interface tcp Transmission control protocol. udp User datagram protocol. all Both TCP and UDP packets.
Chapter 26: Management ACL Commands DISABLE MGMTACL Syntax disable mgmtacl Parameters None Description This command disables the management ACL and performs the same function as the SETMGMTALL STATE=DISABLE command.
AT-S63 Management Software Command Line Interface User’s Guide ENABLE MGMTACL Syntax enable mgmtacl Parameters None Description This command enables the management ACL and performs the same function as the SETMGMTALL STATE=DISABLE command. Note Activating the Management ACL without entering any access control entries (ACEs) prohibits you from remotely managing the switch from a Telnet or web browser management session.
Chapter 26: Management ACL Commands SET MGMTACL STATE Syntax set mgmtacl state=disable|enable Parameters state Sets the state of the Management ACL. The options are: enable Enables the Management ACL. disable Disables the Management ACL. This is the default setting. Description This command enables or disables the Management ACL.
AT-S63 Management Software Command Line Interface User’s Guide SHOW MGMTACL Syntax show mgmtacl state|entries Parameters state Displays the status of the Management ACL as either enabled or disabled. entries Lists the entries in the Management ACL. Description This command shows the state of and/or entries in the Management ACL.
Chapter 26: Management ACL Commands 366
Chapter 27 Web Server Commands This chapter contains the following commands: ❑ “DISABLE HTTP SERVER” on page 368 ❑ “ENABLE HTTP SERVER” on page 369 ❑ “PURGE HTTP SERVER” on page 370 ❑ “SET HTTP SERVER” on page 371 ❑ “SHOW HTTP SERVER” on page 376 Note Remember to use the SAVE CONFIGURATION command to save your changes.
Chapter 27: Web Server Commands DISABLE HTTP SERVER Syntax disable http server Parameters None. Description This command disables the web server on the switch. When the server is disabled, you cannot manage the switch from a web browser. To view the current status of the web server, see “SHOW HTTP SERVER” on page 376.
AT-S63 Management Software Command Line Interface User’s Guide ENABLE HTTP SERVER Syntax enable http server Parameters None. Description This command activates the web server on the switch. Activating the server allows you to manage the unit from a web browser. To view the current status of the web server, see “SHOW HTTP SERVER” on page 376.
Chapter 27: Web Server Commands PURGE HTTP SERVER Syntax purge http server Parameters None. Description This command resets the HTTP server to its default values. Refer to Appendix A, “AT-S63 Default Settings” in the AT-S63 Management Software Menus Interface User’s Guide or in the AT-S63 Management Software Web Browser Interface User’s Guide. To view the current web server settings, refer to “SHOW HTTP SERVER” on page 376.
AT-S63 Management Software Command Line Interface User’s Guide SET HTTP SERVER Syntax set http server [security=enabled|disabled] [sslkeyid=keyid] [port=port] Parameters security Specifies the security mode of the web server. The options are: enabled Specifies that the web server is to function in the secure HTTPS mode. disabled Specifies that the web server is to function in the non-secure HTTP mode. This is the default. sslkeyid Specifies a key pair ID.
Chapter 27: Web Server Commands set http server security=disabled The following command configures the web server for the secure HTTPS mode. It specifies the key pair ID as 5. Since no port is specified, the default HTTPS port 443 is used: set http server security=enabled sslkeyid=5 General Configuration Steps for a Self-signed Certificate Below are the steps to configuring the switch’s web server for a selfsigned certificate using the command line commands: 1. Set the switch’s date and time.
AT-S63 Management Software Command Line Interface User’s Guide add pki certificate="Switch 12 certificate" location=Sw12cert.cer 4. This command disables the web server: disable http server 5. This command configures the web server by activating HTTPS and specifying the encryption key pair created in step 1: set http server security=enabled sslkeyid=4 6.
Chapter 27: Web Server Commands The following is an example of the command sequence for configuring the web server for CA certificates. It explains how to create an encryption key and enrollment request, and how to download the CA certificates on the switch. (The example does not include step 1, setting the system time, nor the procedure for submitting the request to a CA, which will vary depending on the enrollment requirements of the CA.) 1.
AT-S63 Management Software Command Line Interface User’s Guide 9.
Chapter 27: Web Server Commands SHOW HTTP SERVER Syntax show http server Parameters None.
Chapter 28 Encryption Key Commands This chapter contains the following commands: ❑ “CREATE ENCO KEY” on page 378 ❑ “DESTROY ENCO KEY” on page 382 ❑ “SET ENCO KEY” on page 383 ❑ “SHOW ENCO” on page 384 Note Remember to save your changes with the SAVE CONFIGURATION command. Note The feature is not available in all versions of the AT-S63 management software. Contact your Allied Telesyn sales representative to determine if this feature is available in your locale.
Chapter 28: Encryption Key Commands CREATE ENCO KEY Syntax 1 create enco key=key-id type=rsa length=value [description="description"] Syntax 2 create enco key=key-id type=rsa [description="description"] [file=filename.key] [format=hex|ssh|ssh2] Parameters 378 key Specifies a key ID. The range is 0 to 65,535. The default is 0. When creating a new key this value must be unique from all other key IDs on the switch. type Specifies the type of key, which can only be a random RSA key.
AT-S63 Management Software Command Line Interface User’s Guide hex Specifies a hexadecimal format used to transfer a key between devices other than switches. This is the default. ssh Specifies a format for Secure Shell version 1 users. ssh2 Specifies a format for Secure Shell version 2 users. Description This command serves two functions. One is to create encryption keys. The other is to import and export public encryption keys from the AT-S63 file system to the key database.
Chapter 28: Encryption Key Commands server key is 768 bits and the recommended length for the host key is 1024 bits. The DESCRIPTION parameter is optional. You can use it to add a description to the key. This can help you identify the different keys on the switch. The description can be up to forty alphanumeric characters. It must be enclosed in quotes and spaces are allowed.
AT-S63 Management Software Command Line Interface User’s Guide If you are exporting a public key from the key database to the file system, the KEY parameter should specify the ID of the key that you want to export. Only the public key of a key pair is exported to the file system. You cannot export a private key. The TYPE parameter specifies the type of key to be imported or exported. The only option is RSA. The FILE parameter specifies the filename of the encryption key. The filename must include the “.
Chapter 28: Encryption Key Commands DESTROY ENCO KEY Syntax destroy enco key=key-id Parameter key Specifies the ID number of the key pair to be deleted from the key database. Description This command deletes an encryption key pair from the key database. This command also deletes a key’s corresponding ”.UKF” file from the file system. After a key pair is deleted, any SSL certificate created using the public key of the key pair will be invalid and cannot be used to manage the switch.
AT-S63 Management Software Command Line Interface User’s Guide SET ENCO KEY Syntax set enco key=key-id description="description" Parameters key Specifies the ID number of the key pair whose description you want to change. description Specifies the new description of the key. The description can contain up to 25 alphanumeric characters. Spaces are allowed. The description must be enclosed in double quotes. Description This command changes the description of a key pair.
Chapter 28: Encryption Key Commands SHOW ENCO Syntax show enco key=key-id Parameters key Specifies the ID of a specific key whose information you want to display. Otherwise, all keys are displayed. Description This command displays information about encryption key pairs stored in the key database.
Chapter 29 Public Key Infrastructure (PKI) Certificate Commands This chapter contains the following commands: ❑ “ADD PKI CERTIFICATE” on page 386 ❑ “CREATE PKI CERTIFICATE” on page 388 ❑ “CREATE PKI ENROLLMENTREQUEST” on page 391 ❑ “DELETE PKI CERTIFICATE” on page 393 ❑ “PURGE PKI” on page 394 ❑ “SET PKI CERTIFICATE” on page 395 ❑ “SET PKI CERTSTORELIMIT” on page 397 ❑ “SET SYSTEM DISTINGUISHEDNAME” on page 398 ❑ “SHOW PKI” on page 399 ❑ “SHOW PKI CERTIFICATE” on page 400 Note Remember to save your changes
Chapter 29: Public Key Infrastructure (PKI) Certificate Commands ADD PKI CERTIFICATE Syntax add pki certificate="name" location="filename.cer" [trusted=yes|no|on|off|true|false] [type=ca|ee|self] Parameters certificate Specifies a name for the certificate. This is the name for the certificate as it will appear in the certificate database list. The name can up to 40 alphanumeric characters. Spaces are allowed. If the name contains spaces, it must be enclosed in double quotes.
AT-S63 Management Software Command Line Interface User’s Guide The CERTIFICATE parameter assigns the certificate a name. The name can be from 1 to 40 alphanumeric characters. Each certificate in the database should be given a unique name. The LOCATION parameter specifies the filename of the certificate as stored in the switch’s file system. When specifying the filename, be sure to include the file extension “.cer”. The TRUSTED parameter specifies whether the certificate is from a trusted CA.
Chapter 29: Public Key Infrastructure (PKI) Certificate Commands CREATE PKI CERTIFICATE Syntax create pki certificate=name keypair=key-id serialnumber=value [format=der|pem] subject="distinguished-name" Parameters certificate Specifies a name for the self-signed certificate. The name can be from one to eight alphanumeric characters. Spaces are allowed; if included, the name must be enclosed in double quotes. The management software automatically adds the “.cer” extension.
AT-S63 Management Software Command Line Interface User’s Guide After you have created a new self-signed certificate, you need to load it into the certificate database. The switch cannot use the certificate for encrypted web browser management systems until it is loaded into the database. For instructions, refer to “ADD PKI CERTIFICATE” on page 386. Note For a review of the steps to configuring the web server for a selfsigned certificate, refer to “SET HTTP SERVER” on page 371.
Chapter 29: Public Key Infrastructure (PKI) Certificate Commands with the ID 12 to create the certificate. The format is ASCII and the distinguished name is the IP address of a master switch: create pki certificate=sw12 keypair=12 serialnumber=0 format=pem subject="cn=149.11.11.11" The following command creates a self-signed certificate with a filename of “S45 cert”. The key pair used to create it has the ID 5. No format is specified, so the default binary format is used.
AT-S63 Management Software Command Line Interface User’s Guide CREATE PKI ENROLLMENTREQUEST Syntax create pki enrollmentrequest="name" keypair=key-id [format=der|pem] [type=pkcs10] Parameters enrollmentrequest Specifies a filename for the enrollment request. The filename can be from 1 to 8 alphanumeric characters. If the name contains spaces, it must be enclosed in double quotes. The management software automatically adds the “.csr” extension.
Chapter 29: Public Key Infrastructure (PKI) Certificate Commands Note For a review of the steps to configuring the web server for a CA certificate, refer to “SET HTTP SERVER” on page 371. The ENROLLMENTREQUEST parameter specifies a filename for the request. The filename can contain from 1 to 8 alphanumeric characters. If spaces are used, the name must be enclosed in quotes. The management software automatically adds the “.csr” extension.
AT-S63 Management Software Command Line Interface User’s Guide DELETE PKI CERTIFICATE Syntax delete pki certificate="name" Parameter certificate Specifies the name of the certificate you want to delete from the certificate database. The name is case sensitive. If the name contains spaces, it must be enclosed in double quotes. Wildcards are not allowed. Description This command deletes a certificate from the switch’s certificate database.
Chapter 29: Public Key Infrastructure (PKI) Certificate Commands PURGE PKI Syntax purge pki Parameters None. Description This command deletes all certificates from the certificate database and resets the certificate database storage limit to the default. This command does not delete the certificates from the file system. To delete files from the file system, refer to “DELETE FILE” on page 148.
AT-S63 Management Software Command Line Interface User’s Guide SET PKI CERTIFICATE Syntax set pki certificate="name" [trusted=yes|no|on|off|true|false] [type=ca|ee|self] Parameters certificate Specifies the certificate name whose trust or type you want to change. The name is case sensitive. If the name contains spaces, it must be enclosed in quotes. trusted Specifies whether or not the certificate is from a trusted CA.
Chapter 29: Public Key Infrastructure (PKI) Certificate Commands The TYPE parameter specifies the certificate type. If CA is specified, the switch tags this certificate as a CA certificate. If ENDENTITY or EE is specified, the switch tags the certificate to indicate that it belongs to an end entity. If SELF is specified, the switch tags the certificate as its own. The default is ENDENTITY. Note The TRUSTED and TYPE parameters have no affect on the operation of a certificate.
AT-S63 Management Software Command Line Interface User’s Guide SET PKI CERTSTORELIMIT Syntax set pki certstorelimit=value Parameter certstorelimit Specifies the maximum number of certificates that can be stored in the certificate database. The range is 12 and 256; the default is 256. Description This command sets the maximum number of certificates that can be stored in the switch’s certificate database.
Chapter 29: Public Key Infrastructure (PKI) Certificate Commands SET SYSTEM DISTINGUISHEDNAME Syntax set system distinguishedname="name" Parameter distinguishedname Specifies the distinguished name for the switch. The name must be enclosed in quotes. Description This command sets the distinguished name for the switch. The distinguished name is used to create a self signed certificate or enrollment request.
AT-S63 Management Software Command Line Interface User’s Guide SHOW PKI Syntax show pki Parameters None. Description This command displays the current setting for the maximum number of certificates the switch will allow you to store in the certificate database. To change this value, refer to “SET PKI CERTSTORELIMIT” on page 397.
Chapter 29: Public Key Infrastructure (PKI) Certificate Commands SHOW PKI CERTIFICATE Syntax show pki certificate[="name"] Parameter certificate Specifies the name of the certificate whose information you want to view. If the name contains spaces, it must be enclosed in double quotes. This parameter is case sensitive. Wildcards are not allowed. Description This command lists all of the certificates in the certificates database.
Chapter 30 Secure Sockets Layer (SSL) Commands This chapter contains the following command: ❑ “SET SSL” on page 402 ❑ “SHOW SSL” on page 403 Note Remember to save your changes with the SAVE CONFIGURATION command. Note The feature is not available in all versions of the AT-S63 management software. Contact your Allied Telesyn sales representative to determine if this feature is available in your locale.
Chapter 30: Secure Sockets Layer (SSL) Commands SET SSL Syntax set ssl [cachetimeout=value] [maxsessions=value] Parameters cachetimeout Specifies the maximum time in seconds that a session will be retained in the cache The range is 1 to 600 seconds. The default is 300 seconds. maxsessions Specifies the maximum number of sessions that will be allowed in the session resumption cache. The range is 0 to 100 sessions. The default is 50 sessions. Description This command configures the SSL parameters.
AT-S63 Management Software Command Line Interface User’s Guide SHOW SSL Syntax show ssl Parameters None.
Chapter 30: Secure Sockets Layer (SSL) Commands 404
Chapter 31 Secure Shell (SSH) Commands This chapter contains the following commands: ❑ “DISABLE SSH SERVER” on page 406 ❑ “ENABLE SSH SERVER” on page 407 ❑ “SET SSH SERVER” on page 410 ❑ “SHOW SSH” on page 412 Note Remember to save your changes with the SAVE CONFIGURATION command. Note The feature is not available in all versions of the AT-S63 management software. Contact your Allied Telesyn sales representative to determine if this feature is available in your locale.
Chapter 31: Secure Shell (SSH) Commands DISABLE SSH SERVER Syntax disable ssh server Parameters None. Description This command disables the Secure Shell server. When the Secure Shell server is disabled, connections from Secure Shell clients are not accepted. By default, the Secure Shell server is disabled.
AT-S63 Management Software Command Line Interface User’s Guide ENABLE SSH SERVER Syntax enable ssh server hostkey=key-id serverkey=key-id [expirytime=hours] [logintimeout=seconds] Parameters hostkey Specifies the ID number of the encryption key pair to function as the host key. serverkey Specifies the ID number of the encryption key pair to function as the server key. expirytime Specifies the length of time, in hours, after which the server key pair is regenerated. The range is 0 to 5 hours.
Chapter 31: Secure Shell (SSH) Commands Note Before you enable SSH, disable the Telnet management session. Otherwise, the security provided by SSH is not active. See “DISABLE TELNET” on page 37. Example The following command activates the Secure Shell server and specifies encryption key pair 0 as the host key and key pair 1 as the server key: enable ssh server hostkey=0 serverkey=1 General Configuration Steps for SSH Operation Configuring the SSH server involves several commands.
AT-S63 Management Software Command Line Interface User’s Guide Example The following is an example of the command sequence to configuring the SSH software on the server: 1. The first step is to create the two encryption key pairs. Each key must be created separately and the key lengths must be at least one increment (256 bits) apart.
Chapter 31: Secure Shell (SSH) Commands SET SSH SERVER Syntax set ssh server hostkey=key-id serverkey=key-id [expirytime=hours] [logintimeout=seconds] Parameters hostkey Specifies the ID number of the encryption key pair to function as the host key. serverkey Specifies the ID number of the encryption key pair to function as the server key. expirytime Specifies the length of time, in hours, after which the server key pair is regenerated. The range is 0 to 5 hours. Entering 0 never regenerates the key.
AT-S63 Management Software Command Line Interface User’s Guide Example The following command sets the Secure Shell server key expiry time to 1 hour: set ssh server expirytime=1 411
Chapter 31: Secure Shell (SSH) Commands SHOW SSH Syntax show ssh Parameters None.
Chapter 32 TACACS+ and RADIUS Commands This chapter contains the following commands: ❑ “ADD RADIUSSERVER” on page 414 ❑ “ADD TACACSSERVER” on page 416 ❑ “DELETE RADIUSSERVER” on page 417 ❑ “DELETE TACACSSERVER” on page 418 ❑ “DISABLE AUTHENTICATION” on page 419 ❑ “ENABLE AUTHENTICATION” on page 420 ❑ “PURGE AUTHENTICATION” on page 421 ❑ “SET AUTHENTICATION” on page 422 ❑ “SHOW AUTHENTICATION” on page 424 Note Remember to save your changes with the SAVE CONFIGURATION command.
Chapter 32: TACACS+ and RADIUS Commands ADD RADIUSSERVER Syntax add radiusserver server|ipaddress=ipaddress order=value [secret=string] [port=value] [accport=value] Parameters server ipaddress Specifies an IP address of a RADIUS server. The parameters are equivalent. order Specifies the order that the RADIUS servers are queried by the switch. This value can be from 1 to 3. The servers are queried starting with 1. secret Specifies the encryption key used for this server.
AT-S63 Management Software Command Line Interface User’s Guide add radiusserver ipaddress=149.245.22.
Chapter 32: TACACS+ and RADIUS Commands ADD TACACSSERVER Syntax add tacacsserver server|ipaddress=ipaddress order=value [secret=string] Parameters server ipaddress Specifies an IP address of a TACACS+ server. The parameters are equivalent. order Specifies the order that your TACACS+ servers are queried by the switch. You can assign order to up to 3 servers with 1 being the first server queried. secret Specifies the optional encryption key used on this server.
AT-S63 Management Software Command Line Interface User’s Guide DELETE RADIUSSERVER Syntax delete radiusserver server|ipaddress=ipaddress Parameter server ipaddress Specifies the IP address of a RADIUS server to be deleted from the management software. The parameters are equivalent. Description This command deletes the IP address of a RADIUS from your switch. Example The following command deletes the RADIUS server with the IP address 149.245.22.22: delete radiusserver ipaddress=149.245.22.
Chapter 32: TACACS+ and RADIUS Commands DELETE TACACSSERVER Syntax delete tacacsserver server|ipaddress=ipaddress Parameter server ipaddress Specifies the IP address of a TACACS+ server to be deleted from the management software. The parameters are equivalent. Description This command deletes the IP address of a TACACS+ server from your switch. Example The following command deletes the TACACS+ server with the IP address 149.245.22.20: delete tacacsserver ipaddress=149.245.22.
AT-S63 Management Software Command Line Interface User’s Guide DISABLE AUTHENTICATION Syntax disable authentication Parameters None. Description This command disables TACACS+ and RADIUS manager account authentication on your switch. When you disable authentication you retain your current authentication parameter settings. Note This command applies only to TACACS+ and RADIUS manager accounts.
Chapter 32: TACACS+ and RADIUS Commands ENABLE AUTHENTICATION Syntax enable authentication Parameters None. Description This command enables TACACS+ or RADIUS manager account authentication on your switch. To select an authenticator protocol, refer to “SET AUTHENTICATION” on page 422. Note If you are using the RADIUS authentication protocol for 802.1x Portbased Network Access Control but not for manager account authentication, you do not need to use this command.
AT-S63 Management Software Command Line Interface User’s Guide PURGE AUTHENTICATION Syntax purge authentication Parameters None. Description This command disables authentication, returns the authentication method to TACACS+, deletes any global secret, and returns the timeout value to its default setting of 10 seconds. This command does not delete the IP address or secret of any RADIUS or TACACS+ authentication servers you may have specified.
Chapter 32: TACACS+ and RADIUS Commands SET AUTHENTICATION Syntax set authentication method=tacacs|radius [secret=string] [timeout=value] Parameters method Specifies which authenticator protocol, TACACS+ or RADIUS, is to be the active protocol on the switch. secret Specifies the global encryption key that is used by the TACACS+ or RADIUS servers.
AT-S63 Management Software Command Line Interface User’s Guide The following command selects RADIUS as the authentication protocol with a global encryption key of leopard09 and a timeout of 15 seconds: set authentication method=radius secret=leopard09 timeout=15 423
Chapter 32: TACACS+ and RADIUS Commands SHOW AUTHENTICATION Syntax show authentication [=tacacs|radius] Parameters None. Description This command displays the following information about the authenticated protocols on the switch: ❑ Status - The status of your authenticated protocol: enabled or disabled. ❑ Authentication Method - The authentication protocol activated on your switch. Either TACACS+ or RADIUS protocol may be active. The TACACS+ protocol is the default.
Chapter 33 802.
Chapter 33: 802.1x Port-based Network Access Control Commands DISABLE PORTACCESS|PORTAUTH Syntax disable portaccess|portauth Note The PORTACCESS and PORTAUTH keywords are equivalent. Parameters None. Description This command disables 802.1x Port-based Network Access Control on the switch. This is the default setting. Example The following command disables 802.
AT-S63 Management Software Command Line Interface User’s Guide DISABLE RADIUSACCOUNTING Syntax disable radiusaccounting Parameters None Description This command disables RADIUS accounting on the switch. This command is equivalent to the SET RADIUSACCOUNTING STATUS=DISABLED command.
Chapter 33: 802.1x Port-based Network Access Control Commands ENABLE PORTACCESS|PORTAUTH Syntax enable portaccess|portauth Note The PORTACCESS and PORTAUTH keywords are equivalent. Parameters None. Description This command activates 802.1x Port-based Network Access Control on the switch. The default setting for this feature is disabled. Note You should activate and configure the RADIUS client software on the switch before you activate port-based access control. Refer to “SET AUTHENTICATION” on page 422.
AT-S63 Management Software Command Line Interface User’s Guide ENABLE RADIUSACCOUNTING Syntax enable radiusaccounting Parameters None Description This command enables RADIUS accounting on the switch. This command is equivalent to the SET RADIUSACCOUNTING STATUS=ENABLED command.
Chapter 33: 802.1x Port-based Network Access Control Commands SET PORTACCESS|PORTAUTH PORT ROLE=AUTHENTICATOR Syntax set portaccess|portauth port=port type|role=authenticator|none [control=auto|authorised|forceauthenticate| unauthorised|forceunauthenticate] [quietperiod=value] [txperiod=value] [reauthperiod=value] [supptimeout=value] [servertimeout|servtimeout=value] [maxreq=value] [ctrldirboth=ingress|both] Note The PORTACCESS and PORTAUTH keywords are equivalent.
AT-S63 Management Software Command Line Interface User’s Guide the network is uniquely identified by the switch by using the client's MAC address. This is the default setting. authorised or forceauthenticate Disables 802.1X port-based authentication and causes the port to transition to the authorized state without any authentication exchange required. The port transmits and receives normal traffic without 802.1X-based authentication of the client. The parameters are equivalent.
Chapter 33: 802.1x Port-based Network Access Control Commands servtimeout authentication server timeout conditions. The default value is 10 seconds. The range is 1 to 60 seconds. The parameters are equivalent. maxreq Specifies the maximum number of times that the switch retransmits an EAP Request packet to the client before it times out the authentication session. The range is 1 to 10 retransmissions and the default is 2.
AT-S63 Management Software Command Line Interface User’s Guide Examples The following command sets ports 4 to 6 to the authenticator role: set portaccess port=4-6 role=authenticator The following command sets port 7 to the authenticator role, the quiet period on the port to 30 seconds, and the server timeout period to 200 seconds: set portaccess port=7 role=authenticator quietperiod=30 servtimeout=200 The following command disables port-based access control on ports 12 and 15: set portaccess port=12,15 r
Chapter 33: 802.1x Port-based Network Access Control Commands SET PORTACCESS|PORTAUTH PORT ROLE=SUPPLICANT Syntax set portaccess|portauth port=port type|role=supplicant|none [authperiod=value] [heldperiod=value] [maxstart=value] [startperiod=value] [username|name=name] [password=password] Note The PORTACCESS and PORTAUTH keywords are equivalent. Parameters 434 port Specifies the port that you want to set to the supplicant role or whose supplicant settings you want to adjust.
AT-S63 Management Software Command Line Interface User’s Guide username name Specifies the username for the switch port. The parameters are equivalent. The port sends the name to the authentication server for verification when the port logs on to the network. The username can be from 1 to 16 alphanumeric characters (A to Z, a to z, 1 to 9). Do not use spaces or special characters, such as asterisks or exclamation points. The username is casesensitive. password Specifies the password for the switch port.
Chapter 33: 802.1x Port-based Network Access Control Commands SET RADIUSACCOUNTING Syntax set radiusaccounting [status=enabled|disabled] [serverport=value] [type=network] [trigger=start_stop|stop_only] [updateenable=enabled|disabled] [interval=value] Parameters status Activates and deactivates RADIUS accounting on the switch. The options are: enabled Activates RADIUS accounting. disabled Deactivates the feature. This is the default. serverport Specifies the UDP port for RADIUS accounting.
AT-S63 Management Software Command Line Interface User’s Guide Description RADIUS accounting is supported on those switch ports operating in the Authenticator role. The accounting information sent by the switch to a RADIUS server includes the date and time when clients log on and log off, as well as the number of packets sent and received by a switch port during a client session. This feature is disabled by default on the switch.
Chapter 33: 802.1x Port-based Network Access Control Commands SHOW PORTACCESS|PORTAUTH Syntax show portaccess|portauth config|status Note The PORTACCESS and PORTAUTH keywords are equivalent. Parameters config Displays whether port-based access control is enabled or disabled on the switch. status Displays the role and status of each port. Description Use this command to display operating information for port-based access control.
AT-S63 Management Software Command Line Interface User’s Guide SHOW PORTACCESS|PORTAUTH PORT Syntax show portaccess|portauth port=port authenticator|supplicant config|status Note The PORTACCESS and PORTAUTH keywords are equivalent. Parameters port Specifies the port whose port-based access control settings you want to view. You can specify more than one port at a time. authenticator Indicates that the port is an authenticator. supplicant Indicates that the port is a supplicant.
Chapter 33: 802.1x Port-based Network Access Control Commands SHOW RADIUSACCOUNTING Syntax show radiusaccounting Parameters None. Description Use this command to display the current parameter settings for RADIUS accounting. For an explanation of the parameters, refer to “SET RADIUSACCOUNTING” on page 436.
Chapter 34 Denial of Service (DoS) Defense Commands This chapter contains the following command: ❑ “SET DOS” on page 442 ❑ “SET DOS IPOPTION” on page 443 ❑ “SET DOS LAND” on page 445 ❑ “SET DOS PINGOFDEATH” on page 446 ❑ “SET DOS SMURF” on page 448 ❑ “SET DOS SYNFLOOD” on page 449 ❑ “SET DOS TEARDROP” on page 451 ❑ “SHOW DOS” on page 453 Note Remember to save your changes with the SAVE CONFIGURATION command.
Chapter 34: Denial of Service (DoS) Defense Commands SET DOS Syntax set dos ipaddress=ipaddress subnet=mask uplinkport=port Parameters ipaddress Specifies the IP address of one of the devices connected to the switch, preferably the lowest IP address. subnet Specifies the subnet mask of the LAN. A binary “1” indicates the switch should filter on the corresponding bit of the address, while a “0” indicates that it should not.
AT-S63 Management Software Command Line Interface User’s Guide SET DOS IPOPTION Syntax set dos ipoption port=port state=enable|disable [mirrorport=port] Parameters port Specifies the switch port on which you want to enable or disable the IP Option defense. You can specify more than one port at a time. state Specifies the state of the IP Option defense. The options are: mirrorport enable Activates the defense. disable Deactivates the defense. This is the default.
Chapter 34: Denial of Service (DoS) Defense Commands Example The following command activates the IP Options defense on ports 5, 7, and 10: set dos ipoption port=5,7,10 state=enable 444
AT-S63 Management Software Command Line Interface User’s Guide SET DOS LAND Syntax set dos land port=port state=enable|disable [mirrorport=port] Parameters port Specifies the switch port on which you want to enable or disable the Land defense. You can specify more than one port at a time. state Specifies the state of the Land defense. The options are: mirrorport enable Activates the defense. disable Deactivates the defense. This is the default. Specifies a port where invalid traffic is copied.
Chapter 34: Denial of Service (DoS) Defense Commands SET DOS PINGOFDEATH Syntax set dos pingofdeath port=port state=enable|disable [mirrorport=port] Parameters port Specifies the switch ports on which to enable or disable the Ping of Death defense. You can specify more than one port at a time. state Specifies the state of the IP Option defense. The options are: mirrorport enable Activates the defense. disable Deactivates the defense. This is the default.
AT-S63 Management Software Command Line Interface User’s Guide Note This defense mechanism requires some involvement by the switch’s CPU, though not as much as the Teardrop defense. This will not impact the forwarding of traffic between the switch ports, but it can affect the handling of CPU events, such as the processing of IGMP packets and spanning tree BPDUs.
Chapter 34: Denial of Service (DoS) Defense Commands SET DOS SMURF Syntax set dos smurf port=port state=enable|disable Parameters port Specifies the switch ports on which you want to enable or disable SMURF defense. You can select more than one port at a time. state Specifies the state of the SMURF defense. The options are: enable Activates the defense. disable Deactivates the defense. This is the default. Description This command activates and deactivates the SMURF DoS defense.
AT-S63 Management Software Command Line Interface User’s Guide SET DOS SYNFLOOD Syntax set dos synflood port=port state=enable|disable Parameters port Specifies the switch ports on which you want to enable or disable this DoS defense. You can select more than one port at a time. state Specifies the state of the DoS defense. The options are: enable Activates the defense. disable Deactivates the defense. This is the default.
Chapter 34: Denial of Service (DoS) Defense Commands Example The following command activates the defense on ports 18 to 20: set dos synflood port=18-20 state=enable 450
AT-S63 Management Software Command Line Interface User’s Guide SET DOS TEARDROP Syntax set dos teardrop port=port state=enable|disable [mirrorport=auto|port] Parameters port Specifies the switch ports on which you want to enable or disable this DoS defense. You can select more than one port at a time. state Specifies the state of the DoS defense. The options are: mirrorport enable Activates the defense. disable Deactivates the defense. This is the default.
Chapter 34: Denial of Service (DoS) Defense Commands Caution This defense is extremely CPU intensive and should be used with caution. Unrestricted use can cause a switch to halt operations if the CPU becomes overwhelmed with IP traffic. To prevent this, Allied Telesyn recommends that you activate this defense on only one port at a time, and only on a port where ingress fragments comprise only a small percentage of its total traffic.
AT-S63 Management Software Command Line Interface User’s Guide SHOW DOS Syntax 1 show dos [ipaddress] [subnet] [uplinkport] Syntax 2 show dos defense port=port state Parameters ipaddress Displays the IP address of the LAN. subnet Displays the subnet mask. uplinkport Displays the uplink port for the Land defense. defense Displays the status of a specified defense for a particular port.
Chapter 34: Denial of Service (DoS) Defense Commands show dos ipaddress subnet The following command displays the status of the SMURF defense on port 4: show dos smurf port=4 state 454
Index Numerics 802.1Q multiple VLAN mode 317 802.1x Port-based Network Access Control 436 authenticator port configuring 430 displaying 438 disabling 426 displaying 438, 439 enabling 428 supplicant port configuring 434 displaying 438 A access control authenticator port, displaying 438 supplicant port, displaying 438 access control lists. See Management ACL ACCESS SWITCH command 98 ACL.
Index BPDU 213, 232 bridge forwarding delay 200, 212, 231 bridge hello time 200, 212, 231 bridge max age 200, 212, 231 bridge priority 200 broadcast filter 112, 114 C cache timeout 402 certificate database 397 certificates name, changing 395 trust level, changing 395 CIST priority 234 Class of Service.
AT-S63 Management Software Command Line Interface User’s Guide DISABLE HTTP SERVER command 368 DISABLE IGMPSNOOPING command 184 DISABLE INTERFACE LINKTRAP command 105 DISABLE IP REMOTEASSIGN command 36 DISABLE LOG command 164 DISABLE MSTP command 228 DISABLE PORTACCESS|PORTAUTH command 426 DISABLE RADIUSACCOUNTING command 427 DISABLE RRPSNOOPING command 192 DISABLE RSTP command 209 DISABLE SNMP AUTHENTICATETRAP command 75 DISABLE SNMP command 74 DISABLE SNMP COMMUNITY command 76 DISABLE SNTP command 88 DIS
Index enabling 110, 112 force version 212, 231 forwarding delay 200, 212, 231 G GARP converting dynamic VLANs 319 counters, displaying 329 database, displaying 331 disabling 322 displaying 328 enabling 323 GID state machines 333 GIP 332 port GVRP status 325 resetting to defaults 324 timer, setting 326 gateway address displaying 61 resetting to default 42 setting default 51 GID state machines 333 GIP-connected ring 332 H head of line blocking 115 hello time 200, 212, 231 help, context-sensitive 21 HOL block
AT-S63 Management Software Command Line Interface User’s Guide MSTP activating 223 disabling 228 displaying 242 enabling 229 returning to defaults 230 setting 231 VLAN association 238 multicast router port 186 multiple VLAN mode 317 O operator password, setting 53, 56 P PING command 41 PING OF DEATH denial of service defense 446 PKI certificate database 397 PKI certificate enrollment request creating 391 downloading 154 uploading 160 PKI certificates adding 386 creating 388 deleting 393 displaying 400 down
Index PURGE GARP command 324 PURGE HTTP SERVER command 370 PURGE IP command 42 PURGE LOG command 166 PURGE MSTP command 230 PURGE PKI command 394 PURGE RSTP command 211 PURGE SNTP command 90 PURGE STP command 199 Q QoS Class of Service priority setting 180 specifying 178 configuration, displaying 182 Quality of Service.
AT-S63 Management Software Command Line Interface User’s Guide SET RADIUSACCOUNTING command 436 SET RSTP command 212 SET RSTP PORT command 216 SET SNMP COMMUNITY command 80 SET SNMPV3 ACCESS command 279 SET SNMPV3 COMMUNITY command 281 SET SNMPV3 GROUP command 283 SET SNMPV3 NOTIFY command 285 SET SNMPV3 TARGETADDR command 287 SET SNMPV3 TARGETPARAMS command 289 SET SNMPV3 VIEW command 293 SET SNTP command 92 SET SSH SERVER command 410 SET SSL command 402 SET STP command 200 SET STP PORT command 203 SET SW
Index SHOW SYSTEM command 63 SHOW TIME command 95 SHOW USER command 32 SHOW VLAN command 320, 344 slave switch 100 SMURF denial of service defense 448 SNMP disabling 74 information, displaying 82 SNMP community adding 66 creating 68 deleting 71 destroying 73 disabling 76 enabling 77, 79 modifying 80 SNMP management access 66 SNMPv3 Access Table entry clearing 249 creating 255 deleting 271 modifying 279 SNMPv3 Community Table entry clearing 251 creating 258 deleting 273 modifying 281 SNMPv3 Notify Table ent
AT-S63 Management Software Command Line Interface User’s Guide information, displaying 63 parameters, displaying 62 restarting 46 statistics counters, displaying 347 SYNFLOOD denial of service defense 449 system date displaying 95 setting 91, 93 system files downloading 154 uploading 160 system name, configuring 44, 55 system time displaying 95 setting 91, 93 converting dynamic VLANs into static 319 creating 307 deleting 311 destroying 314 displaying 320 multiple 317 VLAN ID 307 T TACACS+ server adding 4
Index 464
