User Manual

ManualsBrandsYamaha ManualsProfessional AudioL2 Switch

Yamaha L2 Switch

Intelligent L2 SWR2310 Series

Command Reference

Rev.2.04.04

Summary of content (300 pages)

PAGE 1
Yamaha L2 Switch Intelligent L2 SWR2310 Series Command Reference Rev.2.04.
PAGE 2
| Command Reference | TOC Contents Preface: Introduction ............................................................................................13 Chapter 1: How to read the command reference ...............................................14 1.1 Applicable firmware revision .....................................................................................................................14 1.2 How to read the command reference .......................................................................
PAGE 3
Command Reference | TOC | 3 4.3.5 Erase startup configuration ..........................................................................................................35 4.3.6 Copy startup configuration ..........................................................................................................35 4.3.7 Select startup config ....................................................................................................................36 4.3.8 Set description for startup config ...........
PAGE 4
| Command Reference | TOC 4.10.9 Show SNMP community information .......................................................................................58 4.10.10 Show SNMP view settings ......................................................................................................59 4.10.11 Show SNMP group settings .....................................................................................................59 4.10.12 Show SNMP user settings .................................................
PAGE 5
Command Reference | TOC | 5 4.18.3 Clear SSH host information .......................................................................................................83 4.19 E-mail notification ....................................................................................................................................84 4.19.1 SMTP e-mail server settings .....................................................................................................84 4.19.2 SMTP e-mail server name settings .....
PAGE 6
| Command Reference | TOC 4.21.15 Set whether to use the L2MS slave's zero config function ....................................................113 4.22 Snapshot .................................................................................................................................................113 4.22.1 Set snapshot function ...............................................................................................................113 4.22.
PAGE 7
Command Reference | TOC | 7 5.2.3 Set LACP logical interface ........................................................................................................140 5.2.4 Show LACP logical interface status ..........................................................................................141 5.2.5 Set LACP system priority order ................................................................................................142 5.2.6 Show LACP system priority .......................................
PAGE 8
| Command Reference | TOC 5.5.1 Set automatic recovery from errdisable state ............................................................................168 5.5.2 Show error detection function information ...............................................................................169 Chapter 6: Layer 2 functions .............................................................................170 6.1 FDB (Forwarding Data Base) ..............................................................................
PAGE 9
Command Reference | TOC | 9 6.3.21 Set MST instance for interface ................................................................................................198 6.3.22 Set interface priority for MST instance ...................................................................................198 6.3.23 Set interface path cost for MST instance .................................................................................199 6.3.24 Show MST region information ............................................
PAGE 10
| Command Reference | TOC 7.10 IPv6 ping ................................................................................................................................................221 7.10.1 IPv6 ping .................................................................................................................................221 7.10.2 Check IPv6 route .....................................................................................................................221 7.11 DNS client .........
PAGE 11
Command Reference | TOC | 11 9.1.15 Set VLAN access map filter ....................................................................................................247 9.1.16 Show VLAN access map .........................................................................................................247 9.1.17 Show VLAN access map filter ................................................................................................248 9.2 QoS (Quality of Service) ............................................
PAGE 12
| Command Reference | TOC 9.4.1 Set storm control ........................................................................................................................282 9.4.2 Show storm control reception upper limit .................................................................................283 Chapter 10: Application .....................................................................................284 10.1 Local RADIUS server ..............................................................
PAGE 13
Preface Introduction • • • • • • Unauthorized reproduction of this document in part or in whole is prohibited. The contents of this document are subject to change without notice. Yamaha disclaims all responsibility for any damages caused by loss of data or other problems resulting from the use of this product. The warranty is limited to this physical product itself. Please be aware of these points. The information contained in this document has been carefully checked and is believed to be reliable.
PAGE 14
| Command Reference | How to read the command reference Chapter 1 How to read the command reference 1.1 Applicable firmware revision This command reference applies to firmware Yamaha Intelligent L2 Switch SWR2310 of Rev.2.04.04. For the latest firmware released after printing of this command reference, manuals, and items that differ, access the following URL and see the information in the WWW server. https://www.yamaha.com/proaudio/ 1.
PAGE 15
Command Reference | How to read the command reference | 15 Interface type Prefix Description Examples LACP logical interface po Specify sa or po followed by "logical interface ID". To specify LACP logical interface #2: po2 1.4 Input syntax for commands starting with the word "no" Many commands also have a form in which the command input syntax starts with the word no.
PAGE 16
| Command Reference | How to use the commands Chapter 2 How to use the commands The SWR2310 lets you perform command operations in the following two ways. Type of operation Method of operation Description Operation via console • • • Access from a console terminal Access from a TELNET client Access from a SSH client Issue commands one by one to interactively make settings or perform operations.
PAGE 17
Command Reference | How to use the commands | 17 To make VTY port settings, use the line vty command to specify the target VTY port, and then move to line mode. ID management for virtual terminal ports is handled within the SWR2310, but since login session and ID assignments depend on the connection timing, you should normally make the same settings for all VTY ports. 2.1.3 Access from an SSH client You can use an SSH client on a computer to connect to the SSH server of the SWR2310 and control it.
PAGE 18
| Command Reference | How to use the commands Setting item Content of setting command Setting 1) is a function that temporarily applies to the user who is using the terminal, and is applied as soon as the command is executed. Setting 2) applies starting with the next session. 2.2 Operation via configuration (config) files A file containing a set of needed commands is called a configuration (config) file.
PAGE 19
Command Reference | How to use the commands | 19 If you want to restart the system automatically after applying the CONFIG file, specify the following remote path. The currently running configuration is applicable. • Remote path for applicable files (with automatic restart) Applicable configuration Currently running startup-config Applicable file Remote path Load (GET) Save (PUT) Automatic restart CONFIG file (.txt) reconfig - ✓ ✓ All settings (.
PAGE 20
| Command Reference | How to use the commands The basic commands related to moving between command input modes are described below. For commands that move from global configuration mode mode to individual configuration mode, refer to "individual configuration mode." • exit command • logout command • enable command • disable command • configure terminal command • end command 2.4.
PAGE 21
Command Reference | How to use the commands | 21 individual configuration mode Transition command Prompt L2MS mode l2ms configuration command SWR2310(config-l2ms)# LLDP agent mode lldp-agent command SWR2310(lldp-agent)# E-mail template mode mail template command SWR2310(config-mail)# RADIUS configuration mode radius-server local-profile command SWR2310(config-radius)# 2.4.3 Command prompt prefix he command prompt prefix indicates the host name.
PAGE 22
| Command Reference | How to use the commands • Keyboard operation Description and notes Press Esc, then D Delete from the cursor position until immediately before the first space Ctrl + K Delete from the cursor position until the end of the line Ctrl + U Delete all characters that are being entered Other Keyboard operation Description and notes Ctrl + T Exchange the character at the cursor position with the preceding character.
PAGE 23
Command Reference | How to use the commands | 23 Operation is shown below. Keyboard operation ↑ Ctrl + P ↓ Ctrl + N Description and notes Move backward through command history Move forward through command history 2.6 Commands that start with the word "show" 2.6.1 Modifiers Modifiers send the information produced by the show command through a filter, restricting the content that is shown in the screen and making it easier for you to see the desired information.
PAGE 24
| Command Reference | Configuration Chapter 3 Configuration 3.1 Manage setting values The SWR2310 uses the following configurations to manage its settings. Types of configuration Description User operations that can be performed Running configuration (running-config) Setting values currently used for operation. Managed in RAM. Note / Save to startup configuration Startup configuration (startup-config) These are the saved setting values.
PAGE 25
Command Reference | Configuration | 25 Category Setting item Default value Download URL firmware-update url http:// www.rtpro.yamaha.co.jp/firmware/ revision-up/swr2310.
PAGE 26
| Command Reference | Configuration Category Traffic control LLDP agent • Settings for the default VLAN (vlan1) • IPv4 Address : DHCP cliant • IGMP Snooping: Enable • Querier : Disable • Fast-Leave : Disable • Check TTL : Enable Setting item Default value Proprietary loop detection enabled QoS trust mode CoS Flow control (IEEE 802.
PAGE 27
Command Reference | Maintenance and operation functions | 27 Chapter 4 Maintenance and operation functions 4.1 Passwords 4.1.
PAGE 28
| Command Reference | Maintenance and operation functions [Description] Specifies the administrator password needed to enter privileged EXEC mode. If this command is executed with the "no" syntax, the administrator password is deleted. [Note] If the password was encrypted by the password-encryption command, it is shown in the configuration in the form "enable password 8 password." The user cannot enter the password in this form when making configuration settings from the command line.
PAGE 29
Command Reference | Maintenance and operation functions | 29 [Parameter] switch : Allow login by special password Setting value Description enable Allow disable Don't allow [Initial value] force-password enable [Input mode] global configuration mode [Description] Enable login with special password.
PAGE 30
| Command Reference | Maintenance and operation functions Single-type alphanumeric characters and " and ' and | and ? and single-byte symbols other than space characters (32characters or less) The first character must be a single-byte alphanumeric character [Initial value] none [Input mode] global configuration mode [Description] Sets user information. A maximum of 32 items of user information can be registered. The following words cannot be registered as user names.
PAGE 31
Command Reference | Maintenance and operation functions | 31 --------------------------------------------------------------------------------------------con 0 user1234 Login 02:15:23 vty 0 * operators1 Login 00:12:59 192.168.100.1 vty 1 abcdefghijklmnopqrstuvwxyzabcdef Login 00:00:50 192.168.100.24 vty 2 Login 00:00:21 192.168.100.10 vty 3 vty 4 vty 5 vty 6 vty 7 http 0 user1234 Login 01:12:25 192.168.100.4 http 1 (noname) Login 00:18:04 192.168.100.
PAGE 32
| Command Reference | Maintenance and operation functions SWR2310>enable SWR2310#configure terminal Enter configuration commands, one per line. SWR2310(config)#banner motd Hello World! SWR2310(config)#exit SWR2310#exit End with CNTL/Z. Username: Password: Hello World! SWR2310>enable SWR2310#configure terminal Enter configuration commands, one per line. SWR2310(config)#no banner motd SWR2310(config)#exit SWR2310#exit End with CNTL/Z. Username: Password: SWR2310 Rev.2.04.
PAGE 33
Command Reference | Maintenance and operation functions | 33 [Parameter] config_num : Configuration number Setting value Description <0-1> Startup configuration #0-#1 sd Startup config in SD card [Input mode] privileged EXEC mode, individual configuration mode [Description] Saves the current operating settings (running configuration) as the settings for startup (startup configuration). If config_num is omitted, it is saved in the startup config that was used for the current startup.
PAGE 34
| Command Reference | Maintenance and operation functions [Description] Shows the currently-operating settings (running configuration). If section is not specified, all settings are shown. [Example] Show the running configuration. SWR2310#show running-config ! interface port1.1 switchport ... ! line con 0 line vty 0 7 ! end SWR2310# 4.3.
PAGE 35
Command Reference | Maintenance and operation functions | 35 http-proxy enable ! telnet-server enable ! line con 0 line vty 0 7 ! end SWR2310# 4.3.5 Erase startup configuration [Syntax] erase startup-config [config_num] [Parameter] config_num : Configuration number Setting value Description <0-1> Startup configuration #0-#1 sd Startup config in SD card [Input mode] privileged EXEC mode [Description] Erase the settings used at startup (startup config) and the information associated with them.
PAGE 36
| Command Reference | Maintenance and operation functions [Description] Copy the startup settings (startup config) and the information associated with them. [Note] In a state in which the SD card is not mounted, executing this command on a config that is in the SD card produces an error. [Example] Copy startup config #0 to startup config #1. SWR2310#copy startup-config 0 1 Succeeded to copy configuration SWR2310# 4.3.
PAGE 37
Command Reference | Maintenance and operation functions | 37 [Description] Specify a description for the applicable startup config. If this command is executed with the "no" syntax, the description is deleted. The description is shown at the beginning of the execution result of the show startup-config command. [Example] Specify a description for startup config #1. SWR2310#startup-config description 1 TEST_CONFIG_1 4.4 Manage boot information 4.4.
PAGE 38
| Command Reference | Maintenance and operation functions SWR2310#clear boot list 4.4.3 Set SD card boot [Syntax] boot prioritize sd switch no boot prioritize sd [Parameter] switch : Enable or disable SD card boot Setting Description enable Enable SD card boot disable Disable SD card boot [Initial value] boot prioritize sd enable [Input mode] privileged EXEC mode [Description] Enable or disable the SD card boot function of the firmware. After this command is executed, the system will restart.
PAGE 39
Command Reference | Maintenance and operation functions | 39 [Description] Shows inventory information for this unit and the SFP modules. The following items are shown. Item Description NAME Name DESCR Description Vendor Vendor name PID Product ID VID Version ID, 0 if invalid SN Serial number [Example] Show inventory information. SWR2310>show inventory NAME: L2 switch DESCR: SWR2310-10G Vendor: Yamaha PID: SWR2310-10G VID: 0000 SN: S00000000 SWR2310> 4.5.
PAGE 40
| Command Reference | Maintenance and operation functions selected file: config0 Serial Baudrate: 9600 Boot time: 2020/01/01 11:13:44 +09:00 Current time: 2020/01/02 16:19:43 +09:00 Elapsed time from boot: 1days 05:06:04 Temperature status: Normal Temperature: 37 degree C SWR2310> 4.5.3 Disk usage status [Syntax] show disk-usage [Input mode] unprivileged EXEC mode, privileged EXEC mode [Description] Shows the usage status of the disk used by the system.
PAGE 41
Command Reference | Maintenance and operation functions | 41 • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • • show process show users show interface show frame-counter show vlan brief show spanning-tree mst detail show etherchannel status detail show loop-detect show mac-address-table show l2ms detail show qos queue-counters show ddm status show errdisable show auth status show auth supplicant show error port-led show ip interface brief show ip forwarding show ipv6 interface brief show ipv
PAGE 42
| Command Reference | Maintenance and operation functions [Description] Saves technical support information to the SD card. This is saved on the SD card with the following file name. /swr2310/tech-support/YYYYMMDDHHMMSS_techsupport.txt YYYYMMDDHHMMSS ... Year month day hour minute second that the command was executed [Note] The SD card must be inserted in advance. [Example] Save technical support information to the SD card. SWR2310#copy tech-support sd SWR2310# 4.6 Time management 4.6.
PAGE 43
Command Reference | Maintenance and operation functions | 43 [Initial value] clock timezone UTC [Input mode] global configuration mode [Description] Sets the time zone. If this command is executed with the "no" syntax, UTC is specified. [Example] Set the time zone to JST. SWR2310(config)#clock timezone JST Set the time zone to UTC+9 hours. SWR2310(config)#clock timezone +9:00 4.6.
PAGE 44
| Command Reference | Maintenance and operation functions [Description] Registers the address or host name of the NTP server. Up to two instances of this command can be set. If this command is executed with the "no" syntax, the NTP server setting is deleted. If time synchronization is performed with two NTP servers specified, they are queried in the order of NTP server 1 and NTP server 2 as shown by the show ntpdate command.
PAGE 45
Command Reference | Maintenance and operation functions | 45 SWR2310(config)#ntpdate interval 2 Disable periodic time synchronization. SWR2310(config)#ntpdate interval 0 4.6.7 Show NTP server time synchronization settings [Syntax] show ntpdate [Input mode] unprivileged EXEC mode, privileged EXEC mode [Description] Shows the settings that are related to time synchronization from an NTP server. [Example] Show time synchronization settings.
PAGE 46
| Command Reference | Maintenance and operation functions 4.7.2 Set VTY port and move to line mode (VTY port) [Syntax] line vty port1 [port2] no line vty port1 [port2] [Parameter] port1 : <0-7> VTY port number port2 : <0-7> Last VTY port number when specifying a range [Initial value] no line vty 0 7 [Input mode] global configuration mode [Description] After enabling the specified VTY ports, moves to line mode for making VTY port settings.
PAGE 47
Command Reference | Maintenance and operation functions | 47 [Example] Set the console timeout time to five minutes. SWR2310(config)#line con 0 SWR2310(config-line)#exec-timeout 5 0 SWR2310(config-line)# 4.7.
PAGE 48
| Command Reference | Maintenance and operation functions [Example] Change the number of lines displayed per page for the terminal in use to 100 lines. SWR2310(config)#service terminal-length 100 SWR2310(config)# 4.8 Management 4.8.1 Set management VLAN [Syntax] management interface interface no management interface [Parameter] interface : VLAN interface name [Initial value] management interface vlan1 [Input mode] global configuration mode [Description] Set the VLAN that is used for management.
PAGE 49
Command Reference | Maintenance and operation functions | 49 [Example] Set the SYSLOG server IPv4 address to 192.168.100.1. SWR2310(config)#logging host 192.168.100.1 Set the SYSLOG server IPv6 address to fe80::2a0:deff:fe11:2233. SWR2310(config)#logging host fe80::2a0:deff:fe11:2233%vlan1 4.9.2 Set log output level (debug) [Syntax] logging trap debug no logging trap debug [Initial value] no logging trap debug [Input mode] global configuration mode [Description] Output the debug level log to SYSLOG.
PAGE 50
| Command Reference | Maintenance and operation functions [Input mode] global configuration mode [Description] Outputs the error level log to SYSLOG. If this command is executed with the "no" syntax, the log is not output. [Example] Output the error level log to SYSLOG. SWR2310(config)#logging trap error 4.9.
PAGE 51
Command Reference | Maintenance and operation functions | 51 [Input mode] unprivileged EXEC mode, privileged EXEC mode [Description] Saves all logs accumulated in RAM to Flash ROM. Logs are accumulated in RAM, and are periodically backed up automatically to Flash ROM, but you can use this command to back up this data manually.
PAGE 52
| Command Reference | Maintenance and operation functions SWR2310#clear logging 4.9.10 Show log [Syntax] show logging [reverse] [Keyword] reverse : Shows the log in reverse order [Input mode] unprivileged EXEC mode, privileged EXEC mode [Description] Shows the log that records the operating status of the unit. Normally the log is shown starting with the oldest events, but the display order is reversed if "reverse" is specified. The log contains a maximum of 10,000 events.
PAGE 53
Command Reference | Maintenance and operation functions | 53 Setting value community : Description 1 Use SNMPv1 2c Use SNMPv2c 3 Use SNMPv3 Community name (maximum 32 characters) This can be specified if version is '1' or '2c' seclevel : Security level requested for authenticating the notification This can be specified only if version is '3' Setting value user : Description noauth No authentication / No encryption (noAuthNoPriv) auth Authentication / No encryption (authNoPriv) priv Aut
PAGE 54
| Command Reference | Maintenance and operation functions [Parameter] trap_type : Type of trap Setting value Description coldstart When the power is turned on/off, or when firmware is updated warmstart When reload command is executed linkdown At linkdown linkup At linkup authentication When authentication fails l2ms When L2MS slave is detected or lost errdisable When ErrorDisable is detected or canceled rmon When RMON event is executed termmonitor When terminal monitoring is detected
PAGE 55
Command Reference | Maintenance and operation functions | 55 [Example] Set the system contact to "swr2310admin@sample.com". SWR2310(config)#snmp-server contact swr2310admin@sample.com 4.10.4 Set system location [Syntax] snmp-server location location no snmp-server location [Parameter] location : Name to register as the system location (255 characters or less) [Initial value] no snmp-server location [Input mode] global configuration mode [Description] Sets the MIB variable sysLocation.
PAGE 56
| Command Reference | Maintenance and operation functions SWR2310(config)#no snmp-server community public 4.10.
PAGE 57
Command Reference | Maintenance and operation functions | 57 seclevel : Security level required of users belonging to this group Setting value Description noauth No authentication / No encryption (noAuthNoPriv) auth Authentication / No encryption (authNoPriv) priv Authentication / Encryption (authPriv) read_view : Name of the MIB view (maximum 32 characters) that can be read by users belonging to this group write_view : Name of the MIB view (maximum 32 characters) that can be written by users
PAGE 58
| Command Reference | Maintenance and operation functions priv : Encryption algorithm Setting value priv_pass : Description des DES-CBC aes AES128-CFB Encryption password (8 or more characters, maximum 32 characters) [Initial value] none [Input mode] global configuration mode [Description] Specifies a user.
PAGE 59
Command Reference | Maintenance and operation functions | 59 4.10.10 Show SNMP view settings [Syntax] show snmp view [Input mode] unprivileged EXEC mode, privileged EXEC mode [Description] Shows the contents of the SNMP view settings. Shows the view name, object ID, and type. [Example] Show the contents of the SNMP view settings. SWR2310#show snmp view SNMP View information View Name: most OID: 1.6.1 Type: include View Name: standard OID: 1.3.6.1.2.1 Type: include 4.10.
PAGE 60
| Command Reference | Maintenance and operation functions SNMP User information EngineID: 0x8000049e0300a0deaeb90e User Name: admin1 Group Name: admins Auth: sha Priv: aes User Name: user1 Group Name: users Auth: sha Priv: none 4.11 RMON 4.11.
PAGE 61
Command Reference | Maintenance and operation functions | 61 Index of the Ethernet statistical information group (etherStatsIndex) owner : Name of the Ethernet statistical information group owner (etherStatsOwner) Maximum 127 characters (if omitted : RMON_SNMP) [Initial value] none [Input mode] interface mode [Description] Enables the RMON Ethernet statistical information group setting for the applicable interface.
PAGE 62
| Command Reference | Maintenance and operation functions If this command is set, it will be possible to acquire the RMON MIB's historyControlTable. After setting this command, history information is collected at the specified interval, and the RMON MIB's etherHistoryTable can be acquired. This command can be specified a maximum number of eight times for the same interface. If this command is executed with the "no" syntax, delete the setting and the collected historical information.
PAGE 63
Command Reference | Maintenance and operation functions | 63 [Note] To enable the event group setting of the RMON function, it is necessary to enable the system-wide RMON function in addition to this command. In order for RMON to send an SNMP trap, you must have made SNMP trap transmission settings. [Example] After making SNMP trap settings, enable the RMON event group setting. Set the type of event as "log-trap", and the community name of the trap as "public". SWR2310(config)#snmp-server host 192.168.100.
PAGE 64
| Command Reference | Maintenance and operation functions Setting value Description 1 Use only upper threshold value (risingAlarm) 2 Use only lower threshold value (fallingAlarm) 3 Use both upper threshold value and lower threshold value (risingOrFallingAlarm) (if omitted : 3) owner : Name of alarm group owner (alarmOwner) maximum 127 characters (if omitted : RMON_SNMP) [Initial value] none [Input mode] global configuration mode [Description] Enables the RMON alarm group settings.
PAGE 65
Command Reference | Maintenance and operation functions | 65 If the system-wide RMON function is disabled, sampling is interrupted. Subsequently, if the system-wide RMON function is enabled, the previous sampling data is deleted, and sampling is once again started. [Example] Enable the RMON alarm group settings with the following conditions. • The MIB object to be monitored is etherStatsPkts.1. • The sampling interval is 180 seconds. • The sampling type is delta.
PAGE 66
| Command Reference | Maintenance and operation functions alarm Startup Alarm = 3 alarm Owner is RMON_SNMP 4.11.7 Show RMON Ethernet statistical information group status [Syntax] show rmon statistics [Input mode] unprivileged EXEC mode, privileged EXEC mode [Description] Shows the settings and status of the RMON Ethernet statistical information group. The following items are shown.
PAGE 67
Command Reference | Maintenance and operation functions | 67 • • • • Type of event Community name when sending trap Time of executing event Owner name [Example] SWR2310>show rmon event event Index = 1 Description RMON_SNMP Event type Log Event community name RMON_SNMP Last Time Sent = 00:00:58 Owner RMON_SNMP 4.11.10 Show RMON alarm group status [Syntax] show rmon alarm [Input mode] unprivileged EXEC mode, privileged EXEC mode [Description] Shows the settings and status of the RMON alarm group.
PAGE 68
| Command Reference | Maintenance and operation functions SWR2310(config)#interface port1.1 SWR2310(config-if)#rmon clear counters 4.12 Telnet server 4.12.
PAGE 69
Command Reference | Maintenance and operation functions | 69 4.12.3 Set host that can access the Telnet server [Syntax] telnet-server interface interface no telnet-server interface interface [Parameter] interface : VLAN interface name [Initial value] none [Input mode] global configuration mode [Description] Sets the VLAN interface that allows access to the Telnet server. If this command is executed with the "no" syntax, the specified interface is deleted.
PAGE 70
| Command Reference | Maintenance and operation functions [Description] Restrict access to the TELNET server according to the client terminal's IPv4/IPv6 address. Up to eight instances of this command can be set, and those that are specified earlier take priority for application. If this command is set, all access that does not satisfy the registered conditions is denied. However, if this command is not set, all access is permitted.
PAGE 71
Command Reference | Maintenance and operation functions | 71 Setting value Description enable Enable disable Disable [Initial value] telnet-client disable [Input mode] global configuration mode [Description] Enables use of the telnet command as a Telnet client. If this command is executed with the "no" syntax, the Telnet client is disabled. [Example] Enable the Telnet client. SWR2310(config)#telnet-client enable 4.13.
PAGE 72
| Command Reference | Maintenance and operation functions [Parameter] port : <1-65535> Listening port number of the TFTP server (if omitted: 69) [Initial value] tftp-server disable [Input mode] global configuration mode [Description] Enables the TFTP server. You can also specify the listening TCP port number. If this command is executed with the "no" syntax, the TFTP server is disabled. [Example] Start the TFTP server with 12345 as the listening port number.
PAGE 73
Command Reference | Maintenance and operation functions | 73 SWR2310(config)#tftp-server interface vlan1 SWR2310(config)#tftp-server interface vlan2 4.15 HTTP server 4.15.
PAGE 74
| Command Reference | Maintenance and operation functions To avoid a high usage rate, it is desirable to avoid access by multiple users to an automatically updated web page such as the dashboard or the LAN map. [Example] Start the secure HTTP server with 8080 as the listening port number. SWR2310(config)#http-server secure enable 8080 4.15.3 Show HTTP server settings [Syntax] show http-server [Input mode] privileged EXEC mode [Description] Shows the settings of the HTTP server.
PAGE 75
Command Reference | Maintenance and operation functions | 75 4.15.5 Restrict access to the HTTP server according to the IP address of the client [Syntax] http-server access action info no http-server access [action info] [Parameter] action : Specifies the action for the access condition Setting value info : Description deny "Deny" the condition permit "Permit" the condition Specifies the transmission-source IPv4 address or IPv6 address that is the condition. Setting value Description A.B.C.
PAGE 76
| Command Reference | Maintenance and operation functions [Parameter] min : <0-35791> Timeout time (minutes) sec : <0-2147483> Timeout time (seconds) [Initial value] http-server login-timeout 5 [Input mode] global configuration mode [Description] Specify the time until automatic logout when there has been no access to the HTTP server. If sec is omitted, 0 is specified. If this command is executed with the "no" syntax, the setting returns to the default.
PAGE 77
Command Reference | Maintenance and operation functions | 77 [Parameter] time : <1-180> Time (seconds) until timeout occurs [Initial value] http-proxy timeout 60 [Input mode] global configuration mode [Description] Specifies the timeout time when acquiring the Web GUI of an L2MS slave. If this command is executed with the "no" syntax, the setting will be 60 seconds. [Example] Set HTTP Proxy function's timeout duration to two minutes. SWR2310(config)#http-proxy timeout 120 4.16.
PAGE 78
| Command Reference | Maintenance and operation functions In order to enable the SSH server, the host key must be created in advance (ssh-server host key generate). If this command is executed with the "no" syntax, disable the SSH server. [Note] In order to log in from the SSH client, the user name and password must be registered in advance (username). [Example] Start the SSH server with 12345 as the listening port number.
PAGE 79
Command Reference | Maintenance and operation functions | 79 [Example] Allow access to the SSH server from the hosts connected to VLAN #1 and VLAN #2. SWR2310(config)#ssh-server interface vlan1 SWR2310(config)#ssh-server interface vlan2 4.17.
PAGE 80
| Command Reference | Maintenance and operation functions 4.17.5 Generate SSH server host key [Syntax] ssh-server host key generate [bit bit] [Parameter] bit : 1024, 2048 Bit length of RSA key [Initial value] none [Input mode] privileged EXEC mode [Description] Sets the host RSA key and host DSA key of the SSH server. For the RSA key, the bit parameter can be used to specify the number of bits in the generated key. The DSA key generates a 1024-bit key.
PAGE 81
Command Reference | Maintenance and operation functions | 81 If the "fingerprint" keyword is specified, the public key's key length, key fingerprint, and ASCII art are shown. [Note] Both the MD5 and SHA256 key fingerprint hash algorithms are shown. [Example] Show the public key.
PAGE 82
| Command Reference | Maintenance and operation functions | * S . . | | + B * o | | = = . . . | | o | | . | |. * * | +----[SHA256]-----+ 4.17.
PAGE 83
Command Reference | Maintenance and operation functions | 83 If the escape character is input twice in succession at the beginning of the line, the escape character is used as input to the server. If the escape character followed by a period (.) is input, the connection is forcibly closed. If the escape character followed by a question mark (?) is input, a list of escape inputs is shown. [Example] To the host at IPv4 address 192.168.100.1, connect via SSH using user name "uname" and port number 12345.
PAGE 84
| Command Reference | Maintenance and operation functions 4.19 E-mail notification 4.19.
PAGE 85
Command Reference | Maintenance and operation functions | 85 SWR2310(config)#mail server smtp 1 host smtp-server-test2.com encrypt over-ssl auth test_user test_password 4.19.
PAGE 86
| Command Reference | Maintenance and operation functions SWR2310(config)#mail notify 1 trigger lan-map 4.19.4 E-mail transmission template settings mode [Syntax] mail temlate temp-id no temlate [Parameter] temp-id : <1-10> E-mail template ID [Initial value] none [Input mode] global configuration mode [Description] Switches to the mode for setting the template used when sending e-mails. The following items can be configured after switching to template mode. Up to 10 templates can be created.
PAGE 87
Command Reference | Maintenance and operation functions | 87 (256 characters or less, single-byte alphanumeric characters and _ - . @) [Initial value] no send from [Input mode] E-mail template mode [Description] Sets the source e-mail address. [Example] Specifies “sample@test.com” as the source e-mail address for e-mail template #1. SWR2310(config)#mail template 1 SWR2310(config-mail)#send from sample@test.com 4.19.
PAGE 88
| Command Reference | Maintenance and operation functions [Note] The subject shown below will be used if this is not set. • Event notification : Notification from SWR2310 • Certificate distribution : Certification publishment • Certificate notification : Certification expiration [Example] Sets the subject to “TestMail” for e-mails sent using e-mail template #1. SWR2310(config)#mail template 1 SWR2310(config-mail)#send subject TestMail 4.19.
PAGE 89
Command Reference | Maintenance and operation functions | 89 Name : [Name] - Setting value for the NAME option in the “user” command Account : [User name] - USERID value for the “user” command MAC address : XX:XX:XX:XX:XX:XX Expire : YYYY/MM/DD --------------------------------[Example] Specifies “#1” for the template ID to use when sending RADIUS server client certificates. SWR2310(config-radius)#mail send certificate 1 4.19.
PAGE 90
| Command Reference | Maintenance and operation functions [Note] The day is displayed in descending order, regardless of the order in which it was inputted. [Example] Sets the number of days to notify beforehand about expired term of validity for RADIUS server client certificates to “50 days before” and “10 days before”. SWR2310(config-radius)#mail certificate expire-notify 50 10 4.19.
PAGE 91
Command Reference | Maintenance and operation functions | 91 [Example] Enable LLDP function transmission and reception for LAN port #1. SWR2310#configure terminal Enter configuration commands, one per line. SWR2310(config)#lldp run SWR2310(config)#interface port1.1 SWR2310(config-if)#lldp-agent SWR2310(lldp-agent)#set lldp enable txrx End with CNTL/Z. 4.20.
PAGE 92
| Command Reference | Maintenance and operation functions 4.20.4 Create LLDP agent [Syntax] lldp-agent no lldp-agent [Initial value] none [Input mode] interface mode [Description] Create an LLDP agent, and transition to LLDP agent mode. If this command is executed with the "no" syntax, delete the LLDP agent. [Note] When you delete the LLDP agent, the commands specified in LLDP agent mode are also deleted. [Example] Create an LLDP agent on port1.1, and transition to LLDP agent mode.
PAGE 93
Command Reference | Maintenance and operation functions | 93 4.20.6 Set LLDP transmission/reception mode [Syntax] set lldp enable type set lldp disable no set lldp enable [Parameter] type : Transmission/reception mode Setting value Description rxonly Set receive-only mode txonly Set transmit-only mode txrx Set transmit and receive [Initial value] set lldp disable [Input mode] LLDP agent mode [Description] Sets the LLDP frame transmission/reception mode for the applicable interface.
PAGE 94
| Command Reference | Maintenance and operation functions SWR2310(config)#lldp run SWR2310(config)#interface port1.1 SWR2310(config-if)#lldp-agent SWR2310(lldp-agent)#set management-address mac-address 4.20.8 Set basic management TLVs [Syntax] tlv-select basic-mgmt no tlv-select basic-mgmt [Initial value] none [Input mode] LLDP agent mode [Description] Adds basic management TLVs to transmitted frames.
PAGE 95
Command Reference | Maintenance and operation functions | 95 SWR2310(config-if)#lldp-agent SWR2310(lldp-agent)#tlv-select ieee-8021-org-specific 4.20.10 Set IEEE-802.3 TLV [Syntax] tlv-select ieee-8023-org-specific no tlv-select ieee-8023-org-specific [Initial value] none [Input mode] LLDP agent mode [Description] Adds IEEE-802.3 TLVs to transmitted frames. If this command is executed with the "no" syntax, exclude IEEE-802.3 TLVs from transmitted frames. This command adds the following TLVs to LLDP frames.
PAGE 96
| Command Reference | Maintenance and operation functions 4.20.12 Set LLDP frame transmission interval [Syntax] set timer msg-tx-interval tx_interval no set timer msg-tx-interval [Parameter] tx_interval : <5-3600> LLDP frame transmission interval (seconds) [Initial value] set timer msg-tx-interval 30 [Input mode] LLDP agent mode [Description] Sets LLDP frame transmission interval. If this command is executed with the "no" syntax, the setting returns to the default.
PAGE 97
Command Reference | Maintenance and operation functions | 97 [Parameter] reinit_delay : <1-10> Time from LLDP frame transmission stop until re-initialization (seconds) [Initial value] set timer reinit-delay 2 [Input mode] LLDP agent mode [Description] Sets the time from when LLDP frame transmission stops until re-initialization occurs. If this command is executed with the "no" syntax, the setting returns to the default.
PAGE 98
| Command Reference | Maintenance and operation functions [Initial value] set tx-fast-init 4 [Input mode] LLDP agent mode [Description] Sets the number of LLDP frames transmitted during the high speed transmission period. If this command is executed with the "no" syntax, the setting returns to the default. [Example] Set 2 as the number of LLDP frames transmitted during the high speed transmission period on LAN port #1. SWR2310(config)#lldp run SWR2310(config)#interface port1.
PAGE 99
Command Reference | Maintenance and operation functions | 99 Setting value Description rxonly Set receive-only mode txonly Set transmit-only mode txrx Set transmit and receive [Input mode] global configuration mode [Description] Enables or disables the LLDP function for all LAN/SFP port in a single operation. If this setting is enabled, set the transmission and reception mode of the specified LLDP frames. [Note] This command can be executed only for global configuration mode.
PAGE 100
| Command Reference | Maintenance and operation functions Total frames received Number of LLDP frames received Total frames received in error Number of LLDP frame reception errors Total frames discarded Number of LLDP frames discarded Total discarded TLVs Number of TLV discarded Total unrecognised TLVs Number of TLVs that could not be recognized For show lldp interface ifname neighbor • Basic management information Interface Name Received interface name System Name System name System Descr
PAGE 101
Command Reference | Maintenance and operation functions | 101 Power that can be supplied by PSE device (0.
PAGE 102
| Command Reference | Maintenance and operation functions Reinitialisation delay : 2 MED Enabled : Y Device Type : NETWORK_CONNECTIVITY LLDP Agent traffic statistics Total frames transmitted : 0 Total entries aged : 0 Total frames received : 0 Total frames received in error : 0 Total frames discarded : 0 Total discarded TLVs : 0 Total unrecognised TLVs : 0 SWR2310# 4.20.
PAGE 103
Command Reference | Maintenance and operation functions | 103 Network Policy MED Capabilities Dev Type MED Application Type MED Vlan id MED Tag/Untag MED L2 Priority MED DSCP Val MED Location Data Format Latitude Res : 0 Latitude : 0 Longitude Res : 0 Longitude : 0 AT : 0 Altitude Res : 0 Altitude : 0 Datum : 0 LCI length : 0 What : 0 Country Code : 0 CA type : 0 MED Inventory : : : : : : : End Point Class-3 Reserved 0 Untagged 0 0 ECS ELIN SWR2310# 4.20.
PAGE 104
| Command Reference | Maintenance and operation functions [Keyword] enable : Use the L2MS function disable : Don't use the L2MS function [Initial value] l2ms enable [Input mode] L2MS mode [Description] Sets whether to use the L2MS function. If this command is executed with the "no" syntax, the setting returns to the default. [Example] Use the L2MS function. SWR2310(config)#l2ms configuration SWR2310(config-l2ms)#l2ms enable 4.21.
PAGE 105
Command Reference | Maintenance and operation functions | 105 no slave-watch interval [Parameter] time : <2-10> Watch interval (seconds) [Initial value] slave-watch interval 3 [Input mode] L2MS mode [Description] Specifies the time interval at which to transmit an L2MS slave query frame. If this command is executed with the "no" syntax, the setting returns to the default.
PAGE 106
| Command Reference | Maintenance and operation functions 4.21.6 Set terminal management function [Syntax] terminal-watch enable terminal-watch disable no terminal-watch [Keyword] enable : Enable terminal management function disable : Disable terminal management function [Initial value] terminal-watch disable [Input mode] L2MS mode [Description] Enables the terminal management function. If this is enabled, information about the devices existing on the network is obtained at regular intervals.
PAGE 107
Command Reference | Maintenance and operation functions | 107 4.21.8 Set L2MS control frame transmit/receive [Syntax] l2ms filter enable l2ms filter disable no l2ms filter [Keyword] enable : L2MS control frames cannot be transmitted or received disable : L2MS control frames can be transmitted or received [Initial value] l2ms filter disable [Input mode] interface mode [Description] Prevents L2MS control frames from being transmitted or received.
PAGE 108
| Command Reference | Maintenance and operation functions 4.21.10 Show L2MS information [Syntax] show l2ms [detail] [Keyword] detail : Also show detailed information [Input mode] unprivileged EXEC mode, privileged EXEC mode [Description] Shows the following information according to the L2MS operating state.
PAGE 109
Command Reference | Maintenance and operation functions | 109 [Master] Number of Terminals [Slave] Number of Slaves [ac44.f230.00a5] Model name Device name Route LinkUp Uplink Downlink Config Appear time Number of Terminals [bcae.c5a4.7fb3] Port Appear time [00a0.deae.b8bf] Model name Device name Route LinkUp Uplink Downlink Config Appear time Number of Terminals : 0 : 2 : : : : : : : : : SWX2100-24G SWX2100-24G_Z5301050WX port2.
PAGE 110
| Command Reference | Maintenance and operation functions Item Description vlan-multiple-use mode Set whether to use multiple VLAN vlan-multiple port group_num mode Set multiple VLAN group qos-dscp-remark-type port type Set DSCP remarking method qos-dscp-remark-class port class Set class categorization of received packets qos-speed-unit unit Set speed unit when performing bandwidth control qos-policing-use port mode Set whether to perform policing of reception traffic qos-policing-speed po
PAGE 111
Command Reference | Maintenance and operation functions | 111 vlan-port-mode 1 hybrid vlan-port-mode 23 hybrid vlan-trunk 1 2 join vlan-trunk 1 3 join vlan-trunk 23 2 join vlan-trunk 23 3 join loopdetect-count 5 loopdetect-linkdown linkdown-recovery loopdetect-recovery-timer 600 loopdetect-port-use 7 off Show the config information of the L2MS slave terminal whose MAC address is 00a0.de00.0001. SWR2310>show l2ms slave-config 00a0.de00.0001 [00a0.de00.
PAGE 112
| Command Reference | Maintenance and operation functions SWR2310(config-l2ms)#terminal-watch enable SWR2310(config-l2ms)# wireless-terminal-watch interval 3600 4.21.
PAGE 113
Command Reference | Maintenance and operation functions | 113 4.21.15 Set whether to use the L2MS slave's zero config function [Syntax] config-auto-set enable config-auto-set disable no config-auto-set [Keyword] enable : Use the L2MS function disable : Don't use the L2MS function [Initial value] config-auto-set enable [Input mode] L2MS mode [Description] Sets whether to use the L2MS slave device's zero config function.
PAGE 114
| Command Reference | Maintenance and operation functions 4.22.2 Set whether to include terminals in the snapshot comparison [Syntax] snapshot trap terminal [except-wireless] no snapshot trap terminal [Keyword] except-wireless : Information for wirelessly connected terminals is excluded from the snapshot comparison. [Initial value] no snapshot trap terminal [Input mode] global configuration mode [Description] Terminal information is included in the snapshot comparison.
PAGE 115
Command Reference | Maintenance and operation functions | 115 [Description] Deletes the snapshot file. [Example] Delete the snapshot file. SWR2310#snapshot delete 4.23 Firmware update 4.23.1 Set firmware update site [Syntax] firmware-update url url no firmware-update url [Parameter] url : Single-byte alphanumeric characters and single-byte symbols (255 characters or less) URL at which the firmware is located [Initial value] firmware-update url http://www.rtpro.yamaha.co.jp/firmware/revision-up/swr2310.
PAGE 116
| Command Reference | Maintenance and operation functions Current Revision: Rev.2.04.01 New Revision: Rev.2.04.03 Downloading... Update to this firmware? (Y/N)y Updating... Finish SWR2310# 4.23.
PAGE 117
Command Reference | Maintenance and operation functions | 117 • • • Download source URL Download timeout duration Allow revision-down [Example] Show the current settings of the firmware update function. SWR2310#show firmware-update url: http://www.rtpro.yamaha.co.jp/firmware/revision-up/swr2310.bin timeout: 300 (seconds) revision-down: Disable reload-time: SWR2310# 4.23.
PAGE 118
| Command Reference | Maintenance and operation functions [Parameter] hour : <0-23> Firmware update reload time (hour) min : <0-59> Firmware update reload time (minutes) [Input mode] global configuration mode [Description] Sets the time at which the new firmware is applied by restarting after a firmware update. If this command is executed with the "no" syntax, the new firmware is applied by restarting immediately after the firmware is updated.
PAGE 119
Command Reference | Maintenance and operation functions | 119 [Parameter] switch : Operation of the stack function Setting value Description enable Enable stack function disable Disable stack function [Initial value] stack disable [Input mode] global configuration mode [Description] Enables or disables the stack function. If this command is executed with the "no" syntax, the setting returns to the default. [Note] This command can be executed only for models that support stacking.
PAGE 120
| Command Reference | Maintenance and operation functions 4.24.3 Show stack information [Syntax] show stack [Input mode] unprivileged EXEC mode, privileged EXEC mode [Description] Shows stack-related settings and status information. The following content is shown.
PAGE 121
Command Reference | Maintenance and operation functions | 121 IP address space (A.B.C.0) [Initial value] stack subnet auto-ip [Input mode] global configuration mode [Description] This command can be executed only for models that support stacking. This command specifies the IP address space used between stacked devices. The fixed subnet 255.255.255.0 is applied to NETWORK_ADDR. In the case of auto-ip, the Auto IP function is used between the stacked devices.
PAGE 122
| Command Reference | Maintenance and operation functions [Parameter] ID : <1-2> Stack ID [Input mode] privileged EXEC mode [Description] Reboots the system. [Note] If the currently-running settings (running configuration) have been changed from the settings at the time of boot (startup configuration), reboot will discard those changes. Therefore, if necessary, you should execute the copy running-config startup-config command or the write command before you execute the reload command.
PAGE 123
Command Reference | Maintenance and operation functions | 123 4.25.5 Unmount SD card [Syntax] unmount sd [Input mode] unprivileged EXEC mode, privileged EXEC mode [Description] Unmounts the SD card. If this command is not executed, or if the SD card is removed from the SD card slot without executing the unmount process from the Web GUI, there are some cases in which the operating system will generate a warning to repair the card's file system.
PAGE 124
| Command Reference | Maintenance and operation functions [Description] Shows the LED mode setting and status. The following items are shown. • Default LED mode setting • Current LED mode status [Example] Show the LED mode setting and status. SWR2310>show led-mode default mode : off current mode : link-act 4.25.
PAGE 125
Command Reference | Maintenance and operation functions | 125 SWR2310#backup system Succeeded to backup system files and firmware file. 4.25.10 Restore system information [Syntax] restore system [Input mode] privileged EXEC mode [Description] System information previously backed up to SD card is restored to the unit. If a firmware file exists in the backup folder of the SD card, the firmware will also be updated using that file. After restore, restart will occur.
PAGE 126
| Command Reference | Interface control Chapter 5 Interface control 5.1 Interface basic settings 5.1.1 Set description [Syntax] description line no description [Parameter] line : Single-byte alphanumeric characters and single-byte symbols (80characters or less) Description of the applicable interface [Initial value] no description [Input mode] interface mode [Description] Specifies a description of the applicable interface.
PAGE 127
Command Reference | Interface control | 127 [Parameter] type : Speed and duplex mode types Speed and duplex mode types Description auto Auto negotiation 10000-full 10Gbps/Full 1000-full 1000Mbps/Full 100-full 100Mbps/Full 100-half 100Mbps/Half 10-full 10Mbps/Full 10-half 10Mbps/Half [Initial value] speed-duplex auto [Input mode] interface mode [Description] Sets the speed and duplex mode. If this command is executed with the "no" syntax, the setting returns to the default.
PAGE 128
| Command Reference | Interface control [Example] Set the LAN port #1 mru to 9000 bytes. SWR2310(config)#interface port1.1 SWR2310(config-if)#mru 9000 5.1.
PAGE 129
Command Reference | Interface control | 129 [Note] This command can be specified only for LAN port. When this command is used to change the settings, link-down temporarily occurs for the corresponding interface. [Example] Enable EEE for LAN port #1. SWR2310(config)#interface port1.1 SWR2310(config-if)#eee enable 5.1.
PAGE 130
| Command Reference | Interface control The following items are shown. Item Description interface Interface name EEE(efficient-ethernet) Whether EEE is enabled Rx LPI Status Low-power mode status of the receiving unit Tx LPI Status Low-power mode status of the transmitting unit Wake Error Count Error count [Example] Show EEE status of LAN port #1. [If EEE is disabled] SWR2310#show eee status interface port1.1 interface:port1.
PAGE 131
Command Reference | Interface control | 131 Traffic direction Description receive Receiver transmit Transmitter [Initial value] no mirror interface [Input mode] interface mode [Description] Mirrors the traffic specified by direct, with the applicable interface as the mirror port and ifname as the monitor port. If this command is executed with the "no" syntax, the mirroring setting is deleted. [Note] This command can be specified only for LAN/SFP port.
PAGE 132
| Command Reference | Interface control 5.1.11 Show interface status [Syntax] show interface [ type [ index ] ] [Parameter] type : Interface type Interface type index : Description port Physical interface vlan VLAN interface sa Static logical interface po LACP logical interface Index number Interface ID Description S.X Specifies the stack ID (S) of the physical interface, and the number printed on the chassis (X). * The SWR2310-10G,18G are fixed as stack ID=1.
PAGE 133
Command Reference | Interface control | 133 Item Description IPv4 address IP address/mask length *3 (shown only if IP address is set) broadcast IP broadcast address *3 (shown only if IP address is set) Switchport mode Mode of the switchport • access : untagged • trunk : tagged Ingress filter Status of ingress filtering • enable : enabled • disable : disabled Acceptable frame types Frame types that can be received • all : All frames are received (regardless of whether they are tagged or untagged)
PAGE 134
| Command Reference | Interface control Hardware is Ethernet HW addr: 00a0.de00.
PAGE 135
Command Reference | Interface control | 135 Item Description Port Ch Type of associated logical interface *1 • (S) : Static logical interface • (P) : LACP logical interface ID of associated logical interface Description Description of interface *1 Shown only for physical interface *2 hown only for physical interface and logical interface [Example] Show brief interface status.
PAGE 136
| Command Reference | Interface control Item Description Octets Number of octets transmitted/received Broadcast packets Number of broadcast packets transmitted/received Multicast packets Number of multicast packets transmitted/received Unicast packets Number of unicast packets transmitted/received Undersize packets Number of undersize packets received (packets smaller than 64 octets) Oversize packets Number of oversize packets received (packets larger than 1523 octets*1) Fragments Number
PAGE 137
Command Reference | Interface control | 137 Broadcast packets Multicast packets Unicast packets TX errors Collisions Drop packets : : : : : : Received and Transmitted: 64octet packets : 65-127octet packets : 128-255octet packets : 256-511octet packets : 512-1023octet packets : 1024-MAXoctet packets : 0 91 0 0 0 0 1 166 7 1 0 0 5.1.
PAGE 138
| Command Reference | Interface control port1.27 port1.28 40.7 Unsupported 95.0 Unsupported 90.0 Unsupported -20.0 Unsupported -25.0 Unsupported Voltage (V) -----------3.37 3.34 Unsupported High Alarm Threshold -----------3.62 3.89 Unsupported High Warning Threshold -----------3.46 3.70 Unsupported Low Warning Threshold -----------3.13 2.89 Unsupported Low Alarm Threshold -----------2.97 2.70 Unsupported Current Interface (mA) ------------ -----------port1.25 4.0 port1.26 port1.27 6.2 port1.
PAGE 139
Command Reference | Interface control | 139 5.2.1 Set static logical interface [Syntax] static-channel-group link-id no static-channel-group [Parameter] link-id : <1-96> static logical interface number [Input mode] interface mode [Description] Associates the applicable interface with the static logical interface specified by link-id. If this command is executed with the "no" syntax, the applicable interface is dissociated from the static logical interface.
PAGE 140
| Command Reference | Interface control % Load balancing: src-dst-mac % Member: port1.1 port1.2 port1.3 port1.4 5.2.3 Set LACP logical interface [Syntax] channel-group link-id mode mode no channel-group [Parameter] link-id : <1-127> LACP logical interface number mode : Operation mode mode Description active Operate LACP in active mode. In active mode, it actively sends LACP frames to the other device. passive Operate LACP in passive mode.
PAGE 141
Command Reference | Interface control | 141 SWR2310(config)#interface port1.1 SWR2310(config-if)#channel-group 10 mode active 5.2.4 Show LACP logical interface status [Syntax] show etherchannel [ifname] [Parameter] ifname : Interface name of the LAN/SFP port Interfaces that make up the LACP logical interface [Input mode] unprivileged EXEC mode, privileged EXEC mode [Description] If ifname is omitted, shows the status of the LACP logical interface.
PAGE 142
| Command Reference | Interface control Item Aggregator ID Description Distinguishing ID on LACP Information shows the following items.
PAGE 143
Command Reference | Interface control | 143 LACP system priority irder Lower numbers have higher priority [Initial value] lacp system-priority 32768 [Input mode] global configuration mode [Description] Sets the LACP system priority order. If this command is executed with the "no" syntax, the setting returns to the default value. [Note] If an LACP logical interface is connected to the other device, the system priorities are compared, and control privilege is given to the device with the higher priority.
PAGE 144
| Command Reference | Interface control [Note] This command can be set only for a LAN/SFP port that is associated with an LACP logical interface. If a LAN/SFP port is associated with an LACP logical interface, lacp timeout long command is specified for the corresponding LAN/SFP port. If it is dissociated from the LACP logical interface, the lacp timeout command setting of the corresponding LAN/SFP port is deleted.
PAGE 145
Command Reference | Interface control | 145 SWR2310#show lacp-counter % Traffic statistics Port LACPDUs Marker Sent Recv Sent Recv % Aggregator po1 , ID 4601 port1.1 297 298 0 0 port1.2 306 299 0 0 port1.3 305 298 0 0 port1.4 309 1350 0 0 port1.5 186 186 0 0 Pckt err Sent Recv 0 0 0 0 0 0 0 0 0 0 5.2.
PAGE 146
| Command Reference | Interface control [Parameter] link-id : <1-127> LACP logical interface number [Input mode] unprivileged EXEC mode, privileged EXEC mode [Description] Shows the status of the LACP logical interface specified by link-id. If link-id is omitted, shows the status of all LACP logical interface. If summary is specified, an abbreviated display is shown; if detail is specified, details are shown. sIf both summary and detail are omitted, the result is as though summary was specified.
PAGE 147
Command Reference | Interface control | 147 [Example] Show the status of the LACP logical interface.
PAGE 148
| Command Reference | Interface control [Input mode] interface mode [Description] Sets the LACP port priority order. If this command is executed with the "no" syntax, the setting returns to the default value. [Note] If up to eight LAN/SFP ports are combined into an LACP logical interface, they are immediately combined into the LACP logical interface; ports in excess of eight are standby ports used in case of a malfunction.
PAGE 149
Command Reference | Interface control | 149 If this command is executed with the "no" syntax, disables MAC authentication for the entire system. Use a RADIUS server for authentication on which the radius-server host command has been configured. [Note] In order to actually use MAC authentication, you need to enable MAC authentication on the applicable interface as well. (authmac enable command) [Example] Enable MAC authentication for the entire system. SWR2310(config)#aaa authentication auth-mac 5.3.
PAGE 150
| Command Reference | Interface control [Note] This command can be specified only for both LAN/SFP port and logical interface. [Example] This command can be specified only for LAN/SFP port. SWR2310(config)#interface port1.1 SWR2310(config-if)#dot1x port-control auto 5.3.5 Set for forwarding control on an unauthenticated port for IEEE 802.
PAGE 151
Command Reference | Interface control | 151 [Initial value] dot1x max-auth-req 2 [Input mode] interface mode [Description] Sets the maximum value for the EAPOL packet transmission count for the applicable interface. If this command is executed with the "no" syntax, the setting returns to the default. [Note] This command can be specified only for both LAN/SFP port and logical interface. To use this command, you must enable the port authentication function for the applicable interface.
PAGE 152
| Command Reference | Interface control Setting value Description lower-case Lower case(a～f) upper-case Upper case(A～F) [Initial value] auth-mac auth-user hyphen lower-case [Input mode] global configuration mode [Description] Changes the format of the user name and password used for authentication during MAC authentication. During MAC authentication, the MAC address of the supplicant is used as a user name and password, and a request is sent to the RADIUS server for authentication.
PAGE 153
Command Reference | Interface control | 153 Operation mode Description single-host This mode allows communications for only one supplicant per port. Only the first supplicant that passes authentication is allowed. multi-host This mode allows communication with multiple supplicants for each port. If the first supplicant passes authentication, all other supplicants of the same port will be allowed to communicate without authentication.
PAGE 154
| Command Reference | Interface control During Web authentication, the supplicant's authentication state is shifted to unauthorized at the timing of reauthentication. To use this command, you must enable the port authentication function for the applicable interface. (dot1x port-control command, auth-mac enable command, auth-web enable command) [Example] Enable re-authenticatio of LAN port #1. SWR2310(config)#interface port1.1 SWR2310(config-if)#auth reauthentication 5.3.
PAGE 155
Command Reference | Interface control | 155 Changing the settings for this command will make the authentication state return to the default. To use this command, you must enable the port authentication function for the applicable interface. (dot1x port-control command, auth-mac enable command) This command cannot be set when Web authentication is enabled. [Example] This specifies guest VLAN #10 for LAN port #1. SWR2310(config)#interface port1.1 SWR2310(config-if)#auth guest-vlan 10 5.3.
PAGE 156
| Command Reference | Interface control To use this command, you must enable the port authorization function and the reauthentication function for the applicable interface. (dot1x port-control command, auth-mac enable command, auth-web enable command, auth reauthentication command) [Example] Set the reauthentication period for LAN port #1 to 1200. SWR2310(config)#interface port1.1 SWR2310(config-if)#auth timeout reauth-period 1200 5.3.
PAGE 157
Command Reference | Interface control | 157 To use this command, you must enable the port authentication function for the applicable interface. (dot1x port-control command, auth-mac enable command, auth-web enable command) [Example] Set the reply wait time from the supplicant of LAN port #1 to 180 seconds. SWR2310(config)#interface port1.1 SWR2310(config-if)#auth timeout supp-timeout 180 5.3.
PAGE 158
| Command Reference | Interface control 5.3.19 Set the reply wait time for each RADIUS server [Syntax] radius-server timeout time no radius-server timeout [Parameter] time : <1-1000> Standby time for replying to requests (seconds) [Initial value] radius-server timeout 5 [Input mode] global configuration mode [Description] Sets the reply wait time for each RADIUS server. If this command is executed with the "no" syntax, the setting returns to the default.
PAGE 159
Command Reference | Interface control | 159 no radius-server key [Parameter] secret : Shared password Single-byte alphanumeric characters, and single-byte symbols other than the characters '?' and spaces (64 characters or less) [Initial value] no radius-server key [Input mode] global configuration mode [Description] Sets the shared password used when communicating with a RADIUS server. If this command is executed with the "no" syntax, the setting returns to the default.
PAGE 160
| Command Reference | Interface control [Description] Specifies a desired text string that is sent as the NAS-Identifier attribute to the RADIUS server for port authentication. If this setting is made, it is notified to RADIUS server as the NAS-Identifier attribute. If this setting is deleted, notification is stopped. If this command is executed with the "no" syntax, the setting returns to the default. [Example] Set "Nas-ID-001" as the NAS-Identifier attribute that is sent to the RADIUS server.
PAGE 161
Command Reference | Interface control | 161 MAC Authentication WEB Authentication Host mode Dynamic VLAN creation Guest VLAN Reauthentication Reauthentication period MAX request Supplicant timeout Server timeout Quiet period Controlled directions Protocol version Clear-state time : : : : : : : : : : : : : : Disabled (configured:disable) Enabled (configured:enable) Multi-supplicant Disabled Disabled Disabled 3600 sec 2 times 30 sec 30 sec 60 sec In (configured:both) 2 Not configured 5.3.
PAGE 162
| Command Reference | Interface control EAPOL Start EAPOL Logoff EAP Response ID EAP Response Invalid EAPOL EAP Length error Last EAPOL version Last EAPOL source Transmitted frames EAP Request ID EAP Request EAP Success EAP Fail RADIUS packets: Received packets Access Request Access Challenge Access Accept Access Reject Transmitted packets Access Request : : : : : : : : : : : : : 1 0 1 9 0 0 1 0011.2233.4455 11 1 9 1 0 : : : : : : : 10 0 9 1 0 10 10 5.3.
PAGE 163
Command Reference | Interface control | 163 Deadtime : 0 min Server Host : 192.168.100.102 Authentication Port : 1645 Secret Key : fghij Timeout : 5 sec Retransmit Count : 3 Deadtime : 0 min 5.3.
PAGE 164
| Command Reference | Interface control 5.3.31 Setting the time for clearing the authentication state (system) [Syntax] auth clear-state time time no auth clear-state time [Parameter] time : <0-23> Time at which the authentication state is cleared [Initial value] no auth clear-state time [Input mode] global configuration mode [Description] Sets the time at which the authentication state for the supplicant is cleared for the entire system.
PAGE 165
Command Reference | Interface control | 165 [Keyword] all : Copies the file for customizing all Web authentication screens : Single-byte alphanumeric characters and single-byte symbols [Parameter] filename Filename of the file for customizing the Web authentication screen src_config_num dst_config_num : : Copy source configuration number Setting value Description 0-1 Number of the start-up config sd SD card Copy destination configuration number Setting value Description 0−1 Number of the
PAGE 166
| Command Reference | Interface control [Description] Deletes the file for customizing the Web authentication screen. [Note] In a state in which the SD card is not mounted, executing this command on a config that is in the SD card produces an error. [Example] Deletes logo.png from startup configuration #0. SWR2310#erase auth-web startup-config logo.png 0 5.3.
PAGE 167
Command Reference | Interface control | 167 [Description] Enables the port security function for the applicable interface. If this is executed with the "no" syntax, or disable is specified, port security will be disabled for the applicable interface. [Note] This command can be specified only for both LAN/SFP port and logical interface. Any unregistered terminals will be discarded at the time when the port security function is enabled. [Example] Enable port security for LAN port #1.
PAGE 168
| Command Reference | Interface control SWR2310(config)#interface port1.1 SWR2310(config-if)#port-security violation shutdown 5.4.4 Show port security information [Syntax] show port-security status [Input mode] privileged EXEC mode [Description] Shows the port security information. [Example] Show the port security information. SWR2310#show port-security status Port Security Action Status Last violation -------- --------- --------- --------- ----------------port1.1 Enabled Discard Blocking 00a0.de00.
PAGE 169
Command Reference | Interface control | 169 [Note] For a LAN/SFP port that was put in the errdisable state by the BPDU guard function before this command was executed, the change in the setting is applied the next time BPDU is detected. [Example] Enable automatic recovery after BPDU guard has caused the errdisable state, and set the recovery time to 600 seconds. SWR2310(config)#errdisable auto-recovery bpduguard interval 600 Disable automatic recovery after loop detection has caused the errdisable state.
PAGE 170
| Command Reference | Layer 2 functions Chapter 6 Layer 2 functions 6.1 FDB (Forwarding Data Base) 6.1.
PAGE 171
Command Reference | Layer 2 functions | 171 SWR2310(config)#mac-address-table ageing-time 400 6.1.3 Clear dynamic entry [Syntax] clear clear clear clear mac-address-table mac-address-table mac-address-table mac-address-table dynamic dynamic adress mac-addr dynamic vlan vlan-id dynamic interface ifname [instance inst] [Keyword] address : Specifies the MAC address vlan : Specifies the VLAN ID interface : Specifies the interface instance : Specifies the MST instance : hhhh.hhhh.
PAGE 172
| Command Reference | Layer 2 functions ifname : Setting value Description discard Discard Name of LAN/SFP port or logical interface Applicable interface vlan-id : <1-4094> Applicable VLAN ID [Initial value] none [Input mode] global configuration mode [Description] Registers a static entry in the MAC address table. If action is specified as "forward," received frames that match the specified MAC address and VLAN ID are forwarded to the specified interface.
PAGE 173
Command Reference | Layer 2 functions | 173 1 1 sa1 sa2 1803.731e.8c2b 782b.cbcb.218d forward forward dynamic dynamic 300 300 6.1.
PAGE 174
| Command Reference | Layer 2 functions [Keyword] name : Specifies the name of the VLAN state : Specifies the state of the VLAN : <2-4094> [Parameter] vlan-id VLAN ID name : Single-byte alphanumeric characters and single-byte symbols(32characters or less) Name of the VLAN state : Whether frame forwarding is enabled or disabled Setting value Description enable Frames are forwarded disable Frames are not forwarded [Initial value] none [Input mode] VLAN mode [Description] Sets the VLAN
PAGE 175
Command Reference | Layer 2 functions | 175 Setting value Description isolated Secondary VLAN (isolated VLAN) [Initial value] none [Input mode] VLAN mode [Description] Uses vlan-id as a private VLAN. If this command is executed with the "no" syntax, the private VLAN setting is deleted, and it is used as a conventional VLAN.
PAGE 176
| Command Reference | Layer 2 functions [Description] Specify the association of the secondary VLAN (isolated VLAN, community VLAN) with the primary VLAN of the private VLAN. By specifying "add," specify the association of the vlan-id with the 2nd-vlan-ids. By specifying "remove," remove the association of the vlan-id and the 2nd-vlan-ids. If this command is executed with the "no" syntax, all associations to the primary VLAN are deleted.
PAGE 177
Command Reference | Layer 2 functions | 177 [Input mode] interface mode [Description] Sets the VLAN ID that is associated as an access port with the applicable interface. If this command is executed with the "no" syntax, the setting returns to the default. [Note] This command can be set only for a LAN/SFP port or logical interface for which the switchport mode access command is set.
PAGE 178
| Command Reference | Layer 2 functions 6.2.
PAGE 179
Command Reference | Layer 2 functions | 179 SWR2310(config)#interface port1.1 SWR2310(config-if)#switchport mode trunk SWR2310(config-if)#switchport trunk allowed vlan add 2 6.2.
PAGE 180
| Command Reference | Layer 2 functions [Initial value] none [Input mode] interface mode [Description] Specifies the private VLAN port type for the applicable interface. If this is executed with the "no" syntax, the setting of the private VLAN specified for the applicable interface is deleted. [Note] This command can be set only for a LAN/SFP port for which the switchport mode access command is set. In addition, promiscuous can be specified for the following interfaces.
PAGE 181
Command Reference | Layer 2 functions | 181 SWR2310(config)# interface port1.1 SWR2310(config-if)# switchport mode private-vlan host SWR2310(config-if)# switchport private-vlan host-association 100 add 101 SWR2310(config-if)# interface port1.2 SWR2310(config-if)# switchport mode private-vlan host SWR2310(config-if)# switchport private-vlan host-association 100 add 102 SWR2310(config-if)# interface port1.
PAGE 182
| Command Reference | Layer 2 functions SWR2310(config)# interface port1.1 SWR2310(config-if)# switchport mode private-vlan promiscuous SWR2310(config-if)# switchport private-vlan mapping 100 add 101 SWR2310(config-if)# switchport private-vlan mapping 100 add 102 SWR2310(config-if)# switchport private-vlan mapping 100 add 103 6.2.
PAGE 183
Command Reference | Layer 2 functions | 183 SWR2310(config)#interface port1.1 SWR2310(config-if)#switchport voice cos 6 6.2.15 Set DSCP value for voice VLAN [Syntax] switchport voice dscp value no switchport voice dscp [Parameter] value : <0-63> DSCP value to specify for connected device [Initial value] switchport voice dscp 0 [Input mode] interface mode [Description] Specify the DSCP value to use for voice traffic by the connected device.
PAGE 184
| Command Reference | Layer 2 functions Even if multiple VLAN is specified, correct communication might not be possible due to the following. • Spanning tree block status • IGMP snooping or MLD snooping status • Loop detection block status [Example] Assign LAN port #1 to multiple VLAN group #10. SWR2310(config)#interface port1.1 SWR2310(config-if)#switchport multiple-vlan group 10 SWR2310(config-if)#exit 6.2.
PAGE 185
Command Reference | Layer 2 functions | 185 Item Description Name Name of the VLAN State VLAN status (whether frames are forwarded) • ACTIVE : forwarded • SUSPEND : not forwarded Member ports Interfaces associated with the VLAN ID • (u) : Access port (untagged port) • (t) : Trunk port (tagged port) [Example] Show all VLAN information.
PAGE 186
| Command Reference | Layer 2 functions [Parameter] group-id : <1-256> Multiple VLAN group ID [Input mode] unprivileged EXEC mode, privileged EXEC mode [Description] Shows the setting status for multiple VLAN groups. If the "group" specification is omitted, all groups that are actually assigned to the interface are shown. [Example] Shows the setting status for multiple VLAN groups.
PAGE 187
Command Reference | Layer 2 functions | 187 If this command is executed with the "no" syntax, the setting returns to the default. [Note] The setting of this command must satisfy the following conditions. 2 x (hello time + 1) <= maximum aging time <= 2 x (forward delay time - 1) The maximum aging time can be set by the spanning-tree max-age command. The hello time is always 2 seconds, and cannot be changed. [Example] Set the forward delay time to 10 seconds. SWR2310(config)#spanning-tree forward-time 10 6.
PAGE 188
| Command Reference | Layer 2 functions [Note] In the case of MSTP, this is the setting for CIST (instance #0). [Example] Set the bridge priority to 4096. SWR2310(config)#spanning-tree priority 4096 6.3.
PAGE 189
Command Reference | Layer 2 functions | 189 [Note] This command can be specified only for LAN/SFP port and logical interface. It is not possible to specify this command for a LAN/SFP port that is associated to a logical interface. If a LAN/SFP port is associated with a logical interface, the setting of this command for the corresponding LAN/SFP port returns to the default. [Example] Set the LAN port #1 link type to "shared." SWR2310(config)#interface port1.
PAGE 190
| Command Reference | Layer 2 functions [Initial value] spanning-tree bpdu-guard disable [Input mode] interface mode [Description] Sets BPDU guard for the applicable interface. If this command is executed with the "no" syntax, the setting returns to the default. [Note] This command can be specified only for LAN/SFP port and logical interface. It is not possible to specify this command for a LAN/SFP port that is associated to a logical interface.
PAGE 191
Command Reference | Layer 2 functions | 191 SWR2310(config)#interface port1.1 SWR2310(config-if)#spanning-tree path-cost 100000 6.3.10 Set interface priority [Syntax] spanning-tree priority priority no spanning-tree priority [Parameter] priority : <0-240> (multiple of 16) Priority value [Initial value] spanning-tree priority 128 [Input mode] interface mode [Description] Sets the priority of the applicable interface. If this command is executed with the "no" syntax, the setting returns to the default.
PAGE 192
| Command Reference | Layer 2 functions 6.3.12 Show spanning tree status [Syntax] show spanning-tree [interface ifname] [Keyword] interface : Specifies the interface to show : Name of LAN/SFP port or logical interface [Parameter] ifname Interface to show [Input mode] unprivileged EXEC mode, privileged EXEC mode [Description] Shows the spanning tree status. If "interface" is omitted, the status of all interfaces is shown. In the case of MSTP, shows CIST (instance #0) information.
PAGE 193
Command Reference | Layer 2 functions | 193 Item Description Root Root bridge identifier. This consists of the root bridge priority (the first four hexadecimal digits) and MAC address Designated Bridge Bridge identifier.
PAGE 194
| Command Reference | Layer 2 functions % % % % % % port1.1: port1.1: port1.1: port1.1: port1.1: port1.1: No portfast configured - Current portfast off bpdu-guard disabled - Current bpdu-guard off bpdu-filter disabled - Current bpdu-filter off no root guard configured - Current root guard off Configured Link Type point-to-point - Current point-to-point No auto-edge configured - Current port Auto Edge off 6.3.
PAGE 195
Command Reference | Layer 2 functions | 195 % Other Port-Specific Info -----------------------% Max Age Transitions % Msg Age Expiry % Similar BPDUS Rcvd % Src Mac Count % Total Src Mac Rcvd % Next State % Topology Change Time : : : : : : : 1 0 0 0 3 Discard/Blocking 0 % Other Bridge information & Statistics -------------------------------------% STP Multicast Address : 01:80:c2:00:00:00 % Bridge Priority : 32768 % Bridge Mac Address : ac:44:f2:30:01:10 % Bridge Hello Time : 2 % Bridge Forward Delay : 15
PAGE 196
| Command Reference | Layer 2 functions [Example] Move to MST mode. SWR2310(config)#spanning-tree mst configuration SWR2310(config-mst)# 6.3.16 Generate MST instance [Syntax] instance instance-id no instance [Parameter] instance-id : <1-15> Instance ID [Initial value] none [Input mode] MST mode [Description] Generates an MST instance. If this command is executed with the "no" syntax, the MST instance is deleted.
PAGE 197
Command Reference | Layer 2 functions | 197 SWR2310(config)#spanning-tree mst configuration SWR2310(config-mst)#instance 1 vlan 2 6.3.18 Set priority of MST instance [Syntax] instance instance-id priority priority no instance instance-id priority [Parameter] instance-id : <1-15> Instance ID priority : <0-61440> (multiple of 4096) Priority value [Initial value] instance instance-id priority 32768 [Input mode] MST mode [Description] Sets the priority of the MST instance.
PAGE 198
| Command Reference | Layer 2 functions [Parameter] revision : <0-65535> Revision number [Initial value] revision 0 [Input mode] MST mode [Description] Sets the revision number of the MST region. If this command is executed with the "no" syntax, the setting returns to the default. [Example] Set the revision number as 2 for the MST region. SWR2310(config)#spanning-tree mst configuration SWR2310(config-mst)#revision 2 6.3.
PAGE 199
Command Reference | Layer 2 functions | 199 Priority value [Initial value] spanning-tree instance instance-id priority 128 [Input mode] interface mode [Description] Sets the priority for the applicable interface in the MST instance. If this command is executed with the "no" syntax, the setting returns to the default. [Note] This command can be specified only for LAN/SFP port and logical interface. It is not possible to specify this command for a LAN/SFP port that is associated to a logical interface.
PAGE 200
| Command Reference | Layer 2 functions SWR2310(config)#interface port1.1 SWR2310(config-if)#spanning-tree instance 2 SWR2310(config-if)#spanning-tree instance 2 path-cost 100000 6.3.24 Show MST region information [Syntax] show spanning-tree mst config [Input mode] unprivileged EXEC mode, privileged EXEC mode, interface mode [Description] Shows distinguishing information for the MST region. [Example] Show distinguishing information for the MST region.
PAGE 201
Command Reference | Layer 2 functions | 201 % % 0: 1: 1 100 (port1.8) Show detailed MSTP information for LAN port #8. SWR2310>show spanning-tree mst detail interface port1.
PAGE 202
| Command Reference | Layer 2 functions [Description] Shows information for the specified MST instance. If "interface" is omitted, information is shown for all interfaces that are assigned the specified MST instance. [Note] A LAN/SFP port that is associated with a logical interface cannot be specified as ifname. [Example] Show information for MST instance #1.
PAGE 203
Command Reference | Layer 2 functions | 203 SWR2310(config)#loop-detect enable Disable the loop detection function for the entire system. SWR2310(config)#loop-detect disable 6.4.
PAGE 204
| Command Reference | Layer 2 functions 6.4.
PAGE 205
Command Reference | Layer 2 functions | 205 The following items are shown. • Setting of the system-wide loop detection function • Loop detection status for each LAN/SFP port • Interface name (port) • Setting of the loop detection function (loop-detect) for LAN/SFP port. If the loop detection function is operating, (*) is added • Status of the Port Blocking setting (port-blocking) • Loop detection status (status) [Example] Show the loop detection status.
PAGE 206
| Command Reference | Layer 3 functions Chapter 7 Layer 3 functions 7.1 IPv4 address management 7.1.1 Set IPv4 address [Syntax] ip address ip_address/mask [label textline] ip address ip_address netmask [label textline] no ip address [Keyword] label : Set label as IPv4 address : A.B.C.D [Parameter] ip_address IPv4 address mask : <1-31> Number of mask bits netmask : A.B.C.D Netmask in address format textline : Label (maximum 64 characters) [Initial value] ip address 192.168.100.
PAGE 207
Command Reference | Layer 3 functions | 207 [Description] Shows the IPv4 address for each interface. The following content is shown. • IPv4 address • If an IPv4 address has been specified by the ip address dhcp command, an "*" is shown added before the displayed IPv4 address. • If the IPv4 address is not specified after setting the ip address dhcp command (such as while searching for the server), then "searching" is shown. • If the ip address command has not been set, the indication "unassigned" is shown.
PAGE 208
| Command Reference | Layer 3 functions SWR2310(config)#interface vlan100 SWR2310(config-if)#ip address dhcp 7.1.4 Show DHCP client status [Syntax] show dhcp lease [Input mode] unprivileged EXEC mode, privileged EXEC mode [Description] Shows the DHCP client status. The following items are shown.
PAGE 209
Command Reference | Layer 3 functions | 209 [Input mode] interface mode [Description] For the VLAN interface, enables the Auto IP function which automatically generates the IPv4 link local address (169.254.xxx.xxx/16). The Auto IP function works only if an IPv4 address cannot be obtained from the DHCP server after the ip address dhcp command is specified. The Auto IP function can be enabled for only one VLAN interface. If this command is executed with the "no" syntax, the setting returns to the default.
PAGE 210
| Command Reference | Layer 3 functions [Input mode] global configuration mode [Description] Adds a static route for IPv4. If this command is executed with the "no" syntax, the specified route is deleted. [Example] Set the default gateway to 192.168.1.1. SWR2310(config)#ip route 0.0.0.0/0 192.168.1.1 For the destination 172.16.0.0/16, set the gateway to 192.168.2.1. SWR2310(config)#ip route 172.16.0.0 255.255.0.0 192.168.2.1 7.2.
PAGE 211
Command Reference | Layer 3 functions | 211 [Example] Show the IPv4 routing information base. SWR2310>show ip route database Codes: C - connected, S - static > - selected route, * - FIB route S S S C C *> *> *> *> *> 0.0.0.0/0 [1/0] via 192.168.100.1, vlan1 172.16.0.0/16 [1/0] via 192.168.200.240, vlan100 192.168.1.1/32 [1/0] is directly connected, vlan100 192.168.100.0/24 is directly connected, vlan1 192.168.200.0/24 is directly connected, vlan100 Gateway of last resort is not set 7.2.
PAGE 212
| Command Reference | Layer 3 functions [Example] Clear the ARP cache. SWR2310#clear arp-cache 7.3.3 Set static ARP entry [Syntax] arp ip_address mac_address interface no arp ip_address [Parameter] ip_address : A.B.C.D IP address mac_address : HHHH.HHHH.HHHH MAC address interface : portN.M Physical interface name [Initial value] none [Input mode] global configuration mode [Description] Creates a static group ARP entry.
PAGE 213
Command Reference | Layer 3 functions | 213 7.4.1 IPv4 forwarding settings [Syntax] ip forwarding switch no ip forwarding [switch] [Parameter] switch : IPv4 packet forwarding settings Setting value Description enable Enable forwarding of IPv4 packets disable Disable forwarding of IPv4 packets [Initial value] ip forwarding disable [Input mode] global configuration mode [Description] Enables or disables forwarding of IPv4 packets.
PAGE 214
| Command Reference | Layer 3 functions datalen : Setting value Description continuous Execute repeatedly until Ctrl+C is entered <36-18024> Length of the ICMP payload (if omitted: 56) timeout : <1-65535> Time to wait for a reply (if omitted: 2) This is ignored if the number of times to execute is specified as "continuous" [Input mode] privileged EXEC mode [Description] Send ICMP Echo to the specified host, and wait for ICMP Echo Reply. If there is a reply, show it.
PAGE 215
Command Reference | Layer 3 functions | 215 [Parameter] switch : Behavior of the IPv6 Setting value Description enable Enable the IPv6 disable Disable the IPv6 [Initial value] ipv6 disable [Input mode] interface mode [Description] Enables IPv6 for the VLAN interface and automatically sets the link local address. IPv6 addresses can be assigned to a maximum of 8 VLAN interfaces. If IPv6 is disabled, related settings are also simultaneously deleted.
PAGE 216
| Command Reference | Layer 3 functions 7.6.3 Set RA for IPv6 address [Syntax] ipv6 address autoconfig no ipv6 address [Initial value] none [Input mode] interface mode [Description] Uses RA to specify an IPv6 address for the VLAN interface. RA can be specified only for the VLAN interface for which the ipv6 enable command has been specified.
PAGE 217
Command Reference | Layer 3 functions | 217 7.7 IPv6 route control 7.7.
PAGE 218
| Command Reference | Layer 3 functions IPv6 prefix length (if omitted: 128) [Input mode] unprivileged EXEC mode, privileged EXEC mode [Description] Shows the IPv6 Forwarding Information Base (FIB). If the IPv6 address is omitted, the entire content of the FIB is shown. If the IPv6 address or network address is specified, detailed information for the routing entry that matches the destination is shown. [Note] This command cannot be used if the stack function is enabled.
PAGE 219
Command Reference | Layer 3 functions | 219 [Note] This command cannot be used if the stack function is enabled. [Example] Show a summary of the IPv6 Routing Information Base. SWR2310>show ipv6 route summary IPv6 routing table name is Default-IPv6-Routing-Table(0) IPv6 routing table maximum-paths is 1 Route Source Networks connected 2 static 2 Total 4 7.8 Neighbor cache 7.8.
PAGE 220
| Command Reference | Layer 3 functions 2001:db8:1:0:3538:5dc7:6bc4:1a23 2001:db8:cafe::1 fe80::0211:22ff:fe33:4455 fe80::6477:88ff:fe99:aabb 0011.2233.4455 00a0.de80.cafe 0011.2233.4455 6677.8899.aabb vlan1 vlan1 vlan1 vlan1 dynamic static dynamic dynamic 7.8.3 Clear neighbor cache table [Syntax] clear ipv6 neighbors [Input mode] privileged EXEC mode [Description] Clears the neighbor cache. [Note] This command cannot be used if the stack function is enabled. [Example] Clear the neighbor cache.
PAGE 221
Command Reference | Layer 3 functions | 221 7.10 IPv6 ping 7.10.
PAGE 222
| Command Reference | Layer 3 functions [Parameter] host : Destination for which to check the route Host name, or target IPv6 address (X:X::X:X) [Input mode] privileged EXEC mode [Description] Shows information for the route to the specified host. [Note] This command cannot be used if the stack function is enabled. [Example] Check the route to 2001:db8:1::2. SWR2310#traceroute6 2001:db8:1::2 traceroute to 2001:db8:1::2 (2001:db8:1::2), 30 hops 1 2001:db8:10::1 (2001:db8:10::1) 0.563 ms 0.
PAGE 223
Command Reference | Layer 3 functions | 223 IPv4 addtess of the DNS server : X:X::X:X IPv6 address of the DNS server If you specify an IPv6 link local address, you must also specify the output interface (fe80::X%vlanN format) [Initial value] none [Input mode] global configuration mode [Description] Adds a server to the DNS server list. Up to three servers can be specified. If this command is executed with the "no" syntax, the specified server is deleted from the DNS server list.
PAGE 224
| Command Reference | Layer 3 functions [Parameter] name : Domain name (maximum 255 characters) [Initial value] none [Input mode] global configuration mode [Description] Adds a domain name to the list of domain names used for DNS queries. Up to six domains can be registered in the search domain list. If this command is executed with the "no" syntax, the specified domain name is deleted from the search domain list.
PAGE 225
Command Reference | IP multicast control | 225 Chapter 8 IP multicast control 8.1 IP multicast basic settings 8.1.
PAGE 226
| Command Reference | IP multicast control [Example] Enable IGMP snooping for VLAN #2. SWR2310#configure terminal SWR2310(config)#interface vlan2 SWR2310(config-if)#ip igmp snooping enable Disable IGMP snooping for VLAN #2. SWR2310#configure terminal SWR2310(config)#interface vlan2 SWR2310(config-if)#ip igmp snooping disable 8.2.
PAGE 227
Command Reference | IP multicast control | 227 The multicast router must be connected to the specified LAN/SFP port. If an IGMP report is received from the receiver, it is forwarded to the specified LAN/SFP port. [Example] Specify LAN port #8 as a connection destination of the multicast router. SWR2310#configure terminal SWR2310(config)#interface vlan2 SWR2310(config-if)#ip igmp snooping mrouter interface port1.8 Remove LAN port #8 as a connection destination of the multicast router.
PAGE 228
| Command Reference | IP multicast control [Note] This command can be specified only for VLAN interface. Also, this can be specified only if IGMP snooping is enabled. [Example] Set the VLAN #2 query transmission interval to 30 seconds. SWR2310#configure terminal SWR2310(config)#interface vlan2 SWR2310(config-if)#ip igmp snooping query-interval 30 Return the VLAN #2 query transmission interval to the default setting.
PAGE 229
Command Reference | IP multicast control | 229 IGMP version [Initial value] ip igmp snooping version 3 [Input mode] interface mode [Description] Sets the IGMP version. If this command is executed with the "no" syntax, the IGMP version returns to the default setting (V3). [Note] This command can be specified only for VLAN interface. Also, this can be specified only if IGMP snooping is enabled. If an IGMP packet of a different version than this setting is received, the following action occurs.
PAGE 230
| Command Reference | IP multicast control [Parameter] A.B.C.D : Multicast group address ifname : VLAN interface name Interface to show [Input mode] unprivileged EXEC mode, privileged EXEC mode [Description] Shows IGMP group membership information. [Example] Show IGMP group membership information. SWR2310#show ip igmp snooping groups IGMP Snooping Group Membership Group source list: (R - Remote, S - Static) Vlan Group/Source Address Interface Reporter Version 1 239.255.255.250 port1.5 192.168.100.
PAGE 231
Command Reference | IP multicast control | 231 Number of v2-leaves: 0 Number of v3-reports: 127 Active Ports: port1.5 port1.8 8.2.11 Clear IGMP group membership entries [Syntax] clear ip igmp snooping clear ip igmp snooping group A.B.C.D clear ip igmp snooping interface ifname [Keyword] group : Specifies the multicast group address to be cleared interface : Specifies the VLAN interface to be cleared : Multicast group address [Parameter] A.B.C.
PAGE 232
| Command Reference | IP multicast control [Example] Enable MLD snooping for VLAN #2. SWR2310#configure terminal SWR2310(config)#interface vlan2 SWR2310(config-if)#ipv6 mld snooping enable Disnable MLD snooping for VLAN #2. SWR2310#configure terminal SWR2310(config)#interface vlan2 SWR2310(config-if)#ipv6 mld snooping disable 8.3.
PAGE 233
Command Reference | IP multicast control | 233 The multicast router must be connected to the specified LAN/SFP port. If an MLD report is received from the receiver, it is forwarded to the specified LAN/SFP port. [Example] Specify LAN port #8 as a connection destination of the multicast router. SWR2310#configure terminal SWR2310(config)#interface vlan2 SWR2310(config-if)#ipv6 mld snooping mrouter interface port1.8 Remove LAN port #8 as a connection destination of the multicast router.
PAGE 234
| Command Reference | IP multicast control [Note] This command can be specified only for VLAN interfaces. Also, this can be specified only if MLD snooping is enabled. [Example] Set the VLAN #2 query transmission interval to 30 seconds. SWR2310#configure terminal SWR2310(config)#interface vlan2 SWR2310(config-if)#ipv6 mld snooping query-interval 30 Return the VLAN #2 query transmission interval to the default setting.
PAGE 235
Command Reference | IP multicast control | 235 Interface to show [Input mode] unprivileged EXEC mode, privileged EXEC mode [Description] Shows the multicast router connection port information that was dynamically learned or statically set. [Example] Show multicast router connection port information for VLAN #2. SWR2310#show ipv6 mld snooping mrouter vlan2 VLAN Interface IP-address Expires 2 port1.11(dynamic) fe80::ae44:f2ff:fe30:291 00:01:04 8.3.
PAGE 236
| Command Reference | IP multicast control [Parameter] ifname : VLAN interface name Interface to show [Input mode] unprivileged EXEC mode, privileged EXEC mode [Description] Show a VLAN interface's MLD-related information. [Example] Show MLD-related information for VLAN #1.
PAGE 237
Command Reference | Traffic control | 237 Chapter 9 Traffic control 9.1 ACL 9.1.1 Generate IPv4 access list [Syntax] access-list ipv4-acl-id [seq_num] action protocol src-info [src-port] dst-info [dst-port] [ack] [fin] [psh] [rst] [syn] [urg] no access-list ipv4-acl-id [seq_num] [action protocol src-info [src-port] dst-info [dst-port] [ack] [fin] [psh] [rst] [syn] [urg]] [Keyword] ack : If tcp is specified as the protocol, the ACK flag of the TCP header is specified as a condition.
PAGE 238
| Command Reference | Traffic control Setting value src-port : Description A.B.C.D/M Specifies an IPv4 address (A.B.C.D) with subnet mask length (Mbit) host A.B.C.D Specifies a single IPv4 address (A.B.C.D) any Applies to all IPv4 addresses <0-65535> If protocol is specified as tcp or udp, this specifies the transmission source port number <0-65535> that is the condition. This can also be omitted.
PAGE 239
Command Reference | Traffic control | 239 SWR2310(config)#access-list 1 deny any 192.168.1.0 0.0.0.255 host 172.16.1.1 Delete IPv4 access list #1. SWR2310(config)#no access-list 1 9.1.2 Add comment to IPv4 access list [Syntax] access-list ipv4-acl-id description line no access-list ipv4-acl-id description [Parameter] ipv4-acl-id : <1-2000> ID of IPv4 access list to which a comment will be added line : Comment to add.
PAGE 240
| Command Reference | Traffic control If the received/transmitted frame matches the conditions in the access list, the action in the access list will be the action (permit, deny) for the corresponding frame. If this command is executed with the "no" syntax, the applied access list is deleted from both LAN/SFP port and logical interface. [Note] Only one access list for each direction can be registered for incoming frames (in) and for outgoing frames (out) on the same interface.
PAGE 241
Command Reference | Traffic control | 241 To apply the generated access list, use the access-group command of interface mode. If the "no" syntax is used to specify "action" and following, the IPv6 access list that matches all conditions is deleted. If the "no" syntax is used without specifying "action" and following, the IPv6 access list of the matching ID of access list is deleted. [Note] An access list that is applied to LAN/SFP port and logical interface cannot be deleted using the "no" syntax.
PAGE 242
| Command Reference | Traffic control Setting value Description in Apply to received frames out Apply to transmitted frames [Initial value] none [Input mode] interface mode [Description] Applies an IPv6 access list to both LAN/SFP port and logical interface. If the received/transmitted frame matches the conditions in the access list, the action in the access list will be the action (permit, deny) for the corresponding frame.
PAGE 243
Command Reference | Traffic control | 243 Setting value dst-info : Description HHHH.HHHH.HHHH WWWW.WWWW.WWWW Specifies the MAC address (HHHH.HHHH.HHHH) with wildcard bits (WWWW.WWWW.WWWW) host HHHH.HHHH.HHHH Specifies an individual MAC address (HHHH.HHHH.HHHH) any Applies to all MAC addresses Specifies the destination MAC address information that is the condition Setting value Description HHHH.HHHH.HHHH WWWW.WWWW.WWWW Specifies the MAC address (HHHH.HHHH.HHHH) with wildcard bits (WWWW.WWWW.
PAGE 244
| Command Reference | Traffic control [Initial value] none [Input mode] global configuration mode [Description] Adds a comment (remark) to the already-generated MAC access list. If this is executed with the "no" syntax, the comment is deleted from the MAC access list. [Note] You can use this command to add a comment even after the access list has been applied to LAN/SFP port and logical interface. (The last-written comment overwrites the previous one.
PAGE 245
Command Reference | Traffic control | 245 9.1.10 Show generated access list [Syntax] show access-list [acl_id] [Parameter] acl-id : <1-2000>, <2001-3000>, <3001-4000> ID of access list [Input mode] unprivileged EXEC mode, privileged EXEC mode [Description] Shows the registered access list. If acl-id is omitted, all access lists are shown.
PAGE 246
| Command Reference | Traffic control SWR2310>show access-group Interface port1.1 : IPv4 access group 1 in Interface port1.7 : IPv6 access group 3002 in Interface port1.8 : MAC access group 2001 in 9.1.
PAGE 247
Command Reference | Traffic control | 247 9.1.15 Set VLAN access map filter [Syntax] vlan filter access-map-name vlan-id [direction] no vlan filter access-map-name vlan-id [direction] [Parameter] access-map-name : Single-byte alphanumeric characters and single-byte symbols(256 characters or less) Access map name specified by the vlan access-map command vlan-id : <1-4094> VLAN ID set to the "enable" status by the vlan command direction : Specifies the direction of applicable frames.
PAGE 248
| Command Reference | Traffic control [Example] Show VLAN access map information. SWR2310>show vlan access-map Vlan access-map VAM001 match ipv4 access-list 2 9.1.17 Show VLAN access map filter [Syntax] show vlan filter [Input mode] unprivileged EXEC mode, privileged EXEC mode [Description] Show VLAN access map filter application information. The following items are shown.
PAGE 249
Command Reference | Traffic control | 249 SWR2310(config)#qos disable 9.2.2 Set default CoS [Syntax] qos cos value no qos cos [Parameter] value : <0-7> Default CoS value [Initial value] qos cos 0 [Input mode] interface mode [Description] Sets the default CoS of LAN/SFP port and logical interface. If this is executed with the "no" syntax, the default value (CoS=0) is specified. The default CoS is used if untagged frames are received when the interface's trust mode is set to CoS.
PAGE 250
| Command Reference | Traffic control [Description] Specifies the trust mode of LAN/SFP port and logical interface. If this is executed with the "no" syntax, the default value (CoS trust mode) is specified. In the case of "CoS" trust mode, the CoS value of incoming frames is used to determine the egress queue. In the case of "DSCP," the DSCP value of incoming frames is used to determine the egress queue.
PAGE 251
Command Reference | Traffic control | 251 [Parameter] ifname : Name of the LAN/SFP port or logical interface. If this is omitted, the command applies to all ports. Interface to show [Input mode] unprivileged EXEC mode, privileged EXEC mode [Description] Shows QoS settings for the specified interface. The following content is shown.
PAGE 252
| Command Reference | Traffic control Port Trust Mode: DSCP Egress Traffic Shaping: Not Configured Queue Scheduling: Queue0 : SP Queue1 : SP Queue2 : SP Queue3 : SP Queue4 : SP Queue5 : SP Queue6 : SP Queue7 : SP DSCP (Queue): 0(2), 8(0), 16(1), 24(3), 32(4), 40(5), 48(6), 56(7), 1(2), 9(0), 17(1), 25(3), 33(4), 41(5), 49(6), 57(7), 2(2), 10(0), 18(1), 26(3), 34(4), 42(5), 50(6), 58(7), 3(2), 11(0), 19(1), 27(3), 35(4), 43(5), 51(6), 59(7), 4(2), 12(0), 20(1), 28(3), 36(4), 44(5), 52(6), 60(7), 5(
PAGE 253
Command Reference | Traffic control | 253 CoS value of conversion source queue-id : <0-7> Egress queue ID corresponding to CoS value [Initial value] See [Note] [Input mode] global configuration mode [Description] Specifies the values of the CoS - egress queue ID conversion table that is used to determine the egress queue. If this is executed with the "no" syntax, the egress queue ID for the specified CoS value is returned to the default setting.
PAGE 254
| Command Reference | Traffic control The DSCP - egress queue ID conversion table is used when the trust mode is set to DSCP. [Note] In order to execute this command, QoS must be enabled. The following table shows the default settings of the DSCP - egress queue ID conversion table. DSCP value Egress queue 0-7 2 8-15 0 16-23 1 24-31 3 32-39 4 40-47 5 48-55 6 56-63 7 [Example] Assign egress queue #4 to DSCP value "0.
PAGE 255
Command Reference | Traffic control | 255 9.2.10 Specify egress queue of frames transmitted from the switch itself [Syntax] qos queue sent-from-cpu queue-id no qos queue sent-from-cpu [Parameter] queue-id : <0-7> Egress queue ID [Initial value] qos queue sent-from-cpu 7 [Input mode] global configuration mode [Description] Specifies the egress queue for the storage destination of frames sent to each LAN/SFP port from the switch itself (CPU).
PAGE 256
| Command Reference | Traffic control [Example] Create class map "class1." SWR2310(config)#class-map class1 SWR2310(config-cmap)# 9.2.12 Associate class map [Syntax] class name no class name [Parameter] name : Class map name [Input mode] policy map mode [Description] Associates a class map to a policy map. When the class map association succeeds, move to policy map class mode. In policy map class mode, you can make the following settings for each traffic class.
PAGE 257
Command Reference | Traffic control | 257 [Parameter] acl-id : <1 - 2000> IPv4 access list ID : <2001 - 3000> MAC access list ID : <3001 - 4000> IPv6 access list ID [Input mode] class map mode [Description] Uses the access list as the conditions to classify the traffic class. If the received frame matches the conditions in the access list, the action in the access list will be the action (permit, deny) for the traffic class.
PAGE 258
| Command Reference | Traffic control [Parameter] tos-list : <0 - 7> Value of the IP header's TOS precedence field used as a classification condition. Up to eight can be registered. [Input mode] class map mode [Description] Uses the value of the IP header's TOS precedence field as a condition to classify the traffic class. If this is executed with the "no" syntax, the classification conditions using TOS precedence are deleted.
PAGE 259
Command Reference | Traffic control | 259 [Parameter] type : Specifies the type of the Ethernet frame. Setting value Description 0xXXXX Hexadecimal expression of type value any All frame [Input mode] class map mode [Description] Uses the Ethernet frame's type value and the presence of a VLAN tag as the conditions to classify the traffic class. If this command is executed with the "no" syntax, deletes conditional settings based on the Ethernet frame's type value and the presence of a VLAN tag.
PAGE 260
| Command Reference | Traffic control Starting VLAN ID value used as classification condition. id-end : <1 - 4094> Ending VLAN ID value used as classification condition. The range from the specified starting value to the ending value can be a maximum of 30. [Input mode] class map mode [Description] Uses the VLAN ID as the condition to classify the traffic class. To delete the classification condition, use the no match vlan command.
PAGE 261
Command Reference | Traffic control | 261 9.2.21 Generate policy map for received frames [Syntax] policy-map name no policy-map name [Parameter] name : Name of policy map (maximum 32 characters; uppercase and lowercase are distinguished) [Input mode] global configuration mode [Description] Generates a policy map. The policy map combines the following processing for received frames, for each traffic class.
PAGE 262
| Command Reference | Traffic control [Description] Applies the policy map to the corresponding LAN/SFP port and logical interface. If this is executed with the "no" syntax, the policy map is deleted from the LAN/SFP port and logical interface. [Note] In order to execute this command, QoS must be enabled. If a policy map has already been applied to the LAN/SFP port and logical interface, an error occurs.
PAGE 263
Command Reference | Traffic control | 263 [Note] In order to execute this command, QoS must be enabled. Pre-marking cannot be used in conjunction with the set egress queue function. [Example] Make the following settings for received frames of LAN port #1 • Permit traffic from the 10.1.0.0 network • Change the classified traffic class to the CoS value "2" [Traffic class definition] SWR2310(config)#access-list 1 permit any 10.1.0.0 0.0.255.
PAGE 264
| Command Reference | Traffic control 9.2.25 Set pre-marking (DSCP) [Syntax] set ip-dscp value no set dscp [Parameter] value : <0 - 63> DSCP value specified by pre-marking [Input mode] policy map class mode [Description] Changes the DSCP value of the classified traffic class to the specified DSCP value. In addition, reassign the egress queue according to the egress queue ID table that corresponds to the trust mode.
PAGE 265
Command Reference | Traffic control | 265 [Parameter] CIR : <1 - 102300000> Traffic rate (kbps) CBS : <11 - 2097120> Burst size of conformant token bucket (kbyte) EBS : <11 - 2097120> Burst size of excess token bucket (kbyte) action : Operation for packets categorized by bandwidth class Setting value Operation transmit Forward drop Discard remark Remarking (CoS/TOS/DSCP) [Input mode] policy map class mode [Description] Specifies individual policers (single rate) for the categorized traffi
PAGE 266
| Command Reference | Traffic control SWR2310(config)#interface port1.1 SWR2310(config-if)#service-policy input policy1 9.2.27 Set individual policers (twin rate) [Syntax] police twin-rate CIR PIR CBS PBS yellow-action action red-action action no police [Keyword] twin-rate : Use twin rate policers : <1 - 102300000> [Parameter] CIR Traffic rate (kbps) PIR : <1 - 102300000> Peak traffic rate (kbps). A value less than CIR cannot be specified.
PAGE 267
Command Reference | Traffic control | 267 • Green: forward, Yellow: rewrite DSCP value to 10, Red: discard [Traffic class definition] SWR2310(config)#ip-access-list 1 permit 10.1.0.0 0.0.255.
PAGE 268
| Command Reference | Traffic control Up to four user-defined values may be used for pre-marking/remarking to a DSCP value not recommended in the RFC. The following table shows the DSCP values that are recommended in the RFC.
PAGE 269
Command Reference | Traffic control | 269 SWR2310(config)#aggregate-police AGP-01 SWR2310(config-agg-policer)# 9.2.
PAGE 270
| Command Reference | Traffic control SWR2310(config-agg-policer)#remark-map yellow ip-dscp 10 SWR2310(config-agg-policer)#exit 9.2.31 Set aggregate policer (twin rate) [Syntax] police twin-rate CIR PIR CBS PBS yellow-action action red-action action no police [Keyword] twin-rate : Use twin rate policers : <1 - 102300000> [Parameter] CIR Traffic rate (kbps) PIR : <1 - 102300000> Peak traffic rate (kbps). A value less than CIR cannot be specified.
PAGE 271
Command Reference | Traffic control | 271 action drop SWR2310(config-agg-policer)#remark-map yellow ip-dscp 10 SWR2310(config-agg-policer)#exit 9.2.
PAGE 272
| Command Reference | Traffic control • • Executing metering by TrTCM with CIR:48kbps, PIR:96kbps, CBS:12kbyte, and PBS:12kbyte Yellow: rewrite DSCP value to 10, Red: discard [Aggregate policer creating] SWR2310(config)#aggregate-police AGP-01 SWR2310(config-agg-policer)#police twin-rate 48 96 12 12 yellow-action remark redaction drop SWR2310(config-agg-policer)#remark-map yellow ip-dscp 10 SWR2310(config-agg-policer)#exit 9.2.
PAGE 273
Command Reference | Traffic control | 273 [Example] Apply aggregate policer "AGP-01" to the two traffic classes "class1" and "class2" of policy map "policy1.
PAGE 274
| Command Reference | Traffic control Yellow Bytes : 2048 Red Bytes : 51552 9.2.36 Clear metering counters [Syntax] clear qos metering-counters [ifname] [Parameter] ifname : LAN/SFP port name or logical interface name. If this is omitted, the command applies to all ports. [Input mode] privileged EXEC mode [Description] Clears the metering totals for all policers (individual policers / aggregate policers) on the specified LAN/SFP port or logical interface.
PAGE 275
Command Reference | Traffic control | 275 SWR2310(config-pmap-c)#set cos-queue 3 SWR2310(config-pmap-c)#exit SWR2310(config-pmap)#exit SWR2310(config)#interface port1.1 SWR2310(config-if)#service-policy input policy1 9.2.38 Set egress queue (DSCP-Queue) [Syntax] set ip-dscp-queue value no set ip-dscp-queue [Parameter] value : <0 - 63> DSCP value corresponding to egress queue [Input mode] policy map class mode [Description] Assigns an egress queue to the classified traffic class.
PAGE 276
| Command Reference | Traffic control Item Description Policy-Map Name Policy map name State Application status of the policy map (attached/detached) Class-Map Name Class map information. For details, refer to the show classmap command.
PAGE 277
Command Reference | Traffic control | 277 SWR2310#show policy-map policy1 Policy-Map Name: policy1 State: attached Class-Map Name: class1 Qos-Access-List Name: 1 Police: Mode: SrTCM average rate (48 Kbits/sec) burst size (12 KBytes) excess burst size (12 KBytes) yellow-action (Remark [DSCP:10]) red-action (Drop) 9.2.
PAGE 278
| Command Reference | Traffic control edit/erase : Disable attach limitation CoS trust mode : Enable DSCP trust mode : Enable Port-Priority trust mode : Disable Show the status of class map "class1". SWR2310#show qos map-status class class1 class1 status policy-map association : policy1 (Detached) edit/erase : Disable attach limitation CoS trust mode : Enable DSCP trust mode : Enable Port-Priority trust mode : Disable 9.2.
PAGE 279
Command Reference | Traffic control | 279 9.2.42 Set traffic shaping (individual port) [Syntax] traffic-shape rate kbps CIR burst BC no traffic-shape rate [Parameter] CIR : <18-1000000> Traffic rate (kbps). Since rounding occurs, the value actually applied to the input value might be less (see [Note]) BC : <4-16000> Burst size (kbyte). Specified in 4-kbyte units. [Initial value] no traffic-shape rate [Input mode] interface mode [Description] Specifies shaping for the port.
PAGE 280
| Command Reference | Traffic control no traffic-shpe queue 5 rate no traffic-shpe queue 6 rate no traffic-shpe queue 7 rate [Input mode] interface mode [Description] Specifies shaping for the egress queue of the port. If this is executed with the "no" syntax, the egress queue shaping setting is disabled. [Note] In order to execute this command, QoS must be enabled. Since rounding occurs on the traffic rate, the value actually applied to the input value might be less.
PAGE 281
Command Reference | Traffic control | 281 9.3.2 Set flow control (IEEE 802.3x PAUSE send/receive) (interface) [Syntax] flowcontrol type no flowcontrol [Parameter] type : Flow control operation Setting value Description auto Enable flow control auto negotiation both Enable transmission/reception of Pause frames disable Disable flow control [Initial value] flowcontrol disable [Input mode] interface mode [Description] Enables flow control for the LAN/SFP port (IEEE 802.3x PAUSE frames send/receive).
PAGE 282
| Command Reference | Traffic control [Description] Shows information related to flow control (enabled/disabled, number of PAUSE frames sent/received). [Note] The number of PAUSE frames sent and received are shown only if flow control is enabled on the corresponding port. The number of PAUSE frames sent and received is cleared when you execute the clear frame-counters command. [Example] Show flow control information for LAN port #1. SWR2310#show flowcontrol port1.
PAGE 283
Command Reference | Traffic control | 283 SWR2310(config)#interface port1.1 SWR2310(config-if)#storm-control broadcast multicast level 30 9.4.2 Show storm control reception upper limit [Syntax] show storm-control [ifname] [Parameter] ifname : LAN/SFP port interface name Interface to show [Initial value] none [Input mode] unprivileged EXEC mode, privileged EXEC mode [Description] Shows the upper limit value for frame reception. If the interface name is omitted, all interfaces are shown.
PAGE 284
| Command Reference | Application Chapter 10 Application 10.1 Local RADIUS server 10.1.
PAGE 285
Command Reference | Application | 285 10.1.3 Generate a route certificate authority [Syntax] crypto pki generate ca [ca-name] no crypto pki generate ca [Parameter] ca-name : Certificate authority name Characters that can be inputted for the certificate authority name • Within 3–32 characters • Single-byte alphanumeric characters and symbols other than the characters \ [ ] " ? and spaces • Cannot specify “DEFAULT” [Initial value] none [Input mode] global configuration mode [Description] Generates a route
PAGE 286
| Command Reference | Application Setting value Description pap PAP authentication method peap PEAP authentication method eap-md5 EAP-MD5 authentication method eap-tls EAP-TLS authentication method eap-ttls EAP-TTLS authentication method [Initial value] authentication pap peap eap-md5 eap-tls eap-ttls [Input mode] RADIUS configuration mode [Description] Specifies the authentication method used for the local RADIUS server.
PAGE 287
Command Reference | Application | 287 [Input mode] RADIUS configuration mode [Description] Adds a RADIUS client (NAS) to the RADIUS client list. The maximum number of registered entries is 100. If this command is executed with the "no" syntax, the specified RADIUS client setting is deleted. [Note] RADIUS client (NAS) information configured using this command will not display in running-config or startup-config.
PAGE 288
| Command Reference | Application mac-address : hhhh.hhhh.hhhh (h is hexadecimal) MAC address for terminal (user) to authenticate ssid : SSID connection point (32 characters or less, single-byte alphanumeric characters and symbols other than the characters \ [ ] " ? and spaces ) name : User name (32 characters or less, single-byte alphanumeric characters and symbols other than the characters " ? and spaces mail-address : Mail address (256 characters or less, single-byte alphanumeric character
PAGE 289
Command Reference | Application | 289 10.1.8 Reauthentication interval setting [Syntax] reauth interval time no reauth interval [Parameter] time : <3600,43200,86400,604800> Reauthentication interval (no. of seconds) [Initial value] reauth interval 3600 [Input mode] RADIUS configuration mode [Description] Sets the reauthentication interval that is notified to the RADIUS client (NAS). The RADIUS client (NAS) determines whether the reauthentication interval will be used.
PAGE 290
| Command Reference | Application Authentication method Characters that can be inputted EAP-MD5, EAP-TTLS, PEAP, PAP Single-byte alphanumeric characters and symbols other than the characters \ [ ] " ? and spaces EAP-TLS Single-byte alphanumeric characters and symbols other than the characters \ [ ] / : * | < > " ? and spaces [Input mode] privileged EXEC mode [Description] This issues client certificates to users for which the EAP-TLS certification method is specified.
PAGE 291
Command Reference | Application | 291 10.1.
PAGE 292
| Command Reference | Application Authentication method Characters that can be inputted EAP-MD5, EAP-TTLS, PEAP, PAP Single-byte alphanumeric characters and symbols other than the characters \ [ ] " ? and spaces EAP-TLS Single-byte alphanumeric characters and symbols other than the characters \ [ ] / : * | < > " ? and spaces [Input mode] privileged EXEC mode [Description] This exports the client certificates to an SD card.
PAGE 293
Command Reference | Application | 293 Client certificates to be sent are ZIP files, compressed using the passwords for each user. E-mail cannot be sent to users whose e-mail addresses have not been set. To send e-mail, the e-mail destination server and e-mail recipient name must be configured in the e-mail template, and an email template ID for use when sending the e-mail must be set using the mail send certificate command. [Note] Only the newest client certificate (1) can be sent via e-mail.
PAGE 294
| Command Reference | Application Setting value Description IPv4 address (A.B.C.D) Range from 0.0.0.1 to 223.255.255.255, except for 127.0.0.1 IPv4 network address (A.B.C.
PAGE 295
Command Reference | Application | 295 SWR2310#show radius-server local user detail 00a0de000001 Total 1 userid : password : mode : vlan : MAC : SSID : name : mail-address: expire date : certificated: 00a0de000001 secretpassword eap-tls 10 00a0.de00.0001 YamahaTaro test.com 2037/12/31 Not 10.1.18 Client certificate issuance status display [Syntax] show radius-server local certificate status [Input mode] privileged EXEC mode [Description] Shows the issuance status for client certificates.
PAGE 296
| Command Reference | Application [Example] This displays client certificates that have been issued for specific users. SWR2310#show radius-server local certificate list detail Yamaha userid certificate number enddate -------------------------------------------------------------------------------------------Yamaha Yamaha-DF598EE9B44D22CC 2018/12/31 Yamaha-DF598EE9B44D22CD 2019/12/31 10.1.
PAGE 297
Command Reference | Index | 297 Index A aaa authentication auth-mac 148 aaa authentication auth-web 149 aaa authentication dot1x 148 access-group (IPv4) 239 access-group (IPv6) 241 access-group (MAC) 244 access-list (IPv4) 237 access-list (IPv6) 240 access-list (MAC) 242 access-list description (IPv4) 239 access-list description (IPv6) 241 access-list description (MAC) 243 aggregate-police 268 arp 212 arp-ageing-timeout 212 auth clear-state time (global configuration mode) 164 auth clear-state time (interf
PAGE 298
| Command Reference | Index I instance 196 instance priority 197 instance vlan 196 ip address 206 ip address dhcp 207 ip forwarding 213 ip igmp snooping 225 ip igmp snooping check ttl 228 ip igmp snooping fast-leave 226 ip igmp snooping mrouter interface 226 ip igmp snooping querier 227 ip igmp snooping query-interval 227 ip igmp snooping version 228 ip route 209 ipv6 214 ipv6 address 215 ipv6 address autoconfig 216 ipv6 forwarding 220 ipv6 mld snooping 231 ipv6 mld snooping fast-leave 232 ipv6 mld sno
PAGE 299
Command Reference | Index | 299 radius-server local interface 284 radius-server local refresh 289 radius-server local-profile 285 radius-server retransmit 158 radius-server timeout 158 reauth interval 289 region 197 reload 121 remark-map (aggregate policer mode) 271 remark-map (policy map class mode) 267 remote-login 71 restore system 125 revision 197 rmon 60 rmon alarm 63 rmon clear counters 67 rmon event 62 rmon history 61 rmon statistics 60 S save logging 50 send from 86 send notify wait-time 88 send se
PAGE 300
| Command Reference | Index show spanning-tree mst instance 201 show spanning-tree statistics 194 show ssh-server 78 show ssh-server host key 80 show stack 120 show startup-config 34 show static-channel-group 139 show storm-control 283 show tech-support 40 show telnet-server 68 show tftp-server 72 show users 30 show vlan 184 show vlan access-map 247 show vlan filter 248 show vlan multiple-vlan 185 show vlan private-vlan 185 shutdown 126 slave-watch down-count 105 slave-watch interval 104 snapshot delete