D-Link DWS-1008 Mode d’emploi

DWS-1008 CLI Reference Guide

D-Link Systems, Inc.

Table of Contents

Using the Command Line Interface ................................................................2

CLI Conventions ........................................................................................2

Globs .........................................................................................................4

Command Line Editing ..............................................................................6

Using CLI Help ...........................................................................................8

Access Commands .......................................................................................10

System Services Commands .......................................................................12

Port Commands ............................................................................................24

VLAN Commands .........................................................................................44

IP Services Commands ................................................................................54

AAA Commands .........................................................................................119

Access Point Commands ............................................................................163

Spanning Tree Protocol (STP) Commands .................................................230

IGMP Snooping Commands .......................................................................252

Security ACL Commands ...........................................................................270

Cryptography Commands ...........................................................................289

RADIUS Commands ...................................................................................301

802.1X Management Commands ...............................................................311

Session Management Commands .............................................................325

RF Detection Commands ...........................................................................336

File Management Commands ....................................................................351

Trace Commands .......................................................................................368

Snoop Commands ......................................................................................373

System Log Commands .............................................................................380

Boot Prompt Commands ............................................................................388

Warranty .....................................................................................................400

Registration ................................................................................................405

Table of Contents

DWS-1008 CLI Reference Guide

D-Link Systems, Inc.

Using the Command Line Interface

CLI Conventions

Command Prompts

By default, the MSS CLI provides the following prompt for restricted users. The mm portion

shows the DWS switch model number (for example, 1008) and the nnnnnn portion shows the

last 6 digits of the switch’s media access control (MAC) address.

DWS-mm-nnnnnn>

After you become enabled as an administrative user by typing enable and supplying a suitable

password, MSS displays the following prompt:

DWS-mm-nnnnnn#

For ease of presentation, this manual shows the restricted and enabled prompts as follows:

DWS-1008>

DWS-1008#

Syntax Notation

The MSS CLI uses standard syntax notation:

• Bold monospace font identiﬁes the command and keywords you must type. For example:

set enablepass

• Italic monospace font indicates a placeholder for a value. For example, you replace vlan-id

in the following command with a virtual LAN (VLAN) ID:

clear interface vlan-id ip

• Curly brackets ({ }) indicate a mandatory parameter, and square brackets ([ ]) indicate

an optional parameter. For example, you must enter dynamic or port and a port list in the

following command, but a VLAN ID is optional:

clear fdb {dynamic | port port-list} [vlan vlan-id]

• A vertical bar (|) separates mutually exclusive options within a list of possibilities. For

example, you enter either enable or disable, not both, in the following command:

set port {enable | disable} port-list

Using the Command Line Interface

DWS-1008 CLI Reference Guide

D-Link Systems, Inc.

Using the Command Line Interface

Text Entry Conventions and Allowed Characters

Unless otherwise indicated, the MSS CLI accepts standard ASCII alphanumeric characters,

except for tabs and spaces, and is case-insensitive.

The CLI has speciﬁc notation requirements for MAC addresses, IP addresses, and masks,

and allows you to group usernames, MAC addresses, virtual LAN (VLAN) names, and ports

in a single command.

D-Link recommends that you do not use the same name with different capitalizations for

VLANs or access control lists (ACLs). For example, do not conﬁgure two separate VLANs

with the names red and RED.

The CLI does not support the use of special characters including the following in any named

elements such as SSIDs and VLANs: ampersand (&), angle brackets (< >), number sign (#),

question mark (?), or quotation marks (“”).

In addition, the CLI does not support the use of international characters such as the accented

É in DÉCOR.

MAC Address Notation

MSS displays MAC addresses in hexadecimal numbers with a colon (:) delimiter between

bytes—for example, 00:01:02:1a:00:01. You can enter MAC addresses with either hyphen (-)

or colon (:) delimiters, but colons are preferred.

For shortcuts:

• You can exclude leading zeros when typing a MAC address. MSS displays of MAC

addresses include all leading zeros.

• In some speciﬁed commands, you can use the single-asterisk (*) wildcard character

to represent from 1 byte to 5 bytes of a MAC address.

IP Address and Mask Notation

MSS displays IP addresses in dotted decimal notation—for example, 192.168.1.111. MSS

makes use of both subnet masks and wildcard masks.

Subnet Masks

Unless otherwise noted, use classless interdomain routing (CIDR) format to express subnet

masks—for example, 192.168.1.112/24. You indicate the subnet mask with a forward slash

(/) and specify the number of bits in the mask.

DWS-1008 CLI Reference Guide

D-Link Systems, Inc.

Using the Command Line Interface

Wildcard Masks

Security access control lists (ACLs) use source and destination IP addresses and wildcard

masks to determine whether the switch ﬁlters or forwards IP packets. Matching packets are

either permitted or denied network access. The ACL checks the bits in IP addresses that

correspond to any 0s (zeros) in the mask, but does not check the bits that correspond to 1s

(ones) in the mask. You specify the wildcard mask in dotted decimal notation.

For example, the address 10.0.0.0 and mask 0.255.255.255 match all IP addresses that

begin with 10 in the ﬁrst octet.

User Globs, MAC Address Globs, and VLAN Globs

Name “globbing” is a way of using a wildcard pattern to expand a single element into a list of

elements that match the pattern. MSS accepts user globs, MAC address globs, and VLAN

globs. The order in which globs appear in the conﬁguration is important, because once a glob

is matched, processing stops on the list of globs.

User Globs

A user glob is shorthand method for matching an authentication, authorization, and accounting

(AAA) command to either a single user or a set of users.

A user glob can be up to 80 characters long and cannot contain spaces or tabs. The

double-asterisk (**) wildcard characters with no delimiter characters match all usernames.

The single-asterisk (*) wildcard character matches any number of characters up to, but not

including, a delimiter character in the glob. Valid user glob delimiter characters are the at (@)

sign and the period (.).

For example, the following globs identify the following users:

User Glob User(s) Designated

jose@example.com User jose at example.com

*@example.com All users at example.com whose usernames do not

contain periods for example, jose@example.com and

tamara@example.com, but not nin.wong@example.com,

because nin.wong contains a period.

*@marketing.example.com All marketing users at example.com whose usernames do

not contain periods.

*.*@marketing.example.com All marketing users at example.com whose usernames

contain periods.

* All users with usernames that have no delimiters.

DWS-1008 CLI Reference Guide

D-Link Systems, Inc.

Using the Command Line Interface

EXAMPLE\* All users in the Windows Domain EXAMPLE with

usernames that have no delimiters.

EXAMPLE\*.* All users in the Windows Domain EXAMPLE whose

usernames contain periods.

** All users.

MAC Address Globs

A media access control (MAC) address glob is a similar method for matching some

authentication, authorization, and accounting (AAA) and forwarding database (FDB)

commands to one or more 6-byte MAC addresses. In a MAC address glob, you can use a

single asterisk (*) as a wildcard to match all MAC addresses, or as follows to match from 1

byte to 5 bytes of the MAC address:

00:*

00:01:*

00:01:02:*

00:01:02:03:*

00:01:02:03:04:*

For example, the MAC address glob 02:06:8c* represents all MAC addresses starting with

02:06:8c. Specifying only the ﬁrst 3 bytes of a MAC address allows you to apply commands

to MAC addresses based on an organizationally unique identity (OUI).

VLAN Globs

A VLAN glob is a method for matching one of a set of local rules on a switch, known as the

location policy, to one or more users. MSS compares the VLAN glob, which can optionally

contain wildcard characters, against the VLAN-Name attribute returned by AAA, to determine

whether to apply the rule.

To match all VLANs, use the double-asterisk (**) wildcard characters with no delimiters. To

match any number of characters up to, but not including, a delimiter character in the glob, use

the single-asterisk (*) wildcard. Valid VLAN glob delimiter characters are the at (@) sign and

the period (.).

For example, the VLAN glob bldg4.* matches bldg4.security and bldg4.hr and all other VLAN

names with bldg4. at the beginning.

Matching Order for Globs

In general, the order in which you enter AAA commands determines the order in which MSS

matches the user, MAC address, or VLAN to a glob. To verify the order, view the output of the

show aaa or show conﬁg command. MSS checks globs that appear higher in the list before

items lower in the list and uses the ﬁrst successful match.

DWS-1008 CLI Reference Guide

D-Link Systems, Inc.

Using the Command Line Interface

Port Lists

The physical Ethernet ports on a switch can be set for connection to DWL-8220AP access

points, authenticated wired users, or the network backbone. You can include a single port or

multiple ports in one CLI command by using the appropriate list format.

The ports on a DWS-1008 switch are numbered 1 through 8. No port 0 exists on the switch.

You can include a single port or multiple ports in a command that includes port port-list. Use

one of the following formats for port-list:

• A single port number. For example:

DWS-1008# set port enable 3

• A comma-separated list of port numbers, with no spaces. For example:

DWS-1008# show port poe 1,2,4,5

• A hyphen-separated range of port numbers, with no spaces. For example:

DWS-1008# reset port 1-4

• Any combination of single numbers, lists, and ranges. Hyphens take precedence over

commas. For example:

DWS-1008# show port status 1-3,6

Virtual LAN Identiﬁcation

The names of virtual LANs (VLANs) are set by you and can be changed. In contrast, VLAN

ID numbers, which the DWS-1008 switch uses locally, are determined when the VLAN is ﬁrst

conﬁgured and cannot be changed. Unless otherwise indicated, you can refer to a VLAN by

either its VLAN name or its VLAN number. CLI set and show commands use a VLAN’s name

or number to uniquely identify the VLAN within the switch.

Command-Line Editing

MSS editing functions are similar to those of many other network operating systems.

DWS-1008 CLI Reference Guide

D-Link Systems, Inc.

Using the Command Line Interface

Tabs

The CLI uses the Tab key for command completion. You can type the ﬁrst few characters of a

command and press the Tab key to display the command(s) that begin with those characters.

For example:

DWS-1008# show i <Tab>

igmp Show igmp information

interface Show interfaces

ip Show ip information

Keyboard Shortcuts

The following table lists the keyboard shortcuts for entering and editing CLI commands:

Keyboard Shortcut(s) Function

---------------------------------- ---------------------------------------------------------------------------

Ctrl+A Jumps to the ﬁrst character of the command line.

Ctrl+B or Left Arrow key Moves the cursor back one character.

Ctrl+C Escapes and terminates prompts and tasks.

Ctrl+D Deletes the character at the cursor.

Ctrl+E Jumps to the end of the current command line.

Ctrl+F or Right Arrow key Moves the cursor forward one character.

Ctrl+K Deletes from the cursor to the end of the command line.

Ctrl+L or Ctrl+R Repeats the current command line on a new line.

Ctrl+N or Down Arrow key Enters the next command line in the history buffer.

Ctrl+P or Up Arrow key Enters the previous command line in the history buffer.

Ctrl+U or Ctrl+X Deletes characters from the cursor to the beginning of the

command line.

Ctrl+W Deletes the last word typed.

Esc B Moves the cursor back one word.

Esc D Deletes characters from the cursor forward to the end of

the word.

Delete key or Backspace key Erases mistake made during command entry. Reenter the

command after using this key.

History Buffer

The history buffer stores the last 63 commands you entered during a terminal session. You

can use the Up Arrow and Down Arrow keys to select a command that you want to repeat

from the history buffer.

DWS-1008 CLI Reference Guide

D-Link Systems, Inc.

Using the Command Line Interface

To see a subset of the online help, type the command for which you want more information.

For example, to display all the commands that begin with the letter i, type the following

command:

DWS-1008# show i?

igmp Show igmp information

interface Show interfaces

ip Show ip information

Using CLI Help

The CLI provides online help. To see the full range of commands available at your access

level, type the help command. For example:

DWS-1008# help

Commands:

---------------------------------------------------------------------------------------------------

backup Backup system information to ﬁlename (or url)

clear Clear, use ‘clear help’ for more information

commit Commit the content of the ACL table

copy Copy from ﬁlename (or url) to ﬁlename (or url)

crypto Crypto, use ‘crypto help’ for more information

delete Delete url

dir Show list of ﬁles on ﬂash device

disable Disable privileged mode

exit Exit from the Admin session

help Show this help screen

history Show contents of history substitution buffer

hit-sample-rate Set NP hit-counter sample rate

load Load, use ‘load help’ for more information

logout Exit from the Admin session

md5 md5 ﬁlename

mkdir Create a subdirectory on ﬂash device

monitor Monitor, use ‘monitor help’ for more information

ping Send echo packets to hosts

quickstart Perform an initial conﬁguration

quit Exit from the Admin session

reset Reset, use ‘reset help’ for more information

restore Restore system information from ﬁlename (or url)

rmdir Remove a subdirectory created by mkdir

rollback Remove changes to the edited ACL table

save Save the running conﬁguration to persistent storage

set Set, use ‘set help’ for more information

show Show, use ‘show help’ for more information

telnet telnet IP address [server port]

test Test AAA

traceroute Print the route packets take to network host

validate validate action functions

DWS-1008 CLI Reference Guide

D-Link Systems, Inc.

Using the Command Line Interface

To see all the variations, type one of the commands followed by a question mark (?). For

example:

DWS-1008# show ip ?

alias Show ip aliases

dns Show DNS status

route Show ip route table

ssh show ip ssh

telnet show ip telnet

To determine the port on which Telnet is running, type the following command:

DWS-1008# show ip telnet

Server Status Port

----------------------------------

Disabled 23

Understanding Command Descriptions

Each command description in the D-Link Command Reference contains the following

elements:

• A command name, which shows the keywords but not the variables. For example, the

following command name appears at the top of a command description and in the

index:

set {ap | dap} name

The set {ap | dap} name command has the following complete syntax:

set {ap port-list | dap dap-num} name name

• A brief description of the command’s functions.

• The full command syntax.

• Any command defaults.

• The command access, which is either enabled or all. All indicates that anyone can

access this command. Enabled indicates that you must enter the enable password

before entering the command.

• Special tips for command usage. These are omitted if the command requires no

special usage.

• One or more examples of the command in context, with the appropriate system

prompt and response.

Autres manuels pour DWS-1008

Table des matières

Autres manuels D-Link Changer

D-Link

D-Link DGS-3100-24 Manuel utilisateur

D-Link

D-Link DES-1218 Manuel utilisateur

D-Link

D-Link DMS-1100-10TP Manuel utilisateur

D-Link

D-Link DES-3028 Manuel utilisateur

D-Link

D-Link DKVM-4K - KVM Switch Manuel utilisateur

D-Link

D-Link DKVM-4U Manuel utilisateur

D-Link

D-Link TM DES-6500 Manuel utilisateur

D-Link

D-Link DSB-650TX Manuel utilisateur

D-Link

D-Link DES-1226G Manuel utilisateur

D-Link

D-Link GO-SW-16GE Manuel utilisateur

D-Link

D-Link KVM-222 Manuel utilisateur

D-Link

D-Link Web Smart Switch DGS-1210-16 Manuel utilisateur

D-Link

D-Link DGS-3000-28L Manuel utilisateur

D-Link

D-Link DES-1005P Manuel utilisateur

D-Link

D-Link xStack DGS-3600 Series Manuel utilisateur

D-Link

D-Link DKVM-222 Manuel utilisateur

D-Link

D-Link xStack DGS-3426 Manuel utilisateur

D-Link

D-Link DGS-3000 series Manuel utilisateur

D-Link

D-Link DES-1024A Manuel utilisateur

D-Link

D-Link xStack DGS-3620-52P Manuel utilisateur

D-Link

D-Link DUB-H4 - Hub - USB Manuel utilisateur

D-Link

D-Link DKVM-4U Manuel utilisateur

D-Link

D-Link xStack DES-3200-28P Manuel utilisateur

D-Link

D-Link DES-3350SR Manuel utilisateur

Manuels Changer populaires d'autres marques

URC

URC Total Control MFS-8 Manuel utilisateur

Azbil

Azbil HPQ-D11 Manuel utilisateur

Sony

Sony DFS-900M Manuel utilisateur

SICK

SICK i17S Manuel utilisateur

F&F

F&F SZR-277 Manuel utilisateur

Shure

Shure UAMS/BK Manuel utilisateur

Dräger

Dräger X-zone Switch Off Manuel utilisateur

Asco

Asco Joucomatic 349 Series Manuel utilisateur

BT Mini Hub Manuel utilisateur

Johnson Controls

Johnson Controls FS80-C Manuel utilisateur

Alcatel-Lucent

Alcatel-Lucent 7450 ESS-12 Manuel utilisateur

MicroNet

MicroNet SP1200A Manuel utilisateur

Ruijie

Ruijie RG-PF2920 Series Manuel d'installation et d'exploitation

Altinex

Altinex DA1914SX Manuel utilisateur

MiLAN

MiLAN MIL-SM2401M Manuel utilisateur

RJM

RJM MASTERMIND PBC/6X Manuel utilisateur

Atlas

Atlas MMK-KVM8 Manuel utilisateur

Cabletron Systems

Cabletron Systems GIGAswitch GSR-16 Manuel utilisateur