Xenya XS26GS, User Manual

Page 1: ...Jun Ver http Man e 15 20 sion 1 0 www xeny X aged 011 01 ya si XS26GS Ma XS2 Optica User anaged Optic 26GS al Ethe Manu cal Ethernet ernet S ual t Switch Use Switch er Manual h ...

Page 2: ...under any patent or patent rights of XENYA d o o makes no warranties implied or otherwise in regard to this document and to the products described in this document The information provided by this document is believed to be accurate and reliable to the publication date of this document However Xenya d o o assumes no responsibility for any errors in this document Furthermore Xenya d o o assumes no ...

Page 3: ...02 1Q VLAN 11 2 5 4 Protocol VLAN 13 2 5 5 MAC based VLAN 13 2 5 6 VLAN VPN 14 2 5 7 GARP 16 2 6 QOS 16 2 6 1 QoS Configuration 17 2 6 2 Scheduling Mechanism 17 2 6 3 Transmit Queues 18 2 6 4 DSCP Map 18 2 7 FORWARDING 19 2 7 1 Unicast MAC Address 19 2 7 2 Multicast MAC Address 20 2 7 3 IGMP Snooping 21 2 7 4 MVR 22 2 7 5 Unknown Multicast 23 2 8 SECURITY 24 2 8 1 Management Security 24 2 8 2 Port...

Page 4: ... COMMANDS 57 3 6 USER LEVEL 57 3 7 SYSTEM MANAGEMENT COMMANDS 58 3 8 PORT BASIC CONFIGURATION COMMANDS 70 3 9 LINK AGGREGATION COMMANDS 78 3 10 MIRRORING COMMANDS 85 3 11 VLAN COMMANDS 87 3 11 1 VLAN Configuration Commands 87 3 11 2 Port Based VLAN Configuration Commands 98 3 12 VLAN VPN 101 3 13 GVRP COMMANDS 103 3 14 QOS COMMANDS 107 3 15 MAC ADDRESS TABLE MANAGEMENT COMMANDS 113 3 16 MULTICAST ...

Page 5: ...XS26GS Managed Optical Ethernet Switch User Manual iv REVISION HISTORY Date Version Description Jan 28 2011 V1 00 Initial release Jun 15 2011 V1 01 Graphics update ...

Page 6: ...cast multicast addresses z Jumbo frame of up to 9216 bytes z 802 1p Port and DiffServ based QoS package classification with 4 priority queues Support queue mapping and DSCP mapping z 4K 802 1Q based VLAN z Port based VLAN z 16 Protocol based VLAN z MAC based VLAN z Guest VLAN z VLAN VPN QinQ z GARP GVRP z 16 trunk groups of up to 8 member ports with flexible load distribution control and fail over...

Page 7: ...rface Options z 1000Base X o Dual multimode fiber 50 125μm single wavelength 850nm dual LC connector 550m reach o Dual multimode fiber 62 5 125μm single wavelength 850nm dual LC connector 275m reach o Dual single mode fiber single wavelength 1310nm or 1550nm dual LC connector 15 40 km reach 1 4 Power Supply Options z AC90 264V 1 2A max 50 60Hz or z DC18 36V 2A or z DC36 72V 1 5A z Power Consumptio...

Page 8: ...r superuser Password none 123 123 2 Port State enabled Flow Control disabled Learning enabled Rate limit disabled Negotiation enabled 3 VLAN VLAN mode none Static VLAN 1 including all ports Port VID 1 Port link type hybrid Frame type admit all 4 SNMP Version v1 Community public Privilege RO User none SNMP trap enabled Trap host IP none 5 Protocols IGMP Snooping Disabled GARP GVRP Disabled STP Disa...

Page 9: ... SNMP v2 1 2 3 9 FMC private MIBS MIB counters of groups 1 2 4 9 Web management server Http Server Support goahead 2 1 8 Java scripts Java Applet CGI Telnet server Telnet 1 0 Console Standard UART Spanning tree protocol IEEE 802 1d 1w 1s Four level priority queuing IEEE 802 1p Port based VLAN SVL Tag based VLAN IEEE 802 1q IVL and SVL GVRP Protocol based VLAN IEEE 802 1v Trunking IEEE 802 3ad LACP...

Page 10: ...ype the user name and password as shown in section 1 6 above If you need to change IP address at the first time you can modify it through RS232 console or using telnet to login 2 1 Conventions Convention Description Boldface Keywords on web management page is in Boldface italic Tag page name is in italic Button on web management page is in 2 2 System Information At login the web is on System Infor...

Page 11: ...select authentication between 802 1x or MAC based or disable the authentication LLDP globally enable or disable the protocol LBD used to globally enable loopback detection function on this switch It will check whether there is a loop on the switch on any VLAN If there is one on a VLAN it will shut down the port or will send out a trap LBD Interval Time time interval for loopback detection in the r...

Page 12: ... control func o provided S egation o 16 link agg on There ar s a detailed nual trunk ca s port s Link either enab static LACP anaged Opti n tup is compl specific port ntrol for the hybrid port w ponding MAC n is disabled d For an acce enabled no ction is disab See the follo n gregation gro re three type description o an only be m Aggregation led or disabl trunk can on cal Ethernet eted click t spe...

Page 13: ...re a trunk as a monitoring port There are four tag pages on this webpage to configure various parameters Aggregate Groups create and configure a trunk The switch can have up to 13 trunks Trunk ID one of the 13 trunk IDs from T1 to T13 for the user to choose from Trunk Name give a name for the selected trunk Trunk Type select the trunk to be a manual trunk or static LACP trunk Port choose up to 8 p...

Page 14: ...rts are waiting for LACP protocol packet from the opposite device 2 4 3 Port Bandwidth This page sets the ingress and or egress rate limit for each port Port the port for which the rate limit is configured Ingress the desired ingress rate limit to be configured Choose disabled to set the port with no ingress rate limit which means the port will run in full speed for ingress traffic Egress the desi...

Page 15: ...and s XS26GS Ma oring ort mirroring t one Monito r ports to wh this port wil this port will egress traff anaged Opti g function Y otring Port b hich the traff l be mirrored l be mirrored fic of this po cal Ethernet You can set but more tha fic is mirrore d to each of d to each of ort will be m t Switch Use t up 1 to 4 an one Morro ed the Monitori the Monitori irrored to ea er Manual Mirroring orin...

Page 16: ...d rem ag pages on 2 1Q VLA XS26GS Ma orts 802 1Q onfiguration d LAN mode fro d VLAN reate a new V s can be crea the port is a lists all port LAN p with VLAN mains as a m this webpage AN anaged Opti port based om the follow N VLAN group ated each V a member of t based VLAN identifier V member befo e for the use cal Ethernet d mac based wing no VLA with specific LAN group c f the VLAN g N groups con...

Page 17: ...gurati LAN group e is a tagge gged The pa t is an untag tagged rom the VLAN the port to rt 1Q VLAN po ly one Port V when arrivi ess Trunk only one VLA n have multip n a VLAN gro cept it leaves anaged Opti new VLAN g be created ing VLAN gro or delete an oup 1 on each port ca ed member ackets conta ged VLAN m N group How be added t ort paramete VLAN ID PVI ng at the po or Hybrid AN and the t ple VLA...

Page 18: ...AN ol VLAN The group to con hich users ca for Etherne selected wh lists all prot ed VLAN sed VLAN T a group to c ddress of inc lists all mac anaged Opti rnet package kage is assoc e with the 80 ccepts Ethern ackages wh ones e status of al e pull down nfigure For a an choose E et II for wh en setting P tocol VLAN g N The pull down configure Fo coming pack c based VLAN cal Ethernet e is discarde cia...

Page 19: ...fo r disable a s PID value 0 ecific VLAN T me as the pr n from happ TPID value 0806 800 x8847 0x88 8137 x8000 x8809 0x888E XS26GS Ma N l Setting s global VLAN e the global Port s VLAN VPN a TPID value is o be 0x9100 or setting pecific port x8100 by d Tag Note tha rotocol type pening the 48 anaged Opti N VPN VLAN VPN and sets TPID s 0x8100 Be 0 default TPID at the locatio field in a pa following pr...

Page 20: ...is page XS26GS Ma of VLAN VPN ou can set Qi d Port for the outer er tag VID H package has all inclusive er tag VLAN m which a p lists all conf anaged Opti An Outer Ta nQ paramete r tag that wil High An o a VLAN ID va priority in t ackage is re figured QinQ cal Ethernet ag can be add ers as Outer ll be added t uter tag is a alue between the range of eceived Q mapping ru t Switch Use ded which is r ...

Page 21: ...ard proto ke sure GVRP ages RP Join Time Leave Time port GVRP pa be set to Nor passing regi gistration allo of VLANs wh n of VLANs page lists th ts Quality of anaged Opti P is based ocols describ P is enabled e Leave Tim and Leave arameters Fo rmal defaul istration an ows passing hile Forbidde he GVRP attr Service Qo cal Ethernet on Generic bed in IEEE 8 see section me and Lea Time must or a selec...

Page 22: ...g iority Weig alue ranges XS26GS Ma fault configu figuratio oS paramete Priority can iguration tag ng Mech eduling algo n be set to ct priority S WRR uses t ght custom from 1 to 55 anaged Opti uration on ers For a sele n be set from g page lists t hanism orithm and re Strict Prio SP algorithm the weighted izes the wei 5 cal Ethernet ected Port m 0 7 the default p elated param rity or Wei m for que...

Page 23: ...ets th X ansmit Q e 802 1p pri able lists th SCP Map e mapping b XS26GS Ma Queues iority to loca he default m p between the anaged Opti s al precedence mapping bet Local pre Q1 Q1 Q2 Q2 Q3 Q3 Q4 Q4 DSCP value cal Ethernet e mapping tween 802 ecedence and the 802 t Switch Use 1p priority 2 1p priority er Manual and local ...

Page 24: ... an existing u MAC This p XS26GS Ma g MAC Add To add mod to which th cifies the de e outbound mic Static a indicates a dress entry dress Configu ormation of unicast MAC page lists all anaged Opti dress ify or delete e MAC addre stination MA interface and Blackho static MAC uration tag p each unicas address dynamic uni cal Ethernet e an entry in ess associate AC address ole Dynam C address e page l...

Page 25: ...ticas t MAC addre XS26GS Ma MAC Ad AC address orward ports up for which ulticast MAC ing ports fo s can be ad e lists all exis st MAC addr ss anaged Opti ddress entries Ea s and VID the forward address in or the speci dded as the sting multica ress The us cal Ethernet ch multicas ding ports are the form of ified multica member ast MAC add ser can also t Switch Use t MAC addr e members H H H H H as...

Page 26: ...ot of this page sc ets IGMP Sn t IGMP Q XS26GS Ma ooping n this webpag oping able IGMP S s disabled lists all VLA nfigure a po t a static rou lists static r ooping Misc uerier Qu anaged Opti ge for config nooping feat N IGMP Snoo rt in a speci uter port router ports o c configurati uery Trans cal Ethernet guration ture for a VL oping featur fied VLAN gr of all VLANs ion paramet smit Interv t Switc...

Page 27: ...of this e between c ch does not s configuration ceived by the tting In the c ded only to t h sends IGM st devices the multicas anaged Opti and IGMP 200 to 100 o 1000 by d Querier func range of 1 to nge of 1 to the range o ws a subscri twork wide m rk while subs send multica ubscriber VL on AN ID Sourc VR on the sw group in wh VLAN The compatible send out any n is needed e switch is fo case that MV...

Page 28: ... ports tha directly con ngle multica ort as a rece ever it won t multicast gr e untagged m ups Group IP A AN ID P multicast a lists all grou Multica od Status e lists all of anaged Opti ast traffic to at receive an nnected to s ast VLAN gro eiver port if t be able to roup either members of t Address es ddress to be up IP addres ast Enable disa f the unknow cal Ethernet the receiver nd send mu ourc...

Page 29: ...hentica t and Accou erver IP IP cimal notatio port number y sets a sha r IP IP add ed decimal no number of th ets a shared k enticati his webpage anaged Opti curity as follows A ation Shar unting Shar address of th on the defau of the radius ared key for dress of acco otation the he radius ser key for accou on for the user cal Ethernet Authenticat red Key A red Key he radius ser ult value is 1 s s...

Page 30: ...rt operates in this mode all the hosts connected to it can access the network resources without the need of authentication ForceUnauthorized specified to operate in unauthorized force access control mode When one port operates in this mode the hosts connected to it cannot access the network resources Guest VLAN a guest VLAN can be enabled for each IEEE 802 1x port on the switch to provide limited ...

Page 31: ...system if the switch does not receive any response from the supplicant system when this timer times out It is in the range of 1 to 300 the default value is 30 seconds Server Timeout sets the radius server timer This timer sets the server timeout period After sending an authentication request packet to the radius server a switch sends another authentication request packet if it does not receive any...

Page 32: ...he value ranges from 1 to 65535 and the default value is 300 seconds Quiet Period to set the time interval the client must wait after a client authentication fails During this time interval the switch does not perform the user authentication function The value ranges from 1 to 3600 and the default value is 60 seconds Server Timeout to set the time interval the switch waits for a response when ther...

Page 33: ...page sets thresholds of the specified Traffic Type Traffic Type can be chosen from None Broadcast Multicast Destination Lookup Failed DLF Broadcast Multicast Broadcast DLF Multicast DLF and Broadcast Multicast DLF The Rate is in the range from 1 to 262143 By default suppress no traffic type 2 9 ACL ACL Access Control List is used to achieve the packet filtering function by the configuration of mat...

Page 34: ...resses 802 1p priority and L2 protocol type 2 9 1 Management ACL In order to flexibly configure ACL rule the ACL ID is divided into three segments 1 10 for Basic IP ACL 11 20 for Advanced IP ACL and 21 30 for L2 ACL ACL Rule page sets different ACL rules based on the range of ACL ID The bottom part of this page lists all configured ACL IDs Parameter Rules shows the number of rules that has already...

Page 35: ...IP subnet mask Src L4 Port TCP UDP source port an existing Echo Frp telnet Smtp WWW or an integer between 1 to 65535 It can be set only when protocol type is TCP or UDP Note IETF IANA defines three groups of ports Well Known Ports 0 1023 Registered Ports 1024 49151 and Dynamic and or Private Ports 49152 65535 Dst IP Address destination host IP address Dst IP Mask destination host IP subnet mask Ds...

Page 36: ... be selected as Permit or Deny Rule ID Identification the ACL rule Src MAC Address source host mac address Src MAC Address Mask source host mac address mask Dst MAC Address destination host mac address Dst MAC address Mask destination host mac address mask Action permit or deny the access for the package with matched rules The bottom part of this page lists all configured L2 ACL rules ...

Page 37: ...device to advertise its information to its network neighbors and to store the information discovered from other devices as described in IEEE 802 1AB 2 10 1 Management LLDP 2 10 1 1 Configuration This page configures LLDP enabling sets transmit LLDP information mode from Disabled Rx and Tx Tx only Rx only and also specifies the LLDP Encapsulation to be ethernetII or SNAP for a specified Ethernet po...

Page 38: ...escription a textual description of the device This value typically includes the full name and version identification of the system s hardware type software operating system and networking software System Capability identifies the capabilities of the device and its primary function e g repeater Bridge WLAN Access Point Router Telephone DOCSIS cable device Station only etc Management Address identi...

Page 39: ... LLDP Status mode change the port will initialize the protocol state machine and the switch will need to wait for Reinit Delay to be able to start the next initialization The range of this value is from 1 to 10 seconds and the default value is 2 Fast Count number of fast sending packets It is in the range of 1 to 10 and the default value is 3 2 10 2 Neighbor Information This page shows the Local P...

Page 40: ...XS26GS Managed Optical Ethernet Switch User Manual 35 ...

Page 41: ...pPkt of each Ethernet port TxGoodPkts the total number of outgoing normal packets on the port including outgoing normal packets and normal pause frames TxBadPkts the total byte number of outgoing error frames RxGoodPkts the total number of incoming normal packets on the port including incoming normal packets and normal pause frames RxBadPkts the total byte number of incoming error frames TxAbort t...

Page 42: ...namic Tagged lists all ports out of which packets are sent tagged Untagged lists all ports out of which packets are sent untagged and Forbidden lists all ports that cannot be added to the VLAN group 2 11 4 MAC Address Table This page shows information of MAC address entries in the MAC address table including VID Unicast MAC Address Port and Type Type includes Dynamic Static Blackhole or Learned ...

Page 43: ... Member Ports Multicast Group is the IP address of a multicast group MAC Address is the address of a MAC multicast group and Member Ports include all ports belonging to this IGMP Snooping group 2 11 6 Link Aggregation There are three tag pages on this webpage Manual Trunking Group shows manual trunk information including Trunk ID Trunk Name Type and Port List Type is fixed to Manual ...

Page 44: ...ns Mode Max Hops Hello Time Max Age Forward Delay Time Priority and BPDU Guard Mode Three spanning tree modes are supported stp rstp and mstp Max Hops this value is in the range from 1 to 20 and is 20 by default This parameter is used in MSTP mode only to limit the size of MST domain and the root switch of the instance always sends a BPDU or M record with a cost of 0 and the hop count of the maxim...

Page 45: ...figured on the root bridge and applies to all non root bridges As for the configuration of Hello Time Forward Delay Time and Max Age the following formulas must be met to prevent frequent network jitter 2 Forward Delay Time 1 second Max Age and Max Age 2 Hello Time 1 second Priority this value is in the range from 0 to 65535 and is 32768 by default This parameter is used in STP and RSTP modes only...

Page 46: ...lectively sends 802 1d configuration BPDUs and TCN BPDUs on per port basis When a port is initialized the migration delay timer is started and RSTP BPDUs are sent in this time interval When this timer is active the switch processes all BPDUs received on the port and ignores the protocol type If the switch receives an 802 1d BPDU after the port s migration delay timer is expired it assumes that it ...

Page 47: ...al Ethernet Switch User Manual 42 2 12 2 2 Ports State This page lists all port parameters and spanning tree information including STP State Priority Cost Role Designated Port ID Designated Root ID and Designated Bridge ID ...

Page 48: ... the same MSTP configuration identifier 2 12 3 1 Configuration This page sets Region Name and Revision level of MST configuration Identifiers Region Name a variable length text string of up to 32 octets Revision level a 2 octet unsigned integer It ranges from 0 to 65535 2 12 3 2 MSTI Configuration This page sets MSTI ID MSTI Admin and Priority for each MST instance MSTI ID MSTI identification rang...

Page 49: ...ssigned to a bottom part X AN MAP ne or more V spanning tre of this page XS26GS Ma VLANs into a ee instance a lists the VLA anaged Opti specific MST at a time AN mapping cal Ethernet T instance O table t Switch Use One or more V er Manual VLANs can ...

Page 50: ...ists the MSTP attributes for each port 2 12 4 2 MSTI Ports This page sets the Internal Cost and Priority for each MST instance Internal Cost sets the path cost of the specified port in a specified MST instance It is in the range from 1 to 200000000 and the default value is 0 Auto Priority sets the port priority for the specified port in a specified MST instance It is in the range from 0 to 240 and...

Page 51: ...th Cost and Root Port for each MST instance 2 13 SNMP Manager 2 13 1 SNMP Account There are three tag pages SNMP View SNMP Community and SNMP User 2 13 1 1 SNMP View This page sets which tree of SNMP OID can be managed by an SNMP agent user the default is all of them For details of which MIBs are supported please check section 6 Appendix B Supported MIBs of this manual ...

Page 52: ... string of 3 to 16 characters RO specifies that the community to be created has read only permission to MIB objects Communities of this type can only query MIBs for device information RW specifies that the community to be created has read write permission to MIB objects Communities of this type are capable of configuring devices The bottom part of this page lists all existing SNMP v1 and v2c commu...

Page 53: ...SHA algorithm is used Privacy Algorithm specifies the security mode as encrypted DES specifies the encryption protocol as Data Encryption Standard DES AES specifies the encryption protocol as Advanced Encryption Standard AES which is more secure than DES Privacy Password encryption password a string of 9 to 15 characters in plain text a 32 bit hexadecimal number in cipher text if MD5 algorithm is ...

Page 54: ...om part of this page lists the trap status of all ports 2 14 Administration This part covers switch management and maintenance functions 2 14 1 IP Configuration The managed switch supports DHCP and Static IP DHCP Client can be enabled by checking the Enabled checkbox If static IP is used IP Address Subnet Mask and Gateway shall be specified ...

Page 55: ...ord and Privilege for the new account are set on this page Username username a string of 3 to 16 characters Password password a string of 1 to 16 characters Privilege choose user or admin The bottom part of this page lists all accounts including Username and Privilege An account can be deleted on this page Note check section 3 6 User Level of this manual for privilege details of each level of user...

Page 56: ...ver and new firmware file exists on the server The switch will begin to update firmware after Apply button is clicked Note please don t cut off the power supply when updating Backup Configuration This page sets a TFTP Server IP and File Name Before backing up configuration make sure the switch is connected to the TFTP server The switch configuration file will be uploaded to TFTP server with the sp...

Page 57: ...ng updating firmware uploading or downloading a configuration file make sure the power is not turned off 2 14 5 Reboot In this page there are two buttons Save And Reboot and Reboot Without Save Save And Reboot saves the current configuration and then reboot Reboot Without Save directly reboots without saving the current configuration All changes may be lost 2 14 6 Reset There are two tag pages Res...

Page 58: ...et To Default the switch will be reset to the factory default setting 2 14 7 Save Configuration This page saves current configurations 2 14 8 System Logs This page shows all of the system logs clicking Clear button to clear all the records of the system logs ...

Page 59: ...XS26GS Managed Optical Ethernet Switch User Manual 54 2 15 Logout Click Logout in the left menu to log out from the switch and close the browser ...

Page 60: ...are grouped in square brackets and separated by vertical bars One item or none is selected A line starting with the sign is comments 3 3 Shortcuts Introduction Line shortcuts list Shortcuts Explanation Delete Deletes the character on the cursor for telnet only Backspace or Ctrl h Deletes the left character from the cursor or Ctrl p Execute the last command if the history list has it or Ctrl n Exec...

Page 61: ...access XS To enter into User view enter the disable command Ethernet port view From System view specify an interface by entering the interface ethernet command followed by interface identification XS Ethernetx x To exit to System view enter the end command or press Ctrl Z Port base d VLAN view From System view specify a vlan id by entering the port based vlan command followed by a vlan id XS port ...

Page 62: ...nation Any view help shows all available commands on current view clear clears screen display save saves current configuration reboot reboots the switch exit Logs out and disconnects from the switch 3 6 User Level There are three user levels Visitor User and Admin The default users are listed in the following table Username Password User level guest Visitor manager 123 User superuser 123 Admin The...

Page 63: ...ow temperature Any view show fan status Any view show power status Any view show local time System view local time date date month month year year local time hour hour minute minute second second Any view show running config System view disable System view enable System view management mode disable port based ethernet interface vlan vlan id System view ipconfig auto ip ip address netmask netmask g...

Page 64: ...ipconfig Operation Mode Manual Setting IP address 192 168 0 253 IP netmask 255 255 255 0 IP gateway 192 168 0 201 show user Syntax show user View Any view Parameters None Description Use show user command to list all user information including user name user password and user level Examples XS show user user password level guest Visitor manager xxx User superuser xxx Admin show history Syntax show...

Page 65: ...p traps host 248 show snmp traps status 249 show snmp user 250 interface ethernet 0 23 251 snmp traps 252 no snmp traps 253 show snmp 254 end 255 show snmp community 256 show snmp user 257 show snmp user 258 show snmp traps host 259 show snmp traps status 260 show snmp 261 snmp server name guohq XS7424 262 show snmp 263 snmp server name dev XS7424 264 show snmp 265 snmp server community 266 snmp s...

Page 66: ... Optical Ethernet Switch System Location Ljubljana Slovenia Systme Contact support xenya si Hardware Version 1 0SFP Firmware Version 1 071 Boot Loader Version 1 0 1 MAC Address 28 b0 cc 12 34 51 System ID R3A1234561 show management Syntax show management View Any view Parameters None Description Use show management command to display the management mode It can be disabled port based vlan and other...

Page 67: ...n status Syntax Show fan status View Any view Parameters None Description Use show fan status command to display the current status of the fans in the switch Example XS show fan status Fan status Warning show power status Syntax show power status View Any view Parameters None Description Use show power status command to display the current status of power supply There are two power supplies in the...

Page 68: ...ime date date month month year year local time hour hour minute minute second second View System view Parameters date Required between 1 to 31 month Required between 1 to 12 year Required between 2009 to 3000 hour Required between 0 to 23 minute Required between 0 to 59 second Required between 0 to 59 Description Use local time date date month month year year command to set the date Use local time...

Page 69: ...ing config Current Running Configuration ACL configuration Valid ACL Num 2 23 48 VLAN configuration VLAN Mode 802 1Q VLAN 802 1Q Tag VLAN Ingress Filtering Disable Vlan 1 VID Vlan Name Default Untag Members Ethernet0 1 Ethernet0 2 Ethernet0 3 Ethernet0 4 Ethernet0 5 Ethernet0 6 Ethernet0 7 Ethernet0 8 Ethernet0 9 Ethernet0 10 Ethernet0 11 Ethernet0 12 Press any key to continue Q to quit disable Sy...

Page 70: ... in as another user Examples XS enable user superuser password Entry level 3 admin successfully management mode Syntax management mode disable port based ethernet interface vlan vlan id View System view Parameters port based ethernet interface uses the port based management mode and sets a management interface Vlan vlan id uses vlan management mode and sets a management vlan Description Use the ma...

Page 71: ...config to restore the default IP configuration The default IP configuration is in the static mode the IP address is 192 168 0 253 the netmask is 255 255 255 0 and the gateway is 192 168 0 201 Examples XS ipconfig auto Do you want to configure IP automatically DHCP client y n y XS show ipconfig Operation Mode Auto DHCP Client IP address 192 168 0 11 IP netmask 255 255 255 0 IP gateway 192 168 0 201...

Page 72: ...er no user user name View System view Parameters user name specifies the user name to be deleted Description Use user command to add a user To add the user you should specify user name user password and user level Use no user command to delete a specified user Examples add a user named test1 password is test1 user level is admin XS user user name test1 password password again level 2 User 3 Admin ...

Page 73: ...eset configuration Do you want to reset all the configurations except IP address and user account y n n Resetting configuration please wait Resetting default configuration successfully reset counters Syntax reset counters ethernet interface View System view Parameters interface specifies the Ethernet port Description Use reset counters command to reset the statistics counters in one or all ports E...

Page 74: ...34 put configtest Backing up the configuration please wait Backup the configuration successfully update firmware Syntax update firmware file name tftp server server ip View System view Parameters server ip IP address or host name of the TFTP server connected the IP address is in X X X X format file name filename of firmware Description Use update firmware command to download new firmware from tftp...

Page 75: ...Any view show interface ethernet interface Any view show interface statistics ethernet interface Any view show interface switchport ethernet interface Any view show storm control System view interface ethernet interface Ethernet port view end Ethernet port view shutdown no shutdown Ethernet port view speed 10 100 1000 auto no speed Ethernet port view duplex auto full half no duplex Ethernet port v...

Page 76: ...isable disable 9216 Ethernet0 10 enabled down auto enable disable disable 9216 Ethernet0 11 enabled down auto enable disable disable 9216 Ethernet0 12 enabled down auto enable disable disable 9216 Ethernet0 13 enabled down auto enable disable disable 9216 Ethernet0 14 enabled down auto enable disable disable 9216 Ethernet0 15 enabled down auto enable disable disable 9216 Ethernet0 16 enabled down ...

Page 77: ... TXGOODPKTS TXBADPKTS RXGOODPKTS TXABORT COLLISION DROPPKT H32bits L32bits H32bits L32bits Ethernet0 11 0 79 0 0 5389 0 0 0 show interface switchport Syntax show interface switchport ethernet interface View Any view Parameters interface ethernet port in the form of interface interface type interface number interface type 0 1 when interface type is 0 interface number 1 2 24 when interface type is 1...

Page 78: ...thernet Syntax interface ethernet interface View System view Parameters interface ethernet port in the form of interface interface type interface number interface type 0 1 when interface type is 0 interface number 1 2 24 when interface type is 1 interface number 1 2 Description Use interface ethernet command to enter a specific port view Before configuring an Ethernet port you need to enter an Eth...

Page 79: ...nd to shut down an Ethernet port Use no shutdown command to bring up an Ethernet port By default an Ethernet port is in up state Examples XS Ethernet0 24 shutdown Port ethernet0 24 shut down speed Syntax speed 10 100 1000 auto no speed View Ethernet port view Parameters 10 specifies the port speed to 10 Mbps 100 specifies the port speed to 100 Mbps 1000 specifies the port speed to 1 000 Mbps only ...

Page 80: ... on ethernet0 23 duplex Syntax duplex auto full half no duplex View Ethernet port view Parameters auto sets the port to auto negotiation mode full sets the port to full duplex mode half sets the port to half duplex mode Description Use duplex command to set the duplex mode of the port Use no duplex command to restore the default duplex mode that is auto negotiation By default the port is in auto n...

Page 81: ...g rate temporarily when it receives the message and vice versa In this way packet loss is avoided to make the network operation normal By default flow control is disabled on a port Examples XS Ethernet0 23 flow control flow control is enabled on ethernet0 23 learning Syntax learning no learning View Ethernet port view Parameters None Description Use learning command to enable learning MAC address ...

Page 82: ...Examples XS Ethernet0 1 line rate egress rate 64k Egress rate is 64kbps on ethernet0 1 XS Ethernet0 1 no line rate egress Turn off egress rate limit on port ethernet0 1 jumboframe Syntax jumboframe no jumboframe View Ethernet port view Parameters Description Use jumboframe command to set the max length of frame as 9216 Use no jumboframe command to restore the max length of frame to the default val...

Page 83: ... storm control type 2 rate 2000 Configuration completed successfully 3 9 Link Aggregation Commands The Any view in the below table refers to any one of the following System view Ethernet port view Port based VLAN view VLAN view or dot1x view Command list View Command Any view show lacp system id Any view show lacp mode Any view show link aggregation interface ethernet interface to ethernet interfa...

Page 84: ... MAC address Examples XS Ethernet0 8 show lacp system id LACP System ID 1 00 0a 0b 0c 0e 09 show lacp mode Syntax show lacp mode View Any view Parameters None Description Use show lacp mode command to list the lacp mode on each port Examples XS Ethernet0 1 show lacp mode PORT ACTIVE STATE Ethernet0 1 active Ethernet0 2 Ethernet0 3 Ethernet0 4 Ethernet0 5 Ethernet0 6 Ethernet0 7 Ethernet0 8 Etherne...

Page 85: ...2 View Any view Parameters Interface 1 port number Interface 2 in conjunction with interface 1 defines a range of port numbers whose link aggregation details are to be displayed The value of interface 2 must not be less than that of interface 1 Description Use show link aggregation interface command to display the link aggregation details of a specified port or a range of ports Examples XS show li...

Page 86: ...tion verbose Syntax show link aggregation verbose agg id View Any view Parameters agg id aggregation group ID which is in a range from 1 to 13 and must be the ID of an existing aggregation group Description Use show link aggregation verbose command to display the details of a specified aggregation group or all aggregation groups Examples XS show link aggregation verbose 5 Link aggregation ID 5 Lin...

Page 87: ...mples enable LACP globally XS lacp LACP is enabled now enable LACP on ethernet port 0 2 XS Ethernet0 2 lacp The port is enabled lacp system priority Syntax lacp system priority system priority no lacp system priority View System view Parameters system priority System priority ranging from 1 to 65 535 Description Use lacp system priority command to set the system priority Use no lacp system priorit...

Page 88: ...mples XS link aggregation group 3 description test3 The configuration is successful link aggregation group mode Syntax link aggregation group agg id mode manual static no link aggregation group agg id View System view Parameters agg id aggregation group ID in a range from 1 to 13 manual creates a manual aggregation group static creates a static aggregation group Description Use link aggregation gr...

Page 89: ... priority 50 The port priority is 50 now link aggregation group Syntax link aggregation group agg id no link aggregation group View Ethernet port view Parameters agg id aggregation group ID in a range from 1 to 13 Description Use link aggregation group command to add the Ethernet port to a manual or static aggregation group Use no link aggregation group command to remove the Ethernet port from the...

Page 90: ...or group view mirroring port ethernet interface to ethernet interface both egress ingress no mirroring port ethernet interface mirror group Syntax mirror group groupid no mirror group View System view Parameters groupid a group ID in the range of 1 to 4 Description Use mirror group command to enter into mirror group configuration environment Use no mirror group command to delete all mirror groups ...

Page 91: ...show mirror Group ID 1 Mirror State Enabled Monitor port Ethernet0 1 Mirroring port Ethernet0 2 both Group ID 2 Mirror State Disabled Group ID 3 Mirror State Disabled Group ID 4 Mirror State Disabled monitor port Syntax monitor port ethernet interface View System view Parameters interface ethernet port in the form of interface interface type interface number interface type 0 1 when interface type ...

Page 92: ...ed on and sent from the port ingress specified to mirror the packets received on the port egress specified to mirror the packets sent from the port Description Use mirroring port command to configure the source port You can use to ethernet interface to configure a range of continuous source ports Use no mirroring port command to remove the configuration from the source port s If no Ethernet interf...

Page 93: ...s priority priority no mac based vlan mac mac address VLAN view unknown multicast flood no unknown multicast flood VLAN view igmp snooping no igmp snooping VLAN view show igmp snooping vlan vlan id1 to vlan id2 Ethernet port view switchport pvid vlan id no switchport pvid Ethernet port view switchport link type access hybrid trunk no switchport link type Ethernet port view switchport admit frame a...

Page 94: ...ed through GVRP static displays the number of static VLANs and the ID of each static VLAN Static VLANs refer to VLANs manually created Description Use show vlan command to display information of VLANs including ID type VLAN interface state and member ports of a VLAN Examples XS show vlan static VLAN ID 1 VLAN Type static Description default Tag Ports unTag Ports Ethernet0 1 Ethernet0 2 Ethernet0 3...

Page 95: ...s No VLAN Examples XS vlan mode port based Config port based vlan successfully vlan Syntax vlan vlan id no vlan all vlan id1 to vlan id2 View System view Parameters vlan id specifies the ID of a VLAN the information of which is to be created in a range from 1 to 4094 vlan id1 specifies the ID of a VLAN the information of which is to be deleted in the range of 1 to 4094 to vlan id2 in conjunction w...

Page 96: ...ne Description Use end command to exit from the vlan configuration environment Examples XS vlan2 end XS description Syntax description name View VLAN view Parameters name VLAN name a description of 1 to 255 characters It can contain special characters but cannot be spaces Description Use description command to assign a name to the VLAN By default the name of a VLAN is its VLAN ID VLAN0001 for exam...

Page 97: ...ed from the current VLAN to specifies the last port number of the range Description Use switchport command to add forbidden tagged or untagged port to the VLAN Use no switchport command to delete forbidden tagged or untagged port from the VLAN Examples XS vlan5 switchport tagged ethernet 0 8 to ethernet 0 15 Ethernet0 8 belongs to a trunk The other member in the same trunk will be added to this vl...

Page 98: ...figuration By default no protocol template is configured Examples XS vlan5 protocol vlan 1 mode ethernetii 0x8899 Settings are updated successfully mac based vlan Syntax mac based vlan mac mac address priority priority no mac based vlan mac mac address View VLAN view Parameters mac address LLC address priority vlan tag header priority Description Use mac based vlan command to configure the mac add...

Page 99: ...ulticast flood XS vlan5 no unknown multicast flood igmp snooping Syntax igmp snooping no igmp snooping View VLAN view Parameters None Description Use igmp snooping command to enable the igmp snooping function for this VLAN group Use no igmp snooping command to enable the igmp snooping function for this VLAN group By default no igmp snooping is configured Examples XS vlan5 igmp snooping Igmp snoopi...

Page 100: ...command to display the igmp snooping configuration for the specified VLAN group Examples XS vlan5 show igmp snooping vlan 5 show igmp snooping configuration on vlan 5 Igmp snooping state Enabled VLAN route interface Ethernet0 7 Ethernet0 8 switchport pvid Syntax switchport pvid vlan id no switchport pvid View Ethernet port view Parameters vlan id specifies the default VLAN ID of the port in a rang...

Page 101: ... Ethernet port is hybrid Examples XS Ethernet0 9 switchport link type trunk Set successfully switchport admit frame Syntax switchport admit frame all only tag no switchport admit frame View Ethernet port view Parameters all the port accepts all ingress packages only tag the port accepts tagged packages and discards untagged ones Description Use switchport admit frame command to configure how the p...

Page 102: ...n protected XS Ethernet0 9 no switchport protected Port ethernet0 9 has been normal switchport ingress filtering Syntax switchport ingress filtering no switchport ingress filtering View Ethernet port view Parameters None Description Use switchport ingress filtering command to enable switchport ingress filterting function for the specified switch interface Use no switchport ingress filtering comman...

Page 103: ...terface to ethernet interface show port based vlan Syntax show port based vlan all vlan id1 to vlan id2 View Any view Parameters vlan id1 specifies the ID of a VLAN the information of which is to be displayed in the range of 1 to 255 to vlan id2 in conjunction with vlan id1 defines a VLAN range to display information of all existing VLANs in the range The vlan id2 argument takes a value in the ran...

Page 104: ...n with vlan id1 defines a VLAN range to delete information of all existing VLANs in the range The vlan id2 argument takes a value in the range of 1 to 255 and must not be less than that of vlan id1 all deletes all port based VLANs Description Use port based vlan command to enter into the port based vlan configuration environment Use no port based vlan command to delete all port based VLANs or spec...

Page 105: ...net interface View Port based VLAN view Parameters interface port number Ethernet port to be added to or removed from the VLAN to in conjunction with the other parameter to define a range of ports to add to or remove from the VLAN Description Use interface command to assign one or multiple ports to the VLAN Use no interface command to remove the specified port s from the VLAN Examples XS port base...

Page 106: ...o vlan vpn QinQ ethernet ethernet port new vid new vid old vid old vid to old end vid show vlan vpn Syntax show vlan vpn View Any view Parameters None Description Use show vlan vpn command to display the settings of the vlan vpn of all ports This command displays the following settings z Global vlan vpn status z Vlan vpn per Ethernet port z QinQ Examples XS show vlan vpn Global vlan vpn Status Dis...

Page 107: ...d 0x8100 Ethernet0 21 Disabled 0x8100 Ethernet0 22 Disabled 0x8100 Ethernet0 23 Disabled 0x8100 Ethernet0 24 Disabled 0x8100 Ethernet1 1 Disabled 0x8100 Ethernet1 2 Disabled 0x8100 New VLAN ID Old Low VID Old Hight VID Priority Port vlan vpn Syntax vlan vpn no vlan vpn View System view Parameters none Description Use vlan vpn command to enable VLAN VPN on this switch Use no vlan vpn command to dis...

Page 108: ...rface ethernet port in the form of interface interface type interface number interface type 0 1 when interface type is 0 interface number 1 2 24 when interface type is 1 interface number 1 2 priority the outer VLAN priority in the range from 0 to 7 new vid the outer double VLAN ID in the range from 1 to 4094 old vid the incoming VLAN ID to be added double tag in the range from 1 to 4094 to old end...

Page 109: ...hernet port view gvrp registration fixed forbidden normal no gvrp registration show garp timer Syntax show garp timer View Any view Parameters None Description Use show garp timer command to display the settings of the GARP timer of all ports This command displays the settings of the following timers z Join timer z Leave timer z LeaveAll timer z Hold timer Examples XS show garp timer Join Leave Le...

Page 110: ...0 15 Disabled Normal Ethernet0 16 Disabled Normal Ethernet0 17 Disabled Normal Ethernet0 18 Disabled Normal Ethernet0 19 Disabled Normal Ethernet0 20 Disabled Normal Ethernet0 21 Disabled Normal Ethernet0 22 Disabled Normal Ethernet0 23 Disabled Normal Ethernet0 24 Disabled Normal Ethernet1 1 Disabled Normal Ethernet1 2 Disabled Normal garp timeout Syntax garp timeout hold join leave leaveall time...

Page 111: ...escription Use gvrp command to enable GVRP globally in System view or for a port in Ethernet port view Use no gvrp command to disable GVRP globally in System view or for a port in Ethernet port view By default GVRP is disabled both globally and on a port Examples XS Ethernet0 1 gvrp Enable this interface gvrp successfully gvrp registration Syntax gvrp registration fixed forbidden normal no gvrp re...

Page 112: ...tion fixed forbid registering vlan dynamically or logging out of vlan only allow transmitting vlan information statically 3 14 QoS Commands The Any view in the below table refers to anyone of the following System view Ethernet port view Port based VLAN view VLAN view or dot1x view Command list View Command Any view show qos queue scheduler Any view show qos cos local precedence map Any view show q...

Page 113: ...local precedence map command to display the 802 1p priority to local precedence mapping illustrated by an 802 1p priority to local precedence mapping table as shown in the following example After a packet enters a switch the switch sets the 802 1p priority and local precedence for the packet according to its own capability and the corresponding rules The local precedence is locally significant pre...

Page 114: ... 6 7 8 9 0 0 0 0 0 0 0 0 0 1 1 1 1 1 1 1 1 1 2 2 2 2 2 2 2 2 2 3 3 3 3 3 3 3 3 3 4 4 4 4 4 4 4 4 4 5 5 5 5 5 5 5 5 6 6 5 6 6 6 6 6 6 7 7 7 7 6 7 7 7 7 show qos interface Syntax show qos interface ethernet interface View Any view Parameters ethernet interface displays the qos information of a specified port interface ethernet port in the form of interface interface type interface number interface t...

Page 115: ...net0 21 0 disabled Ethernet0 22 0 disabled Ethernet0 23 0 disabled Ethernet0 24 0 disabled Ethernet1 1 0 disabled Ethernet1 2 0 disabled display the qos information of Ethernet port 0 1 XS show qos interface ethernet 0 1 PORT DEFAULT PRIORITY DSCP Ethernet0 1 0 disabled qos queue scheduler Syntax qos queue scheduler strict priority wrr queue0 weight queue1 weight queue2 weight queue3 weight no qos...

Page 116: ... map local prec Local precedence to which 802 1p 1 is to be mapped in the range 0 to 3 cos2 map local prec Local precedence to which 802 1p 2 is to be mapped in the range 0 to 3 cos3 map local prec Local precedence to which 802 1p 3 is to be mapped in the range 0 to 3 cos4 map local prec Local precedence to which 802 1p 4 is to be mapped in the range 0 to 3 cos5 map local prec Local precedence to ...

Page 117: ...s argument ranges from 0 to 7 Description Use qos map command to map a DSCP priority to an 802 1p priority Use no qos map command to restore to default settings The default DSCP priority to 802 1p priority mapping is 0 Examples XS qos map dscp 0 to cos 7 The configuration succeeds qos mode dscp Syntax qos mode dscp no qos mode dscp View Ethernet port view Parameters None Description Use qos mode d...

Page 118: ...2 1q tagged packet The packet is then assigned to an output queue corresponding to the local precedence Examples XS Ethernet0 1 no priority 802 1p default priority restored to default 0 on port ethernet0 1 3 15 MAC Address Table Management Commands The Any view in the below table refers to anyone of the following System view Ethernet port view Port based VLAN view VLAN view or dot1x view Command l...

Page 119: ...ess entry whether a MAC address is within the aging time and so on Examples XS show mac address table show the mac address table MAC ADDRESS VLAN ID STATE PORT AGING 00 1d 0f 7f 62 18 3 Learned Ethernet0 7 Yes 00 1d 7d 76 1a 46 3 Learned Ethernet0 7 Yes 00 80 77 94 dd 92 3 Dynamic Ethernet0 7 Yes 00 0d 61 45 71 d3 3 Dynamic Ethernet0 7 Yes 00 1d 7d 74 fa 71 3 Dynamic Ethernet0 7 Yes 00 1f d0 6a df...

Page 120: ...ed Ethernet0 7 Yes 00 0d 61 97 b6 cc 3 Dynamic Ethernet0 7 Yes 00 0d 61 97 a6 b4 3 Dynamic Ethernet0 7 Yes 34 mac addresses found show mac address aging time Syntax show mac address aging time View Any view Parameters None Description Use show mac address aging time command to display the aging time of the dynamic MAC address entries in MAC address table Examples XS show mac address aging time The...

Page 121: ...ADDRESS VLAN ID STATE PORT AGING 00 1d 72 23 ed 8f 1 Static 2 No 00 1d 72 23 ed 8e 1 Static 1 No 2 static mac addresses found in 1 vlan display the MAC address entries for the port Ethernet 0 1 XS show mac address interface ethernet 0 1 MAC ADDRESS VLAN ID STATE PORT AGING 00 1d 72 23 ed 8d 1 BlackHole Ethernet0 1 No 00 1d 72 23 ed 8e 1 Static Ethernet0 1 No 2 mac addresses found on port Ethernet0...

Page 122: ...command You can remove all unicast MAC address entries on a port or remove a specific type of MAC address entries such as the addresses learnt by the system dynamic or static MAC address entries configured or blackhole addresses Examples XS mac address dynamic 00 1d 72 23 ed 70 interface ethernet 0 13 vlan 3 The configuration is successful XS no mac address vlan 3 Delete mac address successfully m...

Page 123: ... is 500 seconds 3 16 Multicast Commands The Any view in the below table refers to anyone of the following System view Ethernet port view Port based VLAN view VLAN view or dot1x view Command list View Command Any view show mac address multicast count static all count mac address vlan vlan id System view mac address multicast mac address interface ethernet interface to ethernet interface vlan vlan i...

Page 124: ...erface to ethernet interface vlan vlan id mac address vlan vlan id In Ethernet port view mac address multicast mac address vlan vlan id no mac address multicast mac address vlan vlan id View System view Ethernet port view Parameters mac address multicast MAC address in the form of H H H H H H vlan vlan id specifies the VLAN to which the forwarding ports belong The effective range for vlan id is fr...

Page 125: ... view or dot1x view Command list View Command Any view show igmp snooping configuration Any view show igmp snooping group vlan vlan id System view VLAN view igmp snooping no igmp snooping System view igmp snooping querier no igmp snooping querier System view igmp snooping query interval time seconds no igmp snooping query interval System view igmp snooping host aging time seconds no igmp snooping ...

Page 126: ...figuration XS show igmp snooping configuration show igmp snooping configuration Igmp snooping global state Disabled Host Timeout 260 Route Timeout 105 IGMP Querier Disabled Query Transmit Interval 125 Max Response Time 10 Last Member Query Interval 1 show igmp snooping group Syntax show igmp snooping group vlan vlan id View Any view Parameters vlan vlan id specifies the VLAN in which the multicast...

Page 127: ...ping command to enable the IGMP Snooping feature Use no igmp snooping command to disable the IGMP Snooping feature By default the IGMP Snooping feature is disabled Examples XS vlan3 igmp snooping Igmp snooping is enabled on vlan 3 igmp snooping querier Syntax igmp snooping querier no igmp snooping querier View System view Parameters None Description Use igmp snooping querier command to enable IGMP...

Page 128: ...ke the query transmit interval restore to the default setting By default the query transmit interval is configured as 125 seconds Examples XS igmp snooping query interval 30 Query interval of igmp snooping has been set to 30 seconds XS no igmp snooping query interval The query transmit interval has been restored to default 125 seconds igmp snooping host aging time Syntax igmp snooping host aging t...

Page 129: ...time of router ports in a range from 1 to 1 000 in seconds Description Use igmp snooping router aging time command to configure the aging time of router ports Use no igmp snooping router aging time command to restore to the default aging time By default the aging time of router ports is 105 seconds Examples XS igmp snooping router aging time 200 Router aging time of igmp snooping set to 200 second...

Page 130: ...and to restore to the default By default the maximum response time in IGMP general queries is 10 seconds An appropriate setting of the maximum response time in IGMP queries allows hosts to respond to queries quickly and thus the querier can learn the existence of multicast members quickly Examples XS igmp snooping max response time 20 Max_response_time of igmp snooping set to 20 seconds multicast ...

Page 131: ...net interface System view dot1x dot1x view end dot1x view max req dot1x view timeout quiet period quiet period value reauth period reauth period value server server timeout value supplicant supp timeout value tx period tx period value no timeout quiet period quiet period value reauth period reauth period value server server timeout value supplicant supp timeout value tx period tx period value dot1...

Page 132: ... 1813 accounting key admin misc configuration quiet period 60 server timeout 30 supplicant timeout 30 tx period 30 reauth max count 2 reauth period 3600 display the 802 1x related information of all ports XS show dot1x interface PORT 802 1X ADMIN PORTCONTROL REAUTH STATUS Ethernet0 1 Disabled ForceAuthorized Disabled Link down Ethernet0 2 Disabled ForceAuthorized Disabled Link down Ethernet0 3 Dis...

Page 133: ...et0 23 Disabled ForceAuthorized Disabled Link down Ethernet0 24 Disabled ForceAuthorized Disabled Link down Ethernet1 1 Disabled ForceAuthorized Disabled Link down Ethernet1 2 Disabled ForceAuthorized Disabled Link down display the 802 1x related information of a specified port XS show dot1x interface ethernet 0 1 PORT 802 1X ADMIN PORTCONTROL REAUTH STATUS Ethernet0 1 Disabled ForceAuthorized Dis...

Page 134: ...mmand applies to all ports Examples XS dot1x max req 5 Max request count is 5 timeout Syntax timeout quiet period quiet period value reauth period reauth period value server server timeout value supplicant supp timeout value tx period tx period value no timeout quiet period quiet period value reauth period reauth period value server server timeout value supplicant supp timeout value tx period tx p...

Page 135: ...response from the supplicant system when this timer times out The supp timeout value argument ranges from 1 to 300 in seconds By default the supplicant system timer is set to 30 seconds tx period tx period value sets the transmission timer This timer sets the tx period and is triggered in two cases The first case is when the client requests for an authentication The switch sends a unicast request ...

Page 136: ...to be used a valid unicast address in dotted decimal notation the default value is 192 168 0 234 auth port auth port number UDP port number of the radius server ranging from 1 to 65535 the default value is 1812 acct port acct port number UDP port number of the radius server ranging from 1 to 65535 the default value is 1813 key key string sets a shared key for radius messages String length is from ...

Page 137: ...tion for the specified Ethernet port Examples XS Ethernet0 1 dot1x re authentication The configuration succeeds dot1x port control Syntax dot1x port control auto forceauthorized forceunauthorized View Ethernet port view Parameters auto specified to operate in auto access control mode When a port operates in this mode all the unauthenticated hosts connected to it are unauthorized In this case only ...

Page 138: ...spanning tree no spanning tree System view spanning tree forward time timer value no spanning tree forward time System view spanning tree hello time timer value no spanning tree hello time System view spanning tree max age timer value no spanning tree max age System view spanning tree priority priority no spanning tree priority System view spanning tree max hops hops no spanning tree max hops Syst...

Page 139: ... show spanning tree ethernet interface View Any view Parameters interface ethernet port in the form of interface interface type interface number interface type 0 1 when interface type is 0 interface number 1 2 24 when interface type is 1 interface number 1 2 Description Use show spanning tree command to display the settings of STP If an Ethernet interface is specified the STP information of this i...

Page 140: ...bled 128 Auto Designated Disabled 13 128 Ethernet0 15 Enabled 128 Auto Designated Disabled 14 128 Ethernet0 16 Enabled 128 Auto Designated Disabled 15 128 Ethernet0 17 Enabled 128 Auto Designated Disabled 16 128 Ethernet0 18 Enabled 128 Auto Designated Disabled 17 128 Ethernet0 19 Enabled 128 Auto Designated Disabled 18 128 Ethernet0 20 Enabled 128 Auto Designated Disabled 19 128 Ethernet0 21 Enab...

Page 141: ...ST Configuration Identification instance mstid MSTP instance ID in the range from 0 to 15 Description Use show spanning tree command to display the settings of MSTP If an Ethernet interface and an instance are specified the MSTP information of this interface in the specified instance will be displayed Note This command is only used in MSTP spanning tree mode Examples XS show spanning tree The span...

Page 142: ...000 MSTI 2 Ethernet0 3 port information MSTI priority 128 MSTI path cost 0 MSTI port role Disabled MSTI port state Disabled MSTI designed bridge ID 43820 4600f4aa4600 MSTI designed port ID 0 0 XS show spanning tree mst configuration Current MST configuration MST Region Name 28 B0 CC 01 01 64 MST Revision Level 0 MSTI instance 0 information State Enabled Priority 32768 VLAN Mapped 1 4094 XS show sp...

Page 143: ...Description Use spanning tree forward time command to set the forward delay of the switch Use no spanning tree forward time command to restore the forward delay to the default value By default the forward delay of the switch is 15 seconds To prevent the occurrence of temporary loops when a port changes its state from discarding to forwarding it undergoes an intermediate state and waits for a speci...

Page 144: ...rees If the switch does not receive a BPDU packet in a specified period spanning trees will be recalculated when BPDU packet times out When a switch becomes a root bridge it regularly sends BPDUs at the interval specified by the hello time you have configured on it The other none root bridge switches adopt the interval specified by the hello time As for the configuration of the three time related ...

Page 145: ... priority Syntax spanning tree priority priority no spanning tree priority View System view Parameters priority switch priority to be set This argument ranges from 0 to 65535 The default value is 32768 Description Use spanning tree priority command to set the priority Use no spanning tree priority command to restore the priority to default priority The default priority is 32768 The priorities of s...

Page 146: ...Description Use stp mode command to set the operating mode of the switch To make the switch compatible with STP RSTP MSTP the following three operating modes are provided stp in this mode the ports of the switch send STP BPDUs to neighbor devices In the case that there is a neighbor switch working in RSTP or MSTP mode the port between them will work in STP mode rstp in this mode the ports of a swi...

Page 147: ...old count num no spanning tree hold count View System view Parameters hold count num ranges from 1 to 10 Description Use spanning tree hold count command to set the hold count for a specified Ethernet port Use no spanning tree hold count command to restore to the default value 3 for a specified Ethernet port Examples XS Ethernet0 1 spanning tree hold count 5 Set successfully spanning tree root gua...

Page 148: ...th cost of a port as follows With IEEE 802 1D 1998 standard selected the path cost of an Ethernet port ranges from 1 to 65535 With IEEE 802 1t standard selected the path cost of an Ethernet port ranges from 1 to 200000000 The argument ranges from 1 to 200000000 and the default value is auto 0 Description Use spanning tree path cost command to set the path cost s of the specified port s Use no span...

Page 149: ...inks connected to the specified Ethernet ports be point to point Use no spanning tree point to point command to specify that the links connected to the specified Ethernet ports be not point to point By default the Ethernet ports are point to point links The rapid transition feature is not applicable to ports connected to non point to point links If an Ethernet port is the master port among aggrega...

Page 150: ... a switch are non edge ports An edge port is directly connected to a user terminal instead of through another switch or a network segment Rapid transition to the forwarding state is applied to edge ports because no loops can be incurred by network topology changes on these ports You can enable a port to turn to the forwarding state rapidly by setting it to an edge port And it is recommended to con...

Page 151: ...view Parameters msti MST instance ID Description Use instance command to enable the specified MST instance Use no instance command to disable the specified MST instance By default the all instances except 0 feature are disabled Examples XS mst region instance 3 Enable this msti successfully instance msti ethernet ethernet port path cost Syntax instance msti ethernet ethernet port path cost cost no...

Page 152: ...ly instance msti ethernet ethernet port priority Syntax instance msti ethernet ethernet port priority pri no instance msti ethernet ethernet port priority pri View Mst region view Parameters Msti instance ID ethernet port ethernet port in the form of interface interface type interface number interface type 0 1 when interface type is 0 interface number 1 2 24 when interface type is 1 interface numb...

Page 153: ...nce msti vlan Syntax instance msti vlan vlan vid to vlan end vid no instance msti vlan vlan vid to vlan end vid View Mst region view Parameters Msti instance ID vlan vid specifies the ID of a VLAN to be added to this instance in the range of 1 to 4094 to vlan end vid in conjunction with vlan id1 defines a VLAN range to be added to this instance The vlan end vid argument takes a value in the range ...

Page 154: ...region name successfully revision level Syntax revision level level View Mst region view Parameters level an unsigned short value in the range from 0 to 65535 Description Use revision level command to set the revision level of MST Configuration Identification Examples XS mst region revision level 25 configure mstp region level successfully 3 20 SNMP Configuration Commands The Any view in the below...

Page 155: ...hernet port view snmp traps no snmp traps show snmp Syntax show snmp View Any view Parameters None Description Use show snmp command to display the system SNMP information including system name system description contact information and geographical location By default the system name is XS7424 the system description is Optical Ethernet Switch the contact information is support xenya si and the ge...

Page 156: ...W show snmp user Syntax show snmp user View Any view Parameters None Description Use show snmp user command to display the information of SNMPv3 users including username auth type auth password privacy type and privacy password SNMPv3 introduces the concepts of username and group You can set the authentication and privacy functions The former is used to authenticate the validity of sending packets...

Page 157: ...ription Use show snmp traps host command to list destination hosts that receive SNMP traps generated by the local device Examples XS show snmp traps host SNMP traps host IP 192 168 0 234 192 168 0 235 show snmp traps status Syntax show snmp traps status View Any view Parameters None Description Use show snmp traps status command to display global trap configurations and per port trap configuration...

Page 158: ...sable ethernet 0 24 enable ethernet 1 1 enable ethernet 1 2 enable snmp server Syntax snmp server name description contact location text View System view Parameters text a string of 1 to 256 characters name SNMP System Name the default value is XS7424 description SNMP System Description the default value is Optical Ethernet Switch contact SNMP System Contact the default value is support xenya si l...

Page 159: ... community Version v1 or v2c v2c Community 3 16chars com3 Privilege ro or rw ro Add snmp agent user successfully snmp server user Syntax snmp server user no snmp server user username View System view Parameters username username a string of 3 to 16 characters Auth Algorithm specifies the security mode for authentication If this is not specified neither authentication nor encryption is performed MD...

Page 160: ...sword for authentication or encryption can be set as well Examples XS snmp server user UserName 3 16chars user3 Popedom ro or rw ro Auth Alogrithm MD5 or SHA or NULL SHA auth password 9 15chars galhgowegqgq Priv Alogrithm DES or AES or NULL NULL Add snmp agent user successfully snmp server traps Syntax snmp server traps no snmp server traps View System view Parameters None Description Use snmp ser...

Page 161: ...rver traps host 192 168 0 111 Add traps host successfully snmp traps Syntax snmp traps no snmp traps View Ethernet port view Parameters None Description Use snmp traps command to enable the sending of port interface linkUp linkDown traps Use no snmp traps command to disable the sending of linkUp linkDown traps By default sending port interface linkUp linkDown traps is enabled Note that you need to...

Page 162: ...AN view or dot1x view command lists View command Any view show log System view no log show log Syntax show log View Any view Parameters None Description Show all the system logs including when the system was started who had logged in the system and how and so on Examples XS show log 2009 10 10 10 47 28 192 168 0 209 logins WEB SERVER 2009 10 10 10 46 43 Someone logins CLI with serial port level 3 ...

Page 163: ...p timer tx delay delay System view lldp fast count count System view lldp timer reinit delay timer System view lldp tlv enable basic tlv all system capability system description system name port description management address no lldp tlv enable basic tlv all system capability system description system name port description management address Any view show lldp neighbor information Any view show ll...

Page 164: ... receives LLDPDUs tx A port in this mode only sends LLDPDUs rxtx A port in this mode sends and receives LLDPDUs Description Set the LLDP operating mode Examples XS Ethernet0 1 lldp admin status rxtx Set successfully lldp encapsulation Syntax lldp encapsulation snap Ethernet ii View Ethernet port view Parameters snap ethernet ii The encapsulation format It is the Ethernet II encapsulation format by...

Page 165: ...DPDUs Examples XS lldp timer tx interval 50 Set successfully lldp timer tx delay Syntax lldp timer tx delay delay View System view Parameters delay Required between 1 to 8192 seconds 2 seconds by default Description Set the delay period to send LLDPDUs Examples XS lldp timer tx delay 6 Set successfully lldp timer reinit delay Syntax lldp timer reinit delay timer View System view Parameters timer R...

Page 166: ...eters Value Required range between 1 to 10 5 by default Description Set the TTL multiplier Examples XS lldp hold multiplier 5 Set successfully lldp fast count Syntax lldp fast count count View System view Parameters count Required between 1 to 10 3 by default Description Set the number of LLDPDUs to be sent successively when a new neighboring device is detected Examples XS lldp fast count 3 Set su...

Page 167: ...TLV and Management Address TLV And End of LLDPDU TLV Chassis ID TLV Port ID TLV Time To Live TLV and Time To Live TLV are required system capability System Capabilities TLV system description System Description TLV system name System Name TLV port description Port Description TLV management address Management Address TLV Description Enable or disable LLDP TLV sending for specific types of LLDP TLV...

Page 168: ...recognized Packets 0 Org TLVs Discarded Packets 0 Aged Out Packets 0 show lldp status Syntax show lldp status View Any view Parameters None Description Display the LLDP status Examples XS show lldp status Global status of LLDP Enable Transmit interval 50s Hold multiplier 5 Reinit delay 3s Transmit delay 6s Fast start times 3 Port LLDP status Port PortStatus AdminStatus Encapsulation Ethernet0 1 Di...

Page 169: ...YES System description YES System capability YES Management address YES 3 23 ACL Configuration Commands The Any view in the below table refers to anyone of the following System view Ethernet port view Port based VLAN view VLAN view or dot1x view Command list View command System view acl number acl number no acl number acl number all ACL view rule rule id permit deny rule string no rule rule id all...

Page 170: ...r the rule is to permit or deny access rule string ACL rule string The string format varies with the type of ACL For example for basic ACL the valid rule string is source ip ip address netmask for advanced ACL the valid rule string is source ip ip address netmask source port port number destination ip address netmask destination port port number for L2 ACL the valid rule string is source mac mac a...

Page 171: ...ber 2 Configuration has been completed successfully XS Ethernet0 1 no packet filter acl number 2 Delete acl binding port successfully show acl number Syntax show acl number acl number View Any view Parameters acl number Optional between 1 to 30 Description Use show acl number command to display valid ACL number Use show acl number acl number to display the rules associated to this ACL number Examp...

Page 172: ... bind mac addr mac ip addr ip ethernet ethernet port no user bind all ethernet ethernet port mac addr mac ip addr ip ethernet ethernet port View Ip binding view Parameters mac MAC address in the format xx xx xx xx xx xx ip IP address in the format x x x x with x no larger than 255 ethernet port The ethernet port to which the MAC address and IP address are bound all to clear all port binding comman...

Page 173: ... binding command to display the ip binding information Examples XS show ip binding ip binding information No configuration 3 25 MVR configuration commands The Any view in the below table refers to anyone of the following System view Ethernet port view Port based VLAN view VLAN view or dot1x view Command list View command System view mvr no mvr System view mvr group mvr group no mvr group mvr group...

Page 174: ...ntax mvr group mvr group no mvr group mvr group View System view Parameters mvr group a multicast IP address Description Use mvr group to configure an IP multicast address statically Use no mvr group to delete an IP multicast address Examples XS mvr group 225 1 1 2 Groups of mvr set to 225 1 1 2 mvr port type Syntax mvr port type receiver source none ethernet ethernet port to ethernet ethernet por...

Page 175: ...is successful mvr mode Syntax mvr mode dynamic compatible View System view Parameters compatible mode multicast data received by MVR hosts is forwarded to all MVR data ports regardless of MVR host membership on those ports The multicast data is forwarded only to those receiver ports that MVR hosts have joined either by IGMP reports or by MVR static configuration IGMP reports received from MVR host...

Page 176: ...to transmit data and igmp snooping packets Examples XS mvr mVlanId 200 multicast vlan id of mvr set to 200 show mvr configuration Syntax show mvr configuration View Any view Parameters None Description Display the basic configuration of mvr Examples XS show mvr configuration show mvr configuration MVR Global state Enabled Multicast Vlan Id 200 Mode dynamic show mvr group Syntax show mvr group View...

Page 177: ... Examples XS show mvr port source ports Ethernet0 5 Ethernet0 7 receiver ports Ethernet0 9 Ethernet0 10 None mvr ports Ethernet0 1 Ethernet0 2 Ethernet0 3 Ethernet0 4 Ethernet0 6 Ethernet0 8 Ethernet0 11 Ethernet0 12 Ethernet0 13 Ethernet0 14 Ethernet0 15 Ethernet0 16 Ethernet0 17 Ethernet0 18 Ethernet0 19 Ethernet0 20 Ethernet0 21 Ethernet0 22 Ethernet0 23 Ethernet0 24 Ethernet1 25 Ethernet1 26 E...

Page 178: ...ed port Use the no loopback detection command to disable loopback detection globally or on a specified port Examples XS loopback detection Enable loopback detection successfully loopback detection interval time Syntax loopback detection interval time second no loopback detection interval time View System view Parameters second time interval for loopback detection in the range of 5 to 300 seconds I...

Page 179: ...mmand to disable loopback detection control on a specific port Examples XS Ethernet0 2 loopback detection control Enable loopback detection control on this port successfully show loopback detection Syntax show loopback detection View Any view Parameters None Description Display loopback detection status on the global and on each port Examples XS show loopback detection Loopback detection is curren...

Page 180: ...Disabled Disabled Ethernet0 9 Disabled Disabled Ethernet0 10 Disabled Disabled Ethernet0 11 Disabled Disabled Ethernet0 12 Disabled Disabled Ethernet0 13 Disabled Disabled Ethernet0 14 Disabled Disabled Ethernet0 15 Disabled Disabled Ethernet0 16 Disabled Disabled Ethernet0 17 Disabled Disabled Ethernet0 18 Disabled Disabled Ethernet0 19 Disabled Disabled Ethernet0 20 Disabled Disabled ...

Page 181: ...t Configuration S SFP on all ports Type of Trnsceiver 1 Dual single mode fiber SFP module Single Wavelength 2 Dual multimode fiber SFP module Single Wavelength Operating Distance 1 275 550m For Multimode Transceiver 2 15km 3 40km Transmitting Wavelength 1 850nm 2 1310 or1550nm Product Number XS26GS ...

Page 182: ...cl number B C clear D disable duplex auto full half description name VLAN view description name Port based VLAN view dot1x System view dot1x Ethernet port view dot1x re authentication dot1x port control auto forceauthorized forceunauthorized E exit enable end Ethernet port view end VLAN view end Port based VLAN view end dot1x view F flow control G garp timeout hold join leave leaveall timer value ...

Page 183: ...pri instance msti vlan vlan vid to vlan end vid J jumboframe K L line rate egress ingress rate rate value lacp lacp system priority system priority link aggregation group agg id description agg name link aggregation group agg id mode manual static lacp port priority port priority link aggregation group agg id learning local time date date month month year year local time hour hour minute minute se...

Page 184: ...ddress priority priority N no log no lldp no lldp tlv enable basic tlv all system capability system description system name port description management address no acl number acl number all no rule rule id all no packet filter acl number acl number all no user bind all ethernet ethernet port mac addr mac ip addr ip ethernet ethernet port no ipconfig no user user name no shutdown no speed no duplex ...

Page 185: ...n vlan id no igmp snooping System view VLAN view no igmp snooping querier no igmp snooping query interval no igmp snooping host aging time no igmp snooping router aging time no multicast static router port ethernet interface number no timeout quiet period quiet period value reauth period reauth period value server server timeout value supplicant supp timeout value tx period tx period value no syst...

Page 186: ...1 map local prec cos2 map local prec cos3 map local prec cos4 map local prec cos5 map local prec cos6 map local prec cos7 map local prec qos map dscp dscp to cos cos qos mode dscp R reboot reset configuration reset counters ethernet interface radius server host host ip address auth port auth port number acct port acct port number key key string rule rule id permit deny rule string region name name...

Page 187: ...eduler show qos cos local precedence map show qos map dscp cos show qos interface ethernet interface show mac address table show mac address aging time show mac address static dynamic blackhole interface ethernet interface number vlan vlan id show mac address address mac address vlan vlan id show mac address interface ethernet interface number vlan vlan id show mac address vlan vlan id count show ...

Page 188: ...figuration show mvr group show mvr port show loopback detection T tftp server ip get source file put dest file timeout quiet period quiet period value reauth period reauth period value server server timeout value supplicant supp timeout value tx period tx period value U user update firmware file name tftp server server ip unknown multicast flood user bind mac addr mac ip addr ip ethernet ethernet ...

Page 189: ...f the XS26GS switch MIB list RFC1213 MIB RFC1493 BRIDGE MIB RFC1573 IF MIB RFC1643 EtherLike MIB RFC1757 RMON MIB RFC2618 RADIUS AUTH CLIENT MIB RFC2620 RADIUS ACC CLIENT MIB RFC2674 P BRIDGE MIB RFC2674 Q BRIDGE MIB LLDP MIB IEEE8021 PAE MIB FMC SWITCH MIB FMC IGMP SNOOPING MIB FMC SWITCH MAC AUTHENTICATION MIB FMC SWITCH RADIUS MIB FMC MSTP MIB FMC MVR MIB RSTP MIB ...