Allied-telesis AT-S62 Manual de usuario

Management SoftwareAT-S62◆Command Line User’s GuideAT-8516F/SC, AT-8524M, AT-8524POE, AT-8550GB and AT-8550SP LAYER 2+ FAST ETHERNET SWITCHESVERSION 1

Table of Contents10Chapter 30Protected Ports VLAN Commands ...

Chapter 7: SNMPv3 Commands100❑ DESTROY SNMPv3 TARGETADDR on page 130❑ DESTROY SNMPv3 TARGETPARMS on page 131❑ DESTROY SNMPV3 VIEW on page 132❑ SET SNM

AT-S62 Command Line User’s Guide101ADD SNMPV3 USERSyntaxadd snmpv3 user=user [authentication=md5|sha] authpassword=password privpassword=password [sto

Chapter 7: SNMPv3 Commands102volatile Does not allow you to save the table entry to the configuration file on the switch. This is the default.nonvolat

AT-S62 Command Line User’s Guide103CLEAR SNMPV3 ACCESSSyntaxclear snmpv3 access=access [securitymodel=v1|v2c|v3] [securitylevel=noauthentication|authe

Chapter 7: SNMPv3 Commands104notifyview Specifies a Notify View Name that allows the users assigned to this security group to send traps permitted in

AT-S62 Command Line User’s Guide105CLEAR SNMPV3 COMMUNITYSyntaxclear snmpv3 community index=index transporttag Parametersindex Specifies the name of a

Chapter 7: SNMPv3 Commands106CLEAR SNMPV3 NOTIFYSyntaxclear snmpv3 notify=notify tag Parametersnotify Specifies the name of an SNMPv3 Notify Table ent

AT-S62 Command Line User’s Guide107CLEAR SNMPV3 TARGETADDRSyntaxclear snmpv3 targetaddr=targetaddr taglist Parameterstargetaddr Specifies the name of

Chapter 7: SNMPv3 Commands108CLEAR SNMPV3 VIEWSyntaxclear snmpv3 view=view [subtree=OID|text] maskParametersview Specifies the name of the SNMPv3 view

AT-S62 Command Line User’s Guide109CREATE SNMPV3 ACCESSSyntaxcreate snmpv3 access=access [securitymodel=v1|v2c|v3] [securitylevel=noauthentication|aut

AT-S62 Command Line User’s Guide11Chapter 36Secure Sockets Layer (SSL) Commands ...

Chapter 7: SNMPv3 Commands110writeview Specifies a Write View Name that allows the users assigned to this Security Group to write, or modify, the info

AT-S62 Command Line User’s Guide111In the following command, a security group is created called “hwengineering” with a security model of SNMPv3 and a

Chapter 7: SNMPv3 Commands112CREATE SNMPV3 COMMUNITYSyntaxcreate snmpv3 community index=index communityname=communityname securityname=securityname tr

AT-S62 Command Line User’s Guide113The following command creates an SNMP community with an index of 95 and a community name of “12sacramento49.” The u

Chapter 7: SNMPv3 Commands114CREATE SNMPV3 GROUPSyntaxcreate snmpv3 group username=username [securitymodel=v1|v2c|v3] groupname=groupname [storagetype

AT-S62 Command Line User’s Guide115ExampleThe following command creates the SNMPv3 SecurityToGroup Table entry for a user named Nancy. The security mo

Chapter 7: SNMPv3 Commands116CREATE SNMPV3 NOTIFYSyntaxcreate snmpv3 notify=notify tag=tag [type=trap|inform] [storagetype=volatile|nonvolatile]Parame

AT-S62 Command Line User’s Guide117ExamplesIn the following command, the SNMPv3 Notify Table entry is called “testengtrap1” and the notify tag is “tes

Chapter 7: SNMPv3 Commands118CREATE SNMPV3 TARGETADDRSyntaxcreate snmpv3 targetaddr=targetaddr params=params ipaddress=ipaddress udpport=udpport timeo

AT-S62 Command Line User’s Guide119ExamplesIn the following command, the name of the Target Address Table entry is “snmphost1.” In addition, the param

12PrefaceThis guide describes how to configure an AT-8500 Series switch using the AT-S62 command line interface. The commands are grouped by topic int

Chapter 7: SNMPv3 Commands120CREATE SNMPV3 TARGETPARAMSSyntaxcreate snmpv3 targetparams=targetparams username=username [securitymodel=v1|v2c|v3] [mess

AT-S62 Command Line User’s Guide121securitylevel Specifies the security level. The options are:noauthentication This option provides no authentication

Chapter 7: SNMPv3 Commands122CREATE SNMPV3 VIEWSyntaxcreate snmpv3 view=view [subtree=OID|text] mask=mask [type=included|excluded][storagetype=volatil

AT-S62 Command Line User’s Guide123ExamplesThe following command creates an SNMPv3 View Table entry called “internet1” with a subtree value of the Int

Chapter 7: SNMPv3 Commands124DELETE SNMPV3 USERSyntaxdelete snmpv3 user=userParametersuser Specifies the name of an SNMPv3 user to delete from the swi

AT-S62 Command Line User’s Guide125DESTROY SNMPv3 ACCESSSyntaxdestroy snmpv3 access=access [securitymodel=v1|v2c|v3] [securitylevel=noauthentication|a

Chapter 7: SNMPv3 Commands126ExamplesThe following command deletes the SNMPv3 Access Table entry called “swengineering” with a security model of the S

AT-S62 Command Line User’s Guide127DESTROY SNMPv3 COMMUNITYSyntaxdestroy snmpv3 community index=indexParameterindex Specifies the name of this SNMPv3

Chapter 7: SNMPv3 Commands128DESTROY SNMPv3 GROUPSyntaxdestroy snmpv3 group username=username [securitymodel=v1|v2c|v3]Parameterusername Specifies a u

AT-S62 Command Line User’s Guide129DESTROY SNMPv3 NOTIFYSyntaxdestroy snmpv3 notify=notify Parameternotify Specifies an SNMPv3 Notify Table entry.Desc

AT-S62 Command Line User’s Guide13❑ Chapter 16: File Download and Upload Commands on page 235❑ Chapter 17: Event Log and Syslog Server Commands on pag

Chapter 7: SNMPv3 Commands130DESTROY SNMPv3 TARGETADDRSyntaxdestroy snmpv3 targetaddr=target Parametertargetaddr Specifies an SNMPv3 Target Address ta

AT-S62 Command Line User’s Guide131DESTROY SNMPv3 TARGETPARMSSyntaxdestroy snmpv3 targetparams=targetparamsParametertargetparams Specifies an SNMPv3 T

Chapter 7: SNMPv3 Commands132DESTROY SNMPV3 VIEWSyntaxdestroy snmpv3 view=view [subtree=OID|text]Parametersview Specifies the name of the view, up to

AT-S62 Command Line User’s Guide133SET SNMPV3 ACCESSset snmpv3 access=access [securitymodel=v1|v2c|v3] [securitylevel=noauthentication|authentication|

Chapter 7: SNMPv3 Commands134storagetype Specifies the storage type of this table entry. This is an optional parameter. The options are:volatile Does

AT-S62 Command Line User’s Guide135SET SNMPV3 COMMUNITYSyntaxset snmpv3 community index=index communityname=communityname securityname=securityname tr

Chapter 7: SNMPv3 Commands136The following command modifies the community table entry with an index of 52. The community has a password of “oldmiss71”

AT-S62 Command Line User’s Guide137SET SNMPV3 GROUPSyntaxset snmpv3 group username=username [securitymodel=v1|v2c|v3] groupname=groupname [storagetype

Chapter 7: SNMPv3 Commands138ExamplesThe following command modifies the SecurityToGroup Table entry with a user name of “nancy28.” The security model

AT-S62 Command Line User’s Guide139SET SNMPV3 NOTIFYSyntaxset snmpv3 notify=notify tag=tag [type=trap|inform] [storagetype=volatile|nonvolatile]Parame

Preface14A list of the commands appear on the first page of each chapter. The commands are described in alphabetical order.CautionThe software describ

Chapter 7: SNMPv3 Commands140The following command modifies an SNMPv3 Notify Table entry called “systemtestinform5.” The notify tag is “systemtestinfo

AT-S62 Command Line User’s Guide141SET SNMPV3 TARGETADDRSyntaxset snmpv3 targetaddr=targetaddr params=params ipaddress=ipaddress udpport=udpport timeo

Chapter 7: SNMPv3 Commands142DescriptionThis command modifies an SNMPv3 Target Address Table entry.ExamplesThe following command modifies the Target A

AT-S62 Command Line User’s Guide143SET SNMPV3 TARGETPARAMSSyntaxset snmpv3 targetparams=targetparams username=username [securitymodel=v1|v2c|v3] [mess

Chapter 7: SNMPv3 Commands144securitylevel Specifies the security level. The options are:noauthentication This option provides no authentication proto

AT-S62 Command Line User’s Guide145SET SNMPV3 USERSyntaxset snmpv3 user=user [authentication=md5|sha] authpassword=password privpassword=password [sto

Chapter 7: SNMPv3 Commands146ExamplesThe following command modifies a User Table entry called “atiuser104”. The authentication protocol is set to the

AT-S62 Command Line User’s Guide147SET SNMPV3 VIEWSyntaxset snmpv3 view=view [subtree=OID|text] mask=mask[type=included|excluded][storagetype=volatile

Chapter 7: SNMPv3 Commands148ExamplesThe following command modifies the view called “internet1.” The subtree is set to the Internet MIBs and the view

AT-S62 Command Line User’s Guide149SHOW SNMPV3 ACCESSSyntaxshow snmpv3 access=accessParameteraccess Specifies an SNMPv3 Access Table entry.Description

AT-S62 Command Line User’s Guide15Contacting Allied TelesynThis section provides Allied Telesyn contact information for technical support as well as s

Chapter 7: SNMPv3 Commands150SHOW SNMPV3 COMMUNITYSyntaxshow snmpv3 community index=index Parameterindex Specifies the name of this SNMPv3 Community T

AT-S62 Command Line User’s Guide151SHOW SNMPv3 GROUPSyntaxshow snmpv3 group username=username [securitymodel=v1|v2c|v3]Parameterusername Specifies a u

Chapter 7: SNMPv3 Commands152SHOW SNMPV3 NOTIFYSyntaxshow snmpv3 notify=notifyParameternotify Specifies an SNMPv3 Notify Table entry.DescriptionThis c

AT-S62 Command Line User’s Guide153SHOW SNMPV3 TARGETADDRSyntaxshow snmpv3 targetaddr=targetaddrParametertargetaddr Specifies an SNMPv3 Target Address

Chapter 7: SNMPv3 Commands154SHOW SNMPV3 TARGETPARAMSSyntaxshow snmpv3 targetparams=targetparamsParametertargetparams Specifies an SNMPv3 Target Param

AT-S62 Command Line User’s Guide155SHOW SNMPV3 USERSyntaxshow snmpv3 user=userParametersuser Specifies the name of an SNMPv3 user, up to 32 alphanumer

Chapter 7: SNMPv3 Commands156SHOW SNMPV3 VIEWSyntaxshow snmpv3 view=view [subtree=OID|text]Parameterview Specifies an SNMPv3 View Table entry.subtree

157Chapter 8Port Parameter CommandsThis chapter contains the following commands:❑ ACTIVATE SWITCH PORT on page 158❑ DISABLE INTERFACE LINKTRAP on page

Chapter 8: Port Parameter Commands158ACTIVATE SWITCH PORTSyntaxactivate switch port=port autonegotiateParameterport Specifies a port. You can specify

AT-S62 Command Line User’s Guide159DISABLE INTERFACE LINKTRAPSyntaxdisable interface=port linktrapParameterport Specifies the port where you want to d

16Chapter 1Starting a Command Line Management SessionThis chapter contains the following topics:❑ Starting a Management Session on page 17❑ Command Li

Chapter 8: Port Parameter Commands160DISABLE SWITCH PORTSyntaxdisable switch port=portParameterport Specifies the port to disable. You can specify mor

AT-S62 Command Line User’s Guide161DISABLE SWITCH PORT FLOWSyntaxdisable switch port=port flow=pauseParameterport Specifies the port where you want to

Chapter 8: Port Parameter Commands162ENABLE INTERFACE LINKTRAPSyntaxenable interface=port linktrapParameterport Specifies the port on which you want t

AT-S62 Command Line User’s Guide163ENABLE SWITCH PORTSyntaxenable switch port=portParameterport Specifies the port to enable. You can specify more tha

Chapter 8: Port Parameter Commands164ENABLE SWITCH PORT FLOWSyntaxenable switch port=port flow=pauseParameterport Specifies the port where you want to

AT-S62 Command Line User’s Guide165RESET SWITCH PORTSyntaxreset switch port=portParameterport Specifies the port to reset. You can specify the ports i

Chapter 8: Port Parameter Commands166SET SWITCH PORTSyntaxset switch port=port [description=”description”] [status=enabled|disabled] [speed=autonegoti

AT-S62 Command Line User’s Guide167speed Sets the speed and duplex mode of the port. Settings for this parameter are:autonegotiate The port Auto-Negot

Chapter 8: Port Parameter Commands168When flow control is activated, a port sends out a PAUSE packet whenever it wants the end node to stop sending pa

AT-S62 Command Line User’s Guide169renegotiation Prompts the port to renegotiate its speed and duplex mode with the end node. This parameter only work

AT-S62 Command Line User’s Guide17Starting a Management SessionIn order to manage an AT-8500 Series switch using command line commands, you must first

Chapter 8: Port Parameter Commands170DescriptionThis command sets a port’s operating parameters. You can set more than one parameter at a time. For an

AT-S62 Command Line User’s Guide171SET SWITCH PORT RATELIMITSyntaxset switch port=all [rate=value] [bcastratelimiting=yes|no|on|off|true|false|enabled

Chapter 8: Port Parameter Commands172table. Settings for this parameter are:yes, on, true, enabled Activates unknown unicast packet rate limit on the

AT-S62 Command Line User’s Guide173This command changes the rate limit to 15,000 packets:set switch port=all rate=15000The following command deactivat

Chapter 8: Port Parameter Commands174SHOW INTERFACESyntaxshow interface=portParameterport Specifies the port whose interface information you want to d

AT-S62 Command Line User’s Guide175❑ ifLinkUpDownTrapEnable - Whether or not link traps have been enabled for the port, one of the following:enabled -

Chapter 8: Port Parameter Commands176SHOW SWITCH PORTSyntaxshow switch port[=port]Parameterport Specifies the port whose parameter settings you want t

177Chapter 9MAC Address Table CommandsThis chapter contains the following commands:❑ ADD SWITCH FDB|FILTER on page 178❑ DELETE SWITCH FDB on page 180❑

Chapter 9: MAC Address Table Commands178ADD SWITCH FDB|FILTERSyntaxadd switch fdb|filterdestaddress|macaddress=macaddress port=portvlan=name|vidNoteTh

AT-S62 Command Line User’s Guide179ExamplesThe following command adds the static MAC address 00:A0:D2:18:1A:11 to port 7. It assumes the port where th

Chapter 1: Starting a Command Line Management Session18Command Line Interface FeaturesThe following features are supported in the command line interfa

Chapter 9: MAC Address Table Commands180DELETE SWITCH FDBSyntaxdelete switch fdb macaddress=macaddress vlan=name|vidParametersmacaddress Specifies the

AT-S62 Command Line User’s Guide181RESET SWITCH FDBSyntaxreset switch fdb port=portParametersport Specifies the port whose dynamic MAC addresses you w

Chapter 9: MAC Address Table Commands182SET SWITCH AGINGTIMER|AGEINGTIMERSyntaxset switch agingtimer|ageingtimer=valueParameteragingtimer Specifies th

AT-S62 Command Line User’s Guide183SHOW SWITCH AGINGTIMER|AGEINGTIMERSyntaxshow switch agingtimer|ageingtimerParametersNone.DescriptionThis command di

Chapter 9: MAC Address Table Commands184SHOW SWITCH FDBSyntaxshow switch fdb [address=macaddress] [port=port] [status=static|dynamic|multicast] [vlan=

AT-S62 Command Line User’s Guide185The following command displays the static and dynamic multicast addresses:show switch fdb status=multicastThe follo

186Chapter 10Port Trunking CommandsThis chapter contains the following commands:❑ ADD SWITCH TRUNK on page 187❑ CREATE SWITCH TRUNK on page 188❑ DELET

AT-S62 Command Line User’s Guide187ADD SWITCH TRUNKSyntaxadd switch trunk=name port=portParameterstrunk Specifies the name of the port trunk to be mod

Chapter 10: Port Trunking Commands188CREATE SWITCH TRUNKSyntaxcreate switch trunk=name port=ports [select=macsrc|macdest|macboth|ipsrc|ipdest|ipboth]P

AT-S62 Command Line User’s Guide189NoteBefore creating a port trunk, examine the speed, duplex mode, and flow control settings of the lowest numbered

AT-S62 Command Line User’s Guide19Command FormattingThe following formatting conventions are used in this manual:❑ screen text font - This font illust

Chapter 10: Port Trunking Commands190DELETE SWITCH TRUNKSyntaxdelete switch trunk=name port=portParameterstrunk Specifies the name of the trunk to be

AT-S62 Command Line User’s Guide191DESTROY SWITCH TRUNKSyntaxdestroy switch trunk=nameParametertrunk Specifies the name of the trunk to be deleted.Des

Chapter 10: Port Trunking Commands192SET SWITCH TRUNKSyntaxset switch trunk=name select=[macsrc|macdest|macboth|ipsrc|ipdest|ipboth]Parameterstrunk Sp

AT-S62 Command Line User’s Guide193SHOW SWITCH TRUNKSyntaxshow switch trunkParametersNone.DescriptionThis command displays the names, ports, and load

194Chapter 11Networking Stack CommandsThis chapter contains the following commands: DELETE IP ARP on page 195 DELETE TCP on page 196 RESET IP ARP o

AT-S62 Command Line User’s Guide195DELETE IP ARPSyntaxdelete ip arp [ipaddress|all]Parameteripaddress Specifies the IP address of the ARP entry you wa

Chapter 11: Networking Stack Commands196DELETE TCPSyntaxdelete tcp indexnumberParameterindexnumber Specifies the internal socket ID number assigned to

AT-S62 Command Line User’s Guide197RESET IP ARPSyntaxreset ip arpParameterNoneDescriptionThis command deletes all of the temporary entries in the ARP

Chapter 11: Networking Stack Commands198SET IP ARPSyntaxset ip arp [timeout=integer]Parametertimeout The range is 1 to 260000 seconds. The default set

AT-S62 Command Line User’s Guide199SHOW IP ARPSyntaxshow ip arpParametersNoneDescriptionThis command displays the IP addresses in the ARP table. It in

Copyright © 2005 Allied Telesyn, Inc.All rights reserved. No part of this publication may be reproduced without prior written permission from Allied T

20Chapter 2Basic Command Line CommandsThis chapter contains the following commands:❑ CLEAR SCREEN on page 21❑ EXIT on page 22❑ HELP on page 23❑ LOGOFF

Chapter 11: Networking Stack Commands200SHOW IP ROUTESyntaxshow ip routeParameterNoneDescriptionThis command displays the IP route table. It includes

AT-S62 Command Line User’s Guide201SHOW TCPSyntaxshow tcpParameterNoneDescriptionThis command displays the TCP connections and the TCP global informat

Chapter 11: Networking Stack Commands202Out Segs with RSTThe number of segments transmitted with the RST bit set.Total Number of TCP Listening sockets

AT-S62 Command Line User’s Guide203ExampleThe following command displays the TCP connections and the TCP global information:show tcp

204Chapter 12LACP CommandsThis chapter contains the following commands: ADD LACP PORT on page 205 CREATE LACP AGGREGATOR on page 207 DELETE LACP PO

AT-S62 Command Line User’s Guide205ADD LACP PORTSyntaxadd lacp port=port aggregator=name|adminkey=key priority=priorityParametersport Specifies the po

Chapter 12: LACP Commands206ExampleThe following command adds ports 8 and 22 to an aggregator named “agg_1”: add lacp port=8,22 aggregator=agg_1The fo

AT-S62 Command Line User’s Guide207CREATE LACP AGGREGATORSyntaxcreate lacp aggregator=name adminkey=key port=port [distribution=macsrc|macdest|macboth

Chapter 12: LACP Commands208DescriptionThis command creates an LACP aggregator.CautionDo not connect the cables to the ports of the aggregator on the

AT-S62 Command Line User’s Guide209DELETE LACP PORTSyntaxdelete lacp port=port [aggregator=name]Parametersport Specifies the port to delete from an ag

AT-S62 Command Line User’s Guide21CLEAR SCREENSyntaxclear screenParametersNone.DescriptionThis command clears the screen.ExampleThe following command

Chapter 12: LACP Commands210DESTROY LACP AGGREGATORSyntaxdestroy lacp aggregator=name|adminkey=keyParameteraggregator Specifies the name of the aggreg

AT-S62 Command Line User’s Guide211DISABLE LACPSyntaxdisable lacpParametersNone.DescriptionThis command disables LACP on the switch. The default is di

Chapter 12: LACP Commands212ENABLE LACPSyntaxenable lacpParametersNone.DescriptionThis command enables LACP. The default is disabled. This command is

AT-S62 Command Line User’s Guide213SET LACP AGGREGATORSyntaxset lacp aggregator=name [distribution=macsrc|macdest|macboth|ipsrc|ipdest|ipboth] [admink

Chapter 12: LACP Commands214SET LACP PORTSyntaxset lacp port=port aggregator=name|adminkey=key priority=priorityParametersport Specifies the port to m

AT-S62 Command Line User’s Guide215NoteBefore adding a port to an aggregator, verify that the port’s speed is set to Auto-Negotiation or 100 Mbps, ful

Chapter 12: LACP Commands216SET LACP PRIORITYSyntaxset lacp priority=priorityParameterspriority Specifies the LACP system priority value for a switch.

AT-S62 Command Line User’s Guide217SET LACP STATESyntaxset lacp state=enable|disableParametersstate Specifies the state of LACP on the switch. The opt

Chapter 12: LACP Commands218SHOW LACPSyntaxshow lacp [port=port|all] [aggregator=name] [machine=port|all]Parameterport Specifies the port(s) to displa

219Chapter 13Port Mirroring CommandsThis chapter contains the following commands:❑ SET SWITCH MIRROR on page 220❑ SET SWITCH PORT MIRROR on page 221❑

Chapter 2: Basic Command Line Commands22EXITSyntaxexitParametersNone.DescriptionThis command displays the AT-S62 Main Menu. It performs the same funct

Chapter 13: Port Mirroring Commands220SET SWITCH MIRRORSyntaxset switch mirror=portParametermirror Specifies the destination port for the port mirror.

AT-S62 Command Line User’s Guide221SET SWITCH PORT MIRRORSyntaxset switch port=port mirror=none|rx|tx|bothParametersport Specifies the source ports of

Chapter 13: Port Mirroring Commands222SHOW SWITCH MIRRORSyntaxshow switch mirrorParametersNone.DescriptionThis command displays the source and destina

223Chapter 14Statistics CommandsThis chapter contains the following commands:❑ RESET SWITCH PORT COUNTER on page 224❑ SHOW SWITCH COUNTER on page 225❑

Chapter 14: Statistics Commands224RESET SWITCH PORT COUNTERSyntaxreset switch port=port counterParameterport Specifies the port whose statistics count

AT-S62 Command Line User’s Guide225SHOW SWITCH COUNTERSyntaxshow switch counterParametersNone.DescriptionThis command displays operating statistics, s

Chapter 14: Statistics Commands226SHOW SWITCH PORT COUNTERSyntaxshow switch port=port counterParameterport Specifies the port whose statistics you wan

227Chapter 15File System CommandsThis chapter contains the following commands:❑ COPY on page 228❑ CREATE CONFIG on page 229❑ DELETE FILE on page 230❑

Chapter 15: File System Commands228COPYSyntaxcopy “filename1.ext” “filename2.ext”Parametersfilename1.ext Specifies the name of the file to be copied.

AT-S62 Command Line User’s Guide229CREATE CONFIGSyntaxcreate config=”filename.cfg”Parameterconfig Specifies the name of a new configuration file. If t

AT-S62 Command Line User’s Guide23HELPSyntaxhelpParametersNone.DescriptionThis command displays a list of the CLI keywords with a brief description fo

Chapter 15: File System Commands230DELETE FILESyntaxdelete file=”filename”Parameterfile Specifies the name of the file to be deleted. A name with spac

AT-S62 Command Line User’s Guide231RENAMESyntaxrename “filename1.ext” “filename2.ext”Parametersfilename1.ext Specifies the name of the file to be rena

Chapter 15: File System Commands232SET CONFIGSyntaxset config=”filename.cfg”Parameterconfig Specifies the name of the configuration file to act as the

AT-S62 Command Line User’s Guide233ExampleThe following command sets the active boot configuration file to switch22.cfg:set config=switch22.cfgThe swi

Chapter 15: File System Commands234SHOW FILESyntaxshow file=”filename”Parameterfile Specifies the name of the file to be displayed. Use double quotes

235Chapter 16File Download and Upload CommandsThis chapter contains the following commands:❑ LOAD METHOD=LOCAL on page 236❑ LOAD METHOD=TFTP on page 2

Chapter 16: File Download and Upload Commands236LOAD METHOD=LOCALSyntaxload method=local destfile=appblock srcfile|file=filenameParametersmethod Speci

AT-S62 Command Line User’s Guide237❑ Once you have downloaded an image file from the file system to the application block, you can delete the image fi

Chapter 16: File Download and Upload Commands238LOAD METHOD=TFTPSyntaxload method=tftp destfile=appblock|filename server=ipaddress srcfile|file=filena

AT-S62 Command Line User’s Guide239NoteIn previous versions of the AT-S62 management software this command also performed switch to switch file transf

Chapter 2: Basic Command Line Commands24LOGOFF, LOGOUT, and QUITSyntaxlogofflogoutquitParametersNone.DescriptionThese three commands perform the same

Chapter 16: File Download and Upload Commands240❑ There must be a node on your network that contains TFTP server software and the file to be downloade

AT-S62 Command Line User’s Guide241ExamplesThe following command downloads a new configuration file into the switch’s file system using TFTP. The conf

Chapter 16: File Download and Upload Commands242LOAD METHOD=XMODEMSyntaxload method=xmodem destfile=appblock|filenameParametersmethod Specifies an Xmo

AT-S62 Command Line User’s Guide243The APPBLOCK option of the DESTFILE parameter refers to the switch’s application block, which is the portion of fla

Chapter 16: File Download and Upload Commands244NoteDownloading an AT-S62 image file into a switch’s file system rather than into the application bloc

AT-S62 Command Line User’s Guide245The following command downloads a new version of the AT-S62 image file to the switch’s file system instead of the a

Chapter 16: File Download and Upload Commands246UPLOAD METHOD=LOCALSyntaxupload method=local destfile=filename srcfile|file=appblockParametersmethod S

AT-S62 Command Line User’s Guide247ExampleThe following command uploads the active AT-S62 image from the switch’s application block to the file system

Chapter 16: File Download and Upload Commands248UPLOAD METHOD=REMOTESWITCHSyntaxupload method=remoteswitch srcfile|file=appblock|switchcfg|filenameswi

AT-S62 Command Line User’s Guide249This command offers a simply means for updating multiple switches in a stack. For instance, to update switches with

AT-S62 Command Line User’s Guide25MENUSyntaxmenuParametersNone.DescriptionThis command displays the AT-S62 Main Menu. This command performs the same f

Chapter 16: File Download and Upload Commands250system. To select the switch’s current configuration file, use the SWITCHCFG option of the SRCFILE or

AT-S62 Command Line User’s Guide251ExamplesThe following command uploads the active AT-S62 image file on a master switch to switch 2 in an enhanced st

Chapter 16: File Download and Upload Commands252The following command uploads the configuration file “sales_switches.cfg” from a master switch to swit

AT-S62 Command Line User’s Guide253UPLOAD METHOD=TFTPSyntaxupload method=tftp destfile=filename server=ipaddress srcfile|file=switchcfg|filename|appbl

Chapter 16: File Download and Upload Commands254❑ Start the TFTP server software before you perform the command.❑ The switch from where you are upload

AT-S62 Command Line User’s Guide255The following command uses TFTP to upload the switch’s active configuration file from the file system to a TFTP ser

Chapter 16: File Download and Upload Commands256UPLOAD METHOD=XMODEMSyntaxupload method=xmodem srcfile|file=switchcfg|filename|appblockParametersmetho

AT-S62 Command Line User’s Guide257❑ filename - Uploads a file from the switch’s file system. This differs from the SWITCHCFG parameter in that the la

258Chapter 17Event Log and Syslog Server Commands This chapter contains the following commands:❑ ADD LOG OUTPUT on page 259❑ CREATE LOG OUTPUT on page

AT-S62 Command Line User’s Guide259ADD LOG OUTPUTSyntaxadd log output=id_number module=all|module severity=all|severityParametersoutput Specifies the

Chapter 2: Basic Command Line Commands26SAVE CONFIGURATIONSyntaxsave configurationParametersNone.DescriptionThis command saves your changes to the swi

Chapter 17: Event Log and Syslog Server Commands260The second step is to customize the definition by specifying which event messages generated by the

AT-S62 Command Line User’s Guide261The following command configures syslog server definition 5 to send warning and error event messages from the spann

Chapter 17: Event Log and Syslog Server Commands262CREATE LOG OUTPUTSyntaxcreate log output=id_number destination=syslog server=ipaddress [facility=de

AT-S62 Command Line User’s Guide263DescriptionThis command creates a new syslog server definition. The switch uses the definition to send event messag

Chapter 17: Event Log and Syslog Server Commands264For example, the setting of DEFAULT assigns port mirroring events a code of 22 and encryption key e

AT-S62 Command Line User’s Guide265Another option is to assign all events from a switch the same numerical code using the LOCAL1 to LOCAL2 options. Ea

Chapter 17: Event Log and Syslog Server Commands266DESTROY LOG OUTPUTSyntaxdestroy log output=id_numberParametersoutput Specifies the ID number of the

AT-S62 Command Line User’s Guide267DISABLE LOGSyntaxdisable logParametersNone. DescriptionThis command disables the event log module. When the log is

Chapter 17: Event Log and Syslog Server Commands268DISABLE LOG OUTPUTSyntaxdisable log output[=id_number]Parametersoutput Specifies the ID number of t

AT-S62 Command Line User’s Guide269ENABLE LOGSyntaxenable logParametersNone.DescriptionThis command activates the event log. The switch begins to add

AT-S62 Command Line User’s Guide27SET PROMPTSyntaxset prompt=”prompt”Parameterprompt Specifies the command line prompt. The prompt can be from one to

Chapter 17: Event Log and Syslog Server Commands270ENABLE LOG OUTPUTSyntaxenable log output[=id_number]Parametersoutput Specifies the ID number of the

AT-S62 Command Line User’s Guide271PURGE LOGSyntaxpurge log=temporaryParameterlog Specifies the location of the event log. There is only one option:te

Chapter 17: Event Log and Syslog Server Commands272SAVE LOGSyntaxsave log=temporary filename=”filename.log” [full] [module=module] [reverse] [severity

AT-S62 Command Line User’s Guide273overwrite Overwrites the file if it already exists. Without this option, the command displays an error if a file wi

Chapter 17: Event Log and Syslog Server Commands274SET LOG FULLACTIONSyntaxset log fullaction temporary=halt|wrapParametertemporary Specifies the acti

AT-S62 Command Line User’s Guide275SET LOG OUTPUTSyntaxset log output=id_number [destination=syslog} [server=ipaddress] [facility=default|local1|local

Chapter 17: Event Log and Syslog Server Commands276syslogformat Specifies the format of the event messages. The options are:extended Sends the severit

AT-S62 Command Line User’s Guide277ExamplesThe following command changes the IP address for syslog server definition 3 to 198.45.12.1:set log output=3

Chapter 17: Event Log and Syslog Server Commands278SHOW LOGSyntaxshow log=temporary [full] [module=module] [reverse] [severity=severity]Parameterslog

AT-S62 Command Line User’s Guide279DescriptionThis command displays the entries stored in the switch’s event log.An event log can display entries in t

Chapter 2: Basic Command Line Commands28SET SWITCH CONSOLEMODESyntaxset switch consolemode=menu|cliParameterconsolemode Specifies the mode you want ma

Chapter 17: Event Log and Syslog Server Commands280The log can display its entries in chronological order (oldest to newest), or reverse chronological

AT-S62 Command Line User’s Guide281The SEVERITY parameter displays entries of a particular severity. Table 5 defines the different severity levels. Yo

Chapter 17: Event Log and Syslog Server Commands282The columns in the log are described below:❑ S (Severity) - The event’s severity. Table 5 on page 2

AT-S62 Command Line User’s Guide283SHOW LOG OUTPUTSyntaxshow log output[=id_number] [full]Parametersoutput Specifies the ID number of the event log or

Chapter 17: Event Log and Syslog Server Commands284ExamplesThe following command lists all the output definitions on the switch:show log outputThe fol

AT-S62 Command Line User’s Guide285SHOW LOG STATUSSyntaxshow log statusParameterNone.DescriptionThis command displays information about the event log

286Chapter 18Classifier CommandsThis chapter contains the following commands:❑ CREATE CLASSIFIER on page 287❑ DESTROY CLASSIFIER on page 291❑ PURGE CL

AT-S62 Command Line User’s Guide287CREATE CLASSIFIERSyntaxcreate classifier=idnumber [description=”string”] [macdaddr=macaddress|any] [macsaddr=macadd

Chapter 18: Classifier Commands288priority Specifies the user priority level in a tagged Ethernet frame. The value can be 0 to 7.vlan Specifies a tagg

AT-S62 Command Line User’s Guide289ipsaddr Specifies a source IP address. The address can be of a specific node or a subnet. If the latter, a mask mus

AT-S62 Command Line User’s Guide29SHOW USERSyntaxshow userParameterNone.DescriptionDisplays the user account you used to log on to manage the switch.

Chapter 18: Classifier Commands290ExamplesThis command creates a classifier for all IP traffic:create classifier=4 description=”IP flow” protocol=ipTh

AT-S62 Command Line User’s Guide291DESTROY CLASSIFIERSyntaxdestroy classifier=idnumberParametersclassifier Specifies the ID number of the classifier t

Chapter 18: Classifier Commands292PURGE CLASSIFIERSyntaxpurge classifierParametersNone. DescriptionThis command deletes all classifiers from the switc

AT-S62 Command Line User’s Guide293SET CLASSIFIERSyntaxset classifier=idnumber [description=”string”] [macdaddr=macaddress|any] [macsaddr=macaddress|a

Chapter 18: Classifier Commands294protocol Specifies a Layer 2 protocol. Options are:❑ IP❑ ARP❑ RARPYou can specify additional Layer 2 protocols by en

AT-S62 Command Line User’s Guide295tcpsport Specifies a source TCP port.tcpdport Specifies a destination TCP port.udpsport Specifies a source UDP port

Chapter 18: Classifier Commands296This command removes the current setting for the UDP destination port variable from classifier ID 5 without assignin

AT-S62 Command Line User’s Guide297SHOW CLASSIFIERSyntaxshow classifier[=idnumber]Parametersclassifier Specifies the ID of the classifier you want to

298Chapter 19ACL CommandsThis chapter contains the following commands:❑ CREATE ACL on page 299❑ DESTROY ACL on page 301❑ PURGE ACL on page 302❑ SET AC

AT-S62 Command Line User’s Guide299CREATE ACLSyntaxcreate acl=integer [description=”string”] [action=deny|permit] classifierlist=integer [portlist=por

3Table of ContentsPreface ...

30Chapter 3Enhanced Stacking CommandsThis chapter contains the following commands:❑ ACCESS SWITCH on page 31❑ SET SWITCH STACKMODE on page 33❑ SHOW RE

Chapter 19: ACL Commands300ExampleThe following command creates an ACL that discards the ingress traffic flow specified in classifier ID 18 and applie

AT-S62 Command Line User’s Guide301DESTROY ACLSyntaxdestroy acl=integerParametersacl Specifies ID number of the ACL you want to delete. You can delete

Chapter 19: ACL Commands302PURGE ACLSyntaxpurge aclParametersNone. DescriptionThis command deletes all ACLs on the switch. ExampleThis command deletes

AT-S62 Command Line User’s Guide303SET ACLSyntaxset acl=integer [description=string] [action=deny|permit] [classifierlist=integer] [portlist=ports|non

Chapter 19: ACL Commands304DescriptionThis command modifies an ACL. You can use the command to change the description, action, classifiers, and ports

AT-S62 Command Line User’s Guide305SHOW ACLSyntaxshow acl[=integer]Parametersacl Specifies the ID of the ACL you want to view. You can specify more th

306Chapter 20Quality of Service (QoS) CommandsThis chapter contains the following commands:❑ ADD QOS FLOWGROUP on page 308❑ ADD QOS POLICY on page 309

AT-S62 Command Line User’s Guide307❑ SHOW QOS POLICY on page 342❑ SHOW QOS TRAFFICCLASS on page 343NoteRemember to save your changes with the SAVE CON

Chapter 20: Quality of Service (QoS) Commands308ADD QOS FLOWGROUPSyntaxadd qos flowgroup=integer classifierlist=integersParameterflowgroup Specifies t

AT-S62 Command Line User’s Guide309ADD QOS POLICYSyntaxadd qos policy=integer trafficclasslist=integersParameterpolicy Specifies the ID number of the

AT-S62 Command Line User’s Guide31ACCESS SWITCHSyntaxaccess switch number=number|macaddress=macaddressParametersnumber Specifies the number of the swi

Chapter 20: Quality of Service (QoS) Commands310ADD QOS TRAFFICCLASSSyntaxadd qos trafficclass=integer flowgrouplist=integersParametertrafficclass Spe

AT-S62 Command Line User’s Guide311CREATE QOS FLOWGROUPSyntaxcreate qos flowgroup=integer [description=”string”] [markvalue=integer|none] [priority=in

Chapter 20: Quality of Service (QoS) Commands312remarkpriority Replaces the user priority value in the packets with the new value specified with the P

AT-S62 Command Line User’s Guide313This command creates a flow group whose DSCP value is changed to 59. The MARKVALUE parameter overwrites the current

Chapter 20: Quality of Service (QoS) Commands314CREATE QOS POLICYSyntaxcreate qos policy=integer [description=”string”] [indscpoverwrite=integer|none]

AT-S62 Command Line User’s Guide315ingressport Specifies the ingress ports to which the policy is to be assigned. Ports can be identified individually

Chapter 20: Quality of Service (QoS) Commands316QoS Command Sequence ExamplesCreating a QoS policy involves a command sequence that creates one or mor

AT-S62 Command Line User’s Guide317of a policy concerning packets coming from the application. The classifier for Policy 11 specifies the address as a

Chapter 20: Quality of Service (QoS) Commands318create qos policy=17 description=”video flow” trafficclasslist=19 ingressport=1Policy 32 Commands:crea

AT-S62 Command Line User’s Guide319Policy 15 Commands:create classifier=42 description=database ipsadddr=149.44.44.44create qos flowgroup=36 descripti

Chapter 3: Enhanced Stacking Commands32ExamplesThe following command starts a management session on switch number 12:access switch number=12The follow

Chapter 20: Quality of Service (QoS) Commands320CREATE QOS TRAFFICCLASSSyntaxcreate qos trafficclass=integer [description=”string”] [exceedaction=drop

AT-S62 Command Line User’s Guide321A new DSCP value can be set at all three levels: flow group, traffic class, and policy. A DSCP value specified in a

Chapter 20: Quality of Service (QoS) Commands322the traffic. However, no unused tokens will accumulate in the bucket. If the traffic increases, the ex

AT-S62 Command Line User’s Guide323yes, on, true Replaces the user priority value in the packets with the new value specified with the PRIORITY parame

Chapter 20: Quality of Service (QoS) Commands324DELETE QOS FLOWGROUPSyntaxdelete qos flowgroup=integer classifierlist=integersParameterflowgroup Speci

AT-S62 Command Line User’s Guide325DELETE QOS POLICYSyntaxdelete qos policy=integer trafficclasslist=integersParameterpolicy Specifies the ID number o

Chapter 20: Quality of Service (QoS) Commands326DELETE QOS TRAFFICCLASSSyntaxdelete qos trafficclass=integer flowgrouplist=integersParameterflowgroup

AT-S62 Command Line User’s Guide327DESTROY QOS FLOWGROUPSyntaxdestroy qos flowgroup=integerParameterflowgroup Specifies the ID number of the flow grou

Chapter 20: Quality of Service (QoS) Commands328DESTROY QOS POLICYSyntaxdestroy qos policy=integerParameterflowgroup Specifies the ID number of the po

AT-S62 Command Line User’s Guide329DESTROY QOS TRAFFICCLASSSyntaxdestroy qos trafficclass=integerParametertrafficclass Specifies the ID number of the

AT-S62 Command Line User’s Guide33SET SWITCH STACKMODESyntaxset switch stackmode=master|slave|unavailableParameterstackmode Specifies the enhanced sta

Chapter 20: Quality of Service (QoS) Commands330SET QOS FLOWGROUPSyntaxset qos flowgroup=integer [description=string] [markvalue=integer|none] [priori

AT-S62 Command Line User’s Guide331yes, on, true Replaces the user priority value in the packets with the new value specified with the PRIORITY parame

Chapter 20: Quality of Service (QoS) Commands332This command returns the MARKVALUE setting in flow group 41 back to the default setting of NONE. At th

AT-S62 Command Line User’s Guide333SET QOS POLICYSyntaxset qos policy=integer [description=string] [indscpoverwrite=integer|none] [remarkindscp=[all|n

Chapter 20: Quality of Service (QoS) Commands334ingressport Specifies the ingress ports to which the policy is to be assigned. Ports can be identified

AT-S62 Command Line User’s Guide335When modifying a policy, note the following:❑ You cannot change a policy’s ID number.❑ Specifying an invalid value

Chapter 20: Quality of Service (QoS) Commands336SET QOS PORTSyntaxset qos port=integer type=ingress|egress policy=integer|noneParameterport Specifies

AT-S62 Command Line User’s Guide337SET QOS TRAFFICCLASSSyntaxset qos trafficclass=integer [description=”string”] [exceedaction=drop|remark] [exceedrem

Chapter 20: Quality of Service (QoS) Commands338A new DSCP value can be set at all three levels: flow group, traffic class, and policy. A DSCP value s

AT-S62 Command Line User’s Guide339the traffic. However, no unused tokens will accumulate in the bucket. If the traffic increases, the excess traffic

Chapter 3: Enhanced Stacking Commands34ExampleThe following command sets the switch’s stacking status to master:set switch stackmode=master

Chapter 20: Quality of Service (QoS) Commands340flowgrouplist Specifies the flow groups to be assigned to the traffic class. Any flow groups already a

AT-S62 Command Line User’s Guide341SHOW QOS FLOWGROUPSyntaxshow qos flowgroup[=idnumber]Parametersflowgroup Specifies the ID of the flow group you wan

Chapter 20: Quality of Service (QoS) Commands342SHOW QOS POLICYSyntaxshow qos policy[=idnumber]Parameterpolicy Specifies the ID of the policy you want

AT-S62 Command Line User’s Guide343SHOW QOS TRAFFICCLASSSyntaxshow qos trafficclass[=idnumber]Parametertrafficclass Specifies the ID of the traffic cl

344Chapter 21Class of Service (CoS) CommandsThis chapter contains the following commands:❑ MAP QOS COSP on page 345❑ SET QOS COSP on page 347❑ SET QOS

AT-S62 Command Line User’s Guide345MAP QOS COSPSyntaxmap qos cosp=priority-number qid=queue-numberParameterscosp Specifies the Class of Service (CoS)

Chapter 21: Class of Service (CoS) Commands346ExampleThe following command maps priorities 4 and 5, to egress queue 3:map qos cosp=4,5 qid=3

AT-S62 Command Line User’s Guide347SET QOS COSPSyntaxset qos cosp=priority-number qid=queue-numberParameterscosp Specifies the Class of Service (CoS)

Chapter 21: Class of Service (CoS) Commands348SET QOS SCHEDULINGSyntaxset qos scheduling=strict|wrr weights=weightsParametersscheduling Specifies the

AT-S62 Command Line User’s Guide349SHOW QOS CONFIGSyntaxshow qos configParametersNone.DescriptionDisplays the QoS priority queues and scheduling.Examp

AT-S62 Command Line User’s Guide35SHOW REMOTELISTSyntaxshow remotelist [sorted by=macaddress|name]Parametersorted Sorts the list either by MAC address

350Chapter 22Power Over Ethernet CommandsThis chapter contains the following commands:❑ DISABLE POE PORT on page 351❑ ENABLE POE PORT on page 352❑ SET

AT-S62 Command Line User’s Guide351DISABLE POE PORTSyntaxdisable poe port=portParametersport Specifies a port. You can specify more than one port at a

Chapter 22: Power Over Ethernet Commands352ENABLE POE PORTSyntaxenable poe port=portParametersport Specifies a port. You can specify more than one por

AT-S62 Command Line User’s Guide353SET POE PORTSyntaxset poe port=port [poefunction=enable|disable] [priority=low|high|critical] [powerlimit=value]Par

Chapter 22: Power Over Ethernet Commands354ExamplesThe following command disables PoE on ports 4 and 5:set poe port=4-5 poefunction=disableThis comman

AT-S62 Command Line User’s Guide355SET POE THRESHOLDSyntaxset poe threshold=valueParametersthreshold Specifies the threshold as a percentage of the to

Chapter 22: Power Over Ethernet Commands356SHOW POE CONFIGSyntaxshow poe config [port=port]Parameterport Specifies a port. You can specify more than o

AT-S62 Command Line User’s Guide357SHOW POE STATUSSyntaxshow poe status [port=port]Parameterport Specifies a port. You can specify more than one port

Chapter 22: Power Over Ethernet Commands358Specifying a port in the command displays the following PoE information about the port:❑ PoE Function - Whe

359Chapter 23IGMP Snooping CommandsThis chapter contains the following commands:❑ DISABLE IGMPSNOOPING on page 360❑ ENABLE IGMPSNOOPING on page 361❑ S

36Chapter 4Basic Switch CommandsThis chapter contains the following commands:❑ DISABLE DHCPBOOTP on page 38❑ DISABLE IP REMOTEASSIGN on page 39❑ DISAB

Chapter 23: IGMP Snooping Commands360DISABLE IGMPSNOOPINGSyntaxdisable igmpsnoopingParametersNone.DescriptionThis command deactivates IGMP snooping on

AT-S62 Command Line User’s Guide361ENABLE IGMPSNOOPINGSyntaxenable igmpsnoopingParametersNone.DescriptionThis command activates IGMP snooping on the s

Chapter 23: IGMP Snooping Commands362SET IP IGMPSyntaxset ip igmp [snoopingstatus=enabled|disabled] [hoststatus=singlehost|multihost] [timeout=value]

AT-S62 Command Line User’s Guide363numbermulticastgroups Specifies the maximum number of multicast addresses the switch learns. This parameter is usef

Chapter 23: IGMP Snooping Commands364SHOW IGMPSNOOPINGSyntaxshow igmpsnoopingParametersNone.DescriptionThis command displays the following IGMP parame

AT-S62 Command Line User’s Guide365SHOW IP IGMPSyntaxshow ip igmp [hostlist] [routerlist]Parametershostlist Displays a list of the multicast groups le

Chapter 23: IGMP Snooping Commands366The following command displays a list of active multicast routers:show ip igmp routerlist

367Chapter 24Denial of Service (DoS) Defense CommandsThis chapter contains the following commands:❑ SET DOS on page 368❑ SET DOS IPOPTION on page 369❑

Chapter 24: Denial of Service (DoS) Commands368SET DOSSyntaxset dos ipaddress=ipaddress subnet=mask uplinkport=portParametersipaddress Specifies the I

AT-S62 Command Line User’s Guide369SET DOS IPOPTIONSyntaxset dos ipoption port=port state=enable|disable [mirrorport=port]Parametersport Specifies the

AT-S62 Command Line User’s Guide37❑ SET PASSWORD OPERATOR on page 59❑ SET SWITCH CONSOLETIMER on page 60❑ SET SYSTEM on page 61❑ SET USER PASSWORD on

Chapter 24: Denial of Service (DoS) Commands370SET DOS LANDSyntaxset dos land port=port state=enable|disable [mirrorport=port]Parametersport Specifies

AT-S62 Command Line User’s Guide371SET DOS PINGOFDEATHSyntaxset dos pingofdeath port=port state=enable|disable [mirrorport=port]Parametersport Specifi

Chapter 24: Denial of Service (DoS) Commands372NoteThis defense mechanism requires some involvement by the switch’s CPU, though not as much as the Tea

AT-S62 Command Line User’s Guide373SET DOS SMURFSyntaxset dos smurf port=port state=enable|disableParametersport Specifies the switch ports on which y

Chapter 24: Denial of Service (DoS) Commands374SET DOS SYNFLOODSyntaxset dos synflood port=port state=enable|disableParametersport Specifies the switc

AT-S62 Command Line User’s Guide375SET DOS TEARDROPSyntaxset dos teardrop port=port state=enable|disable [mirrorport=auto|port]Parametersport Specifie

Chapter 24: Denial of Service (DoS) Commands376CautionThis defense is extremely CPU intensive and should be used with caution. Unrestricted use can ca

AT-S62 Command Line User’s Guide377SHOW DOSSyntax 1show dos [ipaddress] [subnet] [uplinkport]Syntax 2show dos defense port=portParametersipaddress Dis

Chapter 24: Denial of Service (DoS) Commands378This command displays the status of the SMURF defense on port 4:show dos smurf port=4

379Chapter 25STP CommandsThis chapter contains the following commands:❑ ACTIVATE STP on page 380❑ DISABLE STP on page 381❑ ENABLE STP on page 382❑ PUR

Chapter 4: Basic Switch Commands38DISABLE DHCPBOOTPSyntaxdisable dhcpbootpParametersNone.DescriptionThis command deactivates the DHCP and BOOTP client

Chapter 25: STP Commands380ACTIVATE STPSyntaxactivate stpParametersNone.DescriptionUse this command to designate STP as the active spanning tree on th

AT-S62 Command Line User’s Guide381DISABLE STPSyntaxdisable stpParametersNone.DescriptionThis command disables the Spanning Tree Protocol on the switc

Chapter 25: STP Commands382ENABLE STPSyntaxenable stpParametersNone.DescriptionThis command enables the Spanning Tree Protocol on the switch. The defa

AT-S62 Command Line User’s Guide383PURGE STPSyntaxpurge stpParametersNone.DescriptionThis command returns all STP bridge and port parameters to the de

Chapter 25: STP Commands384SET STPSyntaxset stp [default] [priority=priority] [hellotime=hellotime] [forwarddelay=forwarddelay] [maxage=maxage]Paramet

AT-S62 Command Line User’s Guide385hellotime Specifies the time interval between generating and sending configuration messages by the bridge. This par

Chapter 25: STP Commands386ExamplesThe following command sets the switch’s bridge priority value to 45,056 (increment 11):set stp priority=11The follo

AT-S62 Command Line User’s Guide387SET STP PORTSyntaxset stp port=port [pathcost|portcost=auto|portcost] [portpriority=portpriority]Parametersport Spe

Chapter 25: STP Commands388portpriority Specifies the port’s priority. This parameter is used as a tie breaker when two or more ports are determined t

AT-S62 Command Line User’s Guide389SET SWITCH MULTICASTMODESyntaxset switch multicastmode=a|b|c|dParametermulticastmode Specifies one of the following

AT-S62 Command Line User’s Guide39DISABLE IP REMOTEASSIGNSyntaxdisable ip remoteassignParametersNone.DescriptionThis command deactivates the DHCP and

Chapter 25: STP Commands390There are four possible states: A, B, C, and D. The states are described here: A - Discards all ingress spanning tree BPDU

AT-S62 Command Line User’s Guide391SHOW STPSyntaxshow stp [port=port]Parameterport Specifies the port whose STP parameters you want to view. You can v

392Chapter 26RSTP CommandsThis chapter contains the following commands:❑ ACTIVATE RSTP on page 393❑ DISABLE RSTP on page 394❑ ENABLE RSTP on page 395❑

AT-S62 Command Line User’s Guide393ACTIVATE RSTPSyntaxactivate rstpParametersNone.DescriptionUse this command to designate RSTP as the active spanning

Chapter 26: RSTP Commands394DISABLE RSTPSyntaxdisable rstpParametersNone.DescriptionThis command disables the Rapid Spanning Tree Protocol on the swit

AT-S62 Command Line User’s Guide395ENABLE RSTPSyntaxenable rstpParametersNone.DescriptionThis command enables the Rapid Spanning Tree Protocol on the

Chapter 26: RSTP Commands396PURGE RSTPSyntaxpurge rstpParametersNone.DescriptionThis command returns all RSTP bridge and port parameters to the defaul

AT-S62 Command Line User’s Guide397SET RSTPSyntaxset rstp [default] [priority=priority] [hellotime=hellotime] [forwarddelay=forwarddelay] [maxage=maxa

Chapter 26: RSTP Commands398hellotime Specifies the time interval between generating and sending configuration messages by the bridge. This parameter

AT-S62 Command Line User’s Guide399forcestpcompatible The bridge uses the RSTP parameter settings, but transmits only STP BPDU packets from the ports.

Table of Contents4ENABLE DHCP ...

Chapter 4: Basic Switch Commands40DISABLE TELNETSyntaxdisable telnetParametersNone.DescriptionThis command disables the Telnet server software on the

Chapter 26: RSTP Commands400The following command returns all RSTP parameter settings to their default values:set rstp default

AT-S62 Command Line User’s Guide401SET RSTP PORTSyntaxset rstp port=port [pathcost|portcost=cost|auto] [portpriority=portpriority][edgeport=yes|no|on|

Chapter 26: RSTP Commands402Table 7 lists the RSTP port costs with Auto-Detect when the port is part of a port trunk.portpriority Specifies the port’s

AT-S62 Command Line User’s Guide403no, off, false The port is not an edge port. The values are equivalent. ptp Defines whether the port is functioning

Chapter 26: RSTP Commands404SHOW RSTPSyntaxshow rstp [portconfig=port|portstate=port]Parametersportconfig Displays the RSTP port settings. You can spe

AT-S62 Command Line User’s Guide405The following command displays RSTP port status for port 15:show rstp portstate=15

406Chapter 27MSTP CommandsThis chapter contains the following commands:❑ ACTIVATE MSTP on page 408❑ ADD MSTP on page 409❑ CREATE MSTP on page 410❑ DEL

AT-S62 Command Line User’s Guide407NoteRefer to the AT-S62 Management Software Menus Interface User’s Guide for background information on the Multiple

Chapter 27: MSTP Commands408ACTIVATE MSTPSyntaxactivate mstpParametersNone.DescriptionThis command designates MSTP as the active spanning tree on the

AT-S62 Command Line User’s Guide409ADD MSTPSyntaxadd mstp mstiid=mstiid mstivlanassoc=vidsParametersmstiid Specifies the ID of the multiple spanning t

AT-S62 Command Line User’s Guide41ENABLE BOOTPSyntaxenable bootpParametersNone.DescriptionThis command activates the BOOTP client software on the swit

Chapter 27: MSTP Commands410CREATE MSTPSyntaxcreate mstp mstiid=mstiid [mstivlanassoc=vids]Parametersmstiid Specifies the MSTI ID of the spanning tree

AT-S62 Command Line User’s Guide411DELETE MSTPSyntaxdelete mstp mstiid=mstiid mstivlanassoc=vidsParametersmstiid Specifies the MSTI ID of the spanning

Chapter 27: MSTP Commands412DESTROY MSTP MSTIIDSyntaxdestroy mstp mstiid=mstiidParametermstiid Specifies the MSTI ID of the spanning tree instance you

AT-S62 Command Line User’s Guide413DISABLE MSTPSyntaxdisable mstpParametersNone.DescriptionThis command disables the Multiple Spanning Tree Protocol o

Chapter 27: MSTP Commands414ENABLE MSTPSyntaxenable mstpParametersNone.DescriptionThis command enables Multiple Spanning Tree Protocol on the switch.

AT-S62 Command Line User’s Guide415PURGE MSTPSyntaxpurge mstpParametersNone.DescriptionThis command returns all MSTP bridge and port parameters settin

Chapter 27: MSTP Commands416SET MSTPSyntaxset mstp [default] [forceversion=stpcompatible|forcestpcompatible|normalmstp] [hellotime=hellotime] [forward

AT-S62 Command Line User’s Guide417normalmspt The bridge uses MSTP. The bridge sends out MSTP BPDU packets from all ports except for those ports conne

Chapter 27: MSTP Commands418revisionlevel Specifies the revision level of an MSTP region. The range is 0 (zero) to 255. This is an arbitrary number th

AT-S62 Command Line User’s Guide419SET MSTP CISTSyntaxset mstp cist priority=priorityParameterpriority Specifies the CIST priority number for the swit

Chapter 4: Basic Switch Commands42ENABLE DHCPSyntaxenable dhcpParametersNone.DescriptionThis command activates the DHCP client software on the switch.

Chapter 27: MSTP Commands420ExampleThe following command sets the CIST priority value to 45,056, which is increment 11:set mstp cist priority=11

AT-S62 Command Line User’s Guide421SET MSTP MSTISyntaxset mstp msti mstiid=mstiid priority=priorityParametersmstiid Specifies a MSTI ID. You can speci

Chapter 27: MSTP Commands422The PRIORITY parameter specifies the new MSTI priority value. The range is 0 (zero) to 61,440 in increments of 4,096, with

AT-S62 Command Line User’s Guide423SET MSTP MSTIVLANASSOCSyntaxset mstp mstivlanassoc mstiid=mstiid vlanlist=vidsParametersmstiid Specifies the ID of

Chapter 27: MSTP Commands424SET MSTP PORTSyntax 1set mstp port=port|all [extportcost=portcost] [edgeport=yes|no|no|on|off|true|false] [ptp|pointtopoin

AT-S62 Command Line User’s Guide425edgeport Defines whether the port is functioning as an edge port. An edge port is connected to a device operating a

Chapter 27: MSTP Commands426NoteEach time a MSTP port is reset by receiving STP BPDUs, set the migrationcheck parameter to yes, allowing the port to s

AT-S62 Command Line User’s Guide427untagged and tagged ports whose VLANs belong to more than one MSTI. You can specify more than one MSTI at a time (e

Chapter 27: MSTP Commands428Syntax 2 ExamplesThe following command sets the internal port cost to 500 for Ports 7 and 10. If the ports are members of

AT-S62 Command Line User’s Guide429SHOW MSTPSyntaxshow mstp [portconfig=ports] [portstate=ports] [stpid=msti_id] [mstistate] [cist] [mstivlanassoc]Par

AT-S62 Command Line User’s Guide43ENABLE IP REMOTEASSIGNSyntaxenable ip remoteassignParametersNone.DescriptionThis command activates the DHCP client s

Chapter 27: MSTP Commands430Entering SHOW MSTP without any parameters displays the following MSTP settings:❑ MSTP status❑ Force version❑ Hello time❑ F

AT-S62 Command Line User’s Guide431❑ Path cost❑ Associated VLANsThe CIST parameter displays the following CIST information:❑ CIST priority value❑ Root

432Chapter 28VLANs and Multiple VLAN Mode CommandsThis chapter contains the following commands:❑ ADD VLAN on page 433❑ CREATE VLAN on page 435❑ DELETE

AT-S62 Command Line User’s Guide433ADD VLANSyntax 1add vlan=name [vid=vid] port=ports|all frame=untagged|taggedSyntax 2add vlan=name [vid=vid] taggedp

Chapter 28: VLANs and Multiple VLAN Commands434This command has two syntaxes. You can use either command to add ports to a VLAN. The difference betwee

AT-S62 Command Line User’s Guide435CREATE VLANSyntax 1create vlan=name vid=vid port=ports|all frame=untagged|taggedSyntax 2create vlan=name vid=vid ta

Chapter 28: VLANs and Multiple VLAN Commands436port Specifies the ports on the switch that are either tagged or untagged members of the new VLAN. You

AT-S62 Command Line User’s Guide437Tagged ports of the new VLAN remain as tagged and untagged members of their current VLAN assignments. No change is

Chapter 28: VLANs and Multiple VLAN Commands438Syntax 2 allows you to create a VLAN of both tagged and untagged ports all in one command. Here is the

AT-S62 Command Line User’s Guide439DELETE VLANSyntax 1delete vlan=name [vid=vid] port=ports frame=untagged|taggedSyntax 2delete vlan=name [vid=vid] ta

Chapter 4: Basic Switch Commands44ENABLE TELNETSyntaxenable telnetParametersNone.DescriptionThis command activates the Telnet server on the switch. Wi

Chapter 28: VLANs and Multiple VLAN Commands440NoteYou cannot change a VLAN’s name or VID. When you remove an untagged port from a VLAN, the following

AT-S62 Command Line User’s Guide441To delete both tagged and untagged ports from a VLAN using Syntax 1 takes two commands. For example, if you had a V

Chapter 28: VLANs and Multiple VLAN Commands442DESTROY VLANSyntaxdestroy vlan vlan=name|all [vid=vid]Parametersvlan Specifies the name of the VLAN to

AT-S62 Command Line User’s Guide443SET SWITCH INFILTERINGSyntaxset switch infiltering=yes|no|on|off|true|falseParametersinfiltering Specifies the oper

Chapter 28: VLANs and Multiple VLAN Commands444SET SWITCH MANAGEMENTVLANSyntaxset switch managementvlan=name|VIDParametermanagementvlan Specifies the

AT-S62 Command Line User’s Guide445SET SWITCH VLANMODESyntaxset switch vlanmode=userconfig|dotqmultiple| multiple [uplinkport=port]Parametersvlanmode

Chapter 28: VLANs and Multiple VLAN Commands446The following command sets the switch so that you can create your own port-based and tagged VLANs:set s

AT-S62 Command Line User’s Guide447SET VLANSyntaxset vlan=name [vid=vid] type=portbasedParametervlan Specifies the name of the dynamic GVRP VLAN you w

Chapter 28: VLANs and Multiple VLAN Commands448SHOW VLANSyntaxshow vlan[=name|vid]Parametervlan Specifies the name or VID of a VLAN.DescriptionThis co

449Chapter 29GARP VLAN Registration Protocol CommandsThis chapter contains the following commands:❑ DISABLE GARP on page 450❑ ENABLE GARP on page 451❑

AT-S62 Command Line User’s Guide45FORMAT DEVICESyntaxformat drive=flashParameterdrive Specifies the memory device to format. The AT-8500 Series switch

Chapter 29: GARP VLAN Registration Protocol Commands450DISABLE GARPSyntaxdisable garp=gvrp [gip]Parametersgarp Specifies the GARP application you want

AT-S62 Command Line User’s Guide451ENABLE GARPSyntaxenable garp=gvrp [gip]Parametersgarp Specifies the GARP application you want to enable. The only G

Chapter 29: GARP VLAN Registration Protocol Commands452PURGE GARPSyntaxpurge garp=gvrpParametergarp Specifies the GARP application you want to reset.

AT-S62 Command Line User’s Guide453SET GARP PORTSyntaxset garp=gvrp port=port mode=normal|noneParametersgarp Specifies the GARP application you want t

Chapter 29: GARP VLAN Registration Protocol Commands454SET GARP TIMERSyntaxset garp=gvrp timer [default] [jointime=integer] [leavetime=integer] [leave

AT-S62 Command Line User’s Guide455ExamplesThe following command sets the Join Period timer to 0.1 second, Leave Period timer to 0.35 seconds, and the

Chapter 29: GARP VLAN Registration Protocol Commands456SHOW GARPSyntaxshow garp=gvrpParametergarp Specifies the GARP application you want to display.

AT-S62 Command Line User’s Guide457SHOW GARP COUNTERSyntaxshow garp=gvrp counterParametergarp Specifies the GARP application you want to display. The

Chapter 29: GARP VLAN Registration Protocol Commands458❑ Transmit GARP Messages: LeaveEmpty❑ Receive GARP Messages: LeaveIn❑ Transmit GARP Messages: L

AT-S62 Command Line User’s Guide459SHOW GARP DATABASESyntaxshow garp=gvrp databaseParametersgarp Specifies the GARP application you want to display. T

Chapter 4: Basic Switch Commands46A confirmation prompt is displayed. Enter Y for yes to format the flash memory or N for no to cancel the command.

Chapter 29: GARP VLAN Registration Protocol Commands460SHOW GARP GIPSyntaxshow garp=gvrp gipParametergarp Specifies the GARP application you want to d

AT-S62 Command Line User’s Guide461SHOW GARP MACHINESyntaxshow garp=gvrp machineParametergarp Specifies the GARP application you want to display. The

462Chapter 30Protected Ports VLAN CommandsThis chapter contains the following commands:❑ ADD VLAN GROUP on page 463❑ CREATE VLAN PORTPROTECTED on page

AT-S62 Command Line User’s Guide463ADD VLAN GROUPSyntax 1add vlan=name|vid ports=ports frame=tagged|untagged group=uplink|1..256Syntax 2add vlan=name|

Chapter 30: IGMP Snooping Commands464Note the following before using this command:❑ You must first create the protected ports VLAN by giving it a name

AT-S62 Command Line User’s Guide465The following command does the same thing using syntax 2:add vlan=InternetGroups untaggedports=5,6 group=4

Chapter 30: IGMP Snooping Commands466CREATE VLAN PORTPROTECTEDSyntaxcreate vlan=name vid=vid portprotectedParametersvlan Specifies the name of the new

AT-S62 Command Line User’s Guide467DELETE VLANSyntax 1delete vlan=name|vid ports=ports frame=tagged|untaggedSyntax 2delete vlan=name|vid [taggedports=

Chapter 30: IGMP Snooping Commands468❑ Deleted untagged ports are returned to the Default_VLAN as untagged.❑ You can delete ports from only one group

AT-S62 Command Line User’s Guide469DESTROY VLANSyntaxdestroy vlan=name|vid|allParametersvlan Specifies the name or VID of the VLAN to be destroyed. To

AT-S62 Command Line User’s Guide47PINGSyntaxping ipaddressParameteripaddress Specifies the IP address of an end node you want the switch to ping.Descr

Chapter 30: IGMP Snooping Commands470SET VLANSyntaxset vlan=name|vid port=ports frame=tagged|untaggedParametersvlan Specifies the name or VID of the V

AT-S62 Command Line User’s Guide471SHOW VLANSyntaxshow vlan[=name|vid]Parametervlan Specifies the name or VID of the VLAN you want to view. Omitting t

472Chapter 31MAC Address Security CommandsThis chapter contains the following commands:❑ SET SWITCH PORT INTRUSIONACTION on page 473❑ SET SWITCH PORT

AT-S62 Command Line User’s Guide473SET SWITCH PORT INTRUSIONACTIONSyntaxset switch port=port intrusionaction=discard|trap|disableParametersport Specif

Chapter 31: Port Security Commands474SET SWITCH PORT SECURITYMODESyntaxset switch port=port [securitymode=automatic|limited|secured|locked][intrusiona

AT-S62 Command Line User’s Guide475intrusionaction Specifies the action taken by the port in the event port security is violated. This parameter appli

Chapter 31: Port Security Commands476ExamplesThis command sets the security level for port 8 to the Limited mode and specifies a limit of 5 dynamic MA

AT-S62 Command Line User’s Guide477SHOW SWITCH PORT INTRUSIONSyntaxshow switch port=port intrusionParametersport Specifies the port where you want to

Chapter 31: Port Security Commands478SHOW SWITCH PORT SECURITYMODESyntaxshow switch port=port securitymodeParametersport Specifies the port whose secu

479Chapter 32802.1x Port-based Access Control CommandsThis chapter contains the following commands: ❑ DISABLE PORTACCESS|PORTAUTH on page 480❑ DISABLE

Chapter 4: Basic Switch Commands48PURGE IPSyntaxpurge ip [ipaddress] [netmask] [route]Parametersipaddress Returns the switch’s IP address to the defau

Chapter 32: 802.1x Port-based Access Control Commands480DISABLE PORTACCESS|PORTAUTHSyntaxdisable portaccess|portauthNoteThe PORTACCESS and PORTAUTH ke

AT-S62 Command Line User’s Guide481DISABLE RADIUSACCOUNTINGSyntaxdisable radiusaccountingParametersNoneDescriptionThis command disables RADIUS account

Chapter 32: 802.1x Port-based Access Control Commands482ENABLE PORTACCESS|PORTAUTHSyntaxenable portaccess|portauthNoteThe PORTACCESS and PORTAUTH keyw

AT-S62 Command Line User’s Guide483ENABLE RADIUSACCOUNTINGSyntaxenable radiusaccountingParametersNoneDescriptionThis command enables RADIUS accounting

Chapter 32: 802.1x Port-based Access Control Commands484SET PORTACCESS|PORTAUTH PORT ROLE=AUTHENTICATORSyntaxset portaccess|portauth port=port type|ro

AT-S62 Command Line User’s Guide485authentication messages between the client and the authentication server. Each client that attempts to access the n

Chapter 32: 802.1x Port-based Access Control Commands486disabled Specifies that reauthentication by the client is not required after the initial authe

AT-S62 Command Line User’s Guide487You can use this selection to control how an Authenticator port will handle egress broadcast and multicast traffic

Chapter 32: 802.1x Port-based Access Control Commands488ExamplesThis command sets ports 4 to 6 to the Authenticator role:set portaccess port=4-6 role=

AT-S62 Command Line User’s Guide489SET PORTACCESS|PORTAUTH PORT ROLE=SUPPLICANTSyntaxset portaccess|portauth port=port type|role=supplicant|none [auth

AT-S62 Command Line User’s Guide49RESET SWITCHSyntaxreset switchParametersNone.DescriptionThis command does all of the following:❑ Performs a soft res

Chapter 32: 802.1x Port-based Access Control Commands490startperiod Specifies the time period in seconds between successive attempts by the supplicant

AT-S62 Command Line User’s Guide491SET RADIUSACCOUNTINGSyntaxset radiusaccounting [status=enabled|disabled] [serverport=value] [type=network] [trigger

Chapter 32: 802.1x Port-based Access Control Commands492interval Specifies the intervals at which the switch is to send interim accounting updates to

AT-S62 Command Line User’s Guide493SHOW PORTACCESS|PORTAUTHSyntaxshow portaccess|portauth config|statusNoteThe PORTACCESS and PORTAUTH keywords are eq

Chapter 32: 802.1x Port-based Access Control Commands494SHOW PORTACCESS|PORAUTH PORTSyntaxshow portaccess|portauth port=port authenticator|supplicant

AT-S62 Command Line User’s Guide495SHOW RADIUSACCOUNTINGSyntaxshow radiusaccountingParametersNone.DescriptionUse this command to display the current p

496Chapter 33Web Server CommandsThis chapter contains the following commands:❑ DISABLE HTTP SERVER on page 497❑ ENABLE HTTP SERVER on page 498❑ PURGE

AT-S62 Command Line User’s Guide497DISABLE HTTP SERVERSyntaxdisable http serverParametersNone.DescriptionThis command disables the web server on the s

Chapter 33: Web Server Commands498ENABLE HTTP SERVERSyntaxenable http serverParametersNone.DescriptionThis command activates the web server on the swi

AT-S62 Command Line User’s Guide499PURGE HTTP SERVERSyntaxpurge http serverParametersNone.DescriptionThis command resets the web server to its default

AT-S62 Command Line User’s Guide5CLEAR SNMPV3 ACCESS ...

Chapter 4: Basic Switch Commands50RESET SYSTEMSyntaxreset system [name] [contact] [location]Parametersname Deletes the switch’s name.contact Deletes t

Chapter 33: Web Server Commands500SET HTTP SERVERSyntaxset http server [security=enabled|disabled] [sslkeyid=key-id] [port=port]Parameterssecurity Spe

AT-S62 Command Line User’s Guide501ExamplesThe following command configures the web server for the non-secure HTTP mode. Since no port is specified, t

Chapter 33: Web Server Commands502The certificate is assigned the filename “Sw12cert.cer. (The “.cer” extension is not included in the command because

AT-S62 Command Line User’s Guide5038. Add the CA certificates to the certificate database using ADD PKI CERTIFICATE on page 516.9. Disable the switch’

Chapter 33: Web Server Commands50411. Activate the web server using ENABLE HTTP SERVER on page 498The following is an example of the command sequence

AT-S62 Command Line User’s Guide5058. This command configures the web server. It activates HTTPS and specifies the key created in step 1:set http serv

Chapter 33: Web Server Commands506SHOW HTTP SERVERSyntaxshow http serverParametersNone.DescriptionThis command displays the following information abou

507Chapter 34Encryption Key CommandsThis chapter contains the following commands:❑ CREATE ENCO KEY on page 508❑ DESTROY ENCO KEY on page 512❑ SET ENCO

Chapter 34: Encryption Key Commands508CREATE ENCO KEYSyntax 1create enco key=key-id type=rsa length=value [description=”description”]Syntax 2create en

AT-S62 Command Line User’s Guide509hex Specifies a hexadecimal format used to transfer a key between devices other than switches. This is the default.

AT-S62 Command Line User’s Guide51RESTART REBOOTSyntaxrestart rebootParametersNone.DescriptionThis command resets the switch. The switch runs its inte

Chapter 34: Encryption Key Commands510server key is 768 bits and the recommended length for the host key is 1024 bits.The DESCRIPTION parameter is opt

AT-S62 Command Line User’s Guide511If you are exporting a public key from the key database to the file system, the KEY parameter should specify the ID

Chapter 34: Encryption Key Commands512DESTROY ENCO KEYSyntaxdestroy enco key=key-idParameterkey Specifies the ID number of the key pair to be deleted

AT-S62 Command Line User’s Guide513SET ENCO KEYSyntaxset enco key=key-id description=”description”Parameterskey Specifies the ID number of the key pai

Chapter 34: Encryption Key Commands514SHOW ENCOSyntaxshow enco key=key-idParameterskey Specifies the ID of a key whose information you want to display

515Chapter 35Public Key Infrastructure (PKI) Certificate CommandsThis chapter contains the following commands:❑ ADD PKI CERTIFICATE on page 516❑ CREAT

Chapter 35: Public Key Infrastructure (PKI) Certificate Commands516ADD PKI CERTIFICATESyntaxadd pki certificate=”name” location=”filename.cer” [truste

AT-S62 Command Line User’s Guide517DescriptionThis command adds a certificate to the certificate database from the AT-S62 file system. To view the cer

Chapter 35: Public Key Infrastructure (PKI) Certificate Commands518CREATE PKI CERTIFICATESyntaxcreate pki certificate=name keypair=key-id serialnumber

AT-S62 Command Line User’s Guide519Once you have created a new self-signed certificate, you need to load it into the certificate database. The switch

Chapter 4: Basic Switch Commands52RESTART SWITCHSyntaxrestart switch config=none|filename.cfgParametersconfig Specifies a configuration file. The file

Chapter 35: Public Key Infrastructure (PKI) Certificate Commands520ExamplesThe following command creates a self-signed certificate. It assigns the cer

AT-S62 Command Line User’s Guide521CREATE PKI ENROLLMENTREQUESTSyntaxcreate pki enrollmentrequest=”name” keypair=key-id [format=der|pem] [type=pkcs10]

Chapter 35: Public Key Infrastructure (PKI) Certificate Commands522NoteFor a review of all the steps to configuring the web server for a CA certificat

AT-S62 Command Line User’s Guide523DELETE PKI CERTIFICATESyntaxdelete pki certificate=”name”Parametercertificate Specifies the name of the certificate

Chapter 35: Public Key Infrastructure (PKI) Certificate Commands524PURGE PKISyntaxpurge pkiParametersNone.DescriptionThis command deletes all certific

AT-S62 Command Line User’s Guide525SET PKI CERTIFICATESyntaxset pki certificate=”name” [trusted=yes|no|on|off|true|false][type=ca|ee|self]Parametersce

Chapter 35: Public Key Infrastructure (PKI) Certificate Commands526The TYPE parameter specifies the certificate type. If CA is specified, the switch t

AT-S62 Command Line User’s Guide527SET PKI CERTSTORELIMITSyntaxset pki certstorelimit=valueParametercertstorelimit Specifies the maximum number of cer

Chapter 35: Public Key Infrastructure (PKI) Certificate Commands528SET SYSTEM DISTINGUISHEDNAMESyntaxset system distinguishedname=”name”Parameterdisti

AT-S62 Command Line User’s Guide529SHOW PKISyntaxshow pkiParametersNone.DescriptionThis command displays the current setting for the maximum number of

AT-S62 Command Line User’s Guide53NoteFor a list of the default values, refer to Appendix A in the AT-S62 Management Software Menus Interface User’s G

Chapter 35: Public Key Infrastructure (PKI) Certificate Commands530SHOW PKI CERTIFICATESyntaxshow pki certificate[=”name”]Parametercertificate Specifi

531Chapter 36Secure Sockets Layer (SSL) CommandsThis chapter contains the following command: ❑ SET SSL on page 532❑ SHOW SSL on page 533NoteRemember t

Chapter 36: Secure Sockets Layer (SSL) Commands532SET SSLSyntaxset ssl [cachetimeout=value] [maxsessions=value]Parameterscachetimeout Specifies the ma

AT-S62 Command Line User’s Guide533SHOW SSLSyntaxshow sslParametersNone.DescriptionThis command displays the current settings for the following SSL va

534Chapter 37Secure Shell (SSH) CommandsThis chapter contains the following commands: ❑ DISABLE SSH SERVER on page 535❑ ENABLE SSH SERVER on page 536❑

AT-S62 Command Line User’s Guide535DISABLE SSH SERVERSyntaxdisable ssh serverParametersNone.DescriptionThis command disables the Secure Shell server.

Chapter 37: Secure Shell (SSH) Commands536ENABLE SSH SERVERSyntaxenable ssh server hostkey=key-id serverkey=key-id [expirytime=hours] [logintimeout=se

AT-S62 Command Line User’s Guide537NoteBefore you enable SSH, disable the Telnet management session. Otherwise, the security provided by SSH is not ac

Chapter 37: Secure Shell (SSH) Commands538ExampleThe following is an example of the command sequence to configuring the SSH software on the server:1.

AT-S62 Command Line User’s Guide539SET SSH SERVERSyntaxset ssh server hostkey=key-id serverkey=key-id [expirytime=hours] [logintimeout=seconds]Paramet

Chapter 4: Basic Switch Commands54SET ASYNSyntaxset asyn speed=1200|2400|4800|9600|19200|38400|57600|115200 [prompt=”prompt”]Parameterspeed Sets the s

Chapter 37: Secure Shell (SSH) Commands540ExampleThe following command sets the Secure Shell server key expiry time to 1 hour:set ssh server expirytim

AT-S62 Command Line User’s Guide541SHOW SSHSyntaxshow sshParametersNone.DescriptionThis command displays the current values for the following SSH para

542Chapter 38TACACS+ and RADIUS CommandsThis chapter contains the following commands:❑ ADD RADIUSSERVER on page 543❑ ADD TACACSSERVER on page 545❑ DEL

AT-S62 Command Line User’s Guide543ADD RADIUSSERVERSyntaxadd radiusserver server|ipaddress=ipaddress order=value [secret=string] [port=value] [accport

Chapter 38: TACACS+ and RADIUS Commands544The following command adds the RADIUS server with the IP address 149.245.22.22. It specifies the order as 2

AT-S62 Command Line User’s Guide545ADD TACACSSERVERSyntaxadd tacacsserver server|ipaddress=ipaddress order=value [secret=string]Parametersserver Speci

Chapter 38: TACACS+ and RADIUS Commands546DELETE RADIUSSERVERSyntaxdelete radiusserver server|ipaddress=ipaddressParameterserver Specifies the IP addr

AT-S62 Command Line User’s Guide547DELETE TACACSSERVERSyntaxdelete tacacsserver server|ipaddress=ipaddressParameterserver Specifies the IP address of

Chapter 38: TACACS+ and RADIUS Commands548DISABLE AUTHENTICATIONSyntaxdisable authenticationParametersNone.DescriptionUse this command to disable TACA

AT-S62 Command Line User’s Guide549ENABLE AUTHENTICATIONSyntaxenable authenticationParametersNone.DescriptionUse this command to activate TACACS+ or R

AT-S62 Command Line User’s Guide55SET IP INTERFACESyntaxset ip interface=eth0 ipaddress=ipaddress|dhcp|bootp mask|netmask=subnetmaskParametersinterfac

Chapter 38: TACACS+ and RADIUS Commands550PURGE AUTHENTICATIONSyntaxpurge authenticationParametersNone.DescriptionThis command disables authentication

AT-S62 Command Line User’s Guide551SET AUTHENTICATIONSyntaxset authentication method=tacacs|radius [secret=string] [timeout=value]Parametersmethod Spe

Chapter 38: TACACS+ and RADIUS Commands552The following command selects RADIUS as the authentication protocol with a global encryption key of leopard0

AT-S62 Command Line User’s Guide553SHOW AUTHENTICATIONSyntaxshow authentication[=tacacs|radius]ParametersNone.DescriptionThis command displays the fol

554Chapter 39Management ACL CommandsThis chapter contains the following commands:❑ ADD MGMTACL on page 555❑ DELETE MGMTACL on page 557❑ DISABLE MGMTAC

AT-S62 Command Line User’s Guide555ADD MGMTACLSyntaxadd mgmtacl ipddress=ipaddress mask=string protocol=tcp interface=telnet|web|allParametersipaddres

Chapter 39: Management ACL Commands556If you are filtering on a specific IP address, use the mask 255.255.255.255. For a subnet, the mask will depend

AT-S62 Command Line User’s Guide557DELETE MGMTACLSyntaxdelete mgmtacl ipaddress=ipaddress mask=string protocol=tcp interface=telnet|web|allParametersi

Chapter 39: Management ACL Commands558DISABLE MGMTACLSyntaxdisable mgmtaclParametersNoneDescriptionThis command disables the Management ACL. This comm

AT-S62 Command Line User’s Guide559ENABLE MGMTACLSyntaxenable mgmtaclParametersNoneDescriptionThis command enables the Management ACL. This command is

Chapter 4: Basic Switch Commands56NoteYou cannot manually assign an IP address to the switch if the DHCP or BOOTP client software is activated. To dis

Chapter 39: Management ACL Commands560SET MGMTACLSyntaxset mgmtacl ipaddress=ipaddress mask=string protocol=tcp interface=telnet|web|allParametersipad

AT-S62 Command Line User’s Guide561ExampleThe following command changes an existing access control entry with an IP address of 169.254.134.247 and a s

Chapter 39: Management ACL Commands562SET MGMTACL STATESyntaxset mgmtacl state=disable|enableParametersstate Sets the state of the Management ACL. The

AT-S62 Command Line User’s Guide563SHOW MGMTACLSyntaxshow mgmtacl state|entriesParametersstate Displays the status of the Management ACL as either ena

564IndexNumerics802.1Q multiple VLAN mode 445802.1x port-based access controlauthenticator portconfiguring 484displaying 493disabling 480displaying 49

AT-S62 Command Line User’s Guide565AT-S62 software imagedownloading 236, 238, 242uploading 246, 248, 253, 256AT-S62 software updatesdownloading 15obta

Index566DELETE IP ARP command 195DELETE LACP PORT command 209DELETE MGMTACL command 557DELETE MSTP command 411DELETE PKI CERTIFICATE command 523DELETE

AT-S62 Command Line User’s Guide567ENABLE PORTACCESS|PORTAUTH command 482ENABLE RADIUSACCOUNTING command 483ENABLE RSTP command 395ENABLE SNMP AUTHENT

Index568ingress filtering 443internal port cost 424intrusion action 171, 474IP addressdisplaying 66resetting to default 48setting 55IPOPTION denial of

AT-S62 Command Line User’s Guide569creating 518deleting 523displaying 530downloading 238, 242number of certificates 529uploading 253, 256PKI module in

AT-S62 Command Line User’s Guide57SET IP ROUTESyntaxset ip route ipaddress=ipaddressParameteripaddress Specifies the IP address of the default gateway

Index570RESTART REBOOT command 51RESTART SWITCH command 52round robin QoS scheduling 348RSTPactivating 393disabling 394displaying 404enabling 395port,

AT-S62 Command Line User’s Guide571SET SWITCH PORT command 166SET SWITCH PORT INTRUSION command 473SET SWITCH PORT MIRROR command 221SET SWITCH PORT R

Index572destroying 88disabling 91enabling 92, 94modifying 95SNMPv3 Access Table entryclearing 103creating 109deleting 125modifying 133SNMPv3 Community

AT-S62 Command Line User’s Guide573system filesdownloading 238, 242uploading 248, 253, 256system name, configuring 50, 61system timedisplaying 79TTACA

Chapter 4: Basic Switch Commands58SET PASSWORD MANAGERSyntaxset password managerParametersNone.DescriptionThis command sets the manager’s password. Lo

AT-S62 Command Line User’s Guide59SET PASSWORD OPERATORSyntaxset password operatorParametersNone.DescriptionThis command sets the operator’s password.

Table of Contents6RESET SWITCH FDB ...

Chapter 4: Basic Switch Commands60SET SWITCH CONSOLETIMERSyntaxset switch consoletimer=valueParameterconsoletimer Specifies the console timer in minut

AT-S62 Command Line User’s Guide61SET SYSTEMSyntaxset system [name=”name”] [contact=”contact”] [location=”location”]Parametersname Specifies the name

Chapter 4: Basic Switch Commands62SET USER PASSWORDSyntaxshow user manager|operator password=passwordParameterpassword Specifies the new manager or op

AT-S62 Command Line User’s Guide63SHOW ASYNSyntaxshow asynParametersNone.DescriptionThis command displays the settings for the RS-232 Terminal Port on

Chapter 4: Basic Switch Commands64SHOW CONFIGSyntaxshow config [dynamic] [info]Parametersdynamic Displays the settings for all the switch and port par

AT-S62 Command Line User’s Guide65SHOW DHCPBOOTPSyntaxshow dhcpbootpParametersNone.DescriptionThis command displays the status of the DHCP and BOOTP c

Chapter 4: Basic Switch Commands66SHOW IP INTERFACESyntaxshow ip interface=eth0Parametersinterface Specifies the switch’s interface number. This value

AT-S62 Command Line User’s Guide67SHOW IP ROUTESyntaxshow ip routeParametersNone.DescriptionThis command displays the switch’s default gateway address

Chapter 4: Basic Switch Commands68SHOW SWITCHSyntaxshow switchParametersNone.DescriptionThis command displays the following switch parameters:❑ Applic

AT-S62 Command Line User’s Guide69SHOW SYSTEMSyntaxshow systemParametersNone.DescriptionThis command displays the following information:❑ MAC address❑

AT-S62 Command Line User’s Guide7SET CONFIG ...

70Chapter 5Simple Network Time Protocol (SNTP) CommandsThis chapter contains the following commands:❑ ADD SNTPSERVER PEER|IPADDRESS on page 71❑ DELETE

AT-S62 Command Line User’s Guide71ADD SNTPSERVER PEER|IPADDRESSSyntaxadd sntpserver peer|ipaddress=ipaddressParameterpeer Specifies the IP address of

Chapter 5: Simple Network Time Protocol (SNTP) Commands72DELETE SNTPSERVER PEER|IPADDRESSSyntaxdelete sntpserver peer|ipaddress=ipaddressParameterpeer

AT-S62 Command Line User’s Guide73DISABLE SNTPSyntaxdisable sntpParametersNone.DescriptionThis command disables the SNTP client software on the switch

Chapter 5: Simple Network Time Protocol (SNTP) Commands74ENABLE SNTPSyntaxenable sntpParametersNone.DescriptionThis command enables the SNTP client so

AT-S62 Command Line User’s Guide75PURGE SNTPSyntaxpurge sntpParametersNone.DescriptionThis command disables the SNTP client software and returns its p

Chapter 5: Simple Network Time Protocol (SNTP) Commands76SET DATE TIMESyntaxset date=dd-mm-yyyy time=hh:mm:ssParameterdate Specifies the date for the

AT-S62 Command Line User’s Guide77SET SNTPSyntaxset sntp [dst=enabled|disabled] [pollinterval=value] [utcoffset=value]Parametersdst Enables or disable

Chapter 5: Simple Network Time Protocol (SNTP) Commands78SHOW SNTPSyntaxshow sntpParametersNone.DescriptionThis command displays the following informa

AT-S62 Command Line User’s Guide79SHOW TIMESyntaxshow timeParametersNone.DescriptionThis command shows the switch’s current date and time.ExampleThe f

Table of Contents8DELETE QOS TRAFFICCLASS ...

80Chapter 6SNMPv1 and SNMPv2 Community Strings and Trap CommandsThis chapter contains the following commands:❑ ADD SNMP COMMUNITY on page 81❑ CREATE S

AT-S62 Command Line User’s Guide81ADD SNMP COMMUNITYSyntaxadd snmp community=”community” [traphost=ipaddress] [manager=ipaddress]Parameterscommunity S

Chapter 6: SNMPv1 and SNMPv2 Community Strings and Trap Commands82The following command adds the IP address 149.212.10.11 as a trap receiver to the “p

AT-S62 Command Line User’s Guide83CREATE SNMP COMMUNITYSyntaxcreate snmp community=”community” [access=read|write] [open=yes|no|on|off|true|false] [tr

Chapter 6: SNMPv1 and SNMPv2 Community Strings and Trap Commands84manager Specifies the IP address of a management station that can use the community

AT-S62 Command Line User’s Guide85ExamplesThe following command creates the new community string “serv12” with read access level and an access status

Chapter 6: SNMPv1 and SNMPv2 Community Strings and Trap Commands86DELETE SNMP COMMUNITYSyntaxdelete snmp community=”community” traphost=ipaddress mana

AT-S62 Command Line User’s Guide87The following command deletes the IP address 149.212.44.45 of a trap receiver from the community string “public.”del

Chapter 6: SNMPv1 and SNMPv2 Community Strings and Trap Commands88DESTROY SNMP COMMUNITYSyntaxdestroy snmp community=”community”Parametercommunity Spe

AT-S62 Command Line User’s Guide89DISABLE SNMPSyntaxdisable snmpParametersNone. DescriptionThis command disables SNMP on the switch. You cannot manage

AT-S62 Command Line User’s Guide9SET SWITCH MULTICASTMODE ...

Chapter 6: SNMPv1 and SNMPv2 Community Strings and Trap Commands90DISABLE SNMP AUTHENTICATETRAPSyntaxdisable snmp authenticatetrap|authenticate_trapPa

AT-S62 Command Line User’s Guide91DISABLE SNMP COMMUNITYSyntaxdisable snmp community=”community”Parametercommunity Specifies an SNMP community string

Chapter 6: SNMPv1 and SNMPv2 Community Strings and Trap Commands92ENABLE SNMPSyntaxenable snmpParametersNone.DescriptionThis command activates SNMP on

AT-S62 Command Line User’s Guide93ENABLE SNMP AUTHENTICATETRAPSyntaxenable snmp authenticatetrap|authenticate_trapParametersNone.DescriptionThis comma

Chapter 6: SNMPv1 and SNMPv2 Community Strings and Trap Commands94ENABLE SNMP COMMUNITYSyntaxenable snmp community=”community”Parameterscommunity Spec

AT-S62 Command Line User’s Guide95SET SNMP COMMUNITYSyntaxset snmp community=”community” [access=read|write] [open=yes|no]Parameterscommunity Specifie

Chapter 6: SNMPv1 and SNMPv2 Community Strings and Trap Commands96The following command changes the access level for the SNMP community string “serv12

AT-S62 Command Line User’s Guide97SHOW SNMPSyntaxshow snmp [community=”community”]Parametercommunity Specifies a community string on the switch. This

Chapter 6: SNMPv1 and SNMPv2 Community Strings and Trap Commands98❑ Management station IP addresses - These are the IP addresses of management station

99Chapter 7SNMPv3 CommandsThis chapter contains the following commands:❑ ADD SNMPV3 USER on page 101❑ CLEAR SNMPV3 ACCESS on page 103❑ CLEAR SNMPV3 CO