Allied-telesis AT-S62 Manual de usuario

Management SoftwareAT-S62◆Command Line User’s GuideAT-8524M LAYER 2+ FAST ETHERNET SWITCHVERSION 1.1.1®PN 613-50486-00 Rev C

10PrefaceThis guide describes how to configure an AT-8524M switch using the AT-S62 command line interface. The commands are grouped by topic into the

Chapter 7: SNMPv3 Commands100CLEAR SNMPV3 TARGETADDRSyntaxclear snmpv3 targetaddr=targetaddr taglist Parameterstargetaddr Specifies the name of the SN

AT-S62 Command Line User’s Guide101CLEAR SNMPV3 VIEWSyntaxclear snmpv3 view=view [subtree=OID|text] maskParametersview Specifies the name of the SNMPv

Chapter 7: SNMPv3 Commands102CREATE SNMPV3 ACCESSSyntaxcreate snmpv3 access=access [securitymodel=v1|v2c|v3] [securitylevel=noauthentication|authentic

AT-S62 Command Line User’s Guide103writeview Specifies a Write View Name that allows the users assigned to this Security Group to write, or modify, th

Chapter 7: SNMPv3 Commands104In the following command, a security group is created called “hwengineering” with a security model of SNMPv3 and a securi

AT-S62 Command Line User’s Guide105CREATE SNMPV3 COMMUNITYSyntaxcreate snmpv3 community index=index communityname=communityname securityname=securityn

Chapter 7: SNMPv3 Commands106The following command creates an SNMP community with an index of 95 and a community name of “12sacramento49.” The user is

AT-S62 Command Line User’s Guide107CREATE SNMPV3 GROUPSyntaxcreate snmpv3 group username=username [securitymodel=v1|v2c|v3] groupname=groupname [stora

Chapter 7: SNMPv3 Commands108ExampleThe following command creates the SNMPv3 SecurityToGroup Table entry for a user named Nancy. The security model is

AT-S62 Command Line User’s Guide109CREATE SNMPV3 NOTIFYSyntaxcreate snmpv3 notify=notify tag=tag [type=trap|inform] [storagetype=volatile|nonvolatile]

AT-S62 Command Line User’s Guide11❑ Chapter 16: Quality of Service (QoS) Commands on page 225❑ Chapter 17: IGMP Snooping Commands on page 229❑ Chapter

Chapter 7: SNMPv3 Commands110ExamplesIn the following command, the SNMPv3 Notify Table entry is called “testengtrap1” and the notify tag is “testengta

AT-S62 Command Line User’s Guide111CREATE SNMPV3 TARGETADDRSyntaxcreate snmpv3 targetaddr=targetaddr params=params ipaddress=ipaddress udpport=udpport

Chapter 7: SNMPv3 Commands112ExamplesIn the following command, the name of the Target Address Table entry is “snmphost1.” In addition, the params para

AT-S62 Command Line User’s Guide113CREATE SNMPV3 TARGETPARAMSSyntaxcreate snmpv3 targetparams=targetparams username=username [securitymodel=v1|v2c|v3]

Chapter 7: SNMPv3 Commands114securitylevel Specifies the security level. The options are:noauthentication This option provides no authentication proto

AT-S62 Command Line User’s Guide115CREATE SNMPV3 VIEWSyntaxcreate snmpv3 view=view [subtree=OID|text] mask=mask [type=included|excluded][storagetype=v

Chapter 7: SNMPv3 Commands116ExamplesThe following command creates an SNMPv3 View Table entry called “internet1” with a subtree value of the Internet

AT-S62 Command Line User’s Guide117DELETE SNMPV3 USERSyntaxdelete snmpv3 user=userParametersuser Specifies the name of an SNMPv3 user to delete from t

Chapter 7: SNMPv3 Commands118DESTROY SNMPv3 ACCESSSyntaxdestroy snmpv3 access=access [securitymodel=v1|v2c|v3] [securitylevel=noauthentication|authent

AT-S62 Command Line User’s Guide119ExamplesThe following command deletes the SNMPv3 Access Table entry called “swengineering” with a security model of

Preface12transfer this software outside the United States or Canada, please contact your local Allied Telesyn sales representative for current informa

Chapter 7: SNMPv3 Commands120DESTROY SNMPv3 COMMUNITYSyntaxdestroy snmpv3 community index=indexParameterindex Specifies the name of this SNMPv3 Commun

AT-S62 Command Line User’s Guide121DESTROY SNMPv3 GROUPSyntaxdestroy snmpv3 group username=username [securitymodel=v1|v2c|v3]Parameterusername Specifi

Chapter 7: SNMPv3 Commands122DESTROY SNMPv3 NOTIFYSyntaxdestroy snmpv3 notify=notify Parameternotify Specifies an SNMPv3 Notify Table entry.Descriptio

AT-S62 Command Line User’s Guide123DESTROY SNMPv3 TARGETADDRSyntaxdestroy snmpv3 targetaddr=target Parametertargetaddr Specifies an SNMPv3 Target Addr

Chapter 7: SNMPv3 Commands124DESTROY SNMPv3 TARGETPARMSSyntaxdestroy snmpv3 targetparams=targetparamsParametertargetparams Specifies an SNMPv3 Target

AT-S62 Command Line User’s Guide125DESTROY SNMPV3 VIEWSyntaxdestroy snmpv3 view=view [subtree=OID|text]Parametersview Specifies the name of the view,

Chapter 7: SNMPv3 Commands126SET SNMPV3 ACCESSset snmpv3 access=access [securitymodel=v1|v2c|v3] [securitylevel=noauthentication|authentication|privac

AT-S62 Command Line User’s Guide127storagetype Specifies the storage type of this table entry. This is an optional parameter. The options are:volatile

Chapter 7: SNMPv3 Commands128SET SNMPV3 COMMUNITYSyntaxset snmpv3 community index=index communityname=communityname securityname=securityname transpor

AT-S62 Command Line User’s Guide129The following command modifies the community table entry with an index of 52. The community has a password of “oldm

AT-S62 Command Line User’s Guide13Contacting Allied TelesynThis section provides Allied Telesyn contact information for technical support as well as s

Chapter 7: SNMPv3 Commands130SET SNMPV3 GROUPSyntaxset snmpv3 group username=username [securitymodel=v1|v2c|v3] groupname=groupname [storagetype=volat

AT-S62 Command Line User’s Guide131ExamplesThe following command modifies the SecurityToGroup Table entry with a user name of “nancy28.” The security

Chapter 7: SNMPv3 Commands132SET SNMPV3 NOTIFYSyntaxset snmpv3 notify=notify tag=tag [type=trap|inform] [storagetype=volatile|nonvolatile]Parametersno

AT-S62 Command Line User’s Guide133The following command modifies an SNMPv3 Notify Table entry called “systemtestinform5.” The notify tag is “systemte

Chapter 7: SNMPv3 Commands134SET SNMPV3 TARGETADDRSyntaxset snmpv3 targetaddr=targetaddr params=params ipaddress=ipaddress udpport=udpport timeout=tim

AT-S62 Command Line User’s Guide135DescriptionThis command modifies an SNMPv3 Target Address Table entry.ExamplesThe following command modifies the Ta

Chapter 7: SNMPv3 Commands136SET SNMPV3 TARGETPARAMSSyntaxset snmpv3 targetparams=targetparams username=username [securitymodel=v1|v2c|v3] [messagepro

AT-S62 Command Line User’s Guide137securitylevel Specifies the security level. The options are:noauthentication This option provides no authentication

Chapter 7: SNMPv3 Commands138SET SNMPV3 USERSyntaxset snmpv3 user=user [authentication=md5|sha] authpassword=password privpassword=password [storagety

AT-S62 Command Line User’s Guide139ExamplesThe following command modifies a User Table entry called “atiuser104”. The authentication protocol is set t

Preface14Obtaining Management Software UpdatesNew releases of management software for our managed products can be downloaded from either of the follow

Chapter 7: SNMPv3 Commands140SET SNMPV3 VIEWSyntaxset snmpv3 view=view [subtree=OID|text] mask=mask[type=included|excluded][storagetype=volatile|nonvo

AT-S62 Command Line User’s Guide141ExamplesThe following command modifies the view called “internet1.” The subtree is set to the Internet MIBs and the

Chapter 7: SNMPv3 Commands142SHOW SNMPV3 ACCESSSyntaxshow snmpv3 access=accessParameteraccess Specifies an SNMPv3 Access Table entry.DescriptionThis c

AT-S62 Command Line User’s Guide143SHOW SNMPV3 COMMUNITYSyntaxshow snmpv3 community index=index Parameterindex Specifies the name of this SNMPv3 Commu

Chapter 7: SNMPv3 Commands144SHOW SNMPv3 GROUPSyntaxshow snmpv3 group username=username [securitymodel=v1|v2c|v3]Parameterusername Specifies a user na

AT-S62 Command Line User’s Guide145SHOW SNMPV3 NOTIFYSyntaxshow snmpv3 notify=notifyParameternotify Specifies an SNMPv3 Notify Table entry.Description

Chapter 7: SNMPv3 Commands146SHOW SNMPV3 TARGETADDRSyntaxshow snmpv3 targetaddr=targetaddrParametertargetaddr Specifies an SNMPv3 Target Address Table

AT-S62 Command Line User’s Guide147SHOW SNMPV3 TARGETPARAMSSyntaxshow snmpv3 targetparams=targetparamsParametertargetparams Specifies an SNMPv3 Target

Chapter 7: SNMPv3 Commands148SHOW SNMPV3 USERSyntaxshow snmpv3 user=userParametersuser Specifies the name of an SNMPv3 user, up to 32 alphanumeric cha

AT-S62 Command Line User’s Guide149SHOW SNMPV3 VIEWSyntaxshow snmpv3 view=view [subtree=OID|text]Parameterview Specifies an SNMPv3 View Table entry.su

15Chapter 1Starting a Command Line Management SessionThis chapter contains the following topics:❑ Starting a Management Session on page 16❑ Command Li

150Chapter 8Port Parameter CommandsThis chapter contains the following commands:❑ ACTIVATE SWITCH PORT on page 151❑ DISABLE INTERFACE LINKTRAP on page

AT-S62 Command Line User’s Guide151ACTIVATE SWITCH PORTSyntaxactivate switch port=port autonegotiateParameterport Specifies a port. You can specify mo

Chapter 8: Port Parameter Commands152DISABLE INTERFACE LINKTRAPSyntaxdisable interface=port linktrapParameterport Specifies the port where you want to

AT-S62 Command Line User’s Guide153DISABLE SWITCH PORTSyntaxdisable switch port=portParameterport Specifies the port to disable. You can specify more

Chapter 8: Port Parameter Commands154DISABLE SWITCH PORT FLOWSyntaxdisable switch port=port flow=pauseParameterport Specifies the port where you want

AT-S62 Command Line User’s Guide155ENABLE INTERFACE LINKTRAPSyntaxenable interface=port linktrapParameterport Specifies the port on which you want to

Chapter 8: Port Parameter Commands156ENABLE SWITCH PORTSyntaxenable switch port=portParameterport Specifies the port to enable. You can specify more t

AT-S62 Command Line User’s Guide157ENABLE SWITCH PORT FLOWSyntaxenable switch port=port flow=pauseParameterport Specifies the port where you want to a

Chapter 8: Port Parameter Commands158RESET SWITCH PORTSyntaxreset switch port=portParameterport Specifies the port to reset. You can specify the ports

AT-S62 Command Line User’s Guide159SET SWITCH PORTSyntaxset switch port=port [description=”description”] [status=enabled|disabled] [speed=autonegotiat

Chapter 1: Starting a Command Line Management Session16Starting a Management SessionIn order to manage an AT-8524M switch using command line commands,

Chapter 8: Port Parameter Commands160speed Sets the speed and duplex mode of the port. Settings for this parameter are:autonegotiate The port Auto-Neg

AT-S62 Command Line User’s Guide161parameter are:disabled No flow control.enabled Flow control is activated. auto The switch sets flow control to matc

Chapter 8: Port Parameter Commands162renegotiation Prompts the port to renegotiate its speed and duplex mode with the end node. This parameter only wo

AT-S62 Command Line User’s Guide163The following command sets the speed to 100 Mbps, the duplex mode to full duplex, the wiring configuration to MDI-X

Chapter 8: Port Parameter Commands164SET SWITCH PORT RATELIMITSyntaxset switch port=all [rate=value] [bcastratelimiting=yes|no|on|off|true|false|enabl

AT-S62 Command Line User’s Guide165table. Settings for this parameter are:yes, on, true, enabled Activates unknown unicast packet rate limit on the po

Chapter 8: Port Parameter Commands166This command changes the rate limit to 15,000 packets:set switch port=all rate=15000The following command deactiv

AT-S62 Command Line User’s Guide167SHOW INTERFACESyntaxshow interface=portParameterport Specifies the port whose interface information you want to dis

Chapter 8: Port Parameter Commands168enabled - Link traps are enabled. The switch sends an SNMP link trap whenever there is a change to the status of

AT-S62 Command Line User’s Guide169SHOW SWITCH PORTSyntaxshow switch port[=port]Parametersport Specifies the port whose parameter settings you want to

AT-S62 Command Line User’s Guide17Command Line Interface FeaturesThe following features are supported in the command line interface:❑ Command history

170Chapter 9MAC Address Table CommandsThis chapter contains the following commands:❑ ADD SWITCH FDB|FILTER on page 171❑ DELETE SWITCH FDB on page 173❑

AT-S62 Command Line User’s Guide171ADD SWITCH FDB|FILTERSyntaxadd switch fdb|filterdestaddress|macaddress=macaddress port=portvlan=name|vidNoteThe FDB

Chapter 9: MAC Address Table Commands172add switch fdb macaddress=00A0D2181A11 port=7 vlan=default_vlanThe following command adds the multicast MAC ad

AT-S62 Command Line User’s Guide173DELETE SWITCH FDBSyntaxdelete switch fdb macaddress=macaddress vlan=name|vidParametersmacaddress Specifies the dyna

Chapter 9: MAC Address Table Commands174RESET SWITCH FDBSyntaxreset switch fdb port=portParametersport Specifies the port whose dynamic MAC addresses

AT-S62 Command Line User’s Guide175SET SWITCH AGINGTIMER|AGEINGTIMERSyntaxset switch agingtimer|ageingtimer=valueParameteragingtimer Specifies the agi

Chapter 9: MAC Address Table Commands176SHOW SWITCH FDBSyntaxshow switch fdb [address=macaddress] [port=port] [status=static|dynamic|multicast] [vlan=

AT-S62 Command Line User’s Guide177The following command displays the static and dynamic multicast addresses:show switch fdb status=multicastThe follo

178Chapter 10Port Trunking CommandsThis chapter contains the following commands:❑ ADD SWITCH TRUNK on page 179❑ CREATE SWITCH TRUNK on page 180❑ DELET

AT-S62 Command Line User’s Guide179ADD SWITCH TRUNKSyntaxadd switch trunk=name port=portParameterstrunk Specifies the name of the port trunk to be mod

Chapter 1: Starting a Command Line Management Session18Command FormattingThe following formatting conventions are used in this manual:❑ screen text fo

Chapter 10: Port Trunking Commands180CREATE SWITCH TRUNKSyntaxcreate switch trunk=name port=ports [select=macsrc|macdest|macboth|ipsrc|ipdest|ipboth]P

AT-S62 Command Line User’s Guide181NoteBefore creating a port trunk, examine the speed, duplex mode, and flow control settings of the lowest numbered

Chapter 10: Port Trunking Commands182DELETE SWITCH TRUNKSyntaxdelete switch trunk=name port=portParameterstrunk Specifies the name of the trunk to be

AT-S62 Command Line User’s Guide183DESTROY SWITCH TRUNKSyntaxdestroy switch trunk=nameParametertrunk Specifies the name of the trunk to be deleted.Des

Chapter 10: Port Trunking Commands184SET SWITCH TRUNKSyntaxset switch trunk=name select=[macsrc|macdest|macboth|ipsrc|ipdest|ipboth]Parameterstrunk Sp

AT-S62 Command Line User’s Guide185SHOW SWITCH TRUNKSyntaxshow switch trunkParametersNone.DescriptionThis command displays the names, ports, and load

186Chapter 11Port Mirroring CommandsThis chapter contains the following commands:❑ SET SWITCH MIRROR on page 187❑ SET SWITCH PORT MIRROR on page 188❑

AT-S62 Command Line User’s Guide187SET SWITCH MIRRORSyntaxset switch mirror=portParametermirror Specifies the destination port for the port mirror. Th

Chapter 11: Port Mirroring Commands188SET SWITCH PORT MIRRORSyntaxset switch port=port mirror=none|rx|tx|bothParametersport Specifies the source ports

AT-S62 Command Line User’s Guide189SHOW SWITCH MIRRORSyntaxshow switch mirrorParametersNone.DescriptionThis command displays the source and destinatio

19Chapter 2Basic Command Line CommandsThis chapter contains the following commands:❑ CLEAR SCREEN on page 20❑ EXIT on page 21❑ HELP on page 22❑ LOGOFF

190Chapter 12Statistics CommandsThis chapter contains the following commands:❑ RESET SWITCH PORT COUNTER on page 191❑ SHOW SWITCH COUNTER on page 192❑

AT-S62 Command Line User’s Guide191RESET SWITCH PORT COUNTERSyntaxreset switch port=port counterParameterport Specifies the port whose statistics coun

Chapter 12: Statistics Commands192SHOW SWITCH COUNTERSyntaxshow switch counterParametersNone.DescriptionThis command displays operating statistics, su

AT-S62 Command Line User’s Guide193SHOW SWITCH PORT COUNTERSyntaxshow switch port=port counterParameterport Specifies the port whose statistics you wa

194Chapter 13File System CommandsThis chapter contains the following commands:❑ COPY on page 195❑ CREATE CONFIG on page 196❑ DELETE FILE on page 197❑

AT-S62 Command Line User’s Guide195COPYSyntaxcopy “filename1.ext” “filename2.ext”Parametersfilename1.ext Specifies the name of the file to be copied.

Chapter 13: File System Commands196CREATE CONFIGSyntaxcreate config=”filename.cfg”Parameterconfig Specifies the name of a new configuration file. If t

AT-S62 Command Line User’s Guide197DELETE FILESyntaxdelete file=”filename”Parameterfile Specifies the name of the file to be deleted. A name with spac

Chapter 13: File System Commands198RENAMESyntaxrename “filename1.ext” “filename2.ext”Parametersfilename1.ext Specifies the name of the file to be rena

AT-S62 Command Line User’s Guide199SET CONFIGSyntaxset config=”filename.cfg”Parameterconfig Specifies the name of the configuration file to act as the

Copyright © 2004 Allied Telesyn, Inc.960 Stewart Drive Suite B, Sunnyvale, CA 94085 USAAll rights reserved. No part of this publication may be reprodu

Chapter 2: Basic Command Line Commands20CLEAR SCREENSyntaxclear screenParametersNone.DescriptionThis command clears the screen.ExampleThe following co

Chapter 13: File System Commands200ExampleThe following command sets the active boot configuration file to switch22.cfg:set config=switch22.cfgThe swi

AT-S62 Command Line User’s Guide201SHOW FILESyntaxshow file=”filename”Parameterfile Specifies the name of the file to be displayed. Use double quotes

202Chapter 14File Download and Upload CommandsThis chapter contains the following commands:❑ LOAD on page 203❑ UPLOAD on page 209NoteRefer to the AT-S

AT-S62 Command Line User’s Guide203LOADSyntaxload method=tftp|xmodem|remoteswitch destfile=filename server=ipaddress srcfile|file=filename switchlist=

Chapter 14: File Download and Upload Commands204srcfile Specifies the filename of the file you arefile downloading onto the switch. The filename is re

AT-S62 Command Line User’s Guide205The METHOD parameter states the type of download. There are three possible types of downloads. A TFTP download uses

Chapter 14: File Download and Upload Commands206The VERBOSE parameter can be used when you are downloading a file switch to switch to monitor the prog

AT-S62 Command Line User’s Guide207For an Xmodem download, note the following:❑ Xmodem can download a file only onto the switch on which you started t

Chapter 14: File Download and Upload Commands208The following command uses Xmodem to download an AT-S62 configuration file to the switch’s file system

AT-S62 Command Line User’s Guide209UPLOADSyntaxupload method=tftp|xmodem destfile=filename server=ipaddress file=filenameParametersmethod Specifies th

AT-S62 Command Line User’s Guide21EXITSyntaxexitParametersNone.DescriptionThis command displays the AT-S62 Main Menu. It performs the same command as

Chapter 14: File Download and Upload Commands210❑ Encryption keyThe METHOD parameter states the type of upload. There are two possible types of upload

AT-S62 Command Line User’s Guide211For an Xmodem upload, note the following:❑ Xmodem can upload a file only from the switch on which you started the l

212Chapter 15Event Log CommandsThis chapter contains the following commands:❑ DISABLE LOG on page 213❑ ENABLE LOG on page 214❑ PURGE LOG on page 215❑

AT-S62 Command Line User’s Guide213DISABLE LOGSyntaxdisable logParametersNone. DescriptionThis command disables the event log. The default setting for

Chapter 15: Event Log Commands214ENABLE LOGSyntaxenable logParametersNone.DescriptionThis command activates the event log. Once the log is activated,

AT-S62 Command Line User’s Guide215PURGE LOGSyntaxpurge log[=temporary]Parametertemporary Specifies temporary memory.DescriptionThis command deletes a

Chapter 15: Event Log Commands216SAVE LOGSyntaxsave log filename=”filename.log” [full] [module=module] [reverse] [severity=severity] [overwrite]Parame

AT-S62 Command Line User’s Guide217ExamplesThis command stores all informational, error, and warning messages in a file called “switch 12.log”:save lo

Chapter 15: Event Log Commands218SET LOG FULLACTIONSyntaxset log fullaction=halt|wrapParametersfullaction Defines what the log will do when it reaches

AT-S62 Command Line User’s Guide219SHOW LOGSyntaxshow log [full] [module=module] [reverse] [severity=severity]Parametersfull Specifies the amount of i

Chapter 2: Basic Command Line Commands22HELPSyntaxhelpParametersNone.DescriptionThis command displays a list of the CLI keywords with a brief descript

Chapter 15: Event Log Commands220The MODULE parameter displays entries generated by a particular AT-S62 module. You can specify more than one module a

AT-S62 Command Line User’s Guide221The log can display its entries in chronological order (oldest to newest), or reverse chronological order. The defa

Chapter 15: Event Log Commands222An example of the event log in full display mode is shown in Figure 1.Figure 1 Event Log ExampleThe columns in the l

AT-S62 Command Line User’s Guide223This example displays the error and warning entries for the AT-S62 module VLAN:show log module=vlan severity=e,w

Chapter 15: Event Log Commands224SHOW LOG STATUSSyntaxshow log statusParameterNone.DescriptionThis command displays information about the error log. I

225Chapter 16Quality of Service (QoS) CommandsThis chapter contains the following commands:❑ MAP QOS COSP on page 226❑ SET QOS SCHEDULING on page 227❑

Chapter 16: Quality of Service (QoS) Commands226MAP QOS COSPSyntaxmap qos cosp=priority-number qid=queue-numberParameterscosp Specifies the Class of S

AT-S62 Command Line User’s Guide227SET QOS SCHEDULINGSyntaxset qos scheduling=strict|wrr weights=weightsParametersscheduling Specifies the type of sch

Chapter 16: Quality of Service (QoS) Commands228SHOW QOS CONFIGSyntaxshow qos configParametersNone.DescriptionDisplays the QoS priority queues and sch

229Chapter 17IGMP Snooping CommandsThis chapter contains the following commands:❑ DISABLE IGMPSNOOPING on page 230❑ ENABLE IGMPSNOOPING on page 231❑ S

AT-S62 Command Line User’s Guide23LOGOFF, LOGOUT and QUITSyntaxlogofflogoutquitParametersNone.DescriptionThese three commands perform the same functio

Chapter 17: IGMP Snooping Commands230DISABLE IGMPSNOOPINGSyntaxdisable igmpsnoopingParametersNone.DescriptionThis command deactivates IGMP snooping on

AT-S62 Command Line User’s Guide231ENABLE IGMPSNOOPINGSyntaxenable igmpsnoopingParametersNone.DescriptionThis command activates IGMP snooping on the s

Chapter 17: IGMP Snooping Commands232SET IP IGMPSyntaxset ip igmp [snoopingstatus=enabled|disabled] [hoststatus=singlehost|multihost] [timeout=value]

AT-S62 Command Line User’s Guide233numbermulticastgroups Specifies the maximum number of multicast addresses the switch learns. This parameter is usef

Chapter 17: IGMP Snooping Commands234SHOW IGMPSNOOPINGSyntaxshow igmpsnoopingParametersNone.DescriptionThis command displays the following IGMP parame

AT-S62 Command Line User’s Guide235SHOW IP IGMPSyntaxshow ip igmp [hostlist] [routerlist]Parametershostlist Displays a list of the multicast groups le

Chapter 17: IGMP Snooping Commands236The following command displays a list of active multicast routers:show ip igmp routerlist

237Chapter 18Denial of Service (DoS) Defense CommandsThis chapter contains the following commands:❑ SET DOS on page 238❑ SET DOS IPOPTION on page 239❑

Chapter 18: Denial of Service (DoS) Commands238SET DOSSyntaxset dos ipaddress=ipaddress subnet=mask uplinkport=portParametersipaddress Specifies the I

AT-S62 Command Line User’s Guide239SET DOS IPOPTIONSyntaxset dos ipoption port=port state=enable|disable [mirrorport=port]Parametersport Specifies the

Chapter 2: Basic Command Line Commands24MENUSyntaxmenuParametersNone.DescriptionThis command displays the AT-S62 Main Menu. This command performs the

Chapter 18: Denial of Service (DoS) Commands240SET DOS LANDSyntaxset dos land port=port state=enable|disable [mirrorport=port]Parametersport Specifies

AT-S62 Command Line User’s Guide241SET DOS PINGOFDEATHSyntaxset dos pingofdeath port=port state=enable|disable [mirrorport=port]Parametersport Specifi

Chapter 18: Denial of Service (DoS) Commands242NoteThis defense mechanism requires some involvement by the switch’s CPU, though not as much as the Tea

AT-S62 Command Line User’s Guide243SET DOS SMURFSyntaxset dos smurf port=port state=enable|disableParametersport Specifies the switch ports on which y

Chapter 18: Denial of Service (DoS) Commands244SET DOS SYNFLOODSyntaxset dos synflood port=port state=enable|disableParametersport Specifies the switc

AT-S62 Command Line User’s Guide245SET DOS TEARDROPSyntaxset dos teardrop port=port state=enable|disable [mirrorport=auto|port]Parametersport Specifie

Chapter 18: Denial of Service (DoS) Commands246CautionThis defense is extremely CPU intensive and should be used with caution. Unrestricted use can ca

AT-S62 Command Line User’s Guide247SHOW DOSSyntax 1show dos [ipaddress] [subnet] [uplinkport]Syntax 2show dos defense port=portParametersipaddress Dis

Chapter 18: Denial of Service (DoS) Commands248This command displays the status of the SMURF defense on port 4:show dos smurf port=4

249Chapter 19STP CommandsThis chapter contains the following commands:❑ ACTIVATE STP on page 250❑ DISABLE STP on page 251❑ ENABLE STP on page 252❑ PUR

AT-S62 Command Line User’s Guide25SAVE CONFIGURATIONSyntaxsave configurationParametersNone.DescriptionThis command saves your changes to the switch’s

Chapter 19: STP Commands250ACTIVATE STPSyntaxactivate stpParametersNone.DescriptionUse this command to designate STP as the active spanning tree on th

AT-S62 Command Line User’s Guide251DISABLE STPSyntaxdisable stpParametersNone.DescriptionThis command disables the Spanning Tree Protocol on the switc

Chapter 19: STP Commands252ENABLE STPSyntaxenable stpParametersNone.DescriptionThis command enables the Spanning Tree Protocol on the switch. The defa

AT-S62 Command Line User’s Guide253PURGE STPSyntaxpurge stpParametersNone.DescriptionThis command returns all STP bridge and port parameters to the de

Chapter 19: STP Commands254SET STPSyntaxset stp [default] [priority=priority] [hellotime=hellotime] [forwarddelay=forwarddelay] [maxage=maxage]Paramet

AT-S62 Command Line User’s Guide255hellotime Specifies the time interval between generating and sending configuration messages by the bridge. This par

Chapter 19: STP Commands256ExamplesThe following command sets the switch’s bridge priority value to 45,056 (increment 11):set stp priority=11The follo

AT-S62 Command Line User’s Guide257SET STP PORTSyntaxset stp port=port [pathcost|portcost=auto|portcost] [portpriority=portpriority]Parametersport Spe

Chapter 19: STP Commands258portpriority Specifies the port’s priority. This parameter is used as a tie breaker when two or more ports are determined t

AT-S62 Command Line User’s Guide259SHOW STPSyntaxshow stp [port=port]Parameterport Specifies the port whose STP parameters you want to view. You can v

Chapter 2: Basic Command Line Commands26SET PROMPTSyntaxset prompt=”prompt”Parameterprompt Specifies the command line prompt. The prompt can be from o

260Chapter 20RSTP CommandsThis chapter contains the following commands:❑ ACTIVATE RSTP on page 261❑ DISABLE RSTP on page 262❑ ENABLE RSTP on page 263❑

AT-S62 Command Line User’s Guide261ACTIVATE RSTPSyntaxactivate rstpParametersNone.DescriptionUse this command to designate RSTP as the active spanning

Chapter 20: RSTP Commands262DISABLE RSTPSyntaxdisable rstpParametersNone.DescriptionThis command disables the Rapid Spanning Tree Protocol on the swit

AT-S62 Command Line User’s Guide263ENABLE RSTPSyntaxenable rstpParametersNone.DescriptionThis command enables the Rapid Spanning Tree Protocol on the

Chapter 20: RSTP Commands264PURGE RSTPSyntaxpurge rstpParametersNone.DescriptionThis command returns all RSTP bridge and port parameters to the defaul

AT-S62 Command Line User’s Guide265SET RSTPSyntaxset rstp [default] [priority=priority] [hellotime=hellotime] [forwarddelay=forwarddelay] [maxage=maxa

Chapter 20: RSTP Commands266hellotime Specifies the time interval between generating and sending configuration messages by the bridge. This parameter

AT-S62 Command Line User’s Guide267forcestpcompatible The bridge uses the RSTP parameter settings, but transmits only STP BPDU packets from the ports.

Chapter 20: RSTP Commands268The following command returns all RSTP parameter settings to their default values:set rstp default

AT-S62 Command Line User’s Guide269SET RSTP PORTSyntaxset rstp port=port [pathcost|portcost=cost|auto] [portpriority=portpriority][edgeport=yes|no|on|

AT-S62 Command Line User’s Guide27SET SWITCH CONSOLEMODESyntaxset switch consolemode=menu|cliParameterconsolemode Specifies the mode you want manageme

Chapter 20: RSTP Commands270Table 10 lists the RSTP port costs with Auto-Detect when the port is part of a port trunk.portpriority Specifies the port’

AT-S62 Command Line User’s Guide271no, off, false The port is not an edge port. The values are equivalent. ptp Defines whether the port is functioning

Chapter 20: RSTP Commands272SHOW RSTPSyntaxshow rstp [portconfig=port|portstate=port]Parametersportconfig Displays the RSTP port settings. You can spe

AT-S62 Command Line User’s Guide273The following command displays RSTP port status for port 15:show rstp portstate=15

274Chapter 21MSTP CommandsThis chapter contains the following commands:❑ ACTIVATE MSTP on page 275❑ ADD MSTP on page 276❑ CREATE MSTP on page 277❑ DEL

AT-S62 Command Line User’s Guide275ACTIVATE MSTPSyntaxactivate mstpParametersNone.DescriptionThis command designates MSTP as the active spanning tree

Chapter 21: MSTP Commands276ADD MSTPSyntaxadd mstp mstiid=mstiid mstivlanassoc=vidsParametersmstiid Specifies the ID of the multiple spanning tree ins

AT-S62 Command Line User’s Guide277CREATE MSTPSyntaxcreate mstp mstiid=mstiid [mstivlanassoc=vids]Parametersmstiid Specifies the MSTI ID of the spanni

Chapter 21: MSTP Commands278DELETE MSTPSyntaxdelete mstp mstiid=mstiid mstivlanassoc=vidsParametersmstiid Specifies the MSTI ID of the spanning tree i

AT-S62 Command Line User’s Guide279DESTROY MSTP MSTIIDFormatdestroy mstp mstiid=mstiidParametermstiid Specifies the MSTI ID of the spanning tree insta

Chapter 2: Basic Command Line Commands28SHOW USERSyntaxshow userParameterNone.DescriptionDisplays the user account you used to log on to manage the sw

Chapter 21: MSTP Commands280DISABLE MSTPSyntaxdisable mstpParametersNone.DescriptionThis command disables the Multiple Spanning Tree Protocol on the s

AT-S62 Command Line User’s Guide281ENABLE MSTPSyntaxenable mstpParametersNone.DescriptionThis command enables Multiple Spanning Tree Protocol on the s

Chapter 21: MSTP Commands282PURGE MSTPSyntaxpurge mstpParametersNone.DescriptionThis command returns all MSTP bridge and port parameters settings to t

AT-S62 Command Line User’s Guide283SET MSTPSyntaxset mstp [default] [forceversion=stpcompatible|forcestpcompatible|normalmstp] [hellotime=hellotime] [

Chapter 21: MSTP Commands284normalmspt The bridge uses MSTP. The bridge sends out MSTP BPDU packets from all ports except for those ports connected to

AT-S62 Command Line User’s Guide285revisionlevel Specifies the revision level of an MSTP region. The range is 0 (zero) to 255. This is an arbitrary nu

Chapter 21: MSTP Commands286SET MSTP CISTSyntaxset mstp cist priority=priorityParameterpriority Specifies the CIST priority number for the switch. The

AT-S62 Command Line User’s Guide287SET MSTP MSTISyntaxset mstp msti mstiid=mstiid priority=priority]Parametersmstiid Specifies a MSTI ID. You can spec

Chapter 21: MSTP Commands288ExamplesThis command changes the MSTI priority value to 45,056 (increment 11) for the MSTI ID 4:set mstp msti mstiid=4 pri

AT-S62 Command Line User’s Guide289SET MSTP MSTIVLANASSOCSyntaxset mstp mstivlanassoc mstiid=mstiid vlanlist=vidsParametersmstiid Specifies the ID of

29Chapter 3Enhanced Stacking CommandsThis chapter contains the following commands:❑ ACCESS SWITCH on page 30❑ SET SWITCH STACKMODE on page 32❑ SHOW RE

Chapter 21: MSTP Commands290SET MSTP PORTSyntaxset mstp port=port|all [intportcost=auto|portcost] [extportcost=portcost] [portpriority=priority][edgep

AT-S62 Command Line User’s Guide291edgeport Defines whether the port is functioning as an edge port. An edge port is connected to a device operating a

Chapter 21: MSTP Commands292no, off, false Disable migration check. The values are equivalent.NoteEach time a MSTP port is reset by receiving STP BPDU

AT-S62 Command Line User’s Guide293SHOW MSTPSyntaxshow mstp [portconfig=ports] [portstate=ports] [msti] [cist] [mstivlanassoc]Parametersportconfig Spe

Chapter 21: MSTP Commands294❑ Configuration name❑ Reversion level❑ Bridge identifierThe PORTCONFIG parameter displays the following MSTP port paramete

295Chapter 22VLANs and Multiple VLAN Mode CommandsThis chapter contains the following commands:❑ ADD VLAN on page 296❑ CREATE VLAN on page 298❑ DELETE

Chapter 22: VLANs and Multiple VLAN Commands296ADD VLANSyntax 1add vlan=name [vid=vid] port=ports|all frame=untagged|taggedSyntax 2add vlan=name [vid=

AT-S62 Command Line User’s Guide297This command has two syntaxes. You can use either command to add ports to a VLAN. The difference between the two is

Chapter 22: VLANs and Multiple VLAN Commands298CREATE VLANSyntax 1create vlan=name vid=vid port=ports|all frame=untagged|taggedSyntax 2create vlan=nam

AT-S62 Command Line User’s Guide299port Specifies the ports on the switch that are either tagged or untagged members of the new VLAN. You can specify

3Table of ContentsPreface ...

Chapter 3: Enhanced Stacking Commands30ACCESS SWITCHSyntaxaccess switch number=number|macaddress=macaddressParametersnumber Specifies the number of th

Chapter 22: VLANs and Multiple VLAN Commands300Tagged ports of the new VLAN remain as tagged and untagged members of their current VLAN assignments. N

AT-S62 Command Line User’s Guide301Syntax 2 allows you to create a VLAN of both tagged and untagged ports all in one command. Here is the command that

Chapter 22: VLANs and Multiple VLAN Commands302DELETE VLANSyntax 1delete vlan=name [vid=vid] port=ports frame=untagged|taggedSyntax 2delete vlan=name

AT-S62 Command Line User’s Guide303NoteYou cannot change a VLAN’s name or VID. When you remove an untagged port from a VLAN, the following happens:❑ T

Chapter 22: VLANs and Multiple VLAN Commands304delete vlan=Service port=6-8 frame=untaggedUsing Syntax 2, you can do the whole thing with just one com

AT-S62 Command Line User’s Guide305DESTROY VLANSyntaxdestroy vlan vlan=name|all [vid=vid]Parametersvlan Specifies the name of the VLAN to be deleted.

Chapter 22: VLANs and Multiple VLAN Commands306SET SWITCH INFILTERINGSyntaxset switch infiltering=yes|no|on|off|true|falseParametersinfiltering Specif

AT-S62 Command Line User’s Guide307SET SWITCH MANAGEMENTVLANSyntaxset switch managementvlan=name|VIDParametermanagementvlan Specifies the management V

Chapter 22: VLANs and Multiple VLAN Commands308SET SWITCH VLANMODESyntaxset switch vlanmode=userconfig|dotqmultiple| multiple [uplinkport=port]Paramet

AT-S62 Command Line User’s Guide309The following command sets the switch so that you can create your own port-based and tagged VLANs:set switch vlanmo

AT-S62 Command Line User’s Guide31ExamplesThe following command starts a management session on switch number 12:access switch number=12The following c

Chapter 22: VLANs and Multiple VLAN Commands310SET VLANSyntaxset vlan=name [vid=vid] type=portbasedParametervlan Specifies the name of the dynamic GVR

AT-S62 Command Line User’s Guide311SHOW VLANSyntaxshow vlan[=name|vid]Parametervlan Specifies the name or VID of the VLAN.DescriptionThis command disp

312Chapter 23GARP VLAN Registration Protocol CommandsThis chapter contains the following commands:❑ DISABLE GARP on page 313❑ ENABLE GARP on page 314❑

AT-S62 Command Line User’s Guide313DISABLE GARPSyntaxdisable garp=gvrp [gip]Parametersgarp Specifies the GARP application you want to disable. The onl

Chapter 23: GARP VLAN Registration Protocol Commands314ENABLE GARPSyntaxenable garp=gvrp [gip]Parametersgarp Specifies the GARP application you want t

AT-S62 Command Line User’s Guide315PURGE GARPSyntaxpurge garp=gvrpParametergarp Specifies the GARP application you want to reset. The only GARP applic

Chapter 23: GARP VLAN Registration Protocol Commands316SET GARP PORTSyntaxset garp=gvrp port=port [mode=normal|none]Parametersgarp Specifies the GARP

AT-S62 Command Line User’s Guide317SET GARP TIMERSyntaxset garp=gvrp timer [default] [jointime=integer] [leavetime=integer] [leavealltime=integer]Para

Chapter 23: GARP VLAN Registration Protocol Commands318ExamplesThe following command sets the Join Period timer to 0.1 second, Leave Period timer to 0

AT-S62 Command Line User’s Guide319SHOW GARPSyntaxshow garp=gvrpParametergarp Specifies the GARP application you want to display. The only GARP applic

Chapter 3: Enhanced Stacking Commands32SET SWITCH STACKMODESyntaxset switch stackmode=master|slave|unavailableParameterstackmode Specifies the enhance

Chapter 23: GARP VLAN Registration Protocol Commands320SHOW GARP COUNTERSyntaxshow garp=gvrp counterParametergarp Specifies the GARP application you w

AT-S62 Command Line User’s Guide321❑ Transmit GARP Messages: LeaveEmpty❑ Receive GARP Messages: LeaveIn❑ Transmit GARP Messages: LeaveIn❑ Receive GARP

Chapter 23: GARP VLAN Registration Protocol Commands322SHOW GARP DATABASESyntaxshow garp=gvrp databaseParametersgarp Specifies the GARP application yo

AT-S62 Command Line User’s Guide323SHOW GARP GIPSyntaxshow garp=gvrp gipParametergarp Specifies the GARP application you want to display. The only GAR

Chapter 23: GARP VLAN Registration Protocol Commands324SHOW GARP MACHINESyntaxshow garp=gvrp machineParametergarp Specifies the GARP application you w

325Chapter 24MAC Address Security CommandsThis chapter contains the following commands:❑ SET SWITCH PORT INTRUSIONACTION on page 326❑ SET SWITCH PORT

Chapter 24: Port Security Commands326SET SWITCH PORT INTRUSIONACTIONSyntaxset switch port=port intrusionaction=discard|trap|disableParametersport Spec

AT-S62 Command Line User’s Guide327SET SWITCH PORT SECURITYMODESyntaxset switch port=port [securitymode=automatic|limited|secured|locked][intrusionact

Chapter 24: Port Security Commands328intrusionaction Specifies the action taken by the port in the event port security is violated. This parameter app

AT-S62 Command Line User’s Guide329ExamplesThis command sets the security level for port 8 to the Limited mode and specifies a limit of 5 dynamic MAC

AT-S62 Command Line User’s Guide33ExampleThe following command sets the switch’s stacking status to master:set switch stackmode=master

Chapter 24: Port Security Commands330SHOW SWITCH PORT INTRUSIONSyntaxshow switch port=port intrusionParametersport Specifies the port where you want t

AT-S62 Command Line User’s Guide331SHOW SWITCH PORT SECURITYMODESyntaxshow switch port=port securitymodeParametersport Specifies the port whose securi

332Chapter 25802.1x Port-based Access Control CommandsThis chapter contains the following commands: ❑ DISABLE PORTACCESS|PORTAUTH on page 333❑ DISABLE

AT-S62 Command Line User’s Guide333DISABLE PORTACCESS|PORTAUTHSyntaxdisable portaccess|portauthNoteThe PORTACCESS and PORTAUTH keywords are equivalent

Chapter 25: 802.1x Port-based Access Control Commands334DISABLE RADIUSACCOUNTINGSyntaxdisable radiusaccountingParametersNoneDescriptionThis command di

AT-S62 Command Line User’s Guide335ENABLE PORTACCESS|PORTAUTHSyntaxenable portaccess|portauthNoteThe PORTACCESS and PORTAUTH keywords are equivalent.P

Chapter 25: 802.1x Port-based Access Control Commands336ENABLE RADIUSACCOUNTINGSyntaxenable radiusaccountingParametersNoneDescriptionThis command enab

AT-S62 Command Line User’s Guide337SET PORTACCESS|PORTAUTH PORT ROLE=AUTHENTICATORSyntaxset portaccess|portauth port=port type|role=authenticator|none

Chapter 25: 802.1x Port-based Access Control Commands338between the client and the authentication server. Each client that attempts to access the netw

AT-S62 Command Line User’s Guide339supptimeout Sets the switch-to-client retransmission time for the EAP-request frame. The default value for this par

Chapter 3: Enhanced Stacking Commands34SHOW REMOTELISTSyntaxshow remotelist [sorted by=macaddress|name]Parametersorted Sorts the list either by MAC ad

Chapter 25: 802.1x Port-based Access Control Commands340DescriptionThis command sets ports to the Authenticator role and configures the Authenticator

AT-S62 Command Line User’s Guide341SET PORTACCESS|PORTAUTH PORT ROLE=SUPPLICANTSyntaxset portaccess|portauth port=port type|role=supplicant|none [auth

Chapter 25: 802.1x Port-based Access Control Commands342startperiod Specifies the time period in seconds between successive attempts by the supplicant

AT-S62 Command Line User’s Guide343SET RADIUSACCOUNTINGSyntaxset radiusaccounting [status=enabled|disabled] [serverport=value] [type=network] [trigger

Chapter 25: 802.1x Port-based Access Control Commands344interval Specifies the intervals at which the switch is to send interim accounting updates to

AT-S62 Command Line User’s Guide345SHOW PORTACCESS|PORTAUTHSyntaxshow portaccess|portauth config|statusNoteThe PORTACCESS and PORTAUTH keywords are eq

Chapter 25: 802.1x Port-based Access Control Commands346SHOW PORTACCESS|PORAUTH PORTSyntaxshow portaccess|portauth port=port authenticator|supplicant

AT-S62 Command Line User’s Guide347SHOW RADIUSACCOUNTINGSyntaxshow radiusaccountingParametersNone.DescriptionUse this command to display the current p

348Chapter 26Web Server CommandsThis chapter contains the following commands:❑ DISABLE HTTP SERVER on page 349❑ ENABLE HTTP SERVER on page 350❑ PURGE

AT-S62 Command Line User’s Guide349DISABLE HTTP SERVERSyntaxdisable http serverParametersNone.DescriptionThis command disables the web server on the s

35Chapter 4Basic Switch CommandsThis chapter contains the following commands:❑ DISABLE DHCPBOOTP on page 37❑ DISABLE IP REMOTEASSIGN on page 38❑ DISAB

Chapter 26: Web Server Commands350ENABLE HTTP SERVERSyntaxenable http serverParametersNone.DescriptionThis command activates the web server on the swi

AT-S62 Command Line User’s Guide351PURGE HTTP SERVERSyntaxpurge http serverParametersNone.DescriptionThis command resets the web server to its default

Chapter 26: Web Server Commands352SET HTTP SERVERSyntaxset http server [security=enabled|disabled] [sslkeyid=key-id] [port=port]Parameterssecurity Spe

AT-S62 Command Line User’s Guide353ExamplesThe following command configures the web server for the non-secure HTTP mode. Since no port is specified, t

Chapter 26: Web Server Commands354create pki certificate=Sw12cert keypair=4 serialnumber=0 subject=”cn=149.11.11.11”3. This command adds the new certi

AT-S62 Command Line User’s Guide35511. Activate the web server using ENABLE HTTP SERVER on page 350The following is an example of the command sequence

Chapter 26: Web Server Commands3568. This command configures the web server. It activates HTTPS and specifies the key created in step 1:set http serve

AT-S62 Command Line User’s Guide357SHOW HTTP SERVERSyntaxshow http serverParametersNone.DescriptionThis command displays the following information abo

358Chapter 27Encryption Key CommandsThis chapter contains the following commands:❑ CREATE ENCO KEY on page 359❑ DESTROY ENCO KEY on page 363❑ SET ENCO

AT-S62 Command Line User’s Guide359CREATE ENCO KEYSyntax 1create enco key=key-id type=rsa length=value [description=”description”]Syntax 2create enco

Chapter 4: Basic Switch Commands36❑ SET SYSTEM on page 57❑ SHOW CONFIG on page 58❑ SHOW DHCPBOOTP on page 59❑ SHOW IP INTERFACE on page 60❑ SHOW IP RO

Chapter 27: Encryption Key Commands360hex Specifies a hexadecimal format used to transfer a key between devices other than switches. This is the defau

AT-S62 Command Line User’s Guide361server key is 768 bits and the recommended length for the host key is 1024 bits.The DESCRIPTION parameter is option

Chapter 27: Encryption Key Commands362If you are exporting a public key from the key database to the file system, the KEY parameter should specify the

AT-S62 Command Line User’s Guide363DESTROY ENCO KEYSyntaxdestroy enco key=key-idParameterkey Specifies the ID number of the key pair to be deleted fro

Chapter 27: Encryption Key Commands364SET ENCO KEYSyntaxset enco key=key-id description=”description”Parameterskey Specifies the ID number of the key

AT-S62 Command Line User’s Guide365SHOW ENCOSyntaxshow enco key=key-idParameterskey Specifies the ID of a key whose information you want to display. D

366Chapter 28Public Key Infrastructure (PKI) Certificate CommandsThis chapter contains the following commands:❑ ADD PKI CERTIFICATE on page 367❑ CREAT

AT-S62 Command Line User’s Guide367ADD PKI CERTIFICATESyntaxadd pki certificate=”name” location=”filename.cer” [trusted=yes|no|on|off|true|false] [typ

Chapter 28: Public Key Infrastructure (PKI) Certificate Commands368DescriptionThis command adds a certificate to the certificate database from the AT-

AT-S62 Command Line User’s Guide369CREATE PKI CERTIFICATESyntaxcreate pki certificate=name keypair=key-id serialnumber=value [format=der|pem] subject=

AT-S62 Command Line User’s Guide37DISABLE DHCPBOOTPSyntaxdisable dhcpbootpParametersNone.DescriptionThis command deactivates the DHCP and BOOTP client

Chapter 28: Public Key Infrastructure (PKI) Certificate Commands370Once you have created a new self-signed certificate, you need to load it into the c

AT-S62 Command Line User’s Guide371ExamplesThe following command creates a self-signed certificate. It assigns the certificate the filename “sw12.cer”

Chapter 28: Public Key Infrastructure (PKI) Certificate Commands372CREATE PKI ENROLLMENTREQUESTSyntaxcreate pki enrollmentrequest=”name” keypair=key-i

AT-S62 Command Line User’s Guide373NoteFor a review of all the steps to configuring the web server for a CA certificate, refer to SET HTTP SERVER on p

Chapter 28: Public Key Infrastructure (PKI) Certificate Commands374DELETE PKI CERTIFICATESyntaxdelete pki certificate=nameParametercertificate Specifi

AT-S62 Command Line User’s Guide375PURGE PKISyntaxpurge pkiParametersNone.DescriptionThis command deletes all certificates from the certificate databa

Chapter 28: Public Key Infrastructure (PKI) Certificate Commands376SET PKI CERTIFICATESyntaxset pki certificate=”name” [trusted=yes|no|on|off|true|fal

AT-S62 Command Line User’s Guide377The TYPE parameter specifies the certificate type. If CA is specified, the switch tags this certificate as a CA cer

Chapter 28: Public Key Infrastructure (PKI) Certificate Commands378SET PKI CERTSTORELIMITSyntaxset pki certstorelimit=valueParametercertstorelimit Spe

AT-S62 Command Line User’s Guide379SET SYSTEM DISTINGUISHEDNAMESyntaxset system distinguishedname=”name”Parameterdistinguishedname Specifies the disti

Chapter 4: Basic Switch Commands38DISABLE IP REMOTEASSIGNSyntaxdisable ip remoteassignParametersNone.DescriptionThis command deactivates the DHCP and

Chapter 28: Public Key Infrastructure (PKI) Certificate Commands380SHOW PKISyntaxshow pkiParametersNone.DescriptionThis command displays the current s

AT-S62 Command Line User’s Guide381SHOW PKI CERTIFICATESyntaxshow pki certificate[=”name”]Parametercertificate Specifies the name of the certificate w

382Chapter 29Secure Sockets Layer (SSL) CommandThis chapter contains the following command: ❑ SET SSL on page 383❑ SHOW SSL on page 384NoteRemember to

AT-S62 Command Line User’s Guide383SET SSLSyntaxset ssl [cachetimeout=value] [maxsessions=value]Parameterscachetimeout Specifies the maximum time in s

Chapter 29: Secure Sockets Layer (SSL) Commands384SHOW SSLSyntaxshow sslParametersNone.DescriptionThis command displays the current settings for the f

385Chapter 30Secure Shell (SSH) CommandsThis chapter contains the following commands: ❑ DISABLE SSH SERVER on page 386❑ ENABLE SSH SERVER on page 387❑

Chapter 30: Secure Shell (SSH) Commands386DISABLE SSH SERVERSyntaxdisable ssh serverParametersNone.DescriptionThis command disables the Secure Shell s

AT-S62 Command Line User’s Guide387ENABLE SSH SERVERSyntaxenable ssh server hostkey=key-id serverkey=key-id [expirytime=hours] [logintimeout=seconds]P

Chapter 30: Secure Shell (SSH) Commands388NoteBefore you enable SSH, disable the Telnet management session. Otherwise, the security provided by SSH is

AT-S62 Command Line User’s Guide389ExampleThe following is an example of the command sequence to configuring the SSH software on the server:1. The fir

AT-S62 Command Line User’s Guide39DISABLE TELNETSyntaxdisable telnetParametersNone.DescriptionThis command disables the Telnet server software on the

Chapter 30: Secure Shell (SSH) Commands390SET SSH SERVERSyntaxset ssh server hostkey=key-id serverkey=key-id [expirytime=hours] [logintimeout=seconds]

AT-S62 Command Line User’s Guide391ExampleThe following command sets the Secure Shell server key expiry time to 1 hour:set ssh server expirytime=1

Chapter 30: Secure Shell (SSH) Commands392SHOW SSHSyntaxshow sshParametersNone.DescriptionThis command displays the current values for the following S

393Chapter 31TACACS+ and RADIUS CommandsThis chapter contains the following commands:❑ ADD RADIUSSERVER on page 394❑ ADD TACACSSERVER on page 395❑ DEL

Chapter 31: TACACS+ and RADIUS Commands394ADD RADIUSSERVERSyntaxadd radiusserver server|ipaddress=ipaddress order=value [secret=string] [port|accport=

AT-S62 Command Line User’s Guide395ADD TACACSSERVERSyntaxadd tacacsserver server|ipaddress=ipaddress order=value [secret=string]Parametersserver Speci

Chapter 31: TACACS+ and RADIUS Commands396DELETE RADIUSSERVERSyntaxdelete radiusserver server|ipaddress=ipaddressParameterserver Specifies the IP addr

AT-S62 Command Line User’s Guide397DELETE TACACSSERVERSyntaxdelete tacacsserver server|ipaddress=ipaddressParameterserver Specifies the IP address of

Chapter 31: TACACS+ and RADIUS Commands398DISABLE AUTHENTICATIONSyntaxdisable authenticationParametersNone.DescriptionUse this command to disable TACA

AT-S62 Command Line User’s Guide399ENABLE AUTHENTICATIONSyntaxenable authenticationParametersNone.DescriptionUse this parameter to activate TACACS+ or

Table of Contents4ENABLE TELNET ...

Chapter 4: Basic Switch Commands40ENABLE DHCPBOOTPSyntaxenable dhcpbootpParametersNone.DescriptionThis command activates the DHCP and BOOTP client sof

Chapter 31: TACACS+ and RADIUS Commands400PURGE AUTHENTICATIONSyntaxpurge authenticationParametersNone.DescriptionThis command disables authentication

AT-S62 Command Line User’s Guide401SET AUTHENTICATIONSyntaxset authentication method=tacacs|radius [secret=string] [timeout=value]Parametersmethod Spe

Chapter 31: TACACS+ and RADIUS Commands402The following command selects RADIUS as the authentication protocol with a global encryption key of leopard0

AT-S62 Command Line User’s Guide403SHOW AUTHENTICATIONSyntaxshow authenticationParametersNone.DescriptionUse this command to display the following inf

404Chapter 32Management ACL CommandsThis chapter contains the following commands:❑ ADD MGMTACL on page 405❑ DELETE MGMTACL on page 408❑ DISABLE MGMTAC

AT-S62 Command Line User’s Guide405ADD MGMTACLSyntaxadd mgmtacl ipddress=ipaddress mask=string protocol=tcp|udp|all interface=telnet|web|allParameters

Chapter 32: Management ACL Commands406DescriptionThis command adds an access control entry to the Management ACL. There can be up to 256 ACEs in a Man

AT-S62 Command Line User’s Guide407The following command allows all management workstations in the Class A subnet 169.24.144.128 to manage the switch

Chapter 32: Management ACL Commands408DELETE MGMTACLSyntaxdelete mgmtacl ipaddress=ipaddress mask=string protocol=tcp|udp|all interface=telnet|web|all

AT-S62 Command Line User’s Guide409DISABLE MGMTACLSyntaxdisable mgmtaclParametersNoneDescriptionThis command disables the Management ACL. This command

AT-S62 Command Line User’s Guide41ENABLE IP REMOTEASSIGNSyntaxenable ip remoteassignParametersNone.DescriptionThis command activates the DHCP and BOOT

Chapter 32: Management ACL Commands410ENABLE MGMTACLSyntaxenable mgmtaclParametersNoneDescriptionThis command enables the Management ACL. This command

AT-S62 Command Line User’s Guide411SET MGMTACL STATESyntaxset mgmtacl state=disable|enableParametersstate Sets the state of the Management ACL. The op

Chapter 32: Management ACL Commands412SHOW MGMTACLSyntaxshow mgmtacl state|entriesParametersstate Displays the status of the Management ACL as either

413IndexNumerics802.1Q multiple VLAN mode 308802.1x port-based access controlauthenticator portconfiguring 337displaying 345disabling 333displaying 34

Index414BPDU 266, 284bridge forwarding delay 254, 265, 283bridge hello time 254, 265, 283bridge max age 254, 265, 283bridge priority 254broadcast filt

AT-S62 Command Line User’s Guide415DISABLE PORTACCESS|PORTAUTH command 333DISABLE RADIUSACCOUNTING command 334DISABLE RSTP command 262DISABLE SNMP AUT

Index416resetting 315timer, setting 317gateway addressdisplaying 61resetting to default 44setting 53GID state machines 324GIP-connected ring 323Hhello

AT-S62 Command Line User’s Guide417PKI certificate database 378PKI certificate enrollment requestcreating 372downloading 203uploading 209PKI certifica

Index418SSAVE CONFIGURATION command 25SAVE LOG command 216Secure Shell (SSH)configuration overview 388serial port, speedsetting 50SET ASYN command 50S

AT-S62 Command Line User’s Guide419SHOW LOG STATUS command 224SHOW MGMTACL command 412SHOW MSTP command 293SHOW PKI CERTIFICATE command 381SHOW PKI co

Chapter 4: Basic Switch Commands42ENABLE TELNETSyntaxenable telnetParametersNone.DescriptionThis command activates the Telnet server on the switch. Wi

Index420SNTPdisabling 67enabling 68information, displaying 72IP addressdeleting 66specifying 65resetting 69SSH configuration, displaying 392SSH server

AT-S62 Command Line User’s Guide43PINGSyntaxping ipaddressParameteripaddress Specifies the IP address of an end node you want the switch to ping.Descr

Chapter 4: Basic Switch Commands44PURGE IPSyntaxpurge ip [ipaddress] [netmask] [route]Parametersipaddress Returns the switch’s IP address to the defau

AT-S62 Command Line User’s Guide45RESET SWITCHSyntaxreset switchParametersNone.DescriptionThis command does all of the following:❑ Performs a soft res

Chapter 4: Basic Switch Commands46RESET SYSTEMSyntaxreset system [name] [contact] [location]Parametersname Deletes the switch’s name.contact Deletes t

AT-S62 Command Line User’s Guide47RESTART REBOOTSyntaxrestart rebootParametersNone.DescriptionThis command resets the switch. The switch runs its inte

Chapter 4: Basic Switch Commands48RESTART SWITCHSyntaxrestart switch config=none|filename.cfgParametersconfig Specifies a configuration file. The file

AT-S62 Command Line User’s Guide49NoteFor a list of the default values, refer to Appendix A in the AT-S62 Management Software User’s Guide.NoteThe swi

AT-S62 Command Line User’s Guide5CREATE SNMPV3 ACCESS ...

Chapter 4: Basic Switch Commands50SET ASYNSyntaxset asyn speed=1200|2400|4800|9600|19200|38400|57600|115200 [prompt=”prompt”]Parameterspeed Sets the s

AT-S62 Command Line User’s Guide51SET IP INTERFACESyntaxset ip interface=1 ipaddress=ipaddress|DHCP mask|netmask=subnetmaskParametersinterface Specifi

Chapter 4: Basic Switch Commands52ExamplesThe following command sets the switch’s IP address to 140.35.22.22 and the subnet mask to 255.255.255.0:set

AT-S62 Command Line User’s Guide53SET IP ROUTESyntaxset ip route ipaddress=ipaddressParameteripaddress Specifies the IP address of the default gateway

Chapter 4: Basic Switch Commands54SET PASSWORD MANAGERSyntaxset password managerParametersNone.DescriptionThis command sets the manager’s password. Lo

AT-S62 Command Line User’s Guide55SET PASSWORD OPERATORSyntaxset password operatorParametersNone.DescriptionThis command sets the operator’s password.

Chapter 4: Basic Switch Commands56SET SWITCH CONSOLETIMERSyntaxset switch consoletimer=valueParameterconsoletimer Specifies the console timer in minut

AT-S62 Command Line User’s Guide57SET SYSTEMSyntaxset system [name=”name”] [contact=”contact”] [location=”location”]ParametersThe parameters are defin

Chapter 4: Basic Switch Commands58SHOW CONFIGSyntaxshow config [dynamic] [info]Parametersdynamic Displays the settings for all the switch and port par

AT-S62 Command Line User’s Guide59SHOW DHCPBOOTPSyntaxshow dhcpbootpParametersNone.DescriptionThis command displays the status of the DHCP and BOOTP c

Table of Contents6Chapter 10Port Trunking Commands ...

Chapter 4: Basic Switch Commands60SHOW IP INTERFACESyntaxshow ip interface=1Parametersinterface Specifies the switch’s interface number. This value is

AT-S62 Command Line User’s Guide61SHOW IP ROUTESyntaxshow ip routeParametersNone.DescriptionThis command displays the switch’s default gateway address

Chapter 4: Basic Switch Commands62SHOW SWITCHSyntaxshow switchParametersNone.DescriptionThis command displays the following switch parameters:❑ Applic

AT-S62 Command Line User’s Guide63SHOW SYSTEMSyntaxshow systemParametersNone.DescriptionThis command displays the following information:❑ MAC address❑

64Chapter 5Simple Network Time Protocol (SNTP) CommandsThis chapter contains the following commands:❑ ADD SNTPSERVER PEER|IPADDRESS on page 65❑ DELETE

AT-S62 Command Line User’s Guide65ADD SNTPSERVER PEER|IPADDRESSSyntaxadd sntpserver peer|ipaddress=ipaddressParameterpeer Specifies the IP address of

Chapter 5: Simple Network Time Protocol (SNTP) Commands66DELETE SNTPSERVER PEER|IPADDRESSSyntaxdelete sntpserver peer|ipaddress=ipaddressParameterpeer

AT-S62 Command Line User’s Guide67DISABLE SNTPSyntaxdisable sntpParametersNone.DescriptionThis command disables the SNTP client software on the switch

Chapter 5: Simple Network Time Protocol (SNTP) Commands68ENABLE SNTPSyntaxenable sntpParametersNone.DescriptionThis command enables the SNTP client so

AT-S62 Command Line User’s Guide69PURGE SNTPSyntaxpurge sntpParametersNone.DescriptionThis command disables the SNTP client software and returns its p

AT-S62 Command Line User’s Guide7SHOW IGMPSNOOPING ...

Chapter 5: Simple Network Time Protocol (SNTP) Commands70SET DATE TIMESyntaxset date=dd-mm-yyyy time=hh:mm:ssParameterdate Specifies the date for the

AT-S62 Command Line User’s Guide71SET SNTPSyntaxset sntp [dst=enabled|disabled] [pollinterval=value] [utcoffset=value]Parametersdst Enables or disable

Chapter 5: Simple Network Time Protocol (SNTP) Commands72SHOW SNTPSyntaxshow sntpParametersNone.DescriptionThis command displays the following informa

AT-S62 Command Line User’s Guide73SHOW TIMESyntaxshow timeParametersNone.DescriptionThis command shows the switch’s current date and time.ExampleThe f

74Chapter 6SNMPv1 and SNMPv2 Community Strings and Trap CommandsThis chapter contains the following commands:❑ ADD SNMP COMMUNITY on page 75❑ CREATE S

AT-S62 Command Line User’s Guide75ADD SNMP COMMUNITYSyntaxadd snmp community=”community” [traphost=ipaddress] [manager=ipaddress]Parameterscommunity S

Chapter 6: SNMPv1 and SNMPv2 Community Strings and Trap Commands76The following command adds the IP address 149.212.10.11 as a trap receiver to the “p

AT-S62 Command Line User’s Guide77CREATE SNMP COMMUNITYSyntaxcreate snmp community=”community” [access=read|write] [open=yes|no] [traphost=ipaddress]

Chapter 6: SNMPv1 and SNMPv2 Community Strings and Trap Commands78manager Specifies the IP address of a management station that can use the community

AT-S62 Command Line User’s Guide79A community string can have up to eight manager IP addresses, but only one can be assigned when a community string i

Table of Contents8Chapter 22VLANs and Multiple VLAN Mode Commands ...

Chapter 6: SNMPv1 and SNMPv2 Community Strings and Trap Commands80DELETE SNMP COMMUNITYSyntaxdelete snmp community=”community” traphost=ipaddress mana

AT-S62 Command Line User’s Guide81DESTROY SNMP COMMUNITYSyntaxdestroy snmp community=”community”Parametercommunity Specifies an SNMP community string

Chapter 6: SNMPv1 and SNMPv2 Community Strings and Trap Commands82DISABLE SNMPSyntaxdisable snmpParametersNone. DescriptionThis command disables SNMP

AT-S62 Command Line User’s Guide83DISABLE SNMP AUTHENTICATETRAPSyntaxdisable snmp authenticatetrap|authenticate_trapParametersNone.DescriptionThis com

Chapter 6: SNMPv1 and SNMPv2 Community Strings and Trap Commands84DISABLE SNMP COMMUNITYSyntaxdisable snmp community=”community”Parameterscommunity Sp

AT-S62 Command Line User’s Guide85ENABLE SNMPSyntaxenable snmpParametersNone.DescriptionThis command activates SNMP on the switch. Once activated, you

Chapter 6: SNMPv1 and SNMPv2 Community Strings and Trap Commands86ENABLE SNMP AUTHENTICATETRAPSyntaxenable snmp authenticatetrap|authenticate_trapPara

AT-S62 Command Line User’s Guide87ENABLE SNMP COMMUNITYSyntaxenable snmp community=”community”Parameterscommunity Specifies an SNMP community string.

Chapter 6: SNMPv1 and SNMPv2 Community Strings and Trap Commands88SET SNMP COMMUNITYSyntaxset snmp community=”community” [access=read|write] [open=yes

AT-S62 Command Line User’s Guide89The following command changes the access level for the SNMP community string “serv12” to read and write with open ac

AT-S62 Command Line User’s Guide9Chapter 27Encryption Key Commands ...

Chapter 6: SNMPv1 and SNMPv2 Community Strings and Trap Commands90SHOW SNMPSyntaxshow snmp [community=”community”]Parametercommunity Specifies a commu

AT-S62 Command Line User’s Guide91❑ Management station IP addresses - These are the IP addresses of management stations that can access the switch thr

92Chapter 7SNMPv3 CommandsThis chapter contains the following commands:❑ ADD SNMPV3 USER on page 94❑ CLEAR SNMPV3 ACCESS on page 96❑ CLEAR SNMPV3 COMM

AT-S62 Command Line User’s Guide93❑ DESTROY SNMPv3 TARGETADDR on page 123❑ DESTROY SNMPv3 TARGETPARMS on page 124❑ DESTROY SNMPV3 VIEW on page 125❑ SE

Chapter 7: SNMPv3 Commands94ADD SNMPV3 USERSyntaxadd snmpv3 user=user [authentication=md5|sha] authpassword=password privpassword=password [storagetyp

AT-S62 Command Line User’s Guide95volatile Does not allow you to save the table entry to the configuration file on the switch. This is the default.non

Chapter 7: SNMPv3 Commands96CLEAR SNMPV3 ACCESSSyntaxclear snmpv3 access=access [securitymodel=v1|v2c|v3] [securitylevel=noauthentication|authenticati

AT-S62 Command Line User’s Guide97notifyview Specifies a Notify View Name that allows the users assigned to this security group to send traps permitte

Chapter 7: SNMPv3 Commands98CLEAR SNMPV3 COMMUNITYSyntaxclear snmpv3 community index=index transporttag Parametersindex Specifies the name of an exist

AT-S62 Command Line User’s Guide99CLEAR SNMPV3 NOTIFYSyntaxclear snmpv3 notify=notify tag Parametersnotify Specifies the name of an SNMPv3 Notify Tabl