Allied-telesis AT-S63 Manual de usuario

Management SoftwareAT-S63◆Command Line InterfaceUser’s GuideAT-9424T/SP AND AT-9424T/GBLAYER 2+ GIGABIT ETHERNET SWITCHESVERSION 1.0.0®PN 613-50571-00

Contents10

Chapter 6: Enhanced Stacking Commands100SET SWITCH STACKMODESyntaxset switch stackmode=master|slave|unavailableParameterstackmode Specifies the enhanc

AT-S63 Management Software Menus Interface User’s Guide101ExampleThe following command sets the switch’s stacking status to master:set switch stackmod

Chapter 6: Enhanced Stacking Commands102SHOW REMOTELISTSyntaxshow remotelist [sorted by=macaddress|name]Parametersorted Sorts the list either by MAC a

Chapter 7Port Parameter CommandsThis chapter contains the following commands:❑ “ACTIVATE SWITCH PORT” on page 104❑ “DISABLE INTERFACE LINKTRAP” on pag

Chapter 7: Port Parameter Commands104ACTIVATE SWITCH PORTSyntaxactivate switch port=port autonegotiateParameterport Specifies a port. You can specify

AT-S63 Management Software Command Line Interface User’s Guide105DISABLE INTERFACE LINKTRAPSyntaxdisable interface=port linktrapParameterport Specifie

Chapter 7: Port Parameter Commands106DISABLE SWITCH PORTSyntaxdisable switch port=portParameterport Specifies the port to disable. You can specify mor

AT-S63 Management Software Command Line Interface User’s Guide107DISABLE SWITCH PORT FLOWSyntaxdisable switch port=port flow=pauseParameterport Specif

Chapter 7: Port Parameter Commands108ENABLE INTERFACE LINKTRAPSyntaxenable interface=port linktrapParameterport Specifies the port on which you want t

AT-S63 Management Software Command Line Interface User’s Guide109ENABLE SWITCH PORTSyntaxenable switch port=portParameterport Specifies the port to en

11TablesTable 1: File Name Extensions ...

Chapter 7: Port Parameter Commands110ENABLE SWITCH PORT FLOWSyntaxenable switch port=port flow=pauseParameterport Specifies the port where you want to

AT-S63 Management Software Command Line Interface User’s Guide111RESET SWITCH PORTSyntaxreset switch port=portParameterport Specifies the port to rese

Chapter 7: Port Parameter Commands112SET SWITCH PORTSyntaxset switch port=port [description=description][status=enabled|disabled] [speed=autonegotiate

AT-S63 Management Software Command Line Interface User’s Guide113100mfull 100 Mbps and full-duplex mode.NoteA speed of 1000 Mbps is only available wh

Chapter 7: Port Parameter Commands114fctrllimit Specifies the number of cells for flow control. A cell represents 64 bytes. The range is 1 to 57,344 c

AT-S63 Management Software Command Line Interface User’s Guide115no, off, false, disabled The port discards all unknown unicast frames. These options

Chapter 7: Port Parameter Commands116The following command configures port 8 to operate at 10 Mbps, half duplex:set switch port=8 speed=10mhalfThe fol

AT-S63 Management Software Command Line Interface User’s Guide117SET SWITCH PORT RATELIMITINGSyntaxset switch port=1 [bcastratelimiting=yes|no|on|off|

Chapter 7: Port Parameter Commands118yes, on, true, enabled Activates multicast packet rate limit on the port. The options are equivalent.no, off, fal

AT-S63 Management Software Command Line Interface User’s Guide119ExamplesThe following command sets a rate limit of 40,000 ingress packets and activat

Tables12

Chapter 7: Port Parameter Commands120SHOW INTERFACESyntaxshow interface=portParameterport Specifies the port whose interface information you want to d

AT-S63 Management Software Command Line Interface User’s Guide121disabled - Link traps are disabled. To enable link traps, see “ENABLE INTERFACE LINKT

Chapter 7: Port Parameter Commands122SHOW SWITCH PORTSyntaxshow switch port[=port]Parameterport Specifies the port whose parameter settings you want t

123Chapter 8MAC Address Table CommandsThis chapter contains the following commands:❑ “ADD SWITCH FDB|FILTER” on page 124❑ “DELETE SWITCH FDB|FILTER” o

Chapter 8: MAC Address Table Commands124ADD SWITCH FDB|FILTERSyntaxadd switch fdb|filter destaddress|macaddress=macaddress port=port vlan=name|vidNote

AT-S63 Management Software Command Line Interface User’s Guide125add switch fdb macaddress=00A0D2181A11 port=7 vlan=default_vlanThe following command

Chapter 8: MAC Address Table Commands126DELETE SWITCH FDB|FILTERSyntaxdelete switch fdb|filter macaddress=macaddress vlan=name|vidNoteThe FDB and FILT

AT-S63 Management Software Command Line Interface User’s Guide127RESET SWITCH FDBSyntaxreset switch fdb port=portParameterport Specifies the port whos

Chapter 8: MAC Address Table Commands128SET SWITCH AGINGTIMER|AGEINGTIMERSyntaxset switch agingtimer|ageingtimer=valueParameteragingtimer Specifies th

AT-S63 Management Software Command Line Interface User’s Guide129SHOW SWITCH FDBSyntaxshow switch fdb [address=macaddress] [port=port] [status=static|

13This guide describes how to configure an AT-9400 Series switch using the AT-S63 command line interface.The first page of each chapter lists the comm

Chapter 8: MAC Address Table Commands130The following command displays the static and dynamic multicast addresses:show switch fdb status=multicastThe

131Chapter 9Port Trunking CommandsThis chapter contains the following commands:❑ “ADD SWITCH TRUNK” on page 132❑ “CREATE SWITCH TRUNK” on page 133❑ “D

Chapter 9: Port Trunking Commands132ADD SWITCH TRUNKSyntaxadd switch trunk=name port=portParameterstrunk Specifies the name of the port trunk to be mo

AT-S63 Management Software Command Line Interface User’s Guide133CREATE SWITCH TRUNKSyntaxcreate switch trunk=name port=ports [select=macsrc|macdest|m

Chapter 9: Port Trunking Commands134CautionDo not connect the cables to the trunk ports on the switches until after you have created the trunk in the

AT-S63 Management Software Command Line Interface User’s Guide135DELETE SWITCH TRUNKSyntaxdelete switch trunk=name port=portParameterstrunk Specifies

Chapter 9: Port Trunking Commands136DESTROY SWITCH TRUNKSyntaxdestroy switch trunk=nameParametertrunk Specifies the name of the trunk to be deleted.De

AT-S63 Management Software Command Line Interface User’s Guide137SET SWITCH TRUNKSyntaxset switch trunk=name select=[macsrc|macdest|macboth|ipsrc|ipde

Chapter 9: Port Trunking Commands138SHOW SWITCH TRUNKSyntaxshow switch trunkParametersNone.DescriptionThis command displays the names, ports, and load

139Chapter 10Port Mirroring CommandsThis chapter contains the following commands:❑ “SET SWITCH MIRROR” on page 140❑ “SET SWITCH PORT MIRROR” on page 1

Preface14Document ConventionsThis document uses the following conventions:NoteNotes provide additional information.WarningWarnings inform you that per

Chapter 10: Port Mirroring Commands140SET SWITCH MIRRORSyntaxset switch mirror=portParametermirror Specifies the destination port for the port mirror.

AT-S63 Management Software Command Line Interface User’s Guide141SET SWITCH PORT MIRRORSyntaxset switch port=port mirror=none|rx|tx|bothParametersport

Chapter 10: Port Mirroring Commands142The following command removes ports 5, 7, and 10 as source ports of a port mirror:set switch port=5,7,10 mirror=

AT-S63 Management Software Command Line Interface User’s Guide143SHOW SWITCH MIRRORSyntaxshow switch mirrorParametersNone.DescriptionThis command disp

Chapter 10: Port Mirroring Commands144

145Chapter 11File System CommandsThis chapter contains the following commands:❑ “COPY” on page 146❑ “CREATE CONFIG” on page 147❑ “DELETE FILE” on page

Chapter 11: File System Commands146COPYSyntaxcopy "filename1.ext" "filename2.ext"Parametersfilename1.ext Specifies the name of the

AT-S63 Management Software Command Line Interface User’s Guide147CREATE CONFIGSyntaxcreate config="filename.cfg"Parameterconfig Specifies th

Chapter 11: File System Commands148DELETE FILESyntaxdelete file="filename"Parameterfile Specifies the name of the file to be deleted. A name

AT-S63 Management Software Command Line Interface User’s Guide149RENAMESyntaxrename "filename1.ext" "filename2.ext"Parametersfilen

AT-S63 Management Software Command Line Interface User’s Guide15Where to Find Web-based GuidesThe installation and user guides for all Allied Telesyn

Chapter 11: File System Commands150SET CONFIGSyntaxset config="filename.cfg"Parameterconfig Specifies the name of the configuration file to

AT-S63 Management Software Command Line Interface User’s Guide151ExampleThe following command sets the boot configuration file to switch22.cfg:set con

Chapter 11: File System Commands152SHOW FILESyntaxshow file="filename"Parameterfile Specifies the name of the file to be displayed. Use doub

153Chapter 12File Download and Upload CommandsThis chapter contains the following commands:❑ “LOAD” on page 154❑ “UPLOAD” on page 160NoteFor backgroun

Chapter 12: File Download and Upload Commands154LOADSyntaxload method=tftp|xmodem|remoteswitch destfile=filename server=ipaddress srcfile|file=filenam

AT-S63 Management Software Command Line Interface User’s Guide155srcfile Specifies the filename of the file you arefile downloading onto the switch. T

Chapter 12: File Download and Upload Commands156The METHOD parameter states the type of download. There are three possible types of downloads. A TFTP

AT-S63 Management Software Command Line Interface User’s Guide157The VERBOSE parameter can be used when you are downloading a file switch to switch to

Chapter 12: File Download and Upload Commands158For a TFTP download, note the following:❑ There must be a node on your network that contains the TFTP

AT-S63 Management Software Command Line Interface User’s Guide159Because this is another Xmodem transfer, it must be performed from a local management

Preface16Contacting Allied TelesynThis section provides Allied Telesyn contact information for technical support as well as sales or corporate informa

Chapter 12: File Download and Upload Commands160UPLOADSyntaxupload method=tftp|xmodem destfile=filename server=ipaddress file=filenameParametersmethod

AT-S63 Management Software Command Line Interface User’s Guide161❑ Encryption keyThe METHOD parameter states the type of upload. There are two possibl

Chapter 12: File Download and Upload Commands162For an Xmodem upload, note the following:❑ Xmodem can download a file only onto the switch on which yo

163Chapter 13Event Log CommandsThis chapter contains the following commands:❑ “DISABLE LOG” on page 164❑ “ENABLE LOG” on page 165❑ “PURGE LOG” on page

Chapter 13: Event Log Commands164DISABLE LOGSyntaxdisable logParametersNone. DescriptionThis command disables the event logs. This is the default sett

AT-S63 Management Software Command Line Interface User’s Guide165ENABLE LOGSyntaxenable logParametersNone.DescriptionThis command activates the event

Chapter 13: Event Log Commands166PURGE LOGSyntaxpurge log[=permanent|temporary]Parameterlog The type of memory on the switch where the log file you wa

AT-S63 Management Software Command Line Interface User’s Guide167SAVE LOGSyntaxsave log[=permanent|temporary] filename="filename.log" [full]

Chapter 13: Event Log Commands168severity Saves events of a selected severity. Choices are I for Informational, E for Error, W for Warning, D for Debu

AT-S63 Management Software Command Line Interface User’s Guide169SET LOG FULLACTIONSyntaxset log fullaction=halt|wrapParametersfullaction Defines what

AT-S63 Management Software Command Line Interface User’s Guide17Obtaining Management Software UpdatesNew releases of management software for our manag

Chapter 13: Event Log Commands170SHOW LOGSyntaxshow log=permanent|temporary [full] [module=module] [reverse] [severity=severity]Parameterslog Specifie

AT-S63 Management Software Command Line Interface User’s Guide171The MODULE parameter displays entries generated by a particular AT-S63 module. You ca

Chapter 13: Event Log Commands172The log can display its entries in chronological order (oldest to newest), or reverse chronological order. The defaul

AT-S63 Management Software Command Line Interface User’s Guide173An example of the event log is shown in Figure 1. The example uses the full display m

Chapter 13: Event Log Commands174The following command displays the error and warning entries for the AT-S63 module VLAN:show log module=vlan severity

AT-S63 Management Software Command Line Interface User’s Guide175SHOW LOG STATUSSyntaxshow log statusParameterNone.DescriptionThis command displays in

Chapter 13: Event Log Commands176

177Chapter 14Quality of Service (QoS) CommandsThis chapter contains the following commands:❑ “MAP QOS COSP” on page 178❑ “SET QOS COSP” on page 180❑ “

Chapter 14: Quality of Service (QoS) Commands178MAP QOS COSPSyntaxmap qos cosp=priority-number qid=queue-numberParameterscosp Specifies the Class of S

AT-S63 Management Software Command Line Interface User’s Guide179ExampleThe following command maps priorities 4 and 5, to queue 3:map qos cosp=4,5 qid

Preface18

Chapter 14: Quality of Service (QoS) Commands180SET QOS COSPSyntaxset qos cosp=priority-number qid=queue-numberParameterscosp Specifies the Class of S

AT-S63 Management Software Command Line Interface User’s Guide181SET QOS SCHEDULINGSyntaxset qos scheduling=strict|wrr weights=weightsParametersschedu

Chapter 14: Quality of Service (QoS) Commands182SHOW QOS CONFIGSyntaxshow qos configParametersNone.DescriptionDisplays the QoS priority queues and sch

183Chapter 15IGMP Snooping CommandsThis chapter contains the following commands:❑ “DISABLE IGMPSNOOPING” on page 184❑ “ENABLE IGMPSNOOPING” on page 18

Chapter 15: IGMP Snooping Commands184DISABLE IGMPSNOOPINGSyntaxdisable igmpsnoopingParametersNone.DescriptionThis command deactivates IGMP snooping on

AT-S63 Management Software Command Line Interface User’s Guide185ENABLE IGMPSNOOPINGSyntaxenable igmpsnoopingParametersNone.DescriptionThis command ac

Chapter 15: IGMP Snooping Commands186SET IP IGMPSyntaxset ip igmp [snoopingstatus=enabled|disabled] [hoststatus=singlehost|multihost] [timeout=value]

AT-S63 Management Software Command Line Interface User’s Guide187numbermulticastgroups Specifies the maximum number of multicast addresses the switch

Chapter 15: IGMP Snooping Commands188SHOW IGMPSNOOPINGSyntaxshow igmpsnoopingParametersNone.DescriptionThis command displays the following IGMP parame

AT-S63 Management Software Command Line Interface User’s Guide189SHOW IP IGMPSyntaxshow ip igmp [hostlist] [routerlist]Parametershostlist Displays a l

19Chapter 1Starting a Command Line Management SessionThis chapter contains the following topics:❑ “Starting a Command Line Management Session” on page

Chapter 15: IGMP Snooping Commands190The following command displays a list of active multicast routers:show ip igmp routerlist

191Chapter 16RRP Snooping CommandsThis chapter contains the following commands:❑ “DISABLE RRPSNOOPING” on page 192❑ “ENABLE RRPSNOOPING” on page 193❑

Chapter 16: RRP Snooping Commands192DISABLE RRPSNOOPINGSyntaxdisable rrpsnoopingParametersNone. DescriptionThis command disables RRP snooping. This is

AT-S63 Management Software Command Line Interface User’s Guide193ENABLE RRPSNOOPINGSyntaxenable rrpsnoopingParametersNone.DescriptionThis command enab

Chapter 16: RRP Snooping Commands194SHOW RRPSNOOPINGSyntaxshow rrpsnoopingParameterNone.DescriptionThis command displays the status of RRP snooping, e

195Chapter 17STP CommandsThis chapter contains the following commands:❑ “ACTIVATE STP” on page 196❑ “DISABLE STP” on page 197❑ “ENABLE STP” on page 19

Chapter 17: STP Commands196ACTIVATE STPSyntaxactivate stpParametersNone.DescriptionUse this command to designate STP as the active spanning tree on th

AT-S63 Management Software Command Line Interface User’s Guide197DISABLE STPSyntaxdisable stpParametersNone.DescriptionThis command disables the Spann

Chapter 17: STP Commands198ENABLE STPSyntaxenable stpParametersNone.DescriptionThis command enables the Spanning Tree Protocol on the switch. The defa

AT-S63 Management Software Command Line Interface User’s Guide199PURGE STPSyntaxpurge stpParametersNone.DescriptionThis command returns all STP bridge

Copyright © 2004 Allied Telesyn, Inc.All rights reserved. No part of this publication may be reproduced without prior written permission from Allied T

Chapter 1: Starting a Command Line Management Session20Starting a Command Line Management SessionThe default management session type is the command li

Chapter 17: STP Commands200SET STPSyntaxset stp [default] [priority=priority] [hellotime=hellotime] [forwarddelay=forwarddelay] [maxage=maxage]Paramet

AT-S63 Management Software Command Line Interface User’s Guide201hellotime Specifies the time interval between generating and sending configuration me

Chapter 17: STP Commands202ExamplesThe following command sets the switch’s bridge priority value to 45,056 (increment 11):set stp priority=11The follo

AT-S63 Management Software Command Line Interface User’s Guide203SET STP PORTSyntaxset stp port=port [pathcost|portcost=auto|portcost] [portpriority=p

Chapter 17: STP Commands204portpriority Specifies the port’s priority. This parameter is used as a tie breaker when two or more ports are determined t

AT-S63 Management Software Command Line Interface User’s Guide205SHOW STPSyntaxshow stp [port=port]Parameterport Specifies the port whose STP paramete

Chapter 17: STP Commands206

207Chapter 18RSTP CommandsThis chapter contains the following commands:❑ “ACTIVATE RSTP” on page 208❑ “DISABLE RSTP” on page 209❑ “ENABLE RSTP” on pag

Chapter 18: RSTP Commands208ACTIVATE RSTPSyntaxactivate rstpParametersNone.DescriptionUse this command to designate RSTP as the active spanning tree o

AT-S63 Management Software Command Line Interface User’s Guide209DISABLE RSTPSyntaxdisable rstpParametersNone.DescriptionThis command disables the Rap

AT-S63 Management Software Command Line Interface User’s Guide21Command Line Interface FeaturesThe following features are supported in the command lin

Chapter 18: RSTP Commands210ENABLE RSTPSyntaxenable rstpParametersNone.DescriptionThis command enables the Rapid Spanning Tree Protocol on the switch.

AT-S63 Management Software Command Line Interface User’s Guide211PURGE RSTPSyntaxpurge rstpParametersNone.DescriptionThis command returns all RSTP bri

Chapter 18: RSTP Commands212SET RSTPSyntaxset rstp [default] [priority=priority] [hellotime=hellotime] [forwarddelay=forwarddelay] [maxage=maxage][rst

AT-S63 Management Software Command Line Interface User’s Guide213hellotime Specifies the time interval between generating and sending configuration me

Chapter 18: RSTP Commands214forcestpcompatible The bridge uses the RSTP parameter settings, but transmits only STP BPDU packets from the ports. This o

AT-S63 Management Software Command Line Interface User’s Guide215The following command returns all RSTP parameter settings to their default values:set

Chapter 18: RSTP Commands216SET RSTP PORTSyntaxset rstp port=port [pathcost|portcost=cost|auto] [portpriority=portpriority][edgeport=yes|no|on|off|tru

AT-S63 Management Software Command Line Interface User’s Guide217Table 12 lists the RSTP port costs with Auto-Detect when the port is part of a port t

Chapter 18: RSTP Commands218yes, on, true The port is an edge port. The options are equivalent. This is the default.no, off, false The port is not an

AT-S63 Management Software Command Line Interface User’s Guide219SHOW RSTPSyntaxshow rstp [portconfig=port|portstate=port]Parametersportconfig Display

Chapter 1: Starting a Command Line Management Session22Command FormattingThe following formatting conventions are used in this manual:❑ screen text fo

Chapter 18: RSTP Commands220The following command displays RSTP port status for port 15:show rstp portstate=15

221Chapter 19MSTP CommandsThis chapter contains the following commands:❑ “ACTIVATE MSTP” on page 223❑ “ADD MSTP” on page 224❑ “CREATE MSTP” on page 22

Chapter 19: MSTP Commands222NoteFor background information on the Multiple Spanning Tree Protocol (MSTP)., refer to Chapter 17, “MSTP” in the AT-S63 M

AT-S63 Management Software Command Line Interface User’s Guide223ACTIVATE MSTPSyntaxactivate mstpParametersNone.DescriptionThis command designates MST

Chapter 19: MSTP Commands224ADD MSTPSyntaxadd mstp mstiid=mstiid mstivlanassoc=vidsParametersmstiid Specifies the ID of the multiple spanning tree ins

AT-S63 Management Software Command Line Interface User’s Guide225CREATE MSTPSyntaxcreate mstp mstiid=mstiid [mstivlanassoc=vids]Parametersmstiid Speci

Chapter 19: MSTP Commands226DELETE MSTPSyntaxdelete mstp mstiid=mstiid mstivlanassoc=vidsParametersmstiid Specifies the MSTI ID of the spanning tree i

AT-S63 Management Software Command Line Interface User’s Guide227DESTROY MSTP MSTIIDSyntaxdestroy mstp mstiid=mstiidParametermstiid Specifies the MSTI

Chapter 19: MSTP Commands228DISABLE MSTPSyntaxdisable mstpParametersNone.DescriptionThis command disables the Multiple Spanning Tree Protocol on the s

AT-S63 Management Software Command Line Interface User’s Guide229ENABLE MSTPSyntaxenable mstpParametersNone.DescriptionThis command enables Multiple S

23Chapter 2Basic Command Line CommandsThis chapter contains the following commands:❑ “CLEAR SCREEN” on page 24❑ “EXIT” on page 25❑ “HELP” on page 26❑

Chapter 19: MSTP Commands230PURGE MSTPSyntaxpurge mstpParametersNone.This command returns all MSTP bridge and port parameters settings to their defaul

AT-S63 Management Software Command Line Interface User’s Guide231SET MSTPSyntaxset mstp [default] [forceversion=stpcompatible|forcestpcompatible|norma

Chapter 19: MSTP Commands232normalmspt The bridge uses MSTP. The bridge sends out MSTP BPDU packets from all ports except for those ports connected to

AT-S63 Management Software Command Line Interface User’s Guide233revisionlevel Specifies the version number of an MSTP region. The range is 0 (zero) t

Chapter 19: MSTP Commands234SET MSTP CISTSyntaxset mstp cist priority=priorityParameterpriority Specifies the CIST priority number for the switch. The

AT-S63 Management Software Command Line Interface User’s Guide235ExampleThe following command sets the CIST priority value to 45,056, which is increme

Chapter 19: MSTP Commands236SET MSTP MSTISyntaxset mstp msti mstiid=mstiid priority=priorityParametersmstiid Specifies a MSTI ID. You can specify only

AT-S63 Management Software Command Line Interface User’s Guide237The PRIORITY parameter specifies the new MSTI priority value. The range is 0 (zero) t

Chapter 19: MSTP Commands238SET MSTP MSTIVLANASSOCSyntaxset mstp mstivlanassoc mstiid=mstiid vlanlist=vidsParametersmstiid Specifies the ID of the spa

AT-S63 Management Software Command Line Interface User’s Guide239SET MSTP PORTSyntaxset mstp port=port|all [intportcost=auto|portcost] [extportcost=po

Chapter 2: Basic Command Line Commands24CLEAR SCREENSyntaxclear screenParametersNone.DescriptionThis command clears the screen.ExampleThe following co

Chapter 19: MSTP Commands240edgeport Defines whether the port is functioning as an edge port. An edge port is connected to a device operating at half-

AT-S63 Management Software Command Line Interface User’s Guide241migrationcheck This parameter resets a MSTP port, allowing it to send MSTP BPDUs. Whe

Chapter 19: MSTP Commands242SHOW MSTPSyntaxshow mstp [portconfig=ports] [portstate=ports] [msti] [cist] [mstivlanassoc]Parametersportconfig Specifies

AT-S63 Management Software Command Line Interface User’s Guide243❑ Configuration name❑ Reversion level❑ Bridge identifierThe PORTCONFIG parameter disp

Chapter 19: MSTP Commands244

245Chapter 20SNMPv3 CommandsThis chapter contains the following commands:❑ “ADD SNMPV3 USER” on page 247❑ “CLEAR SNMPV3 ACCESS” on page 249❑ “CLEAR SN

Chapter 20: SNMPv3 Commands246❑ “DESTROY SNMPv3 TARGETADDR” on page 276❑ “DESTROY SNMPv3 TARGETPARMS” on page 277❑ “DESTROY SNMPV3 VIEW” on page 278❑

AT-S63 Management Software Command Line Interface User’s Guide247ADD SNMPV3 USERSyntaxadd snmpv3 user=user [authentication=md5|sha] authpassword=passw

Chapter 20: SNMPv3 Commands248nonvolatile Allows you to save the table entry to the configuration file on the switch.DescriptionThis command creates a

AT-S63 Management Software Command Line Interface User’s Guide249CLEAR SNMPV3 ACCESSSyntaxclear snmpv3 access=access [securitymodel=v1|v2c|v3] [securi

AT-S63 Management Software Command Line Interface User’s Guide25EXITSyntaxexitParametersNone.DescriptionThis command displays the AT-S63 Main Menu. It

Chapter 20: SNMPv3 Commands250DescriptionThis command clears the specified fields in an SNMPv3 Access Table entry. ExamplesThe following command clear

AT-S63 Management Software Command Line Interface User’s Guide251CLEAR SNMPV3 COMMUNITYSyntaxclear snmpv3 community index=index transporttag Parameter

Chapter 20: SNMPv3 Commands252CLEAR SNMPV3 NOTIFYSyntaxclear snmpv3 notify=notify tag Parametersnotify Specifies the name of an SNMPv3 Notify Table en

AT-S63 Management Software Command Line Interface User’s Guide253CLEAR SNMPV3 TARGETADDRSyntaxclear snmpv3 targetaddr=targetaddr taglist Parameterstar

Chapter 20: SNMPv3 Commands254CLEAR SNMPV3 VIEWSyntaxclear snmpv3 view=view [subtree=OID|text] maskParametersview Specifies the name of the SNMPv3 vie

AT-S63 Management Software Command Line Interface User’s Guide255CREATE SNMPV3 ACCESSSyntaxcreate snmpv3 access=access [securitymodel=v1|v2c|v3] [secu

Chapter 20: SNMPv3 Commands256to this parameter, then the writeview parameter defaults to none.notifyview Specifies a Notify View Name that allows the

AT-S63 Management Software Command Line Interface User’s Guide257create snmpv3 access=hwengineering securitymodel=v3 securitylevel=authentication read

Chapter 20: SNMPv3 Commands258CREATE SNMPV3 COMMUNITYSyntaxcreate snmpv3 community index=index communityname=communityname securityname=securityname t

AT-S63 Management Software Command Line Interface User’s Guide259create snmpv3 community index=95 communityname=12sacramento49 securityname=regina tra

Chapter 2: Basic Command Line Commands26HELPSyntaxhelpParametersNone.DescriptionThis command displays a list of the CLI keywords with a brief descript

Chapter 20: SNMPv3 Commands260CREATE SNMPV3 GROUPSyntaxcreate snmpv3 group username=username [securitymodel=v1|v2c|v3] groupname=groupname [storagetyp

AT-S63 Management Software Command Line Interface User’s Guide261ExamplesThe following command creates the SNMPv3 SecurityToGroup Table entry for a us

Chapter 20: SNMPv3 Commands262CREATE SNMPV3 NOTIFYSyntaxcreate snmpv3 notify=notify tag=tag [type=trap|inform] [storagetype=volatile|nonvolatile]Param

AT-S63 Management Software Command Line Interface User’s Guide263ExamplesThe following command creates the SNMPv3 Notify Table entry called “testengtr

Chapter 20: SNMPv3 Commands264CREATE SNMPV3 TARGETADDRSyntaxcreate snmpv3 targetaddr=targetaddr params=params ipaddress=ipaddress udpport=udpport time

AT-S63 Management Software Command Line Interface User’s Guide265ExamplesIn the following command, the name of the Target Address Table entry is “snmp

Chapter 20: SNMPv3 Commands266CREATE SNMPV3 TARGETPARAMSSyntaxcreate snmpv3 targetparams=targetparams username=username [securitymodel=v1|v2c|v3] [mes

AT-S63 Management Software Command Line Interface User’s Guide267noauthentication This option provides no authentication protocol and no privacy proto

Chapter 20: SNMPv3 Commands268CREATE SNMPV3 VIEWSyntaxcreate snmpv3 view=view [subtree=OID|text] mask=mask [type=included|excluded][storagetype=volati

AT-S63 Management Software Command Line Interface User’s Guide269ExamplesThe following command creates an SNMPv3 View Table entry called “internet1” w

AT-S63 Management Software Command Line Interface User’s Guide27LOGOFF, LOGOUT and QUITSyntaxlogofflogoutquitParametersNone.DescriptionThese three com

Chapter 20: SNMPv3 Commands270DELETE SNMPV3 USERSyntaxdelete snmpv3 user=userParametersuser Specifies the name of an SNMPv3 user to delete from the sw

AT-S63 Management Software Command Line Interface User’s Guide271DESTROY SNMPv3 ACCESSSyntaxdestroy snmpv3 access=access [securitymodel=v1|v2c|v3] [se

Chapter 20: SNMPv3 Commands272ExamplesThe following command deletes the SNMPv3 Access Table entry called “swengineering” with a security model of the

AT-S63 Management Software Command Line Interface User’s Guide273DESTROY SNMPv3 COMMUNITYSyntaxdestroy snmpv3 community index=indexParameterindex Spec

Chapter 20: SNMPv3 Commands274DESTROY SNMPv3 GROUPSyntaxdestroy snmpv3 group username=username [securitymodel=v1|v2c|v3]Parameterusername Specifies a

AT-S63 Management Software Command Line Interface User’s Guide275DESTROY SNMPv3 NOTIFYSyntaxdestroy snmpv3 notify=notify Parameternotify Specifies an

Chapter 20: SNMPv3 Commands276DESTROY SNMPv3 TARGETADDRSyntaxdestroy snmpv3 targetaddr=target Parametertargetaddr Specifies an SNMPv3 Target Address t

AT-S63 Management Software Command Line Interface User’s Guide277DESTROY SNMPv3 TARGETPARMSSyntaxdestroy snmpv3 targetparams=targetparamsParametertarg

Chapter 20: SNMPv3 Commands278DESTROY SNMPV3 VIEWSyntaxdestroy snmpv3 view=view [subtree=OID|text]Parametersview Specifies the name of the view, up to

AT-S63 Management Software Command Line Interface User’s Guide279SET SNMPV3 ACCESSSyntaxset snmpv3 access=access [securitymodel=v1|v2c|v3] [securityle

Chapter 2: Basic Command Line Commands28MENUSyntaxmenuParametersNone.DescriptionThis command displays the AT-S63 Main Menu. For instructions on how to

Chapter 20: SNMPv3 Commands280volatile Does not allow you to save the table entry to the configuration file on the switch. This is the default.nonvola

AT-S63 Management Software Command Line Interface User’s Guide281SET SNMPV3 COMMUNITYSyntaxset snmpv3 community index=index communityname=communitynam

Chapter 20: SNMPv3 Commands282The following command modifies the community table entry with an index of 52. The community has a password of “oldmiss71

AT-S63 Management Software Command Line Interface User’s Guide283SET SNMPV3 GROUPSyntaxset snmpv3 group username=username [securitymodel=v1|v2c|v3] gr

Chapter 20: SNMPv3 Commands284ExamplesThe following command modifies the SecurityToGroup Table entry with a user name of “nancy28.” The security model

AT-S63 Management Software Command Line Interface User’s Guide285SET SNMPV3 NOTIFYSyntaxset snmpv3 notify=notify tag=tag [type=trap|inform] [storagety

Chapter 20: SNMPv3 Commands286The following command modifies an SNMPv3 Notify Table entry called “systemtestinform5.” The notify tag is “systemtestinf

AT-S63 Management Software Command Line Interface User’s Guide287SET SNMPV3 TARGETADDRSyntaxset snmpv3 targetaddr=targetaddr params=params ipaddress=i

Chapter 20: SNMPv3 Commands288DescriptionThis command modifies an SNMPv3 Target Address Table entry.ExamplesThe following command modifies the Target

AT-S63 Management Software Command Line Interface User’s Guide289SET SNMPV3 TARGETPARAMSSyntaxset snmpv3 targetparams=targetparams username=username [

AT-S63 Management Software Command Line Interface User’s Guide29SAVE CONFIGURATIONSyntaxsave configurationParametersNone.DescriptionThis command saves

Chapter 20: SNMPv3 Commands290noauthentication This option provides no authentication protocol and no privacy protocol.authentication This option prov

AT-S63 Management Software Command Line Interface User’s Guide291SET SNMPV3 USERSyntaxset snmpv3 user=user [authentication=md5|sha] authpassword=passw

Chapter 20: SNMPv3 Commands292ExamplesThe following command modifies a User Table entry called “atiuser104”. The authentication protocol is set to the

AT-S63 Management Software Command Line Interface User’s Guide293SET SNMPV3 VIEWSyntaxset snmpv3 view=view [subtree=OID|text] mask=mask[type=included|

Chapter 20: SNMPv3 Commands294ExamplesThe following command modifies the view called “internet1.” The subtree is set to the Internet MIBs and the view

AT-S63 Management Software Command Line Interface User’s Guide295SHOW SNMPV3 ACCESSSyntaxshow snmpv3 access=accessParameteraccess Specifies an SNMPv3

Chapter 20: SNMPv3 Commands296SHOW SNMPV3 COMMUNITYSyntaxshow snmpv3 community index=index Parameterindex Specifies the name of this SNMPv3 Community

AT-S63 Management Software Command Line Interface User’s Guide297SHOW SNMPv3 GROUPSyntaxshow snmpv3 group username=username [securitymodel=v1|v2c|v3]P

Chapter 20: SNMPv3 Commands298SHOW SNMPV3 NOTIFYSyntaxshow snmpv3 notify=notifyParameternotify Specifies an SNMPv3 Notify Table entry.DescriptionThis

AT-S63 Management Software Command Line Interface User’s Guide299SHOW SNMPV3 TARGETADDRSyntaxshow snmpv3 targetaddr=targetaddrParametertargetaddr Spec

3ContentsTables ...

Chapter 2: Basic Command Line Commands30SET PROMPTSyntaxset prompt="prompt"Parameterprompt Specifies the command line prompt. The prompt can

Chapter 20: SNMPv3 Commands300SHOW SNMPV3 TARGETPARAMSSyntaxshow snmpv3 targetparams=targetparamsParametertargetparams Specifies an SNMPv3 Target Para

AT-S63 Management Software Command Line Interface User’s Guide301SHOW SNMPV3 USERSyntaxshow snmpv3 user=userParametersuser Specifies the name of an SN

Chapter 20: SNMPv3 Commands302SHOW SNMPV3 VIEWSyntaxshow snmpv3 view=view [subtree=OID|text]Parameterview Specifies an SNMPv3 View Table entry.subtree

303Chapter 21VLANs and Multiple VLAN Mode CommandsThis chapter contains the following commands:❑ “ADD VLAN” on page 304❑ “CREATE VLAN” on page 307❑ “D

Chapter 21: VLANs and Multiple VLAN Mode Commands304ADD VLANSyntax 1add vlan=name [vid=vid] port=ports|all frame=untagged|taggedSyntax 2add vlan=name

AT-S63 Management Software Command Line Interface User’s Guide305NoteWhen a transceiver is inserted into an uplink slot and a link is established, tha

Chapter 21: VLANs and Multiple VLAN Mode Commands306Adding both tagged and untagged ports to a VLAN using Syntax 1 takes two commands, one command for

AT-S63 Management Software Command Line Interface User’s Guide307CREATE VLANSyntax 1create vlan=name vid=vid port=ports|all frame=untagged|taggedSynta

Chapter 21: VLANs and Multiple VLAN Mode Commands308port Specifies the ports on the switch that are either tagged or untagged members of the new VLAN.

AT-S63 Management Software Command Line Interface User’s Guide309Tagged ports of the new VLAN remain as tagged and untagged members of their current V

AT-S63 Management Software Command Line Interface User’s Guide31SET SWITCH CONSOLEMODESyntaxset switch consolemode=menu|cliParameterconsolemode Specif

Chapter 21: VLANs and Multiple VLAN Mode Commands310The advantage of Syntax 2 over Syntax 1 is that you can create VLANs containing both types of port

AT-S63 Management Software Command Line Interface User’s Guide311DELETE VLANSyntax 1delete vlan=name [vid=vid] port=ports frame=untagged|taggedSyntax

Chapter 21: VLANs and Multiple VLAN Mode Commands312NoteYou cannot change a VLAN’s name or VID. When you remove an untagged port from a VLAN, the foll

AT-S63 Management Software Command Line Interface User’s Guide313delete vlan=Service port=6-8 frame=untaggedUsing Syntax 2, you can do the whole thing

Chapter 21: VLANs and Multiple VLAN Mode Commands314DESTROY VLANSyntaxdestroy vlan vlan=name|all [vid=vid]Parametersvlan Specifies the name of the VLA

AT-S63 Management Software Command Line Interface User’s Guide315SET SWITCH INFILTERINGSyntaxset switch infiltering=yes|no|on|off|true|falseParameters

Chapter 21: VLANs and Multiple VLAN Mode Commands316SET SWITCH MANAGEMENTVLANSyntaxset switch managementvlan=name|VIDParametermanagementvlan Specifies

AT-S63 Management Software Command Line Interface User’s Guide317SET SWITCH VLANMODESyntaxset switch vlanmode=userconfig|dotqmultiple| multiple [uplin

Chapter 21: VLANs and Multiple VLAN Mode Commands318The following command sets the switch so that you can create your own port-based and tagged VLANs:

AT-S63 Management Software Command Line Interface User’s Guide319SET VLANSyntaxset vlan=name [vid=vid] type=portbasedParametervlan Specifies the name

Chapter 2: Basic Command Line Commands32SHOW USERSyntaxshow userParameterNone.DescriptionDisplays the user account you used to log on to manage the sw

Chapter 21: VLANs and Multiple VLAN Mode Commands320SHOW VLANSyntaxshow vlan[=name|vid]Parametervlan Specifies the name or VID of the VLAN.Description

321Chapter 22GARP VLAN Registration Protocol CommandsThis chapter contains the following commands:❑ “DISABLE GARP” on page 322❑ “ENABLE GARP” on page

Chapter 22: GARP VLAN Registration Protocol Commands322DISABLE GARPSyntaxdisable garp=gvrp [gip]Parametersgarp Specifies the GARP application you want

AT-S63 Management Software Command Line Interface User’s Guide323ENABLE GARPSyntaxenable garp=gvrp [gip]Parametersgarp Specifies the GARP application

Chapter 22: GARP VLAN Registration Protocol Commands324PURGE GARPSyntaxpurge garp=gvrpParametergarp Specifies the GARP application you want to reset.

AT-S63 Management Software Command Line Interface User’s Guide325SET GARP PORTSyntaxset garp=gvrp port=port mode=normal|noneParametersgarp Specifies t

Chapter 22: GARP VLAN Registration Protocol Commands326SET GARP TIMERSyntaxset garp=gvrp timer [default] [jointime=value] [leavetime=value] [leaveallt

AT-S63 Management Software Command Line Interface User’s Guide327ExamplesThe following command sets the Join Period timer to 0.1 second, Leave Period

Chapter 22: GARP VLAN Registration Protocol Commands328SHOW GARPSyntaxshow garp=gvrpParametergarp Specifies the GARP application you want to display.

AT-S63 Management Software Command Line Interface User’s Guide329SHOW GARP COUNTERSyntaxshow garp=gvrp counterParametergarp Specifies the GARP applica

33Chapter 3Basic Switch CommandsThis chapter contains the following commands:❑ “DISABLE DHCPBOOTP” on page 35❑ “DISABLE IP REMOTEASSIGN” on page 36❑ “

Chapter 22: GARP VLAN Registration Protocol Commands330❑ Receive GARP Messages: JoinIn❑ Transmit GARP Messages: JoinIn❑ Receive GARP Messages: LeaveEm

AT-S63 Management Software Command Line Interface User’s Guide331SHOW GARP DATABASESyntaxshow garp=gvrp databaseParametersgarp Specifies the GARP appl

Chapter 22: GARP VLAN Registration Protocol Commands332SHOW GARP GIPSyntaxshow garp=gvrp gipParametergarp Specifies the GARP application you want to d

AT-S63 Management Software Command Line Interface User’s Guide333SHOW GARP MACHINESyntaxshow garp=gvrp machineParametergarp Specifies the GARP applica

Chapter 22: GARP VLAN Registration Protocol Commands334

335Chapter 23Protected Ports VLAN CommandsThis chapter contains the following commands:❑ “ADD VLAN GROUP” on page 336❑ “CREATE VLAN PORTPROTECTED” on

Chapter 23: Protected Ports VLAN Commands336ADD VLAN GROUPSyntax 1add vlan=name|vid ports=ports frame=tagged|untagged group=uplink|1..256Syntax 2add v

AT-S63 Management Software Command Line Interface User’s Guide337Note the following before using this command:❑ You must first create the protected po

Chapter 23: Protected Ports VLAN Commands338The following command does the same thing using Syntax 2:add vlan=InternetGroups untaggedports=5,6 group=4

AT-S63 Management Software Command Line Interface User’s Guide339CREATE VLAN PORTPROTECTEDSyntaxcreate vlan=name vid=vid portprotectedParametersvlan S

Chapter 3: Basic Switch Commands34❑ “SET SYSTEM” on page 55❑ “SET USER PASSWORD” on page 56❑ “SHOW ASYN” on page 57❑ “SHOW CONFIG” on page 58❑ “SHOW D

Chapter 23: Protected Ports VLAN Commands340DELETE VLANSyntax 1delete vlan=name|vid ports=ports frame=tagged|untaggedSyntax 2delete vlan=name|vid [tag

AT-S63 Management Software Command Line Interface User’s Guide341ExamplesThe following command uses Syntax 1 to delete untagged port 12 from the Inter

Chapter 23: Protected Ports VLAN Commands342DESTROY VLANSyntaxdestroy vlan=name|vid|allParametersvlan Specifies the name or VID of the VLAN to be dest

AT-S63 Management Software Command Line Interface User’s Guide343SET VLANSyntaxset vlan=name|vid port=ports frame=tagged|untaggedParametersvlan Specif

Chapter 23: Protected Ports VLAN Commands344SHOW VLANSyntaxshow vlan[=name|vid]Parametervlan Specifies the name or VID of the VLAN you want to view. O

345Chapter 24Statistics CommandsThis chapter contains the following commands:❑ “RESET SWITCH PORT COUNTER” on page 346❑ “SHOW SWITCH COUNTER” on page

Chapter 24: Statistics Commands346RESET SWITCH PORT COUNTERSyntaxreset switch port=port counterParameterport Specifies the port whose statistics count

AT-S63 Management Software Command Line Interface User’s Guide347SHOW SWITCH COUNTERSyntaxshow switch counterParametersNone.DescriptionThis command di

Chapter 24: Statistics Commands348SHOW SWITCH PORT COUNTERSyntaxshow switch port=port counterParameterport Specifies the port whose statistics you wan

349Chapter 25Port Security CommandsThis chapter contains the following command:❑ “SET SWITCH PORT INTRUSION” on page 350❑ “SET SWITCH PORT SECURITYMOD

AT-S63 Management Software Command Line Interface User’s Guide35DISABLE DHCPBOOTPSyntaxdisable dhcpbootpParametersNone.DescriptionThis command deactiv

Chapter 25: Port Security Commands350SET SWITCH PORT INTRUSIONSyntaxset switch port=port intrusion=discard|trap|disableParametersport Specifies the po

AT-S63 Management Software Command Line Interface User’s Guide351SET SWITCH PORT SECURITYMODESyntaxset switch port=port [securitymode=automatic|limite

Chapter 25: Port Security Commands352intrusionaction Specifies the action taken by the port in the event port security is violated. This parameter app

AT-S63 Management Software Command Line Interface User’s Guide353The management software displays a confirmation prompt whenever you perform this comm

Chapter 25: Port Security Commands354SHOW SWITCH PORT INTRUSIONSyntaxshow switch port=port intrusionParameterport Specifies the port where you want to

AT-S63 Management Software Command Line Interface User’s Guide355SHOW SWITCH PORT SECURITYMODESyntaxshow switch port=port securitymodeParametersport S

Chapter 25: Port Security Commands356

357Chapter 26Management ACL CommandsThis chapter contains the following commands:❑ “ADD MGMTACL” on page 358❑ “DELETE MGMTACL” on page 361❑ “DISABLE M

Chapter 26: Management ACL Commands358ADD MGMTACLSyntaxadd mgmtacl ipddress=ipaddress mask=string protocol=tcp|udp|all interface=telnet|web|allParamet

AT-S63 Management Software Command Line Interface User’s Guide359DescriptionThis command adds an access control entry to the Management ACL. There can

Chapter 3: Basic Switch Commands36DISABLE IP REMOTEASSIGNSyntaxdisable ip remoteassignParametersNone.DescriptionThis command deactivates the DHCP and

Chapter 26: Management ACL Commands360The following command allows all management stations in the Class A subnet 169.24.144.128 to manage the switch u

AT-S63 Management Software Command Line Interface User’s Guide361DELETE MGMTACLSyntaxdelete mgmtacl ipaddress=ipaddress mask=string protocol=tcp|udp|a

Chapter 26: Management ACL Commands362DISABLE MGMTACLSyntaxdisable mgmtaclParametersNoneDescriptionThis command disables the management ACL and perfor

AT-S63 Management Software Command Line Interface User’s Guide363ENABLE MGMTACLSyntaxenable mgmtaclParametersNoneDescriptionThis command enables the m

Chapter 26: Management ACL Commands364SET MGMTACL STATESyntaxset mgmtacl state=disable|enableParametersstate Sets the state of the Management ACL. The

AT-S63 Management Software Command Line Interface User’s Guide365SHOW MGMTACLSyntaxshow mgmtacl state|entriesParametersstate Displays the status of th

Chapter 26: Management ACL Commands366

367Chapter 27Web Server CommandsThis chapter contains the following commands:❑ “DISABLE HTTP SERVER” on page 368❑ “ENABLE HTTP SERVER” on page 369❑ “P

Chapter 27: Web Server Commands368DISABLE HTTP SERVERSyntaxdisable http serverParametersNone.DescriptionThis command disables the web server on the sw

AT-S63 Management Software Command Line Interface User’s Guide369ENABLE HTTP SERVERSyntaxenable http serverParametersNone.DescriptionThis command acti

AT-S63 Management Software Command Line Interface User’s Guide37DISABLE TELNETSyntaxdisable telnetParametersNone.DescriptionThis command disables the

Chapter 27: Web Server Commands370PURGE HTTP SERVERSyntaxpurge http serverParametersNone.DescriptionThis command resets the HTTP server to its default

AT-S63 Management Software Command Line Interface User’s Guide371SET HTTP SERVERSyntaxset http server [security=enabled|disabled] [sslkeyid=key-id] [p

Chapter 27: Web Server Commands372set http server security=disabledThe following command configures the web server for the secure HTTPS mode. It speci

AT-S63 Management Software Command Line Interface User’s Guide373add pki certificate="Switch 12 certificate" location=Sw12cert.cer4. This co

Chapter 27: Web Server Commands374The following is an example of the command sequence for configuring the web server for CA certificates. It explains

AT-S63 Management Software Command Line Interface User’s Guide3759. This command enables the web server:enable http server

Chapter 27: Web Server Commands376SHOW HTTP SERVERSyntaxshow http serverParametersNone.DescriptionThis command displays the following information abou

377Chapter 28Encryption Key CommandsThis chapter contains the following commands:❑ “CREATE ENCO KEY” on page 378❑ “DESTROY ENCO KEY” on page 382❑ “SET

Chapter 28: Encryption Key Commands378CREATE ENCO KEYSyntax 1create enco key=key-id type=rsa length=value [description="description"]Syntax

AT-S63 Management Software Command Line Interface User’s Guide379hex Specifies a hexadecimal format used to transfer a key between devices other than

Chapter 3: Basic Switch Commands38ENABLE DHCPBOOTPSyntaxenable dhcpbootpParametersNone.DescriptionThis command activates the DHCP and BOOTP client sof

Chapter 28: Encryption Key Commands380server key is 768 bits and the recommended length for the host key is 1024 bits.The DESCRIPTION parameter is opt

AT-S63 Management Software Command Line Interface User’s Guide381If you are exporting a public key from the key database to the file system, the KEY p

Chapter 28: Encryption Key Commands382DESTROY ENCO KEYSyntaxdestroy enco key=key-idParameterkey Specifies the ID number of the key pair to be deleted

AT-S63 Management Software Command Line Interface User’s Guide383SET ENCO KEYSyntaxset enco key=key-id description="description"Parameterske

Chapter 28: Encryption Key Commands384SHOW ENCOSyntaxshow enco key=key-idParameterskey Specifies the ID of a specific key whose information you want t

385Chapter 29Public Key Infrastructure (PKI) Certificate CommandsThis chapter contains the following commands:❑ “ADD PKI CERTIFICATE” on page 386❑ “CR

Chapter 29: Public Key Infrastructure (PKI) Certificate Commands386ADD PKI CERTIFICATESyntaxadd pki certificate="name" location="filena

AT-S63 Management Software Command Line Interface User’s Guide387The CERTIFICATE parameter assigns the certificate a name. The name can be from 1 to 4

Chapter 29: Public Key Infrastructure (PKI) Certificate Commands388CREATE PKI CERTIFICATESyntaxcreate pki certificate=name keypair=key-id serialnumber

AT-S63 Management Software Command Line Interface User’s Guide389After you have created a new self-signed certificate, you need to load it into the ce

AT-S63 Management Software Command Line Interface User’s Guide39ENABLE IP REMOTEASSIGNSyntaxenable ip remoteassignParametersNone.DescriptionThis comma

Chapter 29: Public Key Infrastructure (PKI) Certificate Commands390with the ID 12 to create the certificate. The format is ASCII and the distinguished

AT-S63 Management Software Command Line Interface User’s Guide391CREATE PKI ENROLLMENTREQUESTSyntaxcreate pki enrollmentrequest="name" keypa

Chapter 29: Public Key Infrastructure (PKI) Certificate Commands392NoteFor a review of the steps to configuring the web server for a CA certificate, r

AT-S63 Management Software Command Line Interface User’s Guide393DELETE PKI CERTIFICATESyntaxdelete pki certificate="name"Parametercertifica

Chapter 29: Public Key Infrastructure (PKI) Certificate Commands394PURGE PKISyntaxpurge pkiParametersNone.DescriptionThis command deletes all certific

AT-S63 Management Software Command Line Interface User’s Guide395SET PKI CERTIFICATESyntaxset pki certificate="name" [trusted=yes|no|on|off|

Chapter 29: Public Key Infrastructure (PKI) Certificate Commands396The TYPE parameter specifies the certificate type. If CA is specified, the switch t

AT-S63 Management Software Command Line Interface User’s Guide397SET PKI CERTSTORELIMITSyntaxset pki certstorelimit=valueParametercertstorelimit Speci

Chapter 29: Public Key Infrastructure (PKI) Certificate Commands398SET SYSTEM DISTINGUISHEDNAMESyntaxset system distinguishedname="name"Para

AT-S63 Management Software Command Line Interface User’s Guide399SHOW PKISyntaxshow pkiParametersNone.DescriptionThis command displays the current set

Contents4RESET SWITCH ...

Chapter 3: Basic Switch Commands40ENABLE TELNETSyntaxenable telnetParametersNone.DescriptionThis command activates the Telnet server on the switch. Wi

Chapter 29: Public Key Infrastructure (PKI) Certificate Commands400SHOW PKI CERTIFICATESyntaxshow pki certificate[="name"]Parametercertifica

401Chapter 30Secure Sockets Layer (SSL) CommandsThis chapter contains the following command: ❑ “SET SSL” on page 402❑ “SHOW SSL” on page 403NoteRememb

Chapter 30: Secure Sockets Layer (SSL) Commands402SET SSLSyntaxset ssl [cachetimeout=value] [maxsessions=value]Parameterscachetimeout Specifies the ma

AT-S63 Management Software Command Line Interface User’s Guide403SHOW SSLSyntaxshow sslParametersNone.DescriptionThis command displays the current set

Chapter 30: Secure Sockets Layer (SSL) Commands404

405Chapter 31Secure Shell (SSH) CommandsThis chapter contains the following commands: ❑ “DISABLE SSH SERVER” on page 406❑ “ENABLE SSH SERVER” on page

Chapter 31: Secure Shell (SSH) Commands406DISABLE SSH SERVERSyntaxdisable ssh serverParametersNone.DescriptionThis command disables the Secure Shell s

AT-S63 Management Software Command Line Interface User’s Guide407ENABLE SSH SERVERSyntaxenable ssh server hostkey=key-id serverkey=key-id [expirytime=

Chapter 31: Secure Shell (SSH) Commands408NoteBefore you enable SSH, disable the Telnet management session. Otherwise, the security provided by SSH is

AT-S63 Management Software Command Line Interface User’s Guide409ExampleThe following is an example of the command sequence to configuring the SSH sof

AT-S63 Management Software Command Line Interface User’s Guide41PINGSyntaxping ipaddressParameteripaddress Specifies the IP address of an end node you

Chapter 31: Secure Shell (SSH) Commands410SET SSH SERVERSyntaxset ssh server hostkey=key-id serverkey=key-id [expirytime=hours] [logintimeout=seconds]

AT-S63 Management Software Command Line Interface User’s Guide411ExampleThe following command sets the Secure Shell server key expiry time to 1 hour:s

Chapter 31: Secure Shell (SSH) Commands412SHOW SSHSyntaxshow sshParametersNone.DescriptionThis command displays the current values for the following S

413Chapter 32TACACS+ and RADIUS CommandsThis chapter contains the following commands:❑ “ADD RADIUSSERVER” on page 414❑ “ADD TACACSSERVER” on page 416❑

Chapter 32: TACACS+ and RADIUS Commands414ADD RADIUSSERVERSyntaxadd radiusserver server|ipaddress=ipaddress order=value [secret=string] [port=value] [

AT-S63 Management Software Command Line Interface User’s Guide415add radiusserver ipaddress=149.245.22.22 order=2 secret=tiger74 port=1811

Chapter 32: TACACS+ and RADIUS Commands416ADD TACACSSERVERSyntaxadd tacacsserver server|ipaddress=ipaddress order=value [secret=string]Parametersserve

AT-S63 Management Software Command Line Interface User’s Guide417DELETE RADIUSSERVERSyntaxdelete radiusserver server|ipaddress=ipaddressParameterserve

Chapter 32: TACACS+ and RADIUS Commands418DELETE TACACSSERVERSyntaxdelete tacacsserver server|ipaddress=ipaddressParameterserver Specifies the IP addr

AT-S63 Management Software Command Line Interface User’s Guide419DISABLE AUTHENTICATIONSyntaxdisable authenticationParametersNone.DescriptionThis comm

Chapter 3: Basic Switch Commands42PURGE IPSyntaxpurge ip [ipaddress] [netmask] [route]Parametersipaddress Returns the switch’s IP address to the defau

Chapter 32: TACACS+ and RADIUS Commands420ENABLE AUTHENTICATIONSyntaxenable authenticationParametersNone.DescriptionThis command enables TACACS+ or RA

AT-S63 Management Software Command Line Interface User’s Guide421PURGE AUTHENTICATIONSyntaxpurge authenticationParametersNone.DescriptionThis command

Chapter 32: TACACS+ and RADIUS Commands422SET AUTHENTICATIONSyntaxset authentication method=tacacs|radius [secret=string] [timeout=value]Parametersmet

AT-S63 Management Software Command Line Interface User’s Guide423The following command selects RADIUS as the authentication protocol with a global enc

Chapter 32: TACACS+ and RADIUS Commands424SHOW AUTHENTICATIONSyntaxshow authentication [=tacacs|radius]ParametersNone.DescriptionThis command displays

425Chapter 33802.1x Port-based Network Access Control CommandsThis chapter contains the following commands: ❑ “DISABLE PORTACCESS|PORTAUTH” on page 42

Chapter 33: 802.1x Port-based Network Access Control Commands426DISABLE PORTACCESS|PORTAUTHSyntaxdisable portaccess|portauthNoteThe PORTACCESS and POR

AT-S63 Management Software Command Line Interface User’s Guide427DISABLE RADIUSACCOUNTINGSyntaxdisable radiusaccountingParametersNoneDescriptionThis c

Chapter 33: 802.1x Port-based Network Access Control Commands428ENABLE PORTACCESS|PORTAUTHSyntaxenable portaccess|portauthNoteThe PORTACCESS and PORTA

AT-S63 Management Software Command Line Interface User’s Guide429ENABLE RADIUSACCOUNTINGSyntaxenable radiusaccountingParametersNoneDescriptionThis com

AT-S63 Management Software Command Line Interface User’s Guide43RESET SWITCHSyntaxreset switchParametersNone.DescriptionThis command does all of the f

Chapter 33: 802.1x Port-based Network Access Control Commands430SET PORTACCESS|PORTAUTH PORT ROLE=AUTHENTICATORSyntaxset portaccess|portauth port=port

AT-S63 Management Software Command Line Interface User’s Guide431the network is uniquely identified by the switch by using the client's MAC addre

Chapter 33: 802.1x Port-based Network Access Control Commands432servtimeout authentication server timeout conditions. The default value is 10 seconds.

AT-S63 Management Software Command Line Interface User’s Guide433ExamplesThe following command sets ports 4 to 6 to the authenticator role:set portacc

Chapter 33: 802.1x Port-based Network Access Control Commands434SET PORTACCESS|PORTAUTH PORT ROLE=SUPPLICANTSyntaxset portaccess|portauth port=port ty

AT-S63 Management Software Command Line Interface User’s Guide435username Specifies the username for the switch port. The name parameters are equivale

Chapter 33: 802.1x Port-based Network Access Control Commands436SET RADIUSACCOUNTINGSyntaxset radiusaccounting [status=enabled|disabled] [serverport=v

AT-S63 Management Software Command Line Interface User’s Guide437DescriptionRADIUS accounting is supported on those switch ports operating in the Auth

Chapter 33: 802.1x Port-based Network Access Control Commands438SHOW PORTACCESS|PORTAUTHSyntaxshow portaccess|portauth config|statusNoteThe PORTACCESS

AT-S63 Management Software Command Line Interface User’s Guide439SHOW PORTACCESS|PORTAUTH PORTSyntaxshow portaccess|portauth port=port authenticator|s

Chapter 3: Basic Switch Commands44RESET SYSTEMSyntaxreset system [name] [contact] [location]Parametersname Deletes the switch’s name.contact Deletes t

Chapter 33: 802.1x Port-based Network Access Control Commands440SHOW RADIUSACCOUNTINGSyntaxshow radiusaccountingParametersNone.DescriptionUse this com

441Chapter 34Denial of Service (DoS) Defense CommandsThis chapter contains the following command:❑ “SET DOS” on page 442❑ “SET DOS IPOPTION” on page 4

Chapter 34: Denial of Service (DoS) Defense Commands442SET DOSSyntaxset dos ipaddress=ipaddress subnet=mask uplinkport=portParametersipaddress Specifi

AT-S63 Management Software Command Line Interface User’s Guide443SET DOS IPOPTIONSyntaxset dos ipoption port=port state=enable|disable [mirrorport=por

Chapter 34: Denial of Service (DoS) Defense Commands444ExampleThe following command activates the IP Options defense on ports 5, 7, and 10:set dos ipo

AT-S63 Management Software Command Line Interface User’s Guide445SET DOS LANDSyntaxset dos land port=port state=enable|disable [mirrorport=port]Parame

Chapter 34: Denial of Service (DoS) Defense Commands446SET DOS PINGOFDEATHSyntaxset dos pingofdeath port=port state=enable|disable [mirrorport=port]Pa

AT-S63 Management Software Command Line Interface User’s Guide447NoteThis defense mechanism requires some involvement by the switch’s CPU, though not

Chapter 34: Denial of Service (DoS) Defense Commands448SET DOS SMURFSyntaxset dos smurf port=port state=enable|disableParametersport Specifies the swi

AT-S63 Management Software Command Line Interface User’s Guide449SET DOS SYNFLOODSyntaxset dos synflood port=port state=enable|disableParametersport S

AT-S63 Management Software Command Line Interface User’s Guide45RESTART REBOOTSyntaxrestart rebootParametersNone.DescriptionThis command resets the sw

Chapter 34: Denial of Service (DoS) Defense Commands450ExampleThe following command activates the defense on ports 18 to 20:set dos synflood port=18-2

AT-S63 Management Software Command Line Interface User’s Guide451SET DOS TEARDROPSyntaxset dos teardrop port=port state=enable|disable [mirrorport=aut

Chapter 34: Denial of Service (DoS) Defense Commands452CautionThis defense is extremely CPU intensive and should be used with caution. Unrestricted us

AT-S63 Management Software Command Line Interface User’s Guide453SHOW DOSSyntax 1show dos [ipaddress] [subnet] [uplinkport]Syntax 2show dos defense po

Chapter 34: Denial of Service (DoS) Defense Commands454show dos ipaddress subnetThe following command displays the status of the SMURF defense on port

455IndexNumerics802.1Q multiple VLAN mode 317802.1x Port-based Network Access Control 436authenticator portconfiguring 430displaying 438disabling 426d

Index456BPDU 213, 232bridge forwarding delay 200, 212, 231bridge hello time 200, 212, 231bridge max age 200, 212, 231bridge priority 200broadcast filt

AT-S63 Management Software Command Line Interface User’s Guide457DISABLE HTTP SERVER command 368DISABLE IGMPSNOOPING command 184DISABLE INTERFACE LINK

Index458enabling 110, 112force version 212, 231forwarding delay 200, 212, 231GGARPconverting dynamic VLANs 319counters, displaying 329database, displa

AT-S63 Management Software Command Line Interface User’s Guide459MSTPactivating 223disabling 228displaying 242enabling 229returning to defaults 230set

Chapter 3: Basic Switch Commands46RESTART SWITCHSyntaxrestart switch config=none|filename.cfgParametersconfig Specifies the configuration file. The fi

Index460PURGE GARP command 324PURGE HTTP SERVER command 370PURGE IP command 42PURGE LOG command 166PURGE MSTP command 230PURGE PKI command 394PURGE RS

AT-S63 Management Software Command Line Interface User’s Guide461SET RADIUSACCOUNTING command 436SET RSTP command 212SET RSTP PORT command 216SET SNMP

Index462SHOW SYSTEM command 63SHOW TIME command 95SHOW USER command 32SHOW VLAN command 320, 344slave switch 100SMURF denial of service defense 448SNM

AT-S63 Management Software Command Line Interface User’s Guide463information, displaying 63parameters, displaying 62restarting 46statistics counters,

Index464

AT-S63 Management Software Command Line Interface User’s Guide47This command does not change the assignment of the active boot configuration file, the

Chapter 3: Basic Switch Commands48SET ASYNSyntaxset asyn speed=1200|2400|4800|9600|19200|38400|57600|115200 [prompt=”prompt”]Parametersspeed Sets the

AT-S63 Management Software Command Line Interface User’s Guide49SET IP INTERFACESyntaxset ip interface=eth0 ipaddress=ipaddress|DHCP mask|netmask=subn

AT-S63 Management Software Command Line Interface User’s Guide5DISABLE INTERFACE LINKTRAP ...

Chapter 3: Basic Switch Commands50ExamplesThe following command sets the switch’s IP address to 140.35.22.22 and the subnet mask to 255.255.255.0:set

AT-S63 Management Software Command Line Interface User’s Guide51SET IP ROUTESyntaxset ip route ipaddress=ipaddressParameteripaddress Specifies the IP

Chapter 3: Basic Switch Commands52SET PASSWORD MANAGERSyntaxset password managerParametersNone.DescriptionThis command sets the manager’s password. Lo

AT-S63 Management Software Command Line Interface User’s Guide53SET PASSWORD OPERATORSyntaxset password operatorParametersNone.DescriptionThis command

Chapter 3: Basic Switch Commands54SET SWITCH CONSOLETIMERSyntaxset switch consoletimer=valueParameterconsoletimer Specifies the console timer in minut

AT-S63 Management Software Command Line Interface User’s Guide55SET SYSTEMSyntaxset system [name="name"] [contact="contact"] [loca

Chapter 3: Basic Switch Commands56SET USER PASSWORDSyntaxset user manager|operator password=passwordParameterpassword Specifies the password.Descripti

AT-S63 Management Software Command Line Interface User’s Guide57SHOW ASYNSyntaxshow asyn ParametersNone.DescriptionThis command displays the settings

Chapter 3: Basic Switch Commands58SHOW CONFIGSyntaxshow config [dynamic] [info]Parametersdynamic Displays the settings for all the switch and port par

AT-S63 Management Software Command Line Interface User’s Guide59SHOW DHCPBOOTPSyntaxshow dhcpbootpParametersNone.DescriptionThis command displays the

Contents6Chapter 14Quality of Service (QoS) Commands ...

Chapter 3: Basic Switch Commands60SHOW IP INTERFACESyntaxshow ip interface=eth0Parameterinterface Specifies the switch’s interface number. This value

AT-S63 Management Software Command Line Interface User’s Guide61SHOW IP ROUTESyntaxshow ip routeParametersNone.DescriptionThis command displays the sw

Chapter 3: Basic Switch Commands62SHOW SWITCHSyntaxshow switchParametersNone.DescriptionThis command displays the following switch parameters:❑ Applic

AT-S63 Management Software Command Line Interface User’s Guide63SHOW SYSTEMSyntaxshow systemParametersNone.DescriptionThis command displays the follow

Chapter 3: Basic Switch Commands64❑ System 12 V power❑ System temperature❑ System fan speed❑ Main PSU❑ RPSFor instructions on how to set the name, con

65Chapter 4SNMPv2 and SNMPv2c CommandsThis chapter contains the following commands:❑ “ADD SNMP COMMUNITY” on page 66❑ “CREATE SNMP COMMUNITY” on page

Chapter 4: SNMPv2 and SNMPv2c Commands66ADD SNMP COMMUNITYSyntaxadd snmp community="community" [traphost=ipaddress] [manager=ipaddress]Param

AT-S63 Management Software Command Line Interface User’s Guide67add snmp community=private manager=149.212.11.22The following command adds the IP addr

Chapter 4: SNMPv2 and SNMPv2c Commands68CREATE SNMP COMMUNITYSyntaxcreate snmp community="community" [access=read|write] [open=yes|no] [trap

AT-S63 Management Software Command Line Interface User’s Guide69DescriptionThis command creates a new SNMP community string on the switch. The switch

AT-S63 Management Software Command Line Interface User’s Guide7Chapter 20SNMPv3 Commands ...

Chapter 4: SNMPv2 and SNMPv2c Commands70The following command creates the new community string “wind11” with read and write access level. To limit the

AT-S63 Management Software Command Line Interface User’s Guide71DELETE SNMP COMMUNITYSyntaxdelete snmp community="community" traphost=ipaddr

Chapter 4: SNMPv2 and SNMPv2c Commands72The following command deletes the IP address 149.212.44.45 of a trap receiver from the community string “publi

AT-S63 Management Software Command Line Interface User’s Guide73DESTROY SNMP COMMUNITYSyntaxdestroy snmp community="community"Parametercommu

Chapter 4: SNMPv2 and SNMPv2c Commands74DISABLE SNMPSyntaxdisable snmpParametersNone. DescriptionThis command disables SNMP on the switch. You cannot

AT-S63 Management Software Command Line Interface User’s Guide75DISABLE SNMP AUTHENTICATETRAPSyntaxdisable snmp authenticatetrap|authenticate_trapPara

Chapter 4: SNMPv2 and SNMPv2c Commands76DISABLE SNMP COMMUNITYSyntaxdisable snmp community="community"Parametercommunity Specifies an SNMP c

AT-S63 Management Software Command Line Interface User’s Guide77ENABLE SNMPSyntaxenable snmpParametersNone.DescriptionThis command activates SNMP on t

Chapter 4: SNMPv2 and SNMPv2c Commands78ENABLE SNMP AUTHENTICATETRAPSyntaxenable snmp authenticatetrap|authenticate_trapParametersNone.DescriptionThis

AT-S63 Management Software Command Line Interface User’s Guide79ENABLE SNMP COMMUNITYSyntaxenable snmp community="community"Parametercommuni

Contents8SET GARP PORT ...

Chapter 4: SNMPv2 and SNMPv2c Commands80SET SNMP COMMUNITYSyntaxset snmp community="community" [access=read|write] [open=yes|no]Parametersco

AT-S63 Management Software Command Line Interface User’s Guide81set snmp community=sw44 open=noThe following command changes the access level for the

Chapter 4: SNMPv2 and SNMPv2c Commands82SHOW SNMPSyntaxshow snmp [community="community"]Parametercommunity Specifies a community string on t

AT-S63 Management Software Command Line Interface User’s Guide83❑ Management station IP addresses - These are the IP addresses of management stations

Chapter 4: SNMPv2 and SNMPv2c Commands84

85Chapter 5Simple Network Time Protocol (SNTP) CommandsThis chapter contains the following commands:❑ “ADD SNTPSERVER PEER|IPADDRESS” on page 86❑ “DEL

Chapter 5: Simple Network Time Protocol (SNTP) Commands86ADD SNTPSERVER PEER|IPADDRESSSyntaxadd sntpserver peer|ipaddress=ipaddressParameterpeer Speci

AT-S63 Management Software Command Line Interface User’s Guide87DELETE SNTPSERVER PEER|IPADDRESSSyntaxdelete sntpserver peer|ipaddress=ipaddressParame

Chapter 5: Simple Network Time Protocol (SNTP) Commands88DISABLE SNTPSyntaxdisable sntpParametersNone.DescriptionThis command disables the SNTP client

AT-S63 Management Software Command Line Interface User’s Guide89ENABLE SNTPSyntaxenable sntpParametersNone.DescriptionThis command enables the SNTP cl

AT-S63 Management Software Command Line Interface User’s Guide9DELETE PKI CERTIFICATE ...

Chapter 5: Simple Network Time Protocol (SNTP) Commands90PURGE SNTPSyntaxpurge sntpParametersNone.DescriptionThis command clears the SNTP configuratio

AT-S63 Management Software Command Line Interface User’s Guide91SET DATESyntaxset date=dd-mm-yyyy Parameterdate Specifies the date for the switch in d

Chapter 5: Simple Network Time Protocol (SNTP) Commands92SET SNTPSyntaxset sntp [dst=enabled|disabled] [pollinterval=value] [utcoffset=value]Parameter

AT-S63 Management Software Command Line Interface User’s Guide93SET TIMESyntaxset time=hh:mm:ssParametertime Specifies the hour, minute, and second fo

Chapter 5: Simple Network Time Protocol (SNTP) Commands94SHOW SNTPSyntaxshow sntpParametersNone.DescriptionThis command displays the following informa

AT-S63 Management Software Command Line Interface User’s Guide95SHOW TIMESyntaxshow timeParametersNone.DescriptionThis command shows the system’s curr

Chapter 5: Simple Network Time Protocol (SNTP) Commands96

97Chapter 6Enhanced Stacking CommandsThis chapter contains the following commands:❑ “ACCESS SWITCH” on page 98❑ “SET SWITCH STACKMODE” on page 100❑ “S

Chapter 6: Enhanced Stacking Commands98ACCESS SWITCHSyntaxaccess switch number=number|macaddress=macaddressParametersnumber Specifies the number of th

AT-S63 Management Software Menus Interface User’s Guide99ExamplesThe following command starts a management session on switch number 12:access switch n