F-Engine S2200ME-B Carrier Ethernet Switch CLI Manual(V3.0)

F-ENGINE

S2200ME-B Carrier Ethernet Switch

Command Line Interface Manual V2.9

F-Engine S2200ME-B Carrier Ethernet Switch CLI Manual

Product Version V2.9

FiberHome Networks Co., Ltd. provides customers with comprehensive

technical support and service. Please contact with our local office,

customer care center or company headquarters by any means.

FiberHome Networks Co., Ltd.

Address : 3rd floor, Optical Communication Building

5 DongXin Rd , Hongshan District,

Wuhan, Hubei Province, P. R. China

Postal code : 430074

Tel : +86 27 87693659

Fax : +86 27 87693257

Website : http://www.fhn.com.cn

Email : [email protected]


Content

I

Content

Figure......................................................................................................... XIV

Table ............................................................................................................. XV

Preface ...................................................................................................... XVI

Safety Recommendation ...................................................................... XIX

Chapter 1 Introduction ................................................................................. 1

1.1 switch configuration foundation ............................................................................ 1

1.2 CLI interface .......................................................................................................... 1

Chapter 2 Hardware platform&Softwre environment .............................. 4

2.1 Hardware platform ................................................................................................. 4

2.2 Software environment ............................................................................................ 4

Chapter 3 Switch configuration command ................................................. 5

3.1 common configuration command .......................................................................... 5

3.1.1 cd 6

3.1.2 clear logging history .................................................................................... 7

3.1.3 clock set ...................................................................................................... 8

3.1.4 cls ................................................................................................................ 8

3.1.5 configure ..................................................................................................... 9

3.1.6 copy SRCFILE DESTFILE ......................................................................... 9

3.1.7 copy startup-config running-config ........................................................... 10

3.1.8 dir .............................................................................................................. 10

3.1.9 end ............................................................................................................. 11

3.1.10 erase startup-config ................................................................................. 12

3.1.11 exit .......................................................................................................... 12

3.1.12 help .......................................................................................................... 13

3.1.13 hostname WORD .................................................................................... 14

3.1.14 line console ............................................................................................. 15

3.1.15 line vty .................................................................................................... 15


Content

II

3.1.16 list............................................................................................................ 16

3.1.17 logging history [<0-7>] ........................................................................... 17

3.1.18 logging on ............................................................................................... 18

3.1.19 logging syslog [<0-7>] ............................................................................ 18

3.1.20 logging terminal [<0-7>] ......................................................................... 19

3.1.21 ls .............................................................................................................. 20

3.1.22 no line vty <1-10> ................................................................................... 21

3.1.23 ping ......................................................................................................... 21

3.1.24 pwd .......................................................................................................... 22

3.1.25 quit .......................................................................................................... 23

3.1.26 reboot ...................................................................................................... 23

3.1.27 remove FILE ........................................................................................... 24

3.1.28 rename OLD NEW .................................................................................. 24

3.1.29 show clock .............................................................................................. 25

3.1.30 show cpu statistic .................................................................................... 25

3.1.31 show history ............................................................................................ 26

3.1.32 show lines ................................................................................................ 27

3.1.33 show logging ........................................................................................... 27

3.1.34 show logging history ............................................................................... 28

3.1.35 show logging history SUBSTRING ........................................................ 29

3.1.36 show logo ................................................................................................ 29

3.1.37 show management acl ............................................................................. 30

3.1.38 show memory statistic ............................................................................. 31

3.1.39 show running-config ............................................................................... 31

3.1.40 show startup-config ................................................................................. 35

3.1.41 show syslog ............................................................................................. 40

3.1.42 show version ........................................................................................... 40

3.1.43 syslog server ............................................................................................ 41

3.1.44 telnet ........................................................................................................ 41

3.1.45 terminal length ........................................................................................ 42

3.1.46 terminal monitor ...................................................................................... 42

3.1.47 timeout .................................................................................................... 43

3.1.48 traceroute ................................................................................................. 44

3.1.49 type FILE ................................................................................................ 44

3.1.50 upgrade (os|config) .................................................................................. 45


Content

III

3.1.51 who .......................................................................................................... 46

3.1.52 write file .................................................................................................. 46

3.1.53 zero FILE ................................................................................................ 47

3.2 IP configuration command ................................................................................... 47

3.2.1 gateway ..................................................................................................... 48

3.2.2 ip address .................................................................................................. 48

3.2.6 ip arp ......................................................................................................... 49

3.2.4 out-band ip address ................................................................................... 50

3.2.8 show system .............................................................................................. 50

3.3 FTP configuration command ............................................................................... 51

3.3.1 ftp get ........................................................................................................ 51

3.3.2 ftp put config ............................................................................................. 52

3.3.3 ftp put logging ........................................................................................... 52

3.4 SNMP configuration command ........................................................................... 53

3.4.1 snmp community NAME (ro|rw) [view VIEW-NAME] ........................... 53

3.4.2 snmp trap-server ........................................................................................ 54

3.4.3 snmp view VIEW-NAME OID-TREE (included | excluded） ................. 55

3.4.4 snmp group ................................................................................................ 55

3.4.5 snmp user .................................................................................................. 56

3.4.6 show memory snmp .................................................................................. 57

3.4.7 show snmp community ............................................................................. 57

3.4.8 show snmp trap-server .............................................................................. 58

3.4.9 show snmp group ...................................................................................... 58

3.4.10 show snmp user ....................................................................................... 59

3.4.11 show snmp view ...................................................................................... 60

3.5 system configuration command ........................................................................... 60

3.5.1 anti-attack .................................................................................................. 61

3.5.2 arp-request timer ....................................................................................... 62

3.5.3 config-file auto-save .................................................................................. 62

3.5.4 config-file auto-upload .............................................................................. 63

3.5.5 dot1q ingress-filter .................................................................................... 64

3.5.6 loop-check action ...................................................................................... 64

3.5.7 loop-check expire-time .............................................................................. 65

3.5.8 loop-check trap .......................................................................................... 66

3.5.9 mac aging-time .......................................................................................... 66


Content

IV

3.5.10 mac learn-mode ....................................................................................... 67

3.5.11 management acl ....................................................................................... 67

3.5.12 management vlan .................................................................................... 68

3.5.13 no ip arp .................................................................................................. 68

3.5.14 show auto-config ..................................................................................... 69

3.5.15 show dynamic-mac .................................................................................. 70

3.5.16 show ip arp .............................................................................................. 70

3.5.17 show loop-check...................................................................................... 71

3.5.18 show management acl ............................................................................. 71

3.5.19 show system ............................................................................................ 72

3.5.20 username ................................................................................................. 73

3.5.21 zmodem get ............................................................................................. 73

3.5.22 zmodem put ............................................................................................. 74

3.5.23 bpdu tunnel mac (AA:BB:CC:DD:EE:FF) uplink-port <0-64> .............. 75

3.6 STP configuration command ............................................................................... 75

3.6.1 stp (enable|disable) .................................................................................... 77

3.6.2 stp alt-without-delay (enable|disable) ........................................................ 77

3.6.3 stp bpdu-protection (enable|disable) .......................................................... 78

3.6.4 stp config-name STRING .......................................................................... 79

3.6.5 stp forward-delay ...................................................................................... 79

3.6.6 stp hello-time............................................................................................. 80

3.6.7 stp max-age ............................................................................................... 80

3.6.8 stp max-hop ............................................................................................... 81

3.6.9 stp mode (stp|rstp|mstp) ............................................................................. 82

3.6.10 stp priority <0-61440> ............................................................................ 82

3.6.11 stp revision-lever <0-65535> .................................................................. 83

3.6.12 stp transmit-limit <1-255>> .................................................................... 84

3.6.13 stp vlan VLANLIST ................................................................................ 84

3.6.14 stp instance <1-15> ................................................................................. 85

3.6.15 stp instance <1-15> priority <0-61440> .................................................. 85

3.6.16 stp instance <1-15> vlan VLANLIST ..................................................... 86

3.6.17 stp compliance (dot1s|dot1d) ................................................................... 87

3.6.18 stp edge-port ............................................................................................ 87

3.6.19 stp fast-agree ........................................................................................... 88

3.6.20 stp loop-protection .................................................................................. 89


Content

V

3.6.21 stp loopback-check .................................................................................. 89

3.6.22 stp mcheck .............................................................................................. 90

3.6.23 stp pathcost .............................................................................................. 91

3.6.24 stp point-to-point ..................................................................................... 91

3.6.25 stp priority <0-240> ................................................................................ 92

3.6.26 stp root-protection ................................................................................... 93

3.6.27 stp instance <1-15> loop-protection ........................................................ 93

3.6.28 stp instance <1-15> priority <0-240> ...................................................... 94

3.6.29 stp instance <1-15> root-protection ........................................................ 95

3.6.30 show stp ................................................................................................... 95

3.6.31 show stp config ........................................................................................ 96

3.6.32 show stp information ................................................................................ 97

3.6.33 show stp interface .................................................................................... 97

3.6.34 show stp instance interface ...................................................................... 98

3.7 COS configuration command .............................................................................. 99

3.7.1 cos (enable|disable) ................................................................................... 99

3.7.2 cos priority <0-7> queue <0-3> ................................................................ 99

3.7.3 cos queue <0-3> weight <1-31> .............................................................. 100

3.7.4 cos queue mode (strict|weighted-round-robin|sp+wrr3|sp2+wrr2) .......... 101

3.7.5 show cos .................................................................................................. 101

3.8 VLAN configuration command ......................................................................... 102

3.8.1 admin-status (up|down) ........................................................................... 103

3.8.2 apply-as-pvid PORTLIST ....................................................................... 103

3.8.3 interface vlan ........................................................................................... 104

3.8.4 no vlan ..................................................................................................... 105

3.8.5 member PORTLIST ................................................................................ 105

3.8.6 no member PORTLIST ........................................................................... 106

3.8.7 vlan description STRING ........................................................................ 106

3.8.8 vlan type (dynamic|static) ....................................................................... 107

3.8.9 vlan priority <0-7> .................................................................................. 108

3.8.10 show vlan .............................................................................................. 108

3.9 private VLAN configuration command ............................................................. 109

3.9.1 pvlan <1-64> ........................................................................................... 109

3.9.2 no pvlan <1-64> ...................................................................................... 110

3.9.3 isolate-ports PORTLIST ......................................................................... 110


Content

VI

3.9.4 no isolate-ports ........................................................................................ 111

3.9.5 show pvlan .............................................................................................. 111

3.10 SGM configuration command ......................................................................... 112

3.10.1 sgm ........................................................................................................ 113

3.10.2 sgm (enable|disable) .............................................................................. 113

3.10.3 sgm discovery time (<1-300>|default) .................................................. 114

3.10.4 sgm discovery ttl (<1-255>|default) ...................................................... 114

3.10.5 sgm inband enable <1-4094> ................................................................ 115

3.10.6 sgm vlan (add|remove) VLAN-LIST .................................................... 115

3.10.7 [no] sgm member (AA.BB.CC.DD.EE.FF) ip....................................... 116

3.10.8 sgm (collect-map|release-map) .............................................................. 117

3.10.9 sgm addr-opt (enable|disable)................................................................ 117

3.10.10 sgm cluster ip-pool .............................................................................. 118

3.10.11 sgm cluster name WORD .................................................................... 119

3.10.12 sgm cluster password PASSWORD .................................................... 119

3.10.13 sgm ip-allocation (auto|manual) .......................................................... 120

3.10.14 sgm join-policy (auto|manual) ............................................................. 121

3.10.15 sgm map-collect time (<1-100>|default) ............................................. 121

3.10.16 sgm map-collect ttl (<1-100>|default) ................................................. 122

3.10.17 sgm member (AA.BB.CC.DD.EE.FF) ................................................ 123

3.10.18 sgm member (add|remove) (AA.BB.CC.DD.EE.FF) .......................... 123

3.10.19 sgm member handtime (<1-300>|default) ........................................... 124

3.10.20 sgm member holdtime (<1-300>|default) ............................................ 124

3.10.21 sgm role (independence|candidate|commander) .................................. 125

3.10.22 sgm trap (enable|disable) ..................................................................... 126

3.10.23 show sgm interface [<1-64>] .............................................................. 126

3.10.24 show sgm local .................................................................................... 127

3.10.25 show sgm neighbor ............................................................................. 129

3.11 interface configuration command .................................................................... 129

3.11.1 address-learning .................................................................................... 131

3.11.2 description STRING .............................................................................. 131

3.11.3 dot1q accept .......................................................................................... 132

3.11.4 duplex (half|full) speed (10|100|1000) ................................................... 132

3.11.5 duplex auto ............................................................................................ 133

3.11.6 egress mirror <0-64> ............................................................................. 133


Content

VII

3.11.7 flow-ctrl (enable|disable) ....................................................................... 134

3.11.8 ingress mirror <0-64> ........................................................................... 135

3.11.9 interface (ethernet|trunk) ....................................................................... 135

3.11.10 join trunk ............................................................................................. 136

3.11.11 join vlan .............................................................................................. 136

3.11.12 link-trap (enable|disable) ..................................................................... 137

3.11.13 loop-check (enable|disable|re-check) ................................................... 137

3.11.14 loop-check vlan <1-4094> .................................................................. 138

3.11.15 member PORTLIST ............................................................................ 139

3.11.16 no member PORTLIST ....................................................................... 139

3.11.17 packet-limit ......................................................................................... 140

3.11.18 priority................................................................................................. 141

3.11.19 pvid ..................................................................................................... 141

3.11.20 quit trunk ............................................................................................. 142

3.11.21 quit vlan .............................................................................................. 142

3.11.22 rate-limit .............................................................................................. 143

3.11.23 security-mac (add|delete) (AA.BB.CC.DD.EE.FF) ............................. 143

3.11.24 security-mac (enable|disable) .............................................................. 144

3.11.25 shutdown ............................................................................................. 145

3.11.26 no shutdown ........................................................................................ 145

3.11.27 static-mac (add|delete) ......................................................................... 146

3.11.28 trunk-dis-policy ................................................................................... 146

3.11.29 user-limit number ................................................................................ 147

3.11.30 power (down|up) .................................................................................. 148

3.11.31 show interface ..................................................................................... 148

3.11.32 show interface distance ....................................................................... 150

3.11.33 show interface dynamic-mac ............................................................... 150

3.11.34 show interface loop-check ................................................................... 151

3.11.35 show interface security-mac ................................................................ 152

3.11.36 show interface static-mac .................................................................... 153

3.11.37 show interface statistics ....................................................................... 154

3.11.38 show interface user-limit ..................................................................... 155

3.11.39 show trunk ........................................................................................... 156

3.12 IGMP Snooping configuration command ........................................................ 156

3.12.1 igmp-snooping (enable|disable) ............................................................. 157


Content

VIII

3.12.2 igmp-snooping aging ............................................................................. 157

3.12.3 igmp-snooping drop-filtered.................................................................. 158

3.12.4 igmp-snooping fast-leave ...................................................................... 159

3.12.5 igmp-snooping proxy (enable|disable) .................................................. 159

3.12.6 igmp-snooping proxy igmpv3-support .................................................. 160

3.12.7 igmp-snooping proxy vlan .................................................................... 160

3.12.8 igmp-snooping query-send add ............................................................. 161

3.12.9 igmp-snooping query-send del .............................................................. 162

3.12.10 show igmp-snooping ........................................................................... 162

3.12.11 show igmp-snooping egressport-table ................................................. 163

3.13 ESR instance configuration command ............................................................ 164

3.13.1 esr (disable|enable) ................................................................................ 164

3.13.2 esr <0-5> (disable|enable) ..................................................................... 165

3.13.3 esr <0-5> ctrl-vlan ................................................................................. 166

3.13.4 esr <0-5> failed-time ............................................................................. 166

3.13.5 esr <0-5> hello-time .............................................................................. 167

3.13.6 esr <0-5> mode (master|transit) ............................................................ 167

3.13.7 esr <0-5> name...................................................................................... 168

3.13.8 esr <0-5> primary-port .......................................................................... 169

3.13.9 esr <0-5> primary-port trunk ................................................................. 169

3.13.10 esr <0-5> secondary-port .................................................................... 170

3.13.11 esr <0-5> secondary-port trunk ........................................................... 170

3.13.12 show esr .............................................................................................. 171

3.13.13 show esr instance................................................................................. 171

3.14 RADIUS configuration command ................................................................... 172

3.14.1 radius (enable| disable) .......................................................................... 173

3.14.2 radius <1-10> name............................................................................... 173

3.14.3 radius <1-10> response-time ................................................................. 174

3.14.4 radius <1-10> retransmit ....................................................................... 174

3.14.5 radius <1-10> secret .............................................................................. 175

3.14.6 radius <1-10> server-acc-port ............................................................... 175

3.14.7 radius <1-10> server-address ................................................................ 176

3.14.8 radius <1-10> server-auth-port .............................................................. 177

3.14.9 radius <1-10> status .............................................................................. 177

3.14.10 radius <1-10> type .............................................................................. 178


Content

IX

3.14.11 aaa login radius-server NAME ............................................................ 178

3.14.12 show radius server <1-10> .................................................................. 179

3.15 Double-tag protocol configuration command .................................................. 180

3.15.1 dtag (enable|disable) .............................................................................. 180

3.15.2 dtag protocol <0-65536> ...................................................................... 181

3.15.3 dtag dot1q (enable|disable) .................................................................... 181

3.15.4 dtag flexible (enable|disable) ................................................................. 182

3.15.5 dtag flexible inner <1-4094> outer <1-4094> ...................................... 183

3.15.6 show dtag ............................................................................................. 183

3.15.7 show interface dtag ............................................................................... 184

3.15.8 show interface dtag flexible ................................................................. 184

3.16 IGMP-FILTER configuration command .......................................................... 185

3.16.1 apply-to-ports PORTLIST ..................................................................... 185

3.16.2 apply-to-ports none ............................................................................... 186

3.16.3 igmp-filter <1-26> ................................................................................. 187

3.16.4 no igmp-filter <1-26> ............................................................................ 187

3.16.5 igmp-filter <1-26> (enable|disable) ....................................................... 188

3.16.6 rule <1-10> (permit|deny) (A.B.C.D) (A.B.C.D) .................................. 188

3.16.7 rule <1-10> (permit|deny) (AA:BB:CC:DD:EE:FF) .............................. 189

3.16.8 no rule <1-10> ....................................................................................... 190

3.16.9 rule <1-10> preview ............................................................................... 190

3.16.10 show igmp-filter .................................................................................. 191

3.16.11 show igmp-filter <1-26> ..................................................................... 192

3.16.12 show igmp-filter preview user ............................................................. 192

3.17 DHCP configuration command ........................................................................ 193

3.17.1 dhcp relay (enable|disable) .................................................................... 193

3.17.2 dhcp relay server-ip (A.B.C.D) ............................................................. 194

3.17.3 show dhcp ............................................................................................. 194

3.18 SNTP configuration command.......................................................................... 195

3.18.1 sntp (client|none) ................................................................................... 195

3.18.2 sntp peer ip-address ............................................................................... 196

3.18.3 sntp time-offset (plus|minus) <0-86400> .............................................. 196

3.18.4 show sntp .............................................................................................. 197

3.19 SPNM configuration command ....................................................................... 197

3.19.1 spnm (enable|disable) ............................................................................ 198


Content

X

3.19.2 spnm community ................................................................................... 198

3.19.3 spnm password ...................................................................................... 199

3.19.4 spnm send-access-mac .......................................................................... 199

3.19.5 spnm server-ip ....................................................................................... 200

3.19.6 spnm access-port ................................................................................... 200

3.19.7 show spnm access-ports ........................................................................ 201

3.19.8 show spnm information ......................................................................... 202

3.20 interface batch-disposal configuration command ............................................ 202

3.20.1 port <1-26> description ......................................................................... 203

3.20.2 port PORTLIST dot1q accept (all|tagged-only) .................................... 204

3.20.3 port PORTLIST dot1x (enable|disable) ................................................. 205

3.20.4 port PORTLIST dot1x authenticator max-user ..................................... 205

3.20.5 port PORTLIST dot1x authenticator quiet-timeout <1-120> ................ 206

3.20.6 port PORTLIST dot1x authenticator quiet-timeout default ................... 206

3.20.7 port PORTLIST dot1x authenticator radius-server NAME ................... 207

3.20.8 port PORTLIST dot1x authenticator radius-server default ................... 208

3.20.9 port PORTLIST dot1x authenticator reauthenticate-period .................. 208

3.21.10 port PORTLIST dot1x authenticator reauthenticate-period default ..... 209

3.20.11 port PORTLIST dot1x reauthenticate disable ..................................... 209

3.20.12 port PORTLIST dot1x reauthenticate enable ...................................... 210

3.20.13 port PORTLIST dtag (enable|disable) ................................................. 210

3.20.14 port PORTLIST dtag dot1q (enable|disable) ....................................... 211

3.20.15 port PORTLIST duplex (half|full) speed (10|100|1000) ...................... 212

3.20.16 port PORTLIST duplex auto ............................................................... 212

3.20.17 port PORTLIST flow-ctrl (enable|disable) .......................................... 213

3.20.18 port PORTLIST igmp-filter <1-100> (enable|disable) ........................ 213

3.20.19 port PORTLIST join trunk .................................................................. 214

3.20.20 port PORTLIST link-trap (enable|disable) .......................................... 215

3.20.21 port PORTLIST loop-check (enable|disable|re-check) ........................ 215

3.20.22 port PORTLIST loop-check vlan ........................................................ 216

3.20.23 port PORTLIST no-shutdown ............................................................. 217

3.20.24 port PORTLIST packet-limit ............................................................... 217

3.20.25 port PORTLIST priority ...................................................................... 218

3.20.26 port PORTLIST pvid ........................................................................... 219

3.20.27 port PORTLIST quit trunk .................................................................. 219


Content

XI

3.20.28 port PORTLIST rate-limit rx ............................................................... 220

3.20.29 port PORTLIST rate-limit tx ............................................................... 220

3.20.30 port PORTLIST rstp priority ............................................................... 221

3.20.31 port PORTLIST security-mac (enable|disable) ................................... 221

3.20.32 port PORTLIST spnm access-port (enable|disable) ............................ 222

3.20.33 port PORTLIST stp (enable|disable) ................................................... 223

3.20.34 port PORTLIST stp priority ................................................................ 223

3.20.35 port PORTLIST user-limit number ..................................................... 224

3.20.36 port PORTLIST sgm (enable|disable) ................................................. 225

3.20.37 port PORTLIST sgm discovery time (<1-300>|default) ...................... 225

3.20.38 port PORTLIST sgm discovery ttl (<1-255>|default) ......................... 226

3.20.39 port PORTLIST sgm inband enable <1-4094> ................................... 226

3.20.40 port PORTLIST sgm vlan (add|remove) VLAN-LIST ......................... 227

3.21 anti-arp attack configuration command ........................................................... 227

3.21.1 anti-arp (enable|disable) ........................................................................ 228

3.21.2 anti-arp trust ip (A.B.C.D) .................................................................... 228

3.21.3 anti-arp trust ip (A.B.C.D) mac (AA.BB.CC.DD.EE.FF) ..................... 229

3.21.4 no anti-arp trust ip ................................................................................. 229

3.21.5 no anti-arp trust ip (A.B.C.D)................................................................ 230

3.21.6 show anti-arp ......................................................................................... 230

3.22 VLAN transmission configuration command .................................................. 231

3.22.1 translation-vlan <1-4094> <1-4094> mapped <1-4094> ...................... 231

3.22.2 join translation-vlan VLANLIST uplink <1-64> .................................. 232

3.22.3 translation-vlan nto1 (enable|disable) .................................................... 232

.22.4 show translation-vlan mapped .................................................................. 233

3.22.5 show interface translation-vlan .............................................................. 233

3.23 ACL configuration command .......................................................................... 234

3.23.1 match access-list ACLLIST .................................................................. 234

3.23.2 description ............................................................................................. 235

3.23.3 rule <1-1024> mac ................................................................................ 235

3. 23.4 rule <1-1024> l2type ............................................................................ 236

3. 23.5 rule <1-1024> vlan ............................................................................... 237

3. 23.6 rule <1-1024> ttl .................................................................................. 237

3. 23.7 rule <1-1024> tos ................................................................................. 238

3. 23.8 rule <1-1024> ip ................................................................................... 238


Content

XII

3. 23.9 rule <1-1024> icmp .............................................................................. 239

3. 23.10 rule <1-1024> tcp/udp ........................................................................ 240

3. 23.11 rule <1-1024> action (permit|deny) .................................................... 241

3. 23.12 rule <1-1024> action cos change ........................................................ 242

3. 23.13 rule <1-1024> action cos new <0-7>.................................................. 243

3. 23.14 rule <1-1024> action tos <0-7> .......................................................... 243

3. 23.15 rule <1-1024> action dscp DSCP ....................................................... 244

3. 23.16 rule <1-1024> action trapcpu (only|forward) ..................................... 244

3. 23.17 rule <1-1024> action ratelimit <64-1000000> ................................... 245

3. 23.18 rule <1-1024> action (mirror|redirect) <1-64> ................................... 246

3. 23.19 rule <1-1024> action sendqueue <0-7> .............................................. 246

3. 23.20 no rule <1-1024> ................................................................................ 247

3. 23.21 no rule <1-1024> action ..................................................................... 248

3. 23.22 match access-list <1-399> .................................................................. 248

3. 23.23 show access-list [<1-399>] ................................................................. 249

3. 23.24 show access-list port [<1-64>] ........................................................... 249

3. 23.25 rule <1-1024> arp ............................................................................... 250

3.24 802.1X configuration command ...................................................................... 251

3.24.1 dot1x (enable|disable) ........................................................................... 252

3.24.2 dot1x authenticator link-mode............................................................... 252

3.24.3 dot1x authenticator logical-port ............................................................ 253

3.24.4 dot1x authenticator max-request ........................................................... 253

3.24.5 dot1x authenticator supplicant-timeout ................................................. 254

3.24.6 dot1x authenticator txwhen-timeout ...................................................... 255

3.24.7 dot1x authenticator max-user ................................................................ 255

3.24.8 dot1x authenticator quiet-timeout.......................................................... 256

3.24.9 dot1x authenticator radius-server .......................................................... 256

3.24.10 dot1x authenticator reauthenticate-Period ........................................... 257

3.24.11 dot1x reauthenticate ............................................................................ 258

3.24.12 dot1x user <0-63> USERNAME password PASSWORD .................. 258

3.24.13 dot1x user <0-63> bind-to mac AA:BB:CC:DD:EE:FF ...................... 259

3.24.14 dot1x user <0-63> bind-to port <1-64> ............................................... 259

3.24.15 dot1x user <0-63> max-time <1-100> ................................................. 260

3.24.16 dot1x user lock .................................................................................... 261

3.24.17 dot1x user lock fail-times .................................................................... 261


Content

XIII

3.24.18 dot1x user lock trap ............................................................................. 262

3.24.19 no dot1x authenticator user all ............................................................. 262

3.24.20 no dot1x interface <1-64> user ........................................................... 263

3.24.21 show dot1x authenticator user .............................................................. 263

3.24.22 show dot1x interface ............................................................................ 264

3.24.23 show dot1x user.................................................................................... 264

3.25 DHCP-SNOOP configuration command ......................................................... 265

3.25.1 dhcp-snoop (enable|disable) .................................................................. 265

3.25.2 dhcp-snoop option82 (enable|disable) ................................................... 266

3.25.3 dhcp-snoop (trust|untrust) ...................................................................... 266

3.25.4 show dhcp-snoop trust ........................................................................... 267

3.25.5 show dhcp-snoop interface .................................................................... 267

3.25.6 show dhcp-snoop interface binding ....................................................... 268

3.26 RLINK configuration command ...................................................................... 269

3.26.1 rlink <1-16> protect-vlan ...................................................................... 269

3.26.2 join rlink <1-16> (master|slave|uplink|downlink) ................................. 269

3.26.3 show rlink config................................................................................... 270

3.26.4 show rlink interface ............................................................................... 270

Chapter 4 Command switch configure member switch ......................... 272


Figure

XIV

Figure

Figure 1-1 create local configuration environment via Console .................................. 1


Table

XV

Table

Table 1-1 command mode and function feature ........................................................... 2


Preface

XVI

Preface

Version

V2.9

Notice

The information in this document is subject to change without notice. Every effort

has been made in the preparation of this document to ensure accuracy of the

contents, but all statements, information, and recommendations in this document

don't constitute the warranty of any kind, express or implied.

Content introduction

This manual introduces F-Engine S2200ME-B intellectual network management

Ethernet switch functional configuration and Related Command, meanwhile, give

verbose description for default configuration. Command Line Interface is a part of

network product management platform by Wuhan Fiberhome Networks, also a

part of ROS-Switch Operation System by Wuhan Fiberhome Networks. It has

several obvious features as below:

Provide Console configuration mode, make user configure device at local

place;

Powerful online help, user can get command help at any time;

Flexible matchable capability, intelligently makeup command, and give

user related command.

This manual is constituted by the following part:


Preface

XVII

Symbols

Symbol Description

Warning,

Danger

This symbol means danger. You are in a situation that

could cause bodily injury. Before you work on any

equipment, be aware of the hazards involved with

electrical circuitry and be familiar with standard practices

for preventing accidents. Use the statement number

provided at the end of each warning to locate its

translation in the translated safety warnings that

accompanied this device.

Caution,

Notice

This symbol means reader be extremely careful during

the operation.

Note This symbol means a complementary description.

Intended Audience

The manual is intended for the following readers:

Network engineers

Network administrators

Customers who are familiar with network fundamentals

Notice:

You must read this manual carefully in case of equipment impairment and

bodily injury caused by any maloperations.

Chapter Title Description

Chapter 1 Introduction

Introduce S2200ME-B series

switch’s configuration base and CLI

interface

Chapter 2 Hardware platform&software

environment

Give S2200ME-B series switch

hardware platform and software

environment

Chapter 3 Switch configuration

command

Introduce S2200ME-B series switch

system configuration command

Chapter 4 Command switch configure

member switch

Configure member switch by

introducing CLI


Preface

XVIII

Environmental Protection

This product has been designed to comply with the requirements on environmental

protection. For the proper storage, use and disposal of this product, national laws

and regulations must be observed.


Safety Recommendation

XIX

Safety Recommendation

Before install this product, please read this manual carefully to avoid error operation.

S2200ME-B emits invisible laser radiation. During

installation and maintenance of this product, it is strictly

prohibited to direct the output facet of optical fiber or fiber

connector that connects to optical fiber transceiver output port

toward human body so as to avoid damaging human eye and

skin.

S2200ME-B contains presition optical devices. In order to

prevent equipment from damage caused by heavy impact,

acute viberation and collision must be avoided. Before

connecting output port of fiber transeiver to optical connector,

please switch off the equipment power first.

S2200ME-B contains electrostatic-sensitive devices, users are

requested not to dismantle or disassemble the equipment or do

maintanance work by himself/themselves. In case necessary

to do so, it must be proceeded under the guidance of technical

personnel of FiberHome Networks Co., Ltd following anti-

electrostatic discharge procedure.

Should you have any question or problem, please contact

Wuhan FiberHome Networks Co., Ltd, and do not dismantle

the equipment yourself, which would otherwise lead to

unrecoverable damage to equipment. Unauthorized

dismantling of equipment will deemed by Wuhan FiberHome

Networks Co., Ltd as automatic renunciation of repairing

right.

This product is strictly conforming to IEEE 802.3-1998 and Q/WRI 5012-2001.



1


1.1 switch configuration foundation

Configuration environment:

Figure 1-1 create local configuration environment via Console

Step one: As fig1.1 said, establish local configuration environment through the

console port of computer connecting to the S2200ME-B console port.

Step two: running emulator on computer。Terminal device parameter is

9600bps，eight data bit、one stop bit、no checksum and no flow

control, terminal device type is VT100, binary transport protocol is CRC.

Step three: when the S2200ME-B is first electrify, automatically execute setup

command. It wills automatically startup in default style until the user

can see F-Engine.

Step four: typing command，configure the switch or show the running status of

the switch. Typing “？”when needing help.

CLI description:

S2200ME-B series switch CLI is using user name and password for logging on.

There are total three users groups: “administrators”, “users” and “ guests”,

different usrs name belong to different users group, which has different authority

for different administration. The user belonging to “administrator” is the super

user who has total authority for device management; The user belonging to

“users” is common user with general authority for function inquiry and

configuration administration; The users belonging to “guests” is common guest

with the only authority for general function inquiry but they can not configure and

manage the device. After the system is started, one user will be formed as default,

that is “admin”, respectively belong to the group “administrator”, the default

password is “12345”, user can add other administrating user according to the

requirement, the default password should be modified by yourself after logging on,

then save new password.

1.2 CLI interface

S2200ME series switch provides command line interface for user. This interface



2

includes a series of configuration command. User can use these commands to

config and manage the switch .The command line interface has following

characters:

local configuration through Console port;

Hierarchical protection for configuration command. In order to prevent

the access of user who has no right. Only privilege user can configure the

MC;

The user can use “?” to get online help.

Providing network-testing tool such as Ping, which can help user test the

ability of access of the network.

Provide abundant and concrete debugging information to diagnose

network fault.

In order to make the management convenient for user, we divide the commands

into several groups. Each group is corresponding to a command mode. We can

switch in different mode by using commands. Normally, one command can use in

a special mode. But some commands (help, list, exit, end) can use in all modes.

All command modes and function characteristics are shown in Table 1-1.

Table 1-1 command mode and function feature

Command

mode Function Prompt

Enter

command Exit command

Privileged

user mode

Check all

operation status

and statistic

information to

implement

management of

files and system.

Fengine# Establish

connection with

device then

enter

“Exit” can exit,

and need to

input user name

and password

again.

Global

configure

mode

Config global

parameter for

switch

Fengine

(config)#

press “config”

under privileged

mode

press “exit” to

return privileged

user mode

System

configure

mode

Configure system

parameter for

switch

Fengine(confi

g-system)#

Press “system”

under global

mode

Enter

“Exit/quit” to

return global

configure mode

Terminal

confighure

mode

Configure terminal Fengine(confi

g-line)#

press “line vty”

under global

mode

Press “exit” to

return global

configure mode

Interface

configure

mode

Configure

interface parameter

(N1: interface

Fengine(confi

g-eth-N1)#

press “interface

ethernet N1” or

“interface trunk

Press “exit”to

return configure

mode



3

No.),

including single

Ethernet interface

or aggregation

interface

Fengine(confi

g-trunk-N1)#

N1” under

global mode

VLAN

configurati

on mode

Switch VLAN

configuration

(N1: vlan NO.)

Fengine(confi

g-vlan- N1)#

Press “interface

vlan N1” under

global mode

Press “exit” to

return global

mode

SGM

configurati

on mode

Configure of

Switch Group

management

Fengine(confi

g-sgm)#

press “sgm”

under global

mode

press “exit” to

return global

configure mode

STP

configurati

on mode

Configure of

switch STP

Fengine(confi

g-stp)#

Press “stp”

under global

mode

Enter “exit” to

return global

configure mode

COS

configurati

on mode

Configure of

switch Cos

Fengine(confi

g-cos)#

Enter “cos”

under global

mode

Enter “exit” to

return global

configure mode

ESR

configurati

on

Configure of

Switch ESR

Fengine

(config-esr)#

Enter “esr”

under global

mode

Enter “exit”to

return global

configure mode

Igmp-

snooping

configurati

on mode

Configure of

switch IGMP

Snooping

Fengine(confi

g-igmp-

snooping)#

Enter “igmp-

snooping” under

global mode

Enter “exit”to

return global

configure mode

Igmp-filter

configure

mode

Configure of

switch Igmp

filtering (N1：Igmp-filter No.)

Fengine(confi

g-igmp-filter

N1)#

Enter “igmp-

filter N1” under

global mode

Enter “exit” to

return global

configure mode

RADIUS

configure

mode

Configure of

switch radius

Fengine(confi

g-radius)#

Enter “radius”

under global

mode

Enter “exit”to

return global

configure mode

Igmp-

snooping

configurati

on mode

Configure of

switch IGMP

Snooping

Fengine(confi

g-igmp-

snooping)#

Enter “igmp-

snooping” under

global mode

Enter “exit”to

return global

configure mode

SPNM configurati

on mode

Configure of

switch spnm Fengine(config-spnm)#

Enter “spnm” under global

mode

Enter “exit”to

return global

configure mode


Chapter 2 Hardware platform

&Software environment

4

Chapter 2 Hardware platform&Softwre environment

2.1 Hardware platform

The hardware platform of CLI is common computer or server.

The system memory should be more than 64M. The memory of 128M is

recommended.

For PC server platform, Ethernet card is needed (for remote management).

2.2 Software environment

The OS of CLI is MS Windows. The application program is super terminal.


Chapter 3 configuration command

5

Chapter 3 Switch configuration command

3.1 common configuration command

CLI common configuration command is including:

cd

clear logging

clock set

cls

configure

copy SRCFILE DESTFILE

copy startup-config running-config

dir

end

erase startup-config

exit

help

hostname WORD

line console

line vty

list

logging history [<0-7>]

logging on

logging syslog [<0-7>]

logging terminal [<0-7>]

logout

ls

no line vty

ping

pwd

quit

reboot



6

remove FILE

rename OLD NEW

show clock

show cpu statistic

show history

show lines

show logging

show logging history

show logging history SUBSTRING

show logo

show management acl

show memory statistic

show running-config

show startup-config

show syslog

show version

syslog server

telnet

terminal length

terminal monitor

timeout

traceroute

type FILE

upgrade (os|config)

who

write file

zero FILE

3.1.1 cd

Switch under different directory in the system.



7

【Command Form】

cd

cd DIR

【Parameter】

DIR：file path

【Node Mode】

privileged user mode

【Default】

Return to file system root directory

【Using Guide】

Use this command to switch among directory. If command “cd” has no

parameter then return file system root directory.

【Applicable Device】

S2200ME-B SERIES SWITCH

【Example】

Fengine#cd

%Current Directory is "Ram:/flash/".

Fengine#

【Relevant Command】

ls，dir

3.1.2 clear logging history

Clear system log history

【Command Form】

clear logging history

【Parameter】

None

【Node Mode】

global configuration mode

【Default】

None

【Using Guide】

In order to ensure the old system log file not to be deleted automatically, we

should clear the log periodically.



【Example】

Fengine(config)# clear logging history

The command above is to clear system log.



8


logging on，show logging history，logging terminal

3.1.3 clock set

【Command Form】

clock set HH:MM:SS <1-31> <1-12> <2000-2100>

【Parameter】

HH：hour

MM：minute

SS：second

<1-31>：day

<1-12>：month

<2000-2100>：year

【Command Mode】


【Default】

None

【Using Guide】

Use this command to set current time for the device.

【Example】

Fengine#clock set 14:28:30 28 4 2006

Fengine#


show clock

3.1.4 cls

Clear the screen.。

【Command Form】

cls

【Parameter】

None

【Node Mode】

privileged user mode，global configuration mode，system configuration

mode

【Default】

None

【Using Guide】

Clear the screen.



9



【Example】

Fengine#cls


None

3.1.5 configure

Enter global configuration mode from privileged user mode

【Command Form】

configure

【Parameter】

None

【Node Mode】

privileged user mode。

【Default】

None

【Using Guide】

Enter global configuration mode from privileged user mode, implement all

system configuration command.



【Example】

Fengine#configure

%Enter configuration commands.End with Ctrl+Z or command "quit" &

"end"

Fengine(config)#


end

3.1.6 copy SRCFILE DESTFILE

Copy one file to another file.

【Command Form】

copy SRCFILE DESTFILE

【Parameter】

SRCFILE：source file

DESTFILE：destination file

【Node Mode】



10


【Default】

None

【Using Guide】

Copy file from source file to destination file



【Example】

Fengine#copy aaa bbb

Fengine#


None

3.1.7 copy startup-config running-config

Copy config-file into current configuration

【Command Form】

copy startup-config running-config

【Parameter】

None

【Node Mode】


【Default】

None

【Using Guide】

This command is to copy config-file into current configuration after user

configured the device.



【Example】

Fengine(config)#copy startup-config running-config

This will update current device configuration.

Are you sure?[y/n]

It will take a few minutes,please waiting.....

[OK]

Fengine(config)#


show running-config

3.1.8 dir



11

Show file system

【Command Form】

dir

dir DIR

【Parameter】

DIR：direction

【Node Mode】


【Default】

None

【Using Guide】

Show file system



【Example】

Fengine#dir

size date time name

-------- ------ ------ --------

11387 JAN-01-2000 00:01:16 startcfg

1 files, total space: 11387 bytes

0 directorys,available space: 2011136 bytes.

Fengine#


ls

3.1.9 end

Exit to current node, return Privileged user mode node.

【Command Form】

end

【Parameter】

None

【Node Mode】

global configuration mode，system configuration mode

【Default】

None

【Using Guide】

The different between End and Exit: no matter in what mode, End is to exit

to Privileged user mode, but Exit is to exit to superior mode.



12



【Example】

Fengine(config-sgm)#end

Fengine#


exit，quit

3.1.10 erase startup-config

Erase switch config-file

【Command Form】

erase startup-config

【Parameter】

None

【Node Mode】


【Default】

None

【Using Guide】

This command is to erase config-file saved in flash, but former config is still

valid in the system, if need to restore the system to the delivery default, you

should erase config-file in the flash and reboot the device.



【Example】

Fengine(config)#erase startup-config

This will erase the configuration in the flash memory.

Are you sure?(y/n) [y]

Erasing configuration.......

[OK]

Fengine(config)#


write file，show startup-config

3.1.11 exit

User use command “exit” to exit from current mode to superior mode, for

privileged user mode, exit the configuration.

【Command Form】

exit



13

【Parameter】

None

【Node Mode】

All nodes (privileged user mode，global configuration mode，system

configuration mode, interface configuration mode，VLANconfiguration

mode, terminal configuration mode, ESRconfiguration mode, Igmp-

snoopingconfiguration mode, SGMconfiguration mode, STPconfiguration

mode，COSconfiguration mode).

【Default】

None

【Using Guide】

All Command Mode is classified into three grades from lower to higher:

Privileged user mode；

global configuration mode；

system configuration mode，VLAN configuration mode，

terminal configuration mode, ESR configuration mode，Igmp-snooping

configuration mode，SGM configuration mode，STP configuration

mode，interface configuration mode，COS configuration mode.

execute command “exit” to return from higher level Command Mode to

lower command mode. same level mode can be mutual-switched. User can

enter CTRL+Z or end from two higher command mode to Privileged user

mode.



【Example】

Fengine(config)#exit

Fengine #


configure

3.1.12 help

Use help to display system help information

【Command Form】

help

【Parameter】

None

【Node Mode】

All nodes: privileged user mode，global configuration mode，system

configuration mode，SGMconfiguration mode，STPconfiguration mode



14

【Default】

None

【Using Guide】

Provides online help at any point. And the help command shows the

information about the whole help system, including full help and partial help.

You can enter a question mark “?” to obtain online help.



【Example】

Fengine#help

When you need help,

anytime at the command line please press '?'.

If nothing matches, the help list will be empty and you must backup

until entering a '?' shows the available options.

Two styles of help are provided:

1. Full help is available when you are ready to enter a command

argument (e.g. 'show ?') and describes each possible argument.

2. Partial help is provided when an abbreviated argument is entered

and you want to know what arguments match the input (e.g. 'show me?'.)

Fengine#


?，list [KEYWORD]

3.1.13 hostname WORD

Configure switch system name

【Command Form】

hostname WORD

no hostname

【Parameter】

WORD：domain name

【Node Mode】


【Default】

Fengine（depend on switch type）

【Using Guide】

Use this command to set device system name which is easy for remember

and recognize, NO form of this command is to restore it to be default domain

name Fengine.

Notes: no blank between system name, otherwise, only the character before

the first blank is effective, if the name is rather complex (for example: wuhan

test road number 1, it can be written as wuhan_test_road_number_1)



15



【Example】

Fengine(config)#hostname HostA

HostA (config)#


None

3.1.14 line console

User can enter serial terminal configuration mode with line console.

【Command Form】

line console [<1-1>]

【Parameter】

[<1-1>]：the console terminal number

【Node Mode】


【Default】

None

【Using Guide】

User can configure console terminal under terminal configuration mode.



【Example】

Fengine(config)#line console 1

Fengine(config-line)#

The above command is to configure concole port.


line vty

3.1.15 line vty

User can enter virtual terminal with line vty (that is telnet connection)

configuration mode.

【Command Form】

line vty <1-10>

line vty <1-10> <1-10>

no line vty <1-10>

【Parameter】

First <1-10>: the beginning terminal No. which is to be configured



16

Second<1-10>: the ending terminal No. which is to be configured

【Node Mode】


【Default】

None

【Using Guide】

User can configure virtual terminal under virtual terminal configuration mode.



【Example】

Fengine(config)# line vty 1 5


The above command is to configure line vty 1 to 5.


line console

3.1.16 list

Show all command under current node

【Command Form】

list [KEYWORD]

【Parameter】

[KEYWORD]：command key word

【Node Mode】

all configuration mode

【Default】

None

【Using Guide】

This command has many virtues, it just like dir under MS-DOS and ls under

UNIX. If user cannot remember, it become useful. It can lighten the burden;

If user input keyword, this command can be used to search all command

name with the keyword of the command.



【Example】

Fengine#list interface

show anti-proxy client interface [<1-28>]

show dot1x interface

show interface [<1-64>]

show interface distance <1-64>



17

show interface dtag

show interface dynamic-mac [<1-64>]

show interface loop-check

show interface security-mac [<1-64>]

show interface static-mac [<1-64>]

show interface statistics [<1-64>]

show interface user-limit [<1-64>]

show rstp interface

show stp interface

Fengine#


end，quit，exit，help

3.1.17 logging history [<0-7>]

If user wants system to record information in different level, this command will

help.

【Command Form】

logging history [<0-7>]

no logging history

【Parameter】

0－＞unusable //system unstable

1－＞immediately action // emergency action

２－＞critical // emergency information

３－＞error //error information

４－＞warning //Warning information

５－＞info //common information

６－＞verbose //verbose information

７－＞debug //debug information

【Node Mode】


【Default】

３－＞error information

【Using Guide】

n order to trace system running state, alarm function is used. It records the

system state automatically, so it can give corresponding operation. The log

file can record 2000 records, when records are larger than 2000, it delete the

oldest record automatically, so you must download the alarm file periodically

in case of lose records. NO command recover system to default configuration





18

【Example】

Fengine(config)# logging history 2

The above command is to open emergency information


logging on，clear logging history，show logging history

3.1.18 logging on

Use this command to record log; use no logging on to cancel logging.

【Command Form】

logging on

no logging on

【Parameter】

None

【Node Mode】


【Default】

None

【Using Guide】

In order to trace system running state, alarm function is used. It records the

system state automatically, so it can give corresponding operation. The log

file can record 2000 records, when records are larger than 2000, it delete the

oldest record automatically, so you must download the alarm file periodically

in case of lose records. NO command recover system to default configuration



【Example】

Fengine(config)# logging on

The above command is to open system log.


clear logging history，show logging history，logging terminal

3.1.19 logging syslog [<0-7>]

If user want all system information to export to terminal, this command can be

used, NO form of this command is to stop this export.

【Command Form】

logging syslog [<0-7>]

no logging syslog

【Parameter】


1－＞immediately action //emergency action



19

２－＞critical //emergency information






【Node Mode】


【Default】

３－＞error information

【Using Guide】

In order to track system operation status and current system status, open

terminal export function, but it will slow system operation speed, this

function can be used when tracking and debugging a certain protocol flow,

when system is normally operating, this function is disabled, so as not to

influence system operating speed. When export information grade is set,

enable corresponding monitor under line configuration mode to finish export

information. As default, this function of Console is enabled.



【Example】

Fengine(config)# logging syslog 6

The above command is enable system log.


show logging，logging terminal

3.1.20 logging terminal [<0-7>]

Use this command to output the information to the terminal, use no logging

terminal to stop the output.

【Command Form】

logging terminal [<0-7>]

no logging terminal

【Parameter】


1－＞immediately action //emergency action

２－＞critical //emergency information







20


【Node Mode】


【Default】

７－＞debug information

【Using Guide】

In order to track system operation status and current system status, open

terminal export function, but it will slow system operation speed, this

function can be used when tracking and debugging a certain protocol flow,

when system is normally operating, this function is disabled, so as not to

influence system operating speed. When export information grade is set,

enable corresponding monitor under line configuration mode to finish export

information. As default, this function of Console is enabled.



【Example】

Fengine(config)# logging terminal 4

The above command is to open trap log.


clear logging history，show logging history，logging terminal

3.1.21 ls

See the current directory and file

【Command Form】

ls

ls DIR

【Parameter】

DIR：file path

【Node Mode】


【Default】

See the current directory and file

【Using Guide】

Use this command to see the directory and file in current file system



【Example】

Fengine#ls

size date time name



21

-------- ------ ------ --------

2391 JAN-02-1991 00:56:00 startcfg

1 files, total space: 2391 bytes

0 directorys,available space: 1024000 bytes.

Fengine#

The above is the information of file and directory in root directory.


cd，type，dir

3.1.22 no line vty <1-10>

Clear a logged virtual terminal

【Command Form】

clear line <1-10>

【Parameter】

<1-10>：index No. of virtual terminal

【Node Mode】


【Default】

None

【Using Guide】

Use this command to clear a logged virtual terminal



【Example】

Fengine(config)#no line vty 1

Are you sure?[y/n]

[OK]

Fengine(config)#


show lines

3.1.23 ping

Test the network connectivity

【Command Form】

ping (A.B.C.D)

ping (A.B.C.D) (-n|-l) <1-1000>

ping (A.B.C.D) -n <1-1000> -l <1-1000>

【Parameter】

(A.B.C.D)：address of a testing host on the net



22

-n：sent request number

-l：sentrequest packet length

<1-1000>：number and length

【Node Mode】


【Default】

None

【Using Guide】

When network has error, use this command to locate network error position,

which is necessary tool for network test.



【Example】

Fengine#ping 192.168.1.200

PING 192.168.1.200: 56 data bytes

Reply from 192.168.1.200: time=16ms TTL=128





----192.168.1.200 PING Statistics----

5 packets transmitted, 5 packets received, 0% packet loss

round-trip (ms) min/avg/max = 0/3/16

Fengine#


None

3.1.24 pwd

Show current file path

【Command Form】

pwd

【Parameter】

None

【Node Mode】


【Default】

None

【Using Guide】

Show current file path




23


【Example】

Fengine#pwd

%Current Directory is "Ram:/flash/".

Fengine#


None

3.1.25 quit

Quit to the previous node, with the same function with exit.

【Command Form】

quit

【Parameter】

None

【Node Mode】

All mode

【Default】

None

【Using Guide】

Execute command “quit” from higher command to lower user mode, the

function is the same as exit.



【Example】

Fengine(config)# quit

Fengine#


end，exit

3.1.26 reboot

Reboot device

【Command Form】

reboot

【Parameter】

None

【Node Mode】


【Default】

None



24

【Using Guide】

The function of command is same to electrify device, we can restart the

device remotely. Usually, forbid use this command, make sure whether save

the configuration file. This command just restart the net manage card.



【Example】

Fengine#reboot

WARNING:System will reboot! Continue?(y/n) [y]

System now is rebooting,please wait.

3.1.27 remove FILE

Remove a file

【Command Form】

remove FILE

【Parameter】

FILE：file name

【Node Mode】


【Default】

None

【Using Guide】

Use this command to delete a file



【Example】

Fengine#remove TEMP

Fengine#


ls

3.1.28 rename OLD NEW

Rename file

【Command Form】

rename OLD NEW

【Parameter】

OLD：old file name

NEW：new file name

【Node Mode】



25


【Default】

None

【Using Guide】

Use this command to rename file



【Example】

Fengine#rename STARTCFG aaa

Fengine#


ls

3.1.29 show clock

【Command Form】

show clock

【Parameter】

None

【Command Mode】


【Default】

None

【Using Guide】

This command is to show system current time and booting time

【Example】

Fengine#show clock

clock : 2000-01-01 00:42:47

System running time : 0 hours,42 minutes,47 seconds

Fengine#


clock set

3.1.30 show cpu statistic

Show CPU statistic

【Command Form】

show cpu statistic

【Parameter】

None

【Node Mode】



26


【Default】

None

【Using Guide】

Show CPU statistic



【Example】

Fengine#show cpu statistic

total task no:25

ready task no:2

0.35% cpu used!

Fengine#


None

3.1.31 show history

Show history command

【Command Form】

show history

【Parameter】

None

【Node Mode】


【Default】

None

【Using Guide】

Show history command



【Example】

Fengine#show history

list

q

con

list

Fengine#


None



27

3.1.32 show lines

Show current virtual terminal

【Command Form】

show lines

【Parameter】

None

【Node Mode】


【Default】

None

【Using Guide】

Show information of current virtual terminal



【Example】

Fengine#show lines

Line Location Idle Host(s) User

* 1 con 1 Console 00:00:00 Console admin

2 vty 1 192.168.1.200 00:00:05 192.168.1.108 admin

3 vty 2

4 vty 3

5 vty 4

6 vty 5

Fengine#

* is for current user terminal, Location is host address that user logged on,

Idle is terminal time for user log on, Host is the interface for user to access

device, User is user name for user to log on


line vty

3.1.33 show logging

Show system log configuration with this command

【Command Form】

show logging

【Parameter】

None

【Node Mode】


【Default】



28

None

【Using Guide】

This command is used to show system log configuration



【Example】

Fengine#show logging

Logging:enable

Logging terminal:enable

Logging terminal level:7

Logging syslog:disable

Logging syslog level:3

Logging history:enable

Logging history level:3

Logging history size:3

Logging history pointer:3

Logging history allow size:2000

Logging history rotate numbers:0

Fengine#


logging on，show logging history

3.1.34 show logging history

Show system log with this command

【Command Form】

show logging history

show logging history <1-2000>


【Parameter】

<1-2000>：index No. of system log

SUBSTRING：keyword for search log

【Node Mode】


【Default】

None

【Using Guide】

Use this command to show system log and search corresponding log, if entry

is designated, then show system log beginning content, also use keyword for

query, then show keyword entry in log content.



29



【Example】

Fengine#show logging history

2000/01/01 00:00:09 Log:0 10/100 Ethernet interface: 2,Link up.

2000/01/01 00:00:10 Log:0 10/100 Ethernet interface: 2,Link down.

2000/01/01 00:00:12 Log:0 10/100 Ethernet interface: 2,Link up.

Fengine#


logging on

3.1.35 show logging history SUBSTRING

Show system log with keyword

【Command Form】


【Parameter】

SUBSTRING：keyword for searching log

【Node Mode】


【Default】

None

【Using Guide】

Show system log with keyword.



【Example】

Fengine#show logging history 15:18

2007/04/23 15:18:22 Log:5 Host(10.18.33.189) successfully log on

2007/04/23 15:18:24 Log:6 Console:end

2007/04/23 15:18:26 Log:6 Console:show logging

2007/04/23 15:18:28 Log:6 Console:show logging his

2007/04/23 15:18:38 Log:6 Console:show logging history 2

2007/04/23 15:18:45 Log:6 Console:show logging history 4

2007/04/23 15:22:08 Log:6 Console:show logging history 15:18Fengine#


clear logging history，logging on，show logging history，show logging

history，show logging history <1-2000>

3.1.36 show logo

Show system logo



30

【Command Form】

show logo

【Parameter】

None

【Node Mode】


【Default】

None

【Using Guide】

Use this command to show system logo



【Example】

Fengine#show logo

************************************************

* Switch OS (Version 1.08 ) *

* *

* For Fengine S2016MFB *

* *

* Copyright 2000-2005 FiberHome Networks *

************************************************

Fengine#


clear logging history，logging on

3.1.37 show management acl

Show access control list used to filter snmp, web, telnet.

【Command Form】

show management acl

【Parameter】

None

【Node Mode】


【Default】

None

【Using Guide】

Show access control list used to filter snmp, web, telnet.




31


【Example】

Fengine#show management acl

%Allow any ip address to access from snmp,web,telnet.

Fengine#


None

3.1.38 show memory statistic

Show memory distribution statistic

【Command Form】

show memory statistic

【Parameter】

None

【Node Mode】


【Default】

None

【Using Guide】

Show memory distribution statistic



【Example】

Fengine#show memory statistic

Status Bytes Blocks Avg block Max block

------ ---------- -------- ---------- ----------

current

free 690032 3 230010 675440

alloc 4756432 8759 543 -

cumulative

alloc 6026076 13840 435 -

total memory 5446496 bytes. 87.00 percent used.

Fengine#


None

3.1.39 show running-config

Show current system configuration

【Command Form】



32

show running-config

【Parameter】

None

【Node Mode】


【Default】

None

【Using Guide】

Use this command to show current efficient system configuration.



【Example】

Fengine#show running-config

Currrent Configuration:

!Hardware Version : 1.20

!Software Version : 1.08

hostname Fengine

config-file check-timer 5

config-file auto-save disable

config-file auto-upload disable

!

!logging configuration.

logging on

logging history 3

logging terminal 7

no logging syslog

!

!

! User configuration.

username admin group administrators password

827ccb0eea8a706c4c34a16891f84e7b

username guest group guests password


!

!Management (snmp,web,telnet) ACL configuration

management acl disable

!

!SNMP Configuration

snmp community public ro view internet

snmp community NETMAN rw view internet

!syslog server configuration

!



33

line console 1

length 25

monitor

exec-timeout 10 0

login local

line vty 1 5

length 25

no monitor

exec-timeout 10 0

login local

!

!Cos Configuration

cos

cos disable

cos queue mode weighted-round-robin

cos queue 0 weight 1




cos priority 0 queue 0








!

!SGM Configuration

sgm

sgm role candidate

!

!ESR Configuration

esr

esr disable

!

!Vlan Configuration

interface vlan 1

member 1-18 untagged

!

!MAC Aging Configuration

mac aging-time 300

mac learn-mode independence

!

!System Configuration



34

system

management vlan 1

ip address 192.168.1.108/24

out-band ip change disable

arp-request timer 0

anti-attack enable

!

!Igmp Snooping Configuration

igmp-snooping

igmp-snooping disable

igmp-snooping fast-leave disable

igmp-snooping drop-filtered enable

igmp-snooping proxy disable

igmp-snooping proxy igmpv3-support disable

igmp-snooping proxy vlan 1

!

!Radius Configuration

radius

radius disable

!

!Stp Configuration

stp

stp disable

!

!Rstp Configuration

rstp

rstp disable

!

!Dot1x configuration

dot1x disable

!

!User limit configuration

user-limit disable

!

!Loop Check configuration

loop-check trap disable

loop-check action auto-recover

loop-check time 300

!

!Dtag Configuration

dtag protocol 33024

dtag forward-tag first

!

!Dhcp Configuration

!



35

!Anti-Proxy configuration

!

!Spnm Configuration

spnm

spnm disable

spnm server-ip 0.0.0.0

spnm password www.fhn.com.cn

spnm send-access-mac disable

spnm community NETMAN

!

!Rmon configuration

!

!Ethernet Configuration

interface ethernet 1

join vlan 1 untagged

duplex auto

flow-ctrl enable

packet-limit broadcast 64

packet-limit dlf 64

stp disable

stp priority 0

sgm discovery ttl 90

sgm discovery time 30

sgm enable vlan 1

no shutdown

loop-check enable

loop-check vlan 1

dtag disable

dtag protocol disable

security-mac disable

user-limit number 0

……

!

!end

Fengine#


show startup-config

3.1.40 show startup-config

Show startup configuration saved on flash

【Command Form】

show startup-config

【Parameter】



36

None

【Node Mode】


【Default】

None

【Using Guide】

Use this command to show startup configuration file saved on FLASH,

startup configruatin file is configuration command file executed after switch

powered or reboot.



【Example】

Fengine#show startup-config

!System startup configuration

!2000/01/01 00:01:16

!

!Hardware Version : 1.20

!Software Version : 1.08

hostname Fengine

config-file check-timer 5

config-file auto-save disable

config-file auto-upload disable

!

!logging configuration.

logging on

logging history 3

logging terminal 7

no logging syslog

!

!

! User configuration.

username admin group administrators password


username guest group guests password


!

!Management (snmp,web,telnet) ACL configuration

management acl disable

!

!SNMP Configuration

snmp community public ro view internet

snmp community NETMAN rw view internet

!syslog server configuration



37

!

line console 1

length 25

monitor

exec-timeout 10 0

login local

line vty 1 5

length 25

no monitor

exec-timeout 10 0

login local

!

!Cos Configuration

cos

cos disable

cos queue mode weighted-round-robin













!

!SGM Configuration

sgm

sgm role candidate

!

!ESR Configuration

esr

esr disable

!

!Vlan Configuration

interface vlan 1

member 1-18 untagged

!

!MAC Aging Configuration

mac aging-time 300

mac learn-mode independence

!



38

!System Configuration

system

management vlan 1

ip address 192.168.1.108/24


arp-request timer 0

anti-attack enable

!

!Igmp Snooping Configuration

igmp-snooping

igmp-snooping disable

igmp-snooping fast-leave disable

igmp-snooping drop-filtered enable

igmp-snooping proxy disable

igmp-snooping proxy igmpv3-support disable

igmp-snooping proxy vlan 1

!

!Radius Configuration

radius

radius disable

!

!Stp Configuration

stp

stp disable

!

!Rstp Configuration

rstp

rstp disable

!

!Dot1x configuration

dot1x disable

!

!User limit configuration

user-limit disable

!

!Loop Check configuration

loop-check trap disable

loop-check action auto-recover

loop-check time 300

!

!Dtag Configuration

dtag protocol 33024

dtag forward-tag first

!

!Dhcp Configuration



39

!

!Anti-Proxy configuration

!

!Spnm Configuration

spnm

spnm disable

spnm server-ip 0.0.0.0

spnm password www.fhn.com.cn

spnm send-access-mac disable

spnm community NETMAN

!

!Rmon configuration

!

!Ethernet Configuration

interface ethernet 1

join vlan 1 untagged

duplex auto

flow-ctrl enable


packet-limit multicast 0

packet-limit dlf 0

packet-limit b-m-dlf 0

packet-limit b-m 0


packet-limit dlf 64

stp disable

stp priority 0


sgm discovery time 30

sgm enable vlan 1

no shutdown

loop-check enable

loop-check vlan 1

dtag disable

dtag protocol disable

security-mac disable

user-limit number 0

……

!

!

!end

!

Fengine#


show running-config



40

3.1.41 show syslog

Show server configuration that system log file upload

【Command Form】

show syslog

【Parameter】

None

【Node Mode】


【Default】

None

【Using Guide】

This command is show server configuration that system log file upload



【Example】

Fengine#show syslog

Syslog server list:

Index SrvAddr Port

1 192.168.1.200 100

Fengine#


syslog server

3.1.42 show version

Show current device version

【Command Form】

show version

【Parameter】

None

【Node Mode】


【Default】

None

【Using Guide】

Use this command to show current device version

【Example】

Fengine#show version

Fengine Fengine with 24514K of memory

System uptime is 0 days 0 hours 41 minutes 46 seconds



41

Hardware Version 0.30

Software Version 3.00

System Mac Address 00:04:67:02:03:25

Compiled Apr 15 2008, 08:43:16

Copyright (c) 2000-2007 by FiberHome Networks Co.,Ltd.

Fengine#


None

3.1.43 syslog server

The server configuration of switch system log file upload.

【Command Form】

syslog server (A.B.C.D) [<1-65535>]

【Parameter】

(A.B.C.D)：server IP address

[<1-65535>]: port No.

【Node Mode】


【Default】

disable

【Using Guide】

This command is to configure server IP address and port for log file to

upload



【Example】

Fengine(config)# syslog server 192.168.1.200

Fengine(config)#


show syslog

3.1.44 telnet

Use this command to telnet

【Command Form】

telnet (A.B.C.D) [<1-65535>]

【Parameter】

(A.B.C.D)：logging device address

[<1-65535>]：port No.

【Command Mode】



42


【Default】

None

【Using Guide】

Use this command to telnet, performing management for remote device.

【Example】

Fengine#telnet 192.168.1.1

Fengine#


None

3.1.45 terminal length

User can use terminal length <0-512> to configure lines number shown at the

terminal, “no terminal length” is to restore the default configuration, the default

configuration is 25 lines.

【Command Form】

terminal length <0-512>

no terminal length

【Parameter】

<0-512>：line scope

【Node Mode】


【Default】

Show 25 lines, that is the length of the vision box

【Using Guide】

When user use terminal to display command lines number, user can

configure terminal lines under own demand. NO form is restore default

configuration.



【Example】

Fengine#terminal length 30

Fengine#


None

3.1.46 terminal monitor

Set if DEBUG is print on the screen.

【Command Form】



43

terminal monitor

no terminal monitor

【Parameter】

None

【Node Mode】


【Default】

None

【Using Guide】

terminal monitor is to set DEBUG information to be export to the screen, NO

command is to delete.



【Example】

Fengine#terminal monitor

Fengine#


None

3.1.47 timeout

Set timeout if no input on virtual terminal

【Command Form】

timeout <0-35791>

no timeout

【Parameter】

<0-35791>：timeout (unit: minute)

<0-59>：timeout（unit:second）

【Node Mode】

virtual terminal configuration mode

【Default】

10 minutes

【Using Guide】

This command is the same with screen save program of pc, the serial port

will exit to authentication node if timeout, the terminal in telnet mode will

shutdown connection. NO form of this command is to comeback default

configuration.



【Example】



44

Fengine(config-line)# timeout 5



None

3.1.48 traceroute

Test network connectivity

【Command Form】

traceroute (A.B.C.D) [<1-255>]

【Parameter】

(A.B.C.D)：destination IP address

【Node Mode】


【Default】

None

【Using Guide】

If there is the problem of network connectivity, use this command to show

the route of arrived destination IP address and record the result.



【Example】

Fengine# traceroute 192.168.1.200

Tracing route to 192.168.1.200 over a maximum of 30 hops.

1 <10ms <10ms <10ms host (192.168.1.200)

Trace route complete(192.168.1.200).

Fengine#


None

3.1.49 type FILE

Print file content

【Command Form】

type FILE

【Parameter】

FILE：file name

【Node Mode】


【Default】



45

None

【Using Guide】

Use this command to print file



【Example】

Fengine# type test

%No such file name.

Fengine#


ls，dir

3.1.50 upgrade (os|config)

Update operation system or configuration file

【Command Form】

upgrade (os|config)

【Parameter】

os：operation system

config：configuration file

【Node Mode】

system configuration mode

【Default】

None

【Using Guide】

Upgrade os or config



【Example】

Fengine(config-system)#upgrade config

This will upgrade device start configuration file.


It will take a few minutes,please wait.....

Start-config file updated.

If you want to load new configuration,use "copy start-config running-

config".

Fengine(config-system)#


ftp get，zmodem get



46

3.1.51 who

Show the users who configure the device.

【Command Form】

who

【Parameter】

None

【Node Mode】

privileged user mode，global configuration mode

【Default】

None

【Using Guide】

In system, use command “who” to show the users who configure the device.

The user before “*” is for yourself.



【Example】

Fengine#who

Line Location Idle Host(s) User

* 1 con 1 Console 00:00:00 Console admin

Fengine#


clear line，showlines

3.1.52 write file

Write current configuration into startup configuration file

【Command Form】

write file

【Parameter】

None

【Node Mode】


【Default】

None

【Using Guide】

The route of configuration file is written in system, user cannot indicate route

for configuration file, the route is default route to save configuration file.





47

【Example】

Fengine#write file

This will recover the configuration in the flash memory.


Building configuration.....

[OK]

Fengine#


show startup-config，erase startup-config

3.1.53 zero FILE

Clearup file

【Command Form】

zero FILE

【Parameter】

FILE：file name

【Node Mode】


【Default】

None

【Using Guide】

Use this command to clearup the file.



【Example】

Fengine#zero temp

Fengine#


ls，dir，remove

3.2 IP configuration command

IP（INTERNET protocol）is based on protocol of information packet,

exchanging data with computer network, IP transact address search, segment

division, grouping and signal protocol decomposition. It is the base of all other IP

protocol, as a network layer protocol, IP is including address search and

controlling information that permits data packet route.

IP configuration command is including:

gateway

ip address



48

out-band ip change

out-band ip address

3.2.1 gateway

Configure in-band network default gateway

【Command Form】

gateway (A.B.C.D)

【Parameter】

(A.B.C.D)：in-band default gateway IP address

【Node Mode】


【Default】

None

【Using Guide】

Use this command to configure in-band network gateway, NO form of this

command is to delete default gateway.



【Example】

Configure default gateway of switch main management module.

Fengine(config-system)#gateway 192.168.1.10



ip address，show system

3.2.2 ip address

Configure switch in-band IP address (only valid for switch management,

management vlan is 1 as default).

【Command Form】

ip address (A.B.C.D/M)

ip address (A.B.C.D) (A.B.C.D)

【Parameter】

A.B.C.D is for IP address, subnet mask

M is for subnet mask bit

【Node Mode】


【Default】



49

S2200ME-B SERIES SWITCH 带内 IPthe default is ：192.168.1.1

【Using Guide】

Use this command to configure switch management vlan IP address.



【Example】

Fengine(config-system)#ip address 192.168.1.1/24



gateway，show system，management vlan

3.2.6 ip arp

Designate a static arp for certain port of S2200ME-B, NO form of this command

is to delete configured static arp.

【Command Form】

ip arp (A.B.C.D) (A:B:C:D:E:F) interface <1-64>

no ip arp [A.B.C.D]

【Parameter】

A.B.C.D: IP address of static arp list

A:B:C:D:E:F：physical address of static arp list

Interface:interface need to configure arp list

【Node Mode】


【Default】

None

【Using Guide】

The port configured static arp list should be member port in the vlan of IP

address in arp list, IP address in arp list is not local IP address. When delete,

if the address is not designated, delete all arp.



【Example】

Fengine(config)#ip arp 192.168.1.11 00:00:01:00:01:01 interface 1

Fengine(config)#

Configure interface1 static arp is 192.168.1.11 00:00:01:00:01:01. if IP

address of vlan100 is 192.168.1.1, the vlan of this arp list is 100, interface1

should be member port of vlan100, otherwise, cannot configure member.

【Relevant Command】：

show ip arp



50

3.2.4 out-band ip address

set out-band ip address to the major manage module’s NM interface on switch

【Command Form】

out-band ip address (A.B.C.D/M)

out-band ip address (A.B.C.D) (A.B.C.D)

【Parameter】

(A.B.C.D): IP address;

M: subnet mask bit length

【Node Mode】


【Default】

S2200ME-B SERIES SWITCH out-band default IP is: 192.168.2.1

【Using Guide】

set out-band ip address to the major manage module’s NM interface on switch.



【Example】

Fengine(config-system)#ip address 192.168.1.1/24



show system

3.2.8 show system

Show switch system configuration

【Command Form】

show system

【Parameter】

None

【Node Mode】


【Default】

None

【Using Guide】

Show switch system network configuration.



【Example】

Fengine#show system



51

system anti-attack enable

system mac address 00.04.67.02.03.25

system mac aging time 300

system address learn mode : share

vlan tunnel disable

ip address 10.18.33.112/24

management vlan 1

gateway 0.0.0.0

out-band ip address 192.168.2.1/24

arp-request timer 0

Fengine#


None

3.3 FTP configuration command

FTP protocol configuration command is including:

ftp get

ftp put config

ftp put logging

3.3.1 ftp get

Download file from host PC to the device.

【Command Form】

ftp get (A.B.C.D) USER PASSWORD FILENAME [LOCALFILE]

【Parameter】

(A.B.C.D): IP address of host

USER: for user name of logging ftp server

PASSWORD: password for log on ftp service

FILENAME: file name that download for the host

[LOCALFILE]: file name saved on device (optional)

【Node Mode】


【Default】

None

【Using Guide】

In device practical operation and maintenance, download configuration file

or operation system file from host to device, which is to reconfigure or

upgrade operation system. This command is download file to device.





52

【Example】

Fengine(config)#ftp get 192.168.1.200 123 123 s2016mfb.bin v1.1.bin

Getting File "s2016mfb.bin" from 192.168.1.200...

1528618 bytes downloaded.

If you want to upgrade system,use "upgrade" command!

Fengine(config)#


dir

3.3.2 ftp put config

Upload configuration file to host

【Command Form】

ftp put (A.B.C.D) USER PASSWORD FILENAME config

【Parameter】

(A.B.C.D)：IP address of host PC

USER：user name for logging on ftp server

PASSWORD：password for logging on ftp server

FILENAME：file name saved on PC of uploaded config-file.

【Node Mode】


【Default】

None

【Using Guide】

During the practical operation maintenance, need to save the config-file to

host PC, this command is to upload file to the host PC.



【Example】

Fengine(config)#ftp put 192.168.1.200 123 123 aaa config

Putting data...

2391 bytes uploaded.

Fengine(config)#


ftp get (A.B.C.D) USER PASSWORD FILENAME [LOCALFILE]

3.3.3 ftp put logging

Upload log file to the host

【Command Form】

ftp put (A.B.C.D) USER PASSWORD FILENAME logging



53

【Parameter】

(A.B.C.D)：IP address of host PC

USER：user name for logging on ftp server


FILENAME：file name saved on PC of uploaded config-file.

【Node Mode】


【Default】

None

【Using Guide】

During the practical operation maintenance, need to save the config-file to

host PC, this command is to upload file to the host PC.



【Example】

Fengine(config)#ftp put 192.168.1.200 123 123 aaa logging

Putting data...

2391 bytes uploaded.

Fengine(config)#


None

3.4 SNMP configuration command

SNMP protocol configuration command are:

snmp community NAME (ro|rw) [view VIEW-NAME]

snmp trap-server (A.B.C.D) <1-65535> (v1|v2|v3)

snmp view VIEW-NAME OID-TREE (included|excluded)

snmp group GROUP-NAME read-view VIEW write-view VIEW notify-

view VIEW

snmp user USER-NAME group GROUP-NAME

show

3.4.1 snmp community NAME (ro|rw) [view VIEW-NAME]

Configure snmp community

【Command Form】

snmp community NAME (ro|rw)

no snmp community NAME

【Parameter】

NAME：community name

(ro|rw)：weight. Ro is for only –read, rw is for read-and-write

view VIEW-NAME: view name, optional



54

【Default】

None

【Node Mode】


【Using Guide】

In order to manage remote device with snmp network management, should

set a community. Then the administrator can use this community to read

information of the device, and make configuration and adjustment with the

information. NO form of this command is to delete a community.



【Example】

Fengine(config)#snmp community network rw

This instance means create a community which can read and write MIB

variable and the logging password is network.


None

3.4.2 snmp trap-server

Configure IP address, server IP address, version or port for snmp trap server.

【Command Form】

no snmp trap-server (A.B.C.D)

no snmp trap-server (A.B.C.D) SECURITYNAME

snmp trap-server (A.B.C.D) <1-65535> SECURITYNAME (v1|v2|v3)

snmp trap-server (A.B.C.D) <1-65535> SECURITYNAME v3 (auth|priv)

snmp trap-server (A.B.C.D) SECURITYNAME (v1|v2|v3)

snmp trap-server (A.B.C.D) SECURITYNAME v3 (auth|priv)

【Parameter】

(A.B.C.D): snmp trap server address

(v1|v2|v3): snmp trap version, v1 is for snmpv1, v2 is for snmpv2, v3 is for

snmpv3

<1-65535>: trap server port, default is 162.

SECURITYNAME: community name

(auth|priv): authentication or encryption

【Default】

None

【Node Mode】


【Using Guide】

In order to manage device trap at the remote, use this command to configure

IP address and version of snmp trap server by setting IP address of device



55

trap information receiver. NO form of this command is to delete a snmp trap

server.



【Example】

Fengine(config)# snmp trap-server 10.18.33.124 public v3 auth

Fengine(config)#


None

3.4.3 snmp view VIEW-NAME OID-TREE (included | excluded）

Configure snmp view information

【Command Form】

snmp view VIEW-NAME OID-TREE included

no snmp view VIEW-NAME OID-TREE

【Parameter】

VIEW-NAME: configured snmp view name

OID-TREE: oid information shown in this view

【Default】

None

【Node Mode】


【Using Guide】

For snmpv3



【Example】

Fengine(config)# snmp view v3 1.3.6 included

Fengine(config)#

Configure nodes under 1.3.6 shown in view 3.


None

3.4.4 snmp group

Configure snmp user group associated with certain snmp view.

【Command Form】

snmp group GROUP-NAME read-view VIEW write-view VIEW notify-view

VIEW



56

no snmp group GROUP-NAME

【Parameter】

GROUP-NAME: user group name

VIEW: view name

【Default】

None

【Node Mode】


【Using Guide】

SNMPv3 version supports this command, use this command to configure

accessing authority of OID for different user group, improving security.



【Example】

Fengine(config)#snmp group aaa read-view v3 write-view v3 notify-view v3

Fengine(config)#


snmp view

3.4.5 snmp user

Configure snmp user, this user belong to an existing user group.

【Command Form】

snmp user USER-NAME group GROUP-NAME

no snmp user USER-NAME

【Parameter】

USER-NAME：user name

GROUP-NAME：user group name

【Default】

None

【Node Mode】


【Using Guide】

In SNMPv3, only authorized user can access OID in associated view of this

user group.



【Example】

Fengine(config)# snmp user admin group aaa

Fengine(config)#



57


snmp group

3.4.6 show memory snmp

Show snmp memory distribution

【Command Form】

show memory snmp

【Parameter】

None

【Default】

None

【Node Mode】


【Using Guide】

Show snmp memory distribution.



【Example】

Fengine#show memory snmp

Status Bytes Blocks Avg block Max block

------ ---------- -------- ---------- ----------

current

free 99240 445 223 89832

alloc 228424 5120 44 -

cumulative

alloc 6201392 42045 147 -

total memory 327680 bytes. 69.00 percent used.

Fengine#


None

3.4.7 show snmp community

Show current community user information

【Command Form】

show snmp community

【Parameter】

None

【Command Mode】

Privileged mode



58

【Default】

None

【Using Guide】

None

【Example】

Fengine# show snmp community

Community Privilege Status View

public ro VALID internet

NETMAN rw VALID internet

Fengine#


snmp community

3.4.8 show snmp trap-server

Show snmp trap server

【Command Form】

show snmp trap-server

【Parameter】

None

【Default】

None

【Node Mode】


【Using Guide】

Use this command to show snmp trap server IP address, version and status



【Example】

Fengine#show snmp trap-server

IP-Address Port Ver Status Level Name

10.18.33.124 162 V3 active Auth public

Fengine#


None

3.4.9 show snmp group

Show snmp group information

【Command Form】

show snmp group



59

【Parameter】

None

【Default】

None

【Node Mode】


【Using Guide】

Use this command to show snmp group, including group view.



【Example】

Fengine#show snmp group

Group readView WriteView NodifyView

initial sysview sysview sysview

initial internet internet internet

Fengine#


None

3.4.10 show snmp user

Show snmp user information

【Command Form】

show snmp user

【Parameter】

None

【Default】

None

【Node Mode】


【Using Guide】

Use this command to show snmp user information, including user

authentication.



【Example】

Fengine#show snmp user

User Group

initmd5 initial

initsha initial



60

initnone initial

Fengine#


None

3.4.11 show snmp view

Show snmp view

【Command Form】

show snmp view

【Parameter】

None

【Default】

None

【Node Mode】


【Using Guide】

Use this command to show snmp view.



【Example】

Fengine#show snmp view

View Type OidTree

sysview included 1.3.6.1.2.1.1

internet included 1.3.6

Fengine#


None

3.5 system configuration command

System configuration command are including:

anti-attack

arp-request timer

config-file auto-save

config-file auto-upload

config-file check-timer

loop-check action

loop-check time



61

loop-check trap

mac aging-time

mac learn-mode

management acl

management vlan

no ip arp

show auto-config

show dynamic-mac

show ip arp

show loop-check

show management acl

show system

show upgrade-info

user-limit (disable|enable)

username

zmodem get

zmodem put

bpdu tunnel mac (AA:BB:CC:DD:EE:FF) uplink-port <0-64>

3.5.1 anti-attack

Enable or disable switch anti-attack

【Command Form】

anti-attack (enable|disable)

【Parameter】

(enable|disable)：enable, disable

【Node Mode】


【Default】

enable

【Using Guide】

This command is to enable switch anti-attack



【Example】



62

Fengine(config-system)# anti-attack enable



show system

3.5.2 arp-request timer

Configure arp request timer

【Command Form】

arp-request timer <0-3600>

【Parameter】

<0-3600>：time

【Node Mode】


【Default】

0

【Using Guide】

Configure arp request timer, when the timer is not 0, the switch will

periodically send arp request to switch gateway (if the switch has not

configured network management, the switch will send destination IP to be its

own arp request of in-band network management IP). The significance of this

function: when certain device in the network has error or need to be replaced,

the new device IP address should be the same with the previous device, but

new device mac address is different with the old device, maybe the other

device reserved the old log, after this function is enabled, the device will send

arp request to make other device update mac mapping to IP.



【Example】

Fengine(config-system)# arp-request timer 100



show system

3.5.3 config-file auto-save

Enable or disable switch auto-save configuration file.

【Command Form】

config-file auto-save (enable|disable)

【Parameter】

(enable|disable)：

【Node Mode】



63


【Default】

disable

【Using Guide】

This command is to enable or disable switch auto-save config-file, after this

function is enabled, switch configuration will be auto-saved into startup

config-file if the configuration is changed.



【Example】

Fengine(config)# config-file auto-save enable

Fengine(config)#


None

3.5.4 config-file auto-upload

Configure switch configuration file to auto-upload

【Command Form】

config-file auto-upload ( enable|disable)

config-file auto-upload (A.B.C.D) USER PASSWORD FILENAME

【Parameter】

enable：enable auto-upload

disable：disable auto-upload

A.B.C.D： IP address of uploading server

USER：the user name for logging on ftp server


FILENAME：saved config-file name

【Node Mode】


【Default】

disable

【Using Guide】

This command is to configure switch config-file auto-upload mode and

server configuration: when user select the mode of period auto-upload, the

config-file of the device will be periodically uploaded to the server; when

user select the mode of variational upload, the config-file of the device will

be uploaded to the server only when the configuration is changed in each

uploading period, if there is no configuration change, it will not upload in the

period; when configuration is disabled, auto-upload config-file is disabled;



64

user can configure saved config-file name, if not configured, a file name will

be auto-formed.



【Example】

Fengine(config)# config-file auto-upload 192.168.1.200 123 123 config.txt

Fengine(config)#


None

3.5.5 dot1q ingress-filter

Show whether each interface of switch is enabled IEEE802.1Q ingress filter.

【Command Form】

dot1q ingress-filter (enable|disable)

【Parameter】

(enable|disable)

【Node Mode】


【Default】

disable

【Using Guide】

This command is to show whether each interface of switch is enabled 802.1Q

ingress filter. When an interface doesnot belong to the VLAN of received

data message, ingress-filter is to show whether discard this data message, if

ingress-filter is enable, this data message will be discard; if disable, then not

discard this data message, and transmit this data message to corresponding

vlan.



【Example】

Fengine(config)#dot1q ingress-filter enable

Fengine(config)#


dot1q accept (all|tagged-only)

3.5.6 loop-check action

shutdown or isolate port if check out loop-check

【Command Form】

loop-check action (shutdown|isolution)



65

【Parameter】

shutdown：shut loop-back check

isolation：isolation

【Node Mode】


【Default】

isolution

【Using Guide】

This command is to set whether shutdown the port or auto-discover loop is

disappeared or not when port is detecrting the loop (if the loop is disappeared,

recover data forwarding for interface)



【Example】

Fengine(config)# loop-check action isolution

Fengine(config)#


None

3.5.7 loop-check expire-time

Set system loop-check timeout

【Command Form】

loop-check time <0-65535>

【Parameter】

<0-65535>：loop-check timeout（unit: second）

【Node Mode】


【Default】

0

【Using Guide】

This command is to set system loop-check timeout, only when loop-check

operation mode is shutdown, the time is valid.



【Example】

Fengine(config)# loop-check expire-time 500

Fengine(config)#


None



66

3.5.8 loop-check trap

Enable or disable system loop-check trap

【Command Form】

loop-check trap (enable|disable)

【Parameter】

enable:enable system loop-check trap

disable:disable system loop-check trap

【Node Mode】


【Default】

disable

【Using Guide】

This command is to enable or disable system loop-check trap, when this

parameter is enabled, if a certain interface find loop, then send SNMP trap to

network management platform.



【Example】

Fengine(config)# loop-check trap enable

Fengine(config)#


None

3.5.9 mac aging-time

Set switch MAC table aging time.

【Command Form】

mac aging-time <13-65535>

【Parameter】

<13-65535>：aging time（unit: second）

【Node Mode】


【Default】

300 seconds

【Using Guide】

This command is to set switch MAC list aging time



【Example】



67

Fengine(config)# mac aging-time 100

Fengine(config)#


None

3.5.10 mac learn-mode

Configure switch MAC address learning mode

【Command Form】

mac learn-mode (share|independence)

【Parameter】

(share|independence): share learning mode, independence learning mode

【Node Mode】


【Default】

independence

【Using Guide】

This command is to set switch mac learning mode



【Example】

Fengine(config)# mac learn-mode share

Fengine(config)#


show system

3.5.11 management acl

Configure acl of telnet, snmp, web service.

【Command Form】

management acl (enable|disable)

management acl (A.B.C.D) (A.B.C.D)(telnet|web|snmp|all)

management acl (A.B.C.D/M) (telnet|web|snmp|all)

no management acl (A.B.C.D)

【Parameter】

(enable|disable): enable or disable ACL

(A.B.C.D): remote host ip address

(A.B.C.D): subnet mask

【Node Mode】


【Default】



68

Permit any pc to log on

【Using Guide】

In order to assure device security, configure the device to be remote logged

on and snmp, web network management for reliable IP, which can efficiently

reduce the rate of being attacked and guarantee normal operating; NO form

of this command is to delete a network manageable IP address; when

disabled, permit any host to log on.



【Example】

Fengine(config)#management acl 10.5.6.4/24 all

Fengine(config)#

The above command is to configure host 10.5.6.4 into a reliable user for

telnet, snmp, web management.


None

3.5.12 management vlan

Configure switch management vlan

【Command Form】

management vlan <1-4094>

【Parameter】

<1-4094>：vlan id

【Node Mode】


【Default】

1

【Using Guide】

Use this command to configure switch management vlan



【Example】

Fengine(config-system)#management vlan 2



None

3.5.13 no ip arp

Clear switch ARP list information



69

【Command Form】

no ip arp [(A.B.C.D)]

【Parameter】

[(A.B.C.D)]：ip address in arp (optional)

【Node Mode】


【Default】

None

【Using Guide】

This command is to clearup ARP information learned by switch, it also can

clear one or all.



【Example】

Fengine(config)#no ip arp

Fengine(config)#


show ip arp

3.5.14 show auto-config

Show associated configuration information of switch configuration file.

【Command Form】

show auto-config

【Parameter】

None

【Node Mode】


【Default】

None

【Using Guide】

This command is to show associated configuration of switch configuration

file, including auto-save configuration and auto-upload configuration.



【Example】

Fengine#show auto-config

Auto-Save : Disable

Auto-Upload : Disable

Fengine#



70


config-file auto-save，config-file auto-upload

3.5.15 show dynamic-mac

Show switch dynamic mac information.

【Command Form】

show dynamic-mac (AA:BB:CC:DD:EE:FF)

【Parameter】

(AA:BB:CC:DD:EE:FF)：dynamic mac address

【Node Mode】


【Default】

None

【Using Guide】

This command is to show switch a certain dynamic mac vlan and interface

information.



【Example】

Fengine#show dynamic-mac 00:11:11:17:A6:70

If Vlan MAC-Address

2 1 00:11:11:17:A6:70

Fengine#



3.5.16 show ip arp

Show information of switch ARP list.

【Command Form】

show ip arp

【Parameter】

None

【Node Mode】


【Default】

None

【Using Guide】

This command is to show switch ARP list.




71


【Example】

Fengine#show ip arp

Interface IP-Address MAC-Address type

Vlan 1 192.168.1.200 00:0B:0D:7B:45:6E dynamic

Fengine#


show ip arp

3.5.17 show loop-check

Show switch loop-check configuration

【Command Form】

show loop-check

【Parameter】

None

【Node Mode】


【Default】

None

【Using Guide】

This command is to show switch loop-check configuration.



【Example】

Fengine#show loop-check

LoopCheck Action : isolation

LoopCheck ExpireTime : 0, for shutdown action only.

LoopCheck Trap : disable

Fengine#


None

3.5.18 show management acl

Show management ACL to filter snmp, web, telnet access.

【Command Form】

show management acl

【Parameter】

None

【Node Mode】



72


【Default】

None

【Using Guide】

This command is to show acl of snmp, web, telnet.



【Example】

Fengine#show management acl

%Allow any ip address to access from snmp,web,telnet.

Fengine#


management acl

3.5.19 show system

Show switch system configuration

【Command Form】

show system

【Parameter】

None

【Node Mode】


【Default】

None

【Using Guide】

This command is to show switch system configuration.



【Example】

Fengine#show system

system anti-attack enable

system mac address 00.04.67.30.40.27

system mac Aging time 300

system address learn mode : independence

ip address 192.168.1.1/24

gateway 0.0.0.0

management vlan 1

out-band ip address 192.168.2.1/24


arp-request timer 0



73

Fengine#


None

3.5.20 username

Configure switch network management user

【Command Form】

username WORD group (administrators|operators|users|guests) password

PASSWORD

no username USERNAME

【Parameter】

USERNAME: user name

Administrators: super user group (possess all controlling weight for switch)

Opera tors: operators group (all control except adding/deleting user)

Users: common user group (can configure switch, cannot add or delete user)

Guests: guest group (only show switch configuration)

PASSWORD: password

【Node Mode】


【Default】

None

【Using Guide】

Add or delete network management user: only super user group can

configure switch network management user, the detail authority of each user

group can refer to Parameter.



【Example】

Fengine(config)# username test group administrators password test

Add a super user with name “test”, password “test”.


adduser，show running-config

3.5.21 zmodem get

Switch serial port receiving file

【Command Form】

zmodem get

【Parameter】

None



74

【Node Mode】


【Default】

None

【Using Guide】

This command is to receive file with serial port.



【Example】

Fengine(config)#zmodem get

ZMODEM Receive: Waiting for Sender ...

**�B0000000039a32

�**�B0000000039a32

� Zmodem-Receive "STARTCFG", 11276 bytes, 0 minutes

If you want to update system,use "upgrade" command!

Fengine(config)#


zmodem put

3.5.22 zmodem put

Switch serial port uploading file

【Command Form】

zmodem put FILENAME

zmodem put config

【Parameter】

FILENAME：uploaded file name

【Node Mode】


【Default】

None

【Using Guide】

This command is to upload file through serial port, zmondem put config isto

upload config-file.



【Example】

Fengine(config)#zmodem put config

ZMODEM send: Waiting for Receiver ...

Zmodem-Send "Ram:/flash/startcfg", 0 bytes 0 minnutes

**000000000000



75

� 0 bytes uploaded

Fengine(config)#

Fengine(config)#zmodem put download

ZMODEM send: Waiting for Receiver ...

Zmodem-Send "Ram:/flash/download", 11276 bytes 0 minnutes

**000000000000

� 11276 bytes uploaded

Fengine(config)#


zmodem get

3.5.23 bpdu tunnel mac (AA:BB:CC:DD:EE:FF) uplink-port <0-64>

Contorl forwarding port of stp、802.1X and SGM protocol packet.

【Command Form】

bpdu tunnel mac (AA:BB:CC:DD:EE:FF) uplink-port <0-64>

【Parameter】

AA:BB:CC:DD:EE:FF: mac address

<0-64>: interface No.

【Node Mode】


【Default】

None

【Using Guide】

This command is to control forwarding port of stp、802.1X and SGM protocol

packet, 0 is for sending all ports except cpu, 1 is for sending cpu port, other value

is for sending to a certain port.



【Example】

Fengine(config)#bpdu tunnel mac 11:4C:B0:23:56:46

Fengine(config)#


show sytem

3.6 STP configuration command

STP configuration command are including:

stp (enable|disable)



76

stp alt-without-delay (enable|disable)

stp bpdu-protection (enable|disable)

stp config-name STRING

stp forward-delay

stp hello-time

stp max-age

stp max-hop

stp mode (stp|rstp|mstp)

stp priority <0-61440>

stp revision-level <0-65535>

stp transmit-limit <1-255>

stp vlan VLANLIST

stp instance <1-15>

stp instance <1-15> priority <0-61440>

stp instance <1-15> vlan VLANLIST

stp compliance (dot1s|dot1d)

stp edge-port (enable|disable)

stp fast-agree (enable|disable)

stp loop-protection (enable|disable)

stp loopback-check (enable|disable)

stp mcheck (enable|disable)

stp path-cost <0-200000>

stp point-to-point (true|false)


stp root-protection (enable|disable)

stp instance <1-15> loop-protection (enable|disable)


stp instance <1-15> root-protection (enable|disable)

show stp

show stp config

show stp information



77

show stp interface

show stp intstance interface

3.6.1 stp (enable|disable)

Enable or disable STP protocol

【Command Form】


【Parameter】

enable：enable STP

disable：disable STP

【Default】

disable

【Node Mode】

STP configuration mode, interface configuration mode

【Using Guide】

Stp protocol can detect and forbid network loop. It set up a copy link between

switch, bridge and switch. So the switch can communicate with other bridged

device, and there is only one route between any two workstations. When the

main link is down, it will start the copy link.


S2200ME-B series switch

【Example】

Fengine(config-stp)#stp enable

Fengine(config-stp)#

【Related Command】

show stp

3.6.2 stp alt-without-delay (enable|disable)

Enable or disable switch STP fast switching function.

【Command Form】

stp alt-without-delay (enable|disable)

【Parameter】

enable：enable switch fast switching function

disable：disable switch fast switching function

【Default】

disable

【Node Mode】

STP configuration mode



78

【Using Guide】

This command is to configure switch fast switching function. As default,

switch fast switching function is disabled. If switch port link is disconnected,

network topology will be shaking and stp will be re-account. Generally, port

status change should be after Forward Delay then enter forward status. Fast

switching function can help port implement switching without delay. After

switch is enabled fast switching function, if root port or designated port is

disabled, the substitute port or backup port will enter forward status without

delay.



【Example】

Fengine(config-stp)#stp alt-without-delay enable



show stp

3.6.3 stp bpdu-protection (enable|disable)

Configure rstp BPDU protection.

【Command Form】

stp bpdu-protection (enable|disable)

【Parameter】

enable: enable switch BPDU protection ;

disbale: disable switch BPDU protection;

【Default】

disable

【Node Mode】


【Using Guide】

Configure switch BPDU protection. Command disable is to restore default

operation of switch BPDU protection. As default, BPDU protection will not

be enabled. For accessing layer device, accessing port is generally connected

with PC or file server, at this time, accessing port is set to be edge port to

realize fast remove for these ports; when these ports received configuration

information, system will auto set these ports to be non-edge port and re-

account stp, which will cause network topology shaking. Normally, edge port

will not receive stp configuration information. If someone fabricate

configuration and attack switch, network shaking will be caused. BPDU

protection will prevent this kind of network attack. After switch is enabled

BPDU protection, if edge port received configuration information, system will



79

disable these ports, and notify administrator to disable these ports by MSTP.

The disabled edge ports can be only restored by network administrator.



【Example】

Fengine(config-stp)#stp bpdu-protection enable



show stp

3.6.4 stp config-name STRING

Configure switch MST domain name

【Command Form】

stp config-name STRING

【Parameter】

STRING：domain name

【Default】

F-Engine

【Node Mode】


【Using Guide】

Set switch MST domain name. as default, switch MST domain ame is F-

Engine. Switch domain name is used to identify MST domain that switch

belong to together with MST domain VLAN mapping list, MSTP edition

level.



【Example】

Fengine(config-stp)# stp config-name wuhan



show stp

3.6.5 stp forward-delay

Configure switch stp forward delay

【Command Form】

stp forward-delay <4-30>

【Parameter】



80

<4-30>：time range 4-30 second

【Node Mode】


【Default】

15 second

【Using Guide】

Forward-delay is the waiting time when listen-learn-forward status change



【Example】

Fengine(config-stp)#stp forward-delay 25



show stp

3.6.6 stp hello-time

Configure switch stp bridge hello time.

【Command Form】

stp hello-time <1-10>

【Parameter】


【Node Mode】


【Default】

2 second

【Using Guide】

Use this command to set time interval for root node device to send

configuration information.



【Example】

Fengine(config-stp)#stp hello-time 8



show stp

3.6.7 stp max-age

Configure max age for BPDU configuration received by switch stp.



81

【Command Form】

stp max-age <6-40>

【Parameter】


【Node Mode】


【Default】

20 second

【Using Guide】

This command is to set max age for BPDU configuration received by switch,

if no BPDU is received from root within timeout, then switch will restart root

bridge selection.



【Example】

Fengine(config-stp)#stp max-age 20



show stp

3.6.8 stp max-hop

Configure max hop of MST domain.

【Command Form】

stp max-hop <1-40>

【Parameter】


【Node Mode】


【Default】

20 second

【Using Guide】

This command is to set max hop of MST domain on switch. As default, max

hop of MST domain is 20. On CIST and MSTIs, configure max hop of

domain root to be max hop of MST domain, it limit scale of MST domain.

Begin with stp root bridge in MST domain, hop will reduce 1 after the

configuration in domain passing each switch; switch will discard the

configuration with hop 0, the switch without max hop cannot join stp

accounting, then scale of MST domain is limited.

If the current switch become CIST root bridge or MSTI root bridge of MST

domain, the max hop configured by this switch will become network



82

dismeter of this stp, then scale of this stp in current MST domain is limited.

The switch not be stp root bridge in MST domain will adopt max hop

parameter set by root bridge.



【Example】

Fengine(config-stp)#stp max-hop 20



show stp

3.6.9 stp mode (stp|rstp|mstp)

Configure switch MSTP working mode

【Command Form】

stp mode (stp|rstp|mstp)

【Parameter】

stp：switch send out STP BPDU；

rstp：switch send out RSTP BPDU；

mstp：switch send out MSTP BPDU

【Node Mode】


【Default】

mstp

【Using Guide】

This command is to set switch MSTP working mode. As default, switch

working mode is MSTP mode. MSTP have three working modes for

compatibility of STP/RSTP:

STP mode: switch send out STP BPDU;

RSTP mode: switch send out RSTP BPDU；

MSTP mode: switch send out MSTP BPDU



【Example】

Fengine(config-stp)#stp mode stp



show stp

3.6.10 stp priority <0-61440>



83

Configure switch stp priority

【Command Form】


【Parameter】

<0-61440>：stp priority range 0-61440

【Node Mode】


【Default】

32768

【Using Guide】

Use this command to choose root device, root interface and appointed

interface. The highest priority device will be the STA root device, but if all

devices have the same priority, the device, which MAC is the smallest, will

be the root device.



【Example】

Fengine(config-stp)#stp priority 32768



show stp

3.6.11 stp revision-lever <0-65535>

Configure switch MSTP edition level

【Command Form】

stp revision-lever <0-65535>

【Parameter】

<0-65535>：MSTP edition level

【Node Mode】


【Default】

0

【Using Guide】

This command is to configure switch MSTP edition level. As default, MSTP

edition level is 0. MSTP edition level and domain name, VLAN mapping list

are identified MST domain that switch belong to.





84

【Example】

Fengine(config-stp)#stp revision-lever 2



show stp

3.6.12 stp transmit-limit <1-255>>

Configure max transmit limit of sending stp within each hello time.

【Command Form】

stp transmit-limit <0-255>

【Parameter】

<0-255>：message number

【Node Mode】


【Default】

10

【Using Guide】

This command is to set max transmit limit of sending stp within each hello

time. As default, the max number is 10. if number is larger, the transmit

within hello time is more, but more resource will be occupied. The

appropriately number will limit BPDU number sent within each Hello Time,

prevent MSTP occupying much bandwidth resource during network

topology shaking.



【Example】

Fengine(config-stp)#stp transmit-limit 100



show stp

3.6.13 stp vlan VLANLIST

Configure stp vlan mapping

【Command Form】

stp vlan VLANLIST

【Parameter】

VLANLIST：vlan list

【Node Mode】



85


【Using Guide】

This command is to map designated VLAN list to instance cist, that is

instance 0. no stp vlan is to restore corresponding relationship of cist and

vlan to be default. As default, all created VLAN will be mapped to CIST.



【Example】

Fengine(config-stp)# stp vlan 1



show stp

3.6.14 stp instance <1-15>

Create or delete an instance

【Command Form】

stp instance <1-15>

no stp instance

【Parameter】

<1-15>：instance No.

【Node Mode】


【Using Guide】

stp instance is to create an instance, no stp instance is to delete an existed

instance, as default, stp instance 0 is cist



【Example】

Fengine(config-stp)# stp instance 1



show stp instance

3.6.15 stp instance <1-15> priority <0-61440>

Configure instance priority

【Command Form】


【Parameter】




86

<0-61440>: prirority

【Node Mode】


【Default】

32768

【Using Guide】

Modify designated instance priority



【Example】

Fengine(config-stp)# stp instance 1 priority 2999



show stp instance

3.6.16 stp instance <1-15> vlan VLANLIST

Map designated VLAN list to designated stp instance

【Command Form】

stp instance <1-15> vlan VLANLIST

no stp instance <1-15> vlan

【Parameter】


VLANLIST: vlan值

【Node Mode】


【Using Guide】

This command is to map designated VLAN list to designated stp instance,

then the vlan is deleted from cist. As default, all VLAN are according to CIST,

that is instance 0.before configure instance vlan, the vlan should be created,

otherwise, the configuration command will return error. no stp instance

instance-vlan vlan is to delete vlan list of designated instance, the vlan will

map to instance cist again. Before configure instance priority and vlan list,

create the instance first. MSTP is adopting VLAN list to describe mapping

relationship between VLAN and stp instance. User can configure this VLAN

mapping list with this command: each VLAN is divided to different stp

instance according to user configuration. user cannot map one VLAN to multi

different instance, when user remap a mapped VLAN to a different instance,

the original mapping relationship will be auto delete.




87


【Example】

Fengine(config-stp)# stp instance 1 vlan 1



show stp instance

3.6.17 stp compliance (dot1s|dot1d)

Configure port MSTP format.

【Command Form】

stp compliance (dot1s|dot1d)

【Parameter】

dot1s: port MSTP format is mstp protocol format

dot1d: port MSTP format is stp protocol format

【Node Mode】

Interface configuration mode

【Default】

dot1s

【Using Guide】

This command is to set port MSTP format, as default, port MSTP format is

dot1s. user can realize intercommunication with the peer end device.



【Example】

Fengine(config-eth-1)#stp compliance dot1s

Fengine(config-eth-1)#


show stp interface

3.6.18 stp edge-port

Configure stp protocol port edge port status feature.

【Command Form】

stp edge-port <enable|disable>

【Parameter】

enable: configure port to be edge port

diable: configure port to be unedge port

【Node Mode】




88

【Default】

Default is disable

【Using Guide】

This command is to configure switch stp port edge port attribute.



【Example】

Fengine(config-eth-1)#stp edge-port enable



show stp interface

3.6.19 stp fast-agree

Enable or disable port fast agree

【Command Form】

stp fast-agree <enable|disable>

【Parameter】

Enable: enable port fast agree

Diable: disable port fast agree

【Node Mode】


【Default】

Default is disable

【Using Guide】

This command is enable or disable port fast agree, as default, port fast agree

is disabled. In network, since switch of some manufacturer is configured

private protocol with stp, then upriver designated port cannot realize status

fast agree when those switch are used as upriver switch which is

intercommunicating with Engine switch operating MSTP. In order to avoid

this situation, switch provide fast agree, user can enable fast agree on Engine

switch as downriver switch, if the port is root port, it will auto send

agreement after it received proposal from upriver designated port, but not

send agreement while waiting agreement from upriver. The designated port

of upriver switch can operate status fast agree, and this function is valid when

root port or Alternate port is configured fast agree.



【Example】

Fengine(config-eth-1)#stp fast-agree enable




89


show stp interface

3.6.20 stp loop-protection

Enable or disable loop protection.

【Command Form】

stp loop-protection <enable|disable>

【Parameter】

enable: enable port loop protection

diable: disable port loop protection

【Node Mode】


【Default】

Default is disable

【Using Guide】

This command is to enable or disable loop protection. As default, port loop

protection is disabled. With BPDU received from upriver switch, switch can

keep root poer and other blocked port status. But since link block or single

direction link fault, these port will not receive BPDU from upriver switch.

Then the switch will reselect root port, root port will change into designated

port, and blocked port will change to forward status, then exchange network

will form loop. Loop protection will limit this loop forming. After loop

protection is enabled, if link is blocked or single direction link is fault, the

root port will change to designated port,the port status will be Discarding

status; the blocked port will also change to designated port, the port status is

Discarding status and not forward message, no loop will be formed in

network. This function is valid is valid for root port, Alternate port and

Backup port.



【Example】

Fengine(config-eth-1)#stp loop-protection enable



show stp interface

3.6.21 stp loopback-check

Enable or disable port loop check.

【Command Form】



90

stp loopback-check <enable|disable>

【Parameter】

enable: enable port loop check

diable: disable port loop check

【Node Mode】


【Default】

Default is disable

【Using Guide】

This command is to enable or disable loop check. As default, port loop

protection is disabled. For accessing layer device, once accessing port

connection network have loop, then message will keep cycling and increasing

in the loop, even form broadcast storm. In this situation, the network will not

available. In order to prevent this situation, accessing port is enabled

Loopback protection, if BPDU sent out by its own is received, then block the

port, and notify the administrator.



【Example】

Fengine(config-eth-1)#stp loopback-check enable



show rstp interface

3.6.22 stp mcheck

Enable or disable port mcheck function

【Command Form】

stp mcheck <enable|disable>

【Parameter】

enable: enable port mcheck function

disable: disable port mcheck function

【Node Mode】


【Default】

Default is disable

【Using Guide】

This command is to execute mcheck to port, as default, port mcheck function

is disabled. If MSTP switch port is connecting STP/RSTP switch, the port

will be change to STP/RSTP working mode. If STP/RSTP switch is



91

shutdown or removed, the port can not auto change to MSTP mode for

operation. Execute mcheck on the port, the port will return MSTP mode for

operation.



【Example】

Fengine(config-eth-1)#stp mcheck enable



show rstp interface

3.6.23 stp pathcost

Configure rstp port path cost.

【Command Form】

stp pathcost <0-200000>

【Parameter】

<1-200000>：switch port path cost

【Node Mode】


【Using Guide】

This command is to set port path cost, as default, switch will auto set cost

according to port rate. This command is to make user set path cost of cist and

all instance. The port path cost can influence port role selection, when port

path cost change, MSTP will re-account port role and execute status agree.



【Example】

Fengine(config-eth-1)#stp pathcost 2000



show rstp interface

3.6.24 stp point-to-point

Configure stp port P2P link status.

【Command Form】

stp point-to-point <true|false >

【Parameter】

true: configure port working under P2P link status

false: configure port working under non-P2P link status



92

【Node Mode】


【Default】

Default is true

【Using Guide】

This command is to set whether the link connecting with designated port is

P2P link. As default, P2P parameter is set to be ture. When port is connecting

with non-P2P link, port status can not fast remove. This configuration is valid

for CIST and MSTI. When the port is set to be P2P link connection or non-

P2P link connection, tbe port is set to be connecting with P2P link or non-

P2P link on all stp instance. If practical physical link connecting with port is

not P2P link, but user wrongly configure port connecting with P2P link,

which will cause temporary loop.



【Example】

Fengine(config-eth-1)#stp point-to-point false



show rstp interface

3.6.25 stp priority <0-240>

Configure port stp priority

【Command Form】


【Parameter】

<0-255>：port stp priority range is 0-255, priority is smaller, the port

priority is higher.

【Node Mode】


【Default】

128

【Using Guide】

This command is to set stp port priority, the port that connecting designated

switch and the same subnet with smallest priority is the designated port.



【Example】

Fengine(config-eth-1)#stp priority 128



93



show stp interface

3.6.26 stp root-protection

Enable or disable port root protection

【Command Form】

stp root-protection <enable|disable>

【Parameter】

enable: enable port root protection

diable: disable port root protection

【Node Mode】


【Default】

Default is disable

【Using Guide】

This command is to enable or disable port root protection, as default, port

root protection is disabled. Because of error configuration or vicious attack,

legal root bridge may receive higher priority configuration. then current root

bridge will lose location and cause network topology structure error change.

Since this change is illegal, the flow which should pass through high speed

link is lead to low speed link, then network is blocked. Root protection can

prevent this situation. For the port which set Root protection, the port role of

all instance only keep to be destgnated port. Once this kind of port received

configuration of high priority, it will be selected to be non-designated port,

these port status will be set Discarding status, not forward message. If no

better configuration is received within enough time, the port will restore

original normal status.



【Example】

Fengine(config-eth-1)#stp root-protection enable



show rstp interface

3.6.27 stp instance <1-15> loop-protection

Configure loop protection for port in instance.

【Command Form】

stp instance <1-15> loop-protection <enable|disable>



94

【Parameter】


enable: enable port loop protection

diable: disable port loop protection

【Node Mode】


【Default】

Default is disable

【Using Guide】

This command is to configure loop protection for port in instance



【Example】

Fengine(config-eth-1)#stp instance 1 loop-protection enable



show rstp interface

3.6.28 stp instance <1-15> priority <0-240>

Configure stp priority for port in instance.

【Command Form】


【Parameter】


<0-240>：port stp priority range 0-240，smaller priority value with high

priority

【Node Mode】


【Default】

128

【Using Guide】

This command is to set priority for port in instance, smaller priority value

with high priority.



【Example】



95

Fengine(config-eth-1)#stp instance 1 priority 128



show stp interface

3.6.29 stp instance <1-15> root-protection

Configure root protection status for port in instance

【Command Form】

stp instance <1-15> root-protection (enable|disable)

【Parameter】


enable: enable port root protection

diable: disable port root protection

【Node Mode】


【Default】

Default is disable

【Using Guide】

This command is to configure root protection status for port in instance



【Example】

Fengine(config-eth-1)#stp instance 1 root-protection enable



show rstp interface

3.6.30 show stp

Show configuration of switch stp.

【Command Form】

show stp

【Parameter】

None

【Node Mode】

Privileged user mode

【Default】



96

None

【Using Guide】

Show switch stp configuration



【Example】

Fengine#show stp

Oper Configuration:

stp mode:STP

BPDU-Protection:disabled

Bridge Times:Hello 2s MaxAge 20s FwDly 15s MaxHop 20s

Format selector:0

stp config name: F-Engine

Revision level:0

Instance priority Vlans Mapped

0 32768 1-2

Fengine#


None

3.6.31 show stp config

Show whether switch stp is enabled or not

【Command Form】

show stp config

【Parameter】

None

【Node Mode】


【Default】

None

【Using Guide】

Show whether switch stp is enable or not



【Example】

Fengine#show stp config

!

!stp configuration

stp

stp enable



97

stp vlan 1-2

stp mode stp

Fengine#


None

3.6.32 show stp information

Show switch stp operation status

【Command Form】

show stp information

【Parameter】

None

【Node Mode】


【Default】

None

【Using Guide】

Show switch stp operation status



【Example】

Fengine# show stp information

CIST Bridge:32768.0004-6732-3335

Bridge Times:Hello 2s MaxAge 20s FwDly 15s RemainHop 20

CIST Root/ERPC:32768.0004-6732-3335 / 0

CIST RegRoot/IRPC:32768.0004-6732-3335 / 0

CIST RootPortId:0.0

Fengine#


None

3.6.33 show stp interface

Show stp configuration of each switch port

【Command Form】

show stp interface

show stp interface <1-64>

show stp interface trunk <1-64>

【Parameter】



98

None

【Node Mode】


【Default】

None

【Using Guide】

Show stp configuration of each switch port



【Example】

Fengine#show stp interface

MSTID Port Role STP State Protection 1 enable disable

Fengine#


None

3.6.34 show stp instance interface

Show stp configuration of switch each instance port

【Command Form】

show stp instance <1-15> interface

show stp instance <1-15> interface <1-64>

show stp instance <1-15> interface trunk <1-64>

【Parameter】

None

【Node Mode】


【Default】

None

【Using Guide】

Show stp configuration of switch each instance port



【Example】

Fengine#show stp instance 1 interface

MSTID Port Role STP State Protection 1 enable disable

Fengine#


None



99

3.7 COS configuration command

COS（Class of services） configuration command is including:

cos (enable|disable)

cos priority <0-7> queue <0-3>

cos queue <0-3> weight <1-31>

cos queue mode (strict|weighted-round-robin|sp+wrr3|sp2+wrr2)

show cos

3.7.1 cos (enable|disable)

Enable and disable service type configuration

【Command Form】

cos (enable|disable)

【Parameter】

(enable|disable)

【Node Mode】

COS configuration mode

【Default】

disable

【Using Guide】

This command is to enable or disable service type configuration.



【Example】

Fengine(config-cos)#cos enable

Fengine(config-cos)#


show cos

3.7.2 cos priority <0-7> queue <0-3>

Set mapping relationship for data frame priority mapping to priority queue.

【Command Form】

cos priority <0-7> queue <0-3>

【Parameter】

<0-7>:priority of data frame is ranged from 0（the lowest）to 7（the

highest）

<0-3>:priority of data frame is ranged from 0（the lowest）to 3（the

highest）



100

【Node Mode】


【Default】

Export frame of priority 0 is mapped to priority queue 0;








【Using Guide】

This command is to configure mapping relationship for data frame to priority

queue according to the data frame priority. Each switch port supports 4

priority queue, use this command to export data frame in different priority

queue.



【Example】

Fengine(config-cos)#cos priority 1 queue 1



show cos

3.7.3 cos queue <0-3> weight <1-31>

Configure switch priority queue weight

【Command Form】

cos queue <0-3> weight <1-31>

【Parameter】

<0-3> :the priority of priority queue is ranged from 0（the lowest）to 3（the

highest）

<1-31>:weight

【Node Mode】


【Default】

None

【Using Guide】

This command is to show switch service type（Class of services）.





101

【Example】

Fengine(config-cos)# cos queue <0-3> weight <1-31>



show cos

3.7.4 cos queue mode (strict|weighted-round-robin|sp+wrr3|sp2+wrr2)

Set switch priority queue mode

【Command Form】

cos queue mode (strict|weighted-round-robin|sp+wrr3|sp2+wrr2)

【Parameter】

strict:strict priority mode (any frame in higher priority queue will be

transferred in prior, only when the higher priority queue is vacant, the

frame of the lower priority queue will be transferred. )

weighted-round-robin:weighted-round-robin（provide a rule that the frame

of the lower priority queue will never be transferred,

it provides a min baniwdth for each queue to be max

frame of each queue. ）

sp+wrr3：queue 3 is sp, the other three queue 2、1、0 are wrr

sp2+wrr2：queue 3、2 is sp, pass with priority.

【Node Mode】


【Default】

Weighted-round-robin

【Using Guide】

This command is to set the mode for switch priority queue.



【Example】

Fengine(config-cos)#cos queue mode strict



show cos

3.7.5 show cos

Show configuration of Class of services (CoS)

【Command Form】

show cos

【Parameter】



102

None

【Node Mode】


【Default】

None

【Using Guide】

This command is show switch Class of Service.



【Example】

Fengine#show cos

cos status : disable

cos queue mode : weighted-round-robin

cos queue num : 4

cos priority num : 8













Fengine#


None

3.8 VLAN configuration command

VLAN configuration command is including:

admin-status (up|down)

apply-as-pvid PORTLIST

interface vlan

no vlan

member PORTLIST

no member PORTLIST



103

vlan description

vlan type

vlan priority <0-7>

show vlan

3.8.1 admin-status (up|down)

Set switch vlan status

【Command Form】

admin-status (up|down)

【Parameter】

Up: start VLAN

Down: shutdown VLAN

【Node Mode】

VLAN configuration mode

【Default】

up

【Using Guide】

This command is to control certain VLAN.



【Example】

Fengine(config-vlan-2)#admin-status down

Fengine(config-vlan-2)#


None

3.8.2 apply-as-pvid PORTLIST

Set this VLAN to be switch port PVID

【Command Form】

apply-as-pvid PORTLIST

【Parameter】

PORTLIST：port list (e.g.:1,2,5-15,20)

【Node Mode】


【Default】

None

【Using Guide】



104

This command is to set PVID of switch physical port to be the VLAN

corresponding to the vlan configuration node under vlan configuration node,

when an interface received none-vlan tagged data or priority tagged data, we

consider the data belong to the vlan indicated by this interface pvid, the data

is forwarding in the vlan.



【Example】

Fengine(config-vlan-2)# apply-as-pvid 2-8,10


The above command is to set PVID of physical port 1~8,10 to be 2.


pvid <1-4094>

3.8.3 interface vlan

Create one or multi vlan.

【Command Form】

interface vlan <1-4094> [<1-4094>]

【Parameter】

<1-4094>:the beginning VLAN ID

[<1-4094>]:the ending VLAN ID

【Node Mode】


【Default】

None

【Using Guide】

VLAN is a protocol to solve Ethernet broadcast and security, it has added

VLAN on base of Ethernet frame, using VLAN ID to divide users into

smaller work group so as to limit the users access between different work

group, each work group is a virtual local area network. Virtual loca area

network can limit broadcast scope and form virtual work group and dynamic

management network.

This command is to create one or multi vlan. If there is only one parameter, it

means only one vlan is created, then enter vlan configuration of this vlan; If

there is two parameters, it means create multi vlan between two vlan id.



【Example】

Fengine(config)#interface vlan 5 7

%Creating Vlan 5,6,7

Fengine(config)#interface vlan 5



105

Fengine(config-vlan-5)


member PORTLIST，show vlan [<1-4094>]，no vlan <1-4094> [<1-4094>]

3.8.4 no vlan

Delete one or multi vlan

【Command Form】

no vlan <1-4094> [<1-4094>]

【Parameter】

<1-4094>:beginning Vlan ID

[<1-4094>]:ending Vlan ID

【Node Mode】


【Default】

None

【Using Guide】

This command is to delete one or multi VLAN.



【Example】

Fengine(config)#no vlan 5 7

%Deleting Vlan 5,6,7

Fengine(config)#


interface vlan <1-4094> [<1-4094>]

3.8.5 member PORTLIST

Add multi physical interface of the switch into vlan, and designate the port to be

vlan tagged port or untagged port.

【Command Form】

member PORTLIST (tagged|untagged)

【Parameter】

PORTLIST:VLAN member port list, e.g.: "1,2,3,6-8"

tagged: vlan tagged port

untagged:untagged vlan port

【Node Mode】


【Default】

tagged



106

【Using Guide】

This command is to add multi physical interface into this vlan under vlan

configuration mode, and designate port to be vlan tagged port or untagged

port.



【Example】

Fengine(config-vlan-2)#member 1,2,5-7 untagged


After this command is executed, the switch physical port 1，2，5－7 will be

added into vlan 2 as untagged port.


show vlan [<1-4094>]

3.8.6 no member PORTLIST

Delete switch port from vlan member

【Command Form】

no member PORTLIST

【Parameter】

PORTLIST:VLAN member port list, e.g.: "1,2,3,6-8"

【Node Mode】


【Default】

None

【Using Guide】

This command is to delete switch port from VLAN member.



【Example】

Fengine(config-vlan-2)#no member 1-5



member PORTLIST，show vlan [<1-4094>]

3.8.7 vlan description STRING

Configure vlan description

【Command Form】

vlan description STRING

no vlan description



107

【Parameter】

STRING:VLAN description, character string length is less than 32

【Node Mode】


【Default】

None

【Using Guide】

This command is to configure VLAN description, the default description is

vlan and vlan ID,e.g.: the description of vlan 1 is vlan 1, NO form of this

command is to delete vlan description.



【Example】

Fengine(config-vlan-5)vlan description test

Fengine(config-vlan-5)



3.8.8 vlan type (dynamic|static)

Configure vlan type

【Command Form】

vlan type (dynamic|static)

【Parameter】

dynamic:VLAN type is dynamic type

static: VLAN type is static type

【Node Mode】


【Default】

static

【Using Guide】

This command is to configure VLAN type, configure dynamic vlan learned

by switch into static type; but it can not change static vlan into dynamic vlan



【Example】

Fengine(config-vlan-1)#vlan type static






108

3.8.9 vlan priority <0-7>

Set vlan priority

【Command Form】

vlan priority <0-7>

【Parameter】

<0-7>：vlan priority

【Node Mode】

VlanNode Mode

【Default】

0

【Using Guide】

When interface enabled vlan priority received a packet with vlan tag, write

vlan priority into the packet vlan tag priority field.



【Example】

Fengine (config-vlan-1)#vlan priority 6

Fengine (config-vlan-1)#


None

3.8.10 show vlan

Show switch vlan configuration

【Command Form】


【Parameter】

[<1-4094>]： VLAN ID（optional）

【Node Mode】


【Default】

None

【Using Guide】

This command is show switch all or a certain VLAN configuration



【Example】

Fengine#show vlan



109

There are 1 vlan in the system.

**************************************************

(D=Dynamic,T=Tagged,U=Untagged,-=None)

**************************************************

Vlan 1------8 9-----16 17----24

1 UUUUUUUU UUUUUUUU UU

Fengine#

The above command is to show switch all VLAN configuration.

Fengine#show vlan 1

Vlan Type : static

Vlan Desc : vlan1

Dynamic Member : none

Tagged Member : none

Untagged Member : 1-9,17-18 Trunk:1

Fengine#

Above command is to show single VLAN（1） configuration.


vlan <1-4094>，member PORTLIST (tagged|untagged)，member

PORTLIST

3.9 private VLAN configuration command

Private VLAN configuration command is including:

pvlan <1-64>

no pvlan <1-64>

isolate-ports PORTLIST

no isolate-ports

show pvlan

3.9.1 pvlan <1-64>

Create a private vlan

【Command Form】

pvlan <1-64>

【Parameter】

<1-64>：pvlan id

【Node Mode】


【Default】

None

【Using Guide】



110

This command is to create a pvlan, the port isolated in pvlan can not access

each other.



【Example】

Fengine(config)#pvlan 1

Fengine(config-pvlan-1)#


no pvlan <1-64>，show pvlan

3.9.2 no pvlan <1-64>

Delete a private vlan

【Command Form】

no pvlan <1-64>

【Parameter】

<1-64>：pvlan id

【Node Mode】


【Default】

None

【Using Guide】

This command is to delete a private vlan



【Example】

Fengine(config)# no pvlan 1

Fengine(config)#


pvlan <1-64>

3.9.3 isolate-ports PORTLIST

Isolate certain port in pvlan.

【Command Form】


【Parameter】

PORTLIST：port list

【Node Mode】

PVLAN configuration mode



111

【Default】

None

【Using Guide】

This command is to prohibit data communication between some ports in

certain pvlan.



【Example】

Fengine(config-pvlan-1)#isolate-ports 1-3,9

Fengine(config-pvlan-1)#


no isolate-ports，show pvlan

3.9.4 no isolate-ports

Restore the isolated port in pvlan

【Command Form】

no isolate-ports

【Parameter】

None

【Node Mode】

PVLAN configuration mode

【Default】

None

【Using Guide】

This command is to restore the isolated port in pvlan, the restored port can

communicate with each other.



【Example】

Fengine(config)# no isolate-ports

Fengine(config)#



3.9.5 show pvlan

Show switch private vlan.

【Command Form】

show pvlan

【Parameter】



112

None

【Node Mode】


【Default】

None

【Using Guide】

This command is to show switch all private vlan configuration



【Example】

Fengine#show pvlan

PVlan 1 isolate-ports 10-16

Fengine#


None

3.10 SGM configuration command

Configuration command are:

sgm

sgm (enable|disable)

sgm discovery time (<1-300>|default)

sgm discovery ttl (<1-255>|default)

sgm vlan (add|remove) VLAN-LIST

[no] sgm member (AA.BB.CC.DD.EE.FF) ip

sgm (collect-map|release-map)

sgm addr-opt (enable|disable)

sgm cluster ip-pool

sgm cluster name WORD

sgm cluster password PASSWORD

sgm ip-allocation (auto|manual)

sgm join-policy (auto|manual)

sgm map-collect time (<1-100>|default)

sgm map-collect ttl (<1-100>|default)

sgm member (add|remove) (AA.BB.CC.DD.EE.FF)

sgm member handtime (<1-300>|default)

sgm member holdtime (<1-300>|default)

sgm role (independence|candidate|commander)

sgm trap (enable|disable)

show sgm interface [<1-64>]

show sgm local

show sgm neighbor



113

3.10.1 sgm

Enter SGM configuration node

【Command Form】

sgm

【Parameter】

None

【Node Mode】


【Default】

None

【Using Guide】

This command is to enter SGM configuration node. Configuration of

command switch is executed under SGM configuration node.



【Example】

Fengine(config)#sgm

Fengine (config-sgm)#


3.10.2 sgm (enable|disable)

enable/disable SGM for an interface

【Command Form】


【Parameter】

(enable|disable)

【Node Mode】

interface configuration mode

【Default】

Disable is default

【Using Guide】

This command is to enable/disable SGM function of a certain interface. The

interface not enabled SGM function will not transact any SGM message.



【Example】

Fengine (config-eth-1)#sgm enable



114

Fengine (config-eth-1)#


show sgm interface

3.10.3 sgm discovery time (<1-300>|default)

Set time interval for port sending topology discovery message.

【Command Form】


【Parameter】

<1-300>:period of sending discovery, unit: second

default:30 second

【Node Mode】


【Default】

Default is 30 second

【Using Guide】

This command is to set time interval for port sending topology discovery

message.



【Example】

Fengine (config-eth-1)#sgm discovery time 100



show sgm interface

3.10.4 sgm discovery ttl (<1-255>|default)

Set time interval for aging port connecting neighbour.

【Command Form】

sgm discovery ttl (<1-255>|default)

【Parameter】

<1-255>:time interval is ranged in 1~255 second default:90

【Node Mode】


【Default】

Default is 90



115

【Using Guide】

This command is to set time interval for aging port connecting neighbour, we

suggest the time is 3 times of topology discovery time.



【Example】

Fengine (config-eth-1)#sgm discovery ttl 100



show sgm interface

3.10.5 sgm inband enable <1-4094>

Enable SGM configuration interface on designated vlan.

【Command Form】

sgm inband disable

sgm inband enable <1-4094>

【Parameter】

<1-4094>：vlan ID

【Node Mode】


【Default】

None

【Using Guide】

This command is to enable/disable SGM interface vlan. When received

message is not in vlan of the port, then not transact. Command switch and

member switch need configuration.



【Example】

Fengine (config-eth-1)#sgm inband enable 1



None

3.10.6 sgm vlan (add|remove) VLAN-LIST

Set vlan list for interface to add or remove.

【Command Form】


【Parameter】



116

(add|remove):add/remove

VLAN-LIST:vlan list need to operate

【Node Mode】


【Default】

None

【Using Guide】

This command is to set vlan list for interface to add/rmove. When the

received message is not in the vlan list, it need no transaction.



【Example】

Fengine (config-eth-1)#sgm vlan add 1,3



show sgm interface

3.10.7 [no] sgm member (AA.BB.CC.DD.EE.FF) ip

Distribute/delete IP address for designated SGM device.

【Command Form】

sgm member (AA.BB.CC.DD.EE.FF) ip (A.B.C.D/M)

no sgm member (AA.BB.CC.DD.EE.FF) ip

【Parameter】

(AA.BB.CC.DD.EE.FF):device MAC address

(A.B.C.D/M):IP address and mask

【Node Mode】

SGM configuration mode

【Default】

None

【Using Guide】

This command is to distribute /delete IP address for SGM device. The

designated IP should be in ip-pool, this device can be member switch or

candidate switch. This command only can be executed by command switch.

Notes: IP address and member switch/candidate switch in-band and out-of-

band address are not in identical network field, otherwise,SGM will be failed.



【Example】



117

Fengine (config-sgm) # sgm member 00:04:67:11:11:11 ip 10.1.1.2/24

Fengine (config-sgm) #


sgm cluster ip-pool

3.10.8 sgm (collect-map|release-map)

Collect/release current topology.

【Command Form】

sgm (collect-map|release-map)

【Parameter】

(collect-map|release-map):collect-mapis to collect topology, release-map is to

release current topology

【Node Mode】


【Default】

The default is disabled

【Using Guide】

This command is to recollect network SGM topology or clearup all collected

information. This command only can be executed by command switch.



【Example】

Fengine (config-sgm) # sgm collect-map



3.10.9 sgm addr-opt (enable|disable)

Set whether current device support address

【Command Form】

sgm addr-opt (enable|disable)

【Parameter】

(enable|disable)：enable supports address, disable does not support address

【Node Mode】


【Default】

Default is disabled



118

【Using Guide】

This command is to set whether this device support address. The old SGM

does not support discovery with address, when communicating with old SGM

device, it has no address, or the discovery message will be discard. This

command has no role limit.



【Example】

Fengine (config-sgm) #sgm addr-opt enable



show sgm local

3.10.10 sgm cluster ip-pool

Set address pool of SGM

【Command Form】

sgm cluster ip-pool (A.B.C.D/M)

sgm cluster ip-pool (A.B.C.D) (A.B.C.D)

【Parameter】

(A.B.C.D/M)：address and mask

【Node Mode】


【Default】

None

【Using Guide】

This command is to set address pool of current SGM. When address

distribution strategy is set to be automatic, when a new member join in,

system will auto distribute a vacant IP address to the member. If a switch has

joined in the SGM and be a member switch before command switch

configure address pool, the switch will not be distributed with address, then

you can designate IP address in manual. For the switch with configured

address pool but need to reconfigure, configure the switch to be candidate

switch, then become command switch, so as to clearup address pool. The

configured IP address pool should conform to the requirement

{address=address&mask}. The first address in address pool will auto

distribute to command switch. Only command switch can execute this

command.

Suggest: address mask can not be overlarge, generally, 24bits mask is

enough (support 253 members). If mask is overlarge, initialization of IP

address is too slow, so we never use it for application.



119

Notes: IP address and member switch/candidate switch in-band and out-

of-band address are not in identical network field, otherwise,SGM will be

failed.



【Example】

Fengine (config-sgm) # sgm cluster ip-pool 10.1.1.0/24



show sgm local

3.10.11 sgm cluster name WORD

Set cluster name

【Command Form】

sgm cluster name WORD

【Parameter】

WORD：cluster name

【Node Mode】


【Default】

Vacant

【Using Guide】

This command is to set cluster name. the cluster name is mainly used for

authentication when device join in SGM. Currently, Fiberhome SGM does not

support authentication, only open configuration interface, configuration can not

influence operation. This command can execute for command switch.



【Example】

Fengine (config-sgm) # sgm cluster name fhn-sgm



show sgm local

3.10.12 sgm cluster password PASSWORD

Set cluster password

【Command Form】



120

sgm cluster password PASSWORD

【Parameter】

PASSWORD：set cluster password

【Node Mode】


【Default】

Vacant

【Using Guide】

This command is to set cluster password. the cluster name is mainly used for

authentication when device join in SGM. Currently, Fiberhome SGM does

not support authentication, only open configuration interface, configuration

can not influence operation. This command can execute for command switch.



【Example】

Fengine (config-sgm) #sgm cluster password 123



show sgm local

3.10.13 sgm ip-allocation (auto|manual)

Set IP allocation strategy for SGM

【Command Form】

sgm ip-allocation (auto|manual)

【Parameter】

(auto|manual)：auto is to auto allocate IP address, manual is to manual

designate IP address

【Node Mode】


【Default】

The default is manual

【Using Guide】

This command is to set IP allocation strategy for current SGM. For auto

allocation, the address pool should be configured, when a new member join

in, system will auto distribute a vacant IP address to the member. for manual

allocation, should use 3.10.7 command to designate address in manual. This

command only can be executed by command switch.




121


【Example】

Fengine (config-sgm) # sgm ip-allocation auto



show sgm local

3.10.14 sgm join-policy (auto|manual)

Set join-policy for SGM

【Command Form】

sgm join-policy (auto|manual)

【Parameter】

(auto|manual)：:auto is to auto-join, manual is to join manually

【Node Mode】


【Default】

The default is join manually

【Using Guide】

This command is to set join policy for SGM, when auto join, command

switch will send join message when detecting other device, and ask other

device to join SGM. For manual join, not send join message, need to use

command 3.10.16 to add manually. This command only can be executed by

command switch.



【Example】

Fengine (config-sgm) # sgm join-policy auto



show sgm local

3.10.15 sgm map-collect time (<1-100>|default)

Set SGM topology collection time

【Command Form】

sgm map-collect time (<1-100>|default)

【Parameter】

<1-100>:topology collection period. unit: second



122

default:default is 60 second

【Node Mode】


【Default】

60 seconds

【Using Guide】

This command is to set SGM topology collection time. SGM will

periodically send topology collect packet to update current topology

information. This command only can be executed by command switch.



【Example】

Fengine (config-sgm) # sgm map-collect time 25



show sgm local

3.10.16 sgm map-collect ttl (<1-100>|default)

Set hops of SGM topology collect packet.

【Command Form】

sgm map-collect ttl (<1-100>|default)

【Parameter】

<1-100>:hops of topology collect packet

default:the default is 10 hops

【Node Mode】


【Default】

10

【Using Guide】

This command is to set hops of current SGM topology collect packet. The

hop will reduce 1 when passing one device, when the hop is 0, the topology

collect message will be discard. This command only can be executed by

command switch.



【Example】

Fengine (config-sgm) # sgm map-collect ttl 3




123


show sgm local

3.10.17 sgm member (AA.BB.CC.DD.EE.FF)

This command is for command switch to access a member, and configure it.

【Command Form】

sgm member (AA.BB.CC.DD.EE.FF)

【Parameter】

(AA.BB.CC.DD.EE.FF)：device MAC address

【Node Mode】


【Default】

None

【Using Guide】

This command is to access a certain member. when switch join SGM,

command switch will use this command to access it and configure it. This




【Example】

Fengine (config-sgm) # sgm member 00:04:67:11:25:31



sgm (enable|disable), sgm vlan (add|remove) VLAN-LIST, sgm inband

enable <1-4094>

3.10.18 sgm member (add|remove) (AA.BB.CC.DD.EE.FF)

This command is to manually add/remove a certain member.

【Command Form】

sgm member (add|remove) (AA.BB.CC.DD.EE.FF)

【Parameter】

(add|remove):add is to add a certain device as a member, remove is to

remove a certain member

(AA.BB.CC.DD.EE.FF):device MAC address

【Node Mode】


【Default】

None

【Using Guide】



124

This command is to manually add/delete a certain member. When join-policy

is manual, use add mode of this command to add a certain device to be

member. also use remove mode to remove an existing member. this




【Example】

Fengine (config-sgm) # sgm member add 00:04:67:11:25:31



show sgm neighbor

3.10.19 sgm member handtime (<1-300>|default)

Set SMG member handtime

【Command Form】

sgm member handtime (<1-300>|default)

【Parameter】

<1-300>:handtime (unit: second)

default:8 second

【Node Mode】


【Default】

8 second

【Using Guide】

This command is to set SGM handtime, SGM can know member

connectivity with periodic hand message and update topology in time. The

time is smaller, the topology convergence is faster, but more frequent hand

message will increase device load. This command only can be executed by

command switch.



【Example】

Fengine (config-sgm) # sgm member handtime 120



show sgm local

3.10.20 sgm member holdtime (<1-300>|default)



125

Set holdtime for SGM device

【Command Form】

sgm member holdtime (<1-300>|default)

【Parameter】

<1-300>：holdtime, unit: second。

default：80 second

【Node Mode】


【Default】

80 second

【Using Guide】

This command is to set holdtime for SGM device. When command switch

havenot received hand message of connected device within desginagted

holdtime, the device will be labeled as disconnected. This command only can

be executed by command switch.



【Example】

Fengine (config-sgm) # sgm member holdtime 200



show sgm local

3.10.21 sgm role (independence|candidate|commander)

Set role for the device in SGM

【Command Form】

sgm role (independence|candidate|commander)

【Parameter】

(independence|candidate|commander):independence-independent switch 、

candidate-candidate switch、commander-command switch

【Node Mode】


【Default】

Candidate switch

【Using Guide】

This command is to set role for the device in SGM. In identical SGM, there is

only one commander. If there are several commander, the MAC address will



126

auto switch to candidate, only reserve the device with smallest MAC address

to be commander.



【Example】

Fengine (config-sgm) #sgm role commander



show sgm local

3.10.22 sgm trap (enable|disable)

Enable/disable SGM trap

【Command Form】

sgm trap (enable|disable)

【Parameter】

(enable|disable)

【Node Mode】


【Default】

Enable

【Using Guide】

This command is to enable/disable SGM trap. If trap is enabled, when

add/delete member or status change, the system will report trap to designated

trap server. This command only can be executed by commander.



【Example】

Fengine (config-sgm) # sgm trap disable



show sgm local

3.10.23 show sgm interface [<1-64>]

Show SGM interface configuration

【Command Form】

show sgm interface [<1-64>]



127

【Parameter】

[<1-64>]:interface No. optional parameter, not select to query all interface

【Node Mode】

privileged mode

【Default】

None

【Using Guide】

This command is to query SGM interface configuration, can query with

designated port No., or not designate but query all port.



【Example】

Fengine#show sgm interface

Interface State TTL/Time NB-Num VLAN

1 enable 90/30 0 1

3 enable 90/30 0 2

Fengine#show sgm interface 1

Interface 1

State:enable

Discovery TTL:90

Discovery Time:30

Connect Neignbor:0

VLAN list: 1

Connected Neighbors:---

Fengine#


3.10.24 show sgm local

Show current device SGM

【Command Form】

show sgm local

【Parameter】

None

【Node Mode】

privileged mode

【Default】

None

【Using Guide】



128

This command is to query device SGM. The attribute only configured by

commander can be query on commander.



【Example】

Fengine # show sgm local

local mac:0004:6711:1111/1118481

name:up

role:commander

Commander mac:0004:6711:1111

Commander ip:1.1.1.1

Managment ip:1.1.1.1/24

Description: Fengine

FSM:active

Trap:disable

Trap-trans:enable

Address-option:disable

Protocol version:1

Cluster name:

Cluster password:

Cluster IP-pool:0.0.0.0/0

IP allocation policy:manual

Join policy:manual

Map-collect TTL:10

Map-collect time:60

Neighbor Hand-time:8

Neighbor Hold-time:80

Support neighbor number:64

Current neighbor number:0


Fengine#

Fengine# #show sgm local

local mac:0004:6711:1111/1118481

name:up

role:candidate

Commander mac:0000:0000:0000

Commander ip:0.0.0.0

Managment ip:1.1.1.1/24

Description: Fengine

FSM:connectible

Trap:disable

Trap-trans:enable

Address-option:disable

Protocol version:1



129

Current neighbor number:0



3.10.25 show sgm neighbor

Show SGM member

【Command Form】

show sgm neighbor (AA.BB.CC.DD.EE.FF)

【Parameter】

(AA.BB.CC.DD.EE.FF)：MAC address of query member

【Node Mode】

privileged mode

【Default】

None

【Using Guide】

This command is to query SGM member. can designate MAC and query verbose

information, also query all member information.



【Example】

Fengine# show sgm neighbor

MAC-Address/ID Role NB-Num Version Name

0004:6711:1111/1118481 candidate 0 1 up

Fengine#


3.11 interface configuration command

Switch interface is including Trunk interface and single Ethernet interface

Switch interface configuration command is including:

address-learning

description STRING

dot1q accept

duplex (half|full) speed (10|100)

duplex auto

egress mirror <0-64>



130

flow-ctrl (enable|disable)

ingress mirror <0-64>

interface (ethernet|trunk)

join trunk

join vlan

link-trap (enable|disable)

loop-check (enable|disable|re-check)

loop-check vlan

member PORTLIST

no member PORTLIST

packet-limit

priority

pvid

quit trunk

quit vlan

rate-limit

security-mac (add|delete)

security-mac (enable|disable)

shutdown

no shutdown

static-mac (add|delete)

trunk-dis-policy

user-limit number

power (down|up)

show interface

show interface distance

show interface dynamic-mac


show interface security-mac

show interface static-mac

show interface statistics



131

show interface user-limit

show trunk

3.11.1 address-learning

Enable or disable address learning for switch port, currently, switch port is

enabled address learning.

【Command Form】

address-learning (disable|enable)

【Parameter】

disable:disable port address learning

enable:enable port address learning

【Node Mode】


【Default】

enable

【Using Guide】

This commandis to enable or disable address learning for switch each port,

currently, switch port is enabled address learning.



【Example】

None


None

3.11.2 description STRING

Set port description for each switch port

【Command Form】

description STRING

no description

【Parameter】

STRING：port description string, character string should not longer than 31.

【Node Mode】


【Default】

None

【Using Guide】

This command is to set description for switch port, “no description” is to

delete port description.



132



【Example】

Fengine(config-eth-6)#description port6




3.11.3 dot1q accept

Configure data packet type accepted by switch port

【Command Form】


【Parameter】

all:all type data packet

tagged-only:only accept data packet with VLAN tag .

【Node Mode】


【Default】

all

【Using Guide】

This command is to set whethern switch port accept all type data packet or

only accept data packet with VLAN tag.



【Example】

Fengine(config-eth-1)#dot1q accept all



dot1q ingress-filter (enable|disable)

3.11.4 duplex (half|full) speed (10|100|1000)

Set work mode for switch port.

【Command Form】

duplex (half|full) speed (10|100|1000)

【Parameter】

half:work mode is half-duplex

full:work mode is full-duplex

(10|100): rate is 10M or 100M or 1000M

【Node Mode】



133


【Default】

Auto-negotiation

【Using Guide】

This command is to configure work mode for switch port



【Example】

Fengine(config-eth-6)#duplex half speed 10



duplex auto

3.11.5 duplex auto

Set switch port work mode to be auto-negotiation mode.

【Command Form】

duplex auto

【Parameter】

None

【Node Mode】


【Default】

None

【Using Guide】

This command is to set switch port work mode to be auto-negotiation mode.



【Example】

Fengine(config-eth-6)#duplex auto



duplex (half|full) speed (10|100)

3.11.6 egress mirror <0-64>

Set egress mirroring port for certain port.

【Command Form】


【Parameter】



134

<0-64>：mirroring port No., 0 is to disable egress mirroring on this port.

【Node Mode】


【Default】

Not enable egress mirroring

【Using Guide】

This command is to configure mirroring port B for egress flow on port A,

when egress mirroring port B is configured, the data sent from Port A will be

copied and sent by Port B.



【Example】

Fengine(config-eth-1)#egress mirror 3




3.11.7 flow-ctrl (enable|disable)

Enable or disable port flow control

【Command Form】


【Parameter】

(enable|disable)：

【Node Mode】


【Default】

disable

【Using Guide】

Flow control can reduce data lose caused by saturated buffer when terminal

and switch are directly connected.

Warning: the uplink interface of switch can not enable flowctrl in case not to

affect online speed for users!



【Example】

Fengine(config-eth-1)# flow-ctrl enable



None



135

3.11.8 ingress mirror <0-64>

Set ingress mirroring port for certain port

【Command Form】


【Parameter】

<0-64>：mirrored port No., 0 means mirroring function is not enabled.

【Node Mode】


【Default】

Not enable ingress mirroring function.

【Using Guide】

This command is to configure ingress data mirroring Port B on Port A, when

ingress mirroring Port B is configured, the data received at Port A will be

copied and sent out from Port B.



【Example】

Fengine(config-eth-1)#ingress mirror 3




3.11.9 interface (ethernet|trunk)

Enter selected Ethernet interface or Trunk interface configuration mode

【Command Form】

interface (ethernet|trunk) <1-64>

【Parameter】

ethernet:single Ethernet interface

trunk:trunk interface

<1-64>:interface No.

【Node Mode】

global configuration mode，interface configuration mode

【Default】

None

【Using Guide】

Use this command to enter corresponding interface for configuration. If no

definite Trunk interface No., then create a new Trunk interface.




136


【Example】

Fengine(config)#interface ethernet 1



None

3.11.10 join trunk

Configure port Trunk ID.

【Command Form】

join trunk <1-64>

【Parameter】

<1-64>：trunk ID

【Node Mode】


【Default】

Port doesnot belong to any Trunk

【Using Guide】

This command is to configure a physical port to enter Trunk. This command

is invalid under Trunk interface configuration mode.



【Example】

Fengine(config-ethernet-1)#join trunk 1



quit trunk，show trunk

3.11.11 join vlan

Add switch port into certain VLAN, then set VLAN type for the port in these vlan.

【Command Form】

join vlan VLANLIST

join vlan VLANLIST (tagged|untagged)

【Parameter】

VLANLIST:Vlan ID list

tagged:vlan tagged port

untagged:untagged vlan port

【Node Mode】




137

【Default】

tagged

【Using Guide】

This command is to add certain port into certain VLAN and to be member of

these VLAN, then indicate VLAN type, if the indicated port is val tagged

port, then the VLAN tagged port will send data packet from this port, which

will take vlan tag issued by IEEE802.1Q.



【Example】

Fengine(config-eth-4)#join vlan 2



quit vlan VLANLIST，join vlan VLANLIST (tagged|untagged)

3.11.12 link-trap (enable|disable)

Enable or disable port link trap

【Command Form】

link-trap (enable|disable)

【Parameter】

enable：enable trap

disable：disable trap

【Node Mode】


【Default】

disable

【Using Guide】

This command is to configure whether inform snmp when interface link

status is changed.



【Example】

Fengine(config-eth-2)#link en



None

3.11.13 loop-check (enable|disable|re-check)

Enable, disable, repeat port loop check



138

【Command Form】


【Parameter】

enable:enable loop check

disable:disable loop check

re-check:loop check on the interface immediately

【Node Mode】


【Default】

enable

【Using Guide】

This command is to enable or disable loop check of switch port, and execute

loop-check on the interface immediately.



【Example】

Fengine(config-eth-2)#loop-check enable



loop-check vlan <1-4094>

3.11.14 loop-check vlan <1-4094>

Configure the VLAN on which loop check is executed.

【Command Form】


【Parameter】

<1-4094>：VLAN id

【Node Mode】


【Default】

As default configuration, the chck vlan is 1.

【Using Guide】

This command is to configure the VLAN on which loop check is executed.



【Example】

Fengine(config-eth-2)#loop-check vlan 1




139


None

3.11.15 member PORTLIST

Indicate switch port to be certain Trunk member, the command is valid only under

Trunk interface.

【Command Form】

member PORTLIST

【Parameter】


【Node Mode】


【Default】

None

【Using Guide】

This command is to indicate single or a series switch port to be Trunk

member, only valid under Trunk interface.



【Example】

Fengine(config-trunk-1)#member 1,2,3

Fengine(config-trunk-1)#


None

3.11.16 no member PORTLIST

Delete certain physical port from certain switch Trunk port, the command is valid

only under Trunk interface.

【Command Form】

no member PORTLIST

【Parameter】


【Node Mode】


【Default】

None

【Using Guide】

This command is to indicate single or a series switch physical port not to be a

member of certain Trunk, only valid under Trunk interface.



140



【Example】

Fengine(config-trunk-1)#no member 1,2,3



None

3.11.17 packet-limit

Set rate limit for data packet on each switch port.

【Command Form】

packet-limit broadcast 0-100000 >

packet-limit dlf <0-100000 >

packet-limit multicast <0-100000 >

packet-limit b-m <0-100000>

packet-limit b-m-dlf <0-100000>

【Parameter】

<0-100000 >：scope of rate limit, unit is kbps

【Node Mode】


【Default】

Broadcast and dlf is 64K for default, multicast has no limit.

【Using Guide】

This command is to limit each data packet received at each switch port,

broadcast is to limit broadcast packet received by interface, dlf is to limit

unknown data packet of destination received by interface, multicast is to limit

multicast packet received at interface, b-m is to limit broadcast+multicast

packet received by interface, b-m-dlf is to limit data packet of

broadcast+multicast+DLF received by interface.

If configuration is less than 1792, it should be integral times of 64, if more

than 2000, it should be integral times of 1000. the whole switch only has one

limited value.


S2200ME-B series switch supports limit for interface broadcast, multicast,

dlf data packet.

【Example】

Fengine(config-eth-1)# packet-limit broadcast 512


Configure broadcast packet rate limit of switch Port 1 to be 512kbps.




141

None

3.11.18 priority

Set default priority of interface.

【Command Form】

priority <0-7>

【Parameter】

<0-7>：:priority range is 0-7

【Node Mode】


【Default】

0

【Using Guide】

This command is to set default priority of interface, if the data received at

this interface is untagged data, then execute scheduling according to the port

default priority when forwarding the data packet.



【Example】

Fengine(config-eth-1)#priority 3



show running-config

3.11.19 pvid

Set PVID of switch port.

【Command Form】

pvid <1-4094>

【Parameter】

<1-4094>:switch VLAN is ranged in 1-4094

【Node Mode】


【Default】

1

【Using Guide】

This command is to set PVID of switch port, when an interface received

untagged vlan data or priority tagged data, we consider the data belong to the

vlan indicated by this interface pvid, then forwarding data in the vlan.




142


【Example】

Fengine(config-eth-7)#pvid 2



show running-config

3.11.20 quit trunk

Configure Ethernet interface to quit Trunk.

【Command Form】

quit trunk

【Parameter】

None

【Node Mode】


【Default】

The port does not belong to any Trunk.

【Using Guide】

This command is to configure a physical port to quit Trunk.



【Example】

Fengine(config-ethernet-1)#quit trunk

Fengine(config-ethernet-1)#


None

3.11.21 quit vlan

Quit switch port from certain VLAN.

【Command Form】

quit vlan VLANLIST

【Parameter】

VLANLIST：VLAN list to quit from

【Node Mode】


【Default】

None

【Using Guide】



143

This command is to quit certain port from certain VLAN, then the port is not the

member of these VLAN.



【Example】

Fengine(config-eth-1)#quit vlan 2,3


The above command is to quit Port 1 from VLAN 2，VLAN 3.


join vlan VLANLIST, show vlan, join vlan VLANLIST (tagged|untagged)

3.11.22 rate-limit

Set transmission rate limit for switch port

【Command Form】

rate-limit rx <0-100000>

rate-limit tx <0-100000>

【Parameter】

<0-100000>：:rate scope (unit: kbps), 0 is for no limit

【Node Mode】


【Default】

For default, each port is not configured rate limit

【Using Guide】

This command is to control transmission rate limit for switch port, rx is for

control of receiving data, tx is for control of sending data.

For some occasion, the port rate need to be controlled so as to provide

different bandwidth for different user, different switch can configure

different rate;

When S2200ME-B series switch is setting rate limit, if the setting value is

less than 1792, the value should be integral times of 64, if the setting value is

more than 2000, the value should be integral times of 1000, if the setting

value is other, the system will prompt unsuccessful configuration.



【Example】

Fengine(config-eth-4)# rate-limit rx 0



None

3.11.23 security-mac (add|delete) (AA.BB.CC.DD.EE.FF)



144

Add or delete member MAC which permits accessing for certain switch port.

【Command Form】

security-mac (add|delete) (AA.BB.CC.DD.EE.FF)

【Parameter】

add:add

delete:delete

AA.BB.CC.DD.EE.FF:user MAC address of accessing switch port

【Node Mode】


【Default】

None

【Using Guide】

This command is to control unauthorized access to switch, only the user host

corresponding to added security MAC list can access the port, add is to add a

authoried user MAC, delete is to delete. Before adding security mac address,

enable security mac function on the port.



【Example】

Fengine(config-eth-4)#security-mac add 00.B0.D0.8F.DE.A6



security-mac (enable|disable)，show interface security-mac [<1-64>]

3.11.24 security-mac (enable|disable)

Enable or disable switch port MAC security access control.

【Command Form】


【Parameter】

(enable|disable)：

【Node Mode】


【Default】

disable

【Using Guide】

This command is to enable and disable MAC security control of switch port





145

【Example】

Fengine(config-eth-4)#security-mac enable





3.11.25 shutdown

Shutdown switch port

【Command Form】

shutdown

【Parameter】

None

【Node Mode】


【Default】

The default port is under the status that data forwarding is enabled.

【Using Guide】

Shutdown is to disable data receiving and transferring at the port.



【Example】

Fengine(config-eth-4)#shutdown



no shutdown

3.11.26 no shutdown

Startup the switch port

【Command Form】

no shutdown

【Parameter】

None

【Node Mode】


【Default】

For default, each port is enabled data receiving and transferring.

【Using Guide】



146

This command is to enable data receiving and transferring for a port



【Example】

Fengine(config-eth-4)#no shutdown



shutdown

3.11.27 static-mac (add|delete)

Add or delete static MAC address for switch certain port.

【Command Form】

static-mac (add|delete) <1-4094> (AA.BB.CC.DD.EE.FF)

static-mac (add|delete) <1-4094> AA:BB:CC:DD:EE:FF priority <0-7>

【Parameter】

add:add

delete:delete

1-4094:Vlan ID

AA.BB.CC.DD.EE.FF:MAC address added or deleted on certain VLAN for

switch port

<0-7>:priority

【Node Mode】


【Default】

None

【Using Guide】

This command is to configure MAC address for switch port on certain

VLAN in static state, add is to add a MAC address, delete is to delete. When

add MAC, use priority to set MAC priority; when delete MAC, priority is not

valid.



【Example】

Fengine(config-eth-4)# static-mac add 1 00.04.00.2F.AE.B6



None

3.11.28 trunk-dis-policy



147

Configure Trunk distribution policy

【Command Form】

trunk-dis-policy ( |dst-mac|srcdst-mac|src-ip|dst-ip|srcdst-ip|port)

【Parameter】

src-mac:based on source MAC address

dst-mac:based on destination MAC address

srcdst -mac:based on source and destination MAC address

src-ip:based on source IP address

dst-ip:based on destination IP address

srcdst -ip:based on source and destination IP address

port:based on physical port

【Node Mode】

interface configuration mode (Trunkinterface)

【Default】

srcdst-mac

【Using Guide】

This command is to configure Trunk data distribution policy, S2200ME-B

series switch supports three data distribution policy: src-mac,dst-mac and

srcdst-mac.



【Example】

Fengine(config-trunk-1)#trunk-dis-policy dst-mac



show trunk

3.11.29 user-limit number

【Command Form】

user-limit number <0-100>

【Parameter】

<0-100>：user limit number

【Node Mode】


【Default】

0

【Using Guide】

This command is to set user number permited for access, 0 is for no limit;



148

After this command, the port only learn indicated mac address, only the data

flow of users with indicated number can be transferred by switch.



【Example】

Fengine(config-eth-1)#user-limit number 10



None

3.11.30 power (down|up)

Enable or disable switch port MAC security access control.

【Command Form】

power (down|up)

【Parameter】

(down|up)：down is to shutdown power, up is to startup power

【Node Mode】


【Default】

up

【Using Guide】

This command is to shutdown and startup switch port power supply.



【Example】

Fengine(config-eth-4)#power down



3.11.31 show interface

Show interface information

【Command Form】


【Parameter】

[<1-64>]：interface No.（optional）

【Node Mode】




149

【Default】

None

【Using Guide】

Show switch interface



【Example】

Fengine#show interface

If Admin Link CurrDpx/Spd CfgDpx/Spd Descr

1 UP Down ----/---- Auto/---- ---

2 UP UP Full/100M Auto/---- ---

3 UP Down ----/---- Auto/---- ---

4 UP Down ----/---- Auto/---- ---

5 UP Down ----/---- Auto/---- ---

6 UP Down ----/---- Auto/---- ---

7 UP Down ----/---- Auto/---- ---

8 UP Down ----/---- Auto/---- ---

……

Fengine#

The above command is to show switch all port basic information

Fengine#show interface 1

Interface Ethernet 1

IfName : phy1

IfDescr :

AdminStatus : UP

Link Status : Down

Mtu : 1500

Config Duplex : Auto

Config Speed : ----

Current Duplex : ----

Current Speed : ----

FlowCtrl : Enable

BcastPkt Limit : 64

McastPkt Limit : 0

DlfPkt Limit : 64

Rx Rate Limit : 0

Tx Rate Limit : 0

Ingress Mirror : 0

Egress Mirror : 0

Priority : 0

Dot1q Ingress Filter : Disable

Dot1q Accept Frames : all

Stp Flag : Disable

Stp Status : forward



150

Addr Learning : Enable

Igmp Snooping : Enable

Pvid : 1

Tagged Vlan List :

Untagged Vlan List : 1

Fengine#

The above command is to show basic information of switch Port (1).


None

3.11.32 show interface distance

Show length of interface curcuit（unit: meter）

【Command Form】

show interface distance <1-64>

【Parameter】

<1-64>：port No.

【Node Mode】


【Default】

None

【Using Guide】

This command is to show length of net wire on the port (electrical interface),

pull ooff the net wire of peer end device when execute this command, then

the result is correct; if port is under link status, the result is 0.



【Example】

Fengine#show interface distance 1

Distance : Tx 1 , Rx 1

Fengine#


None

3.11.33 show interface dynamic-mac

Show dynamic MAC address learned on certain interface

【Command Form】


【Parameter】

<1-64>：port No. （optional）



151

【Node Mode】


【Default】

None

【Using Guide】

This command is to show dynamic MAC address of certain interface.



【Example】

Fengine#show interface dynamic-mac

If Vlan MAC-Address

2 1 00:0B:DB:2D:95:3E

2 1 00:80:AD:77:C9:F3

2 1 00:E0:4D:20:15:82

2 1 00:11:11:08:18:CE

2 1 00:05:5D:02:CC:78

Total 5 dynamic mac on this switch!

Fengine#

The above command is to show dynamic MAC of all interface.

Fengine#show interface dynamic-mac 2

Total 5 dynamic mac on this interface

Vlan MAC-Address

1 00:11:11:17:A6:70

1 00:06:5B:4D:02:F9

1 00:0B:DB:2D:95:3E

1 00:80:AD:77:C9:F3

1 00:E0:4D:20:15:82

Fengine#

The above command is to show dynamic MAC of certain port (2).


show dynamic-mac (AA:BB:CC:DD:EE:FF)

3.11.34 show interface loop-check

Show loop-check information of switch interface

【Command Form】


【Parameter】

None

【Node Mode】




152

【Default】

None

【Using Guide】

This command is to show loop-check information of switch interface, which

is to check if there is loop existing in the network. If the port show “topo-

loop”, it means the port has loop.



【Example】

Fengine#show interface loop-check

If Loop-check Vlan Status

1 enable 1 linkdown

2 enable 1 topo-loop

3 enable 1 ok

4 enable 1 linkdown

5 enable 1 linkdown

6 enable 1 linkdown

7 enable 1 linkdown

8 enable 1 linkdown

……

Fengine#


None

3.11.35 show interface security-mac

Show security access control MAC list of certain port

【Command Form】


【Parameter】

[<1-64>]：port No. （optional）

【Node Mode】


【Default】

None

【Using Guide】

This command is to show switch port security MAC list.



【Example】



153

Fengine#show interface security-mac

If MaxMacNum CurrMacNum Status

1 24 0 disable

2 24 0 disable

3 24 0 disable

4 24 0 disable

5 24 0 disable

6 24 0 disable

7 24 0 disable

8 24 0 disable

……

Fengine#

The above command is to show security mac information of all port

Fengine#show interface security-mac 1


CurrMacNum : 0

MaxMacNum : 24

MacStatus : Disable

Fengine#

The above command is to show security access control information of port

(1).




3.11.36 show interface static-mac

Show static MAC address of all interface or indicated interface

【Command Form】

show interface static-mac [<1-64>]

【Parameter】


【Node Mode】


【Default】

None

【Using Guide】

This command is to show static MAC address of all interface or indicated

interface





154

【Example】

Fengine#show interface static-mac 1

Fengine#


None

3.11.37 show interface statistics

Show statistics of egress data and ingress data at switch port

【Command Form】

show interface statistics [<1-64>]

【Parameter】


【Node Mode】


【Default】

None

【Using Guide】

This command is to show statistics of egress data and ingress data at switch

port



【Example】

Fengine#show interface statistics

If BytesRx BytesTx PacketsRx PacketsTx

1 41813 59760 564 813

2 1451982 293634 15978 3659

3 0 0 0 0

4 0 0 0 0

5 0 0 0 0

6 0 0 0 0

7 0 0 0 0

8 0 0 0 0

……

Fengine#

The above command is to show statistics of egress data and ingress data at all

switch port

Fengine#show interface statistics 1


InOctets : 41813 InUcastPkts : 407

InMulticastPkts : 0 InBroadcastPkts : 157



155

OutOctets : 59760 OutUcastPkts : 397

OutMulticastPkts : 96 OutBroadcastPkts : 320

CRCAlignErrors : 0 UndersizePkts : 0

OversizePkts : 0 Fragments : 0

Jabbers : 0 Collisions : 0

InPkts64Octets : 469 InPkts65to127Octets : 74

InPkts256to511Octets : 0 InPkts1024to1518Octets : 0

RealTime Rate :

In Bytes Rate(bps) : 0

In Packet Rate(pps) Ucast : 0, Mcast : 0, Bcast :0

Out Bytes Rate(bps) : 0

Out Packet Rate(pps) Ucast : 0, Mcast : 0, Bcast :0

Fengine#

The above command is to show statistics of egress data and ingress data at

switch port (1).


None

3.11.38 show interface user-limit

show user limit of switch interface

【Command Form】

show interface user-limit [<1-64>]

【Parameter】


【Node Mode】


【Default】

None

【Using Guide】

This command is to show user-limit of switch interface, including user-limit

of interface and users number of current interface.



【Example】

Fengine#show interface user-limit 1

LimitNum: 0

AgingTime: 300

CurrNum :0

Fengine#



156


None

3.11.39 show trunk

Show Trunk port information

【Command Form】

show trunk

【Parameter】

None

【Node Mode】


【Default】

None

【Using Guide】

This command is to show trunk information



【Example】

Fengine#show trunk

**************************************************

(M=Member,-=None)

**************************************************

Trunk Dis-Policy 1------8 9-----16 17----24

1 dst-mac -------- -MMMMMMM --

Fengine#


None

3.12 IGMP Snooping configuration command

Igmp Snooping configuration command is including:

igmp-snooping (enable|disable)

igmp-snooping aging

igmp-snooping drop-filtered

igmp-snooping fast-leave

igmp-snooping proxy (enable|disable)

igmp-snooping proxy igmpv3-support



157

igmp-snooping proxy vlan

igmp-snooping query-send add

igmp-snooping query-send del

show igmp-snooping

show igmp-snooping egressport-table

3.12.1 igmp-snooping (enable|disable)

Start IGMP SNOOP in global mode

【Command Form】

igmp-snooping (enable|disable)

【Parameter】

enable:enable switch IGMP SNOOP protocol

disable:disable switch IGMP SNOOP protocol

【Node Mode】

Igmp-snooping configuration mode

【Default】

disable

【Using Guide】

This command is to enable/disable switch IGMP SNOOP



【Example】

Fengine(config-igmp-snoop)#igmp-snooping enable

Fengine(config-igmp-snoop)#


show igmp-snooping

3.12.2 igmp-snooping aging

Configure aging time for IGMP SNOOP multicast forwarding list

【Command Form】

igmp-snooping aging <30-3600>

【Parameter】

<30-3600>：time range is in 30-3600 second

【Node Mode】




158

【Default】

As default, IGMP SNOOP is not enabled, the default multicast forwarding

list aging time is 300 seconds.

【Using Guide】

This command is to configure aging time for IGMP SNOOP protocol

forwarding list.



【Example】

Fengine(config-igmp-snoop)#igmp-snooping aging 300



show igmp-snooping

3.12.3 igmp-snooping drop-filtered

Configure wheter permit igmp report to be forwarded by switch when received

igmp report is filtered by igmp filter.

【Command Form】

igmp-snooping drop-filtered (enable|disable)

【Parameter】

Enable: if igmp report is filtered by igmp filter, the report will not be forward

Disable: if igmp report is filtered by igmp filter, the report will not be

forward

【Node Mode】


【Default】

enable

【Using Guide】

This command is to configure whether permit the igmp report is forwarded

by the switch when the received igmp report is filtered by igmp filter.



【Example】

Fengine(config-igmp-snoop)#igmp-snooping drop-filtered disable



show igmp-snooping



159

3.12.4 igmp-snooping fast-leave

Configure whether enable igmp-snooping fast-leave.

【Command Form】

igmp-snooping fast-leave (enable|disable)

【Parameter】

enable：enable fast leave

disable：disable fast leave

【Node Mode】


【Default】

disable

【Using Guide】

This command is to configure whether enable or disable fast leave. If the

switch is directly connected with terminal user, we suggest to set enable fast

leave; if the switch is not directly connected with terminal user, we suggest

to disable fast leave.



【Example】

Fengine(config-igmp-snoop)#igmp-snooping fast-leave enable



show igmp-snooping

3.12.5 igmp-snooping proxy (enable|disable)

Enable or disable IGMP SNOOP proxy.

【Command Form】

igmp-snooping proxy (enable|disable)

【Parameter】

enable：enable

disable：disable

【Node Mode】


【Default】

disable

【Using Guide】



160

This command will take effect after IgmpSnooping is enabled. After enabled,

the switch proxy will send Igmp Report to Layer 3 device, all Igmp Report

will be sent from proxy VLAN, and source IP is IP address of proxy VLAN.



【Example】

Fengine(config-igmp-snoop)# igmp-snooping proxy enable



show igmp-snooping

3.12.6 igmp-snooping proxy igmpv3-support

Set whether IgmpSnooping proxy forward IGMPV3 Report sent by the host

without condition.

【Command Form】

igmp-snooping proxy igmpv3-support (enable|disable)

【Parameter】

enable:support forwarding Igmpv3 Report

disable:not support forwarding Igmpv3 Report

【Node Mode】


【Default】

disable

【Using Guide】

After this command is enabled, if received IGMPV3 Report sent by the

host,it will be forward in proxy VLAN; If not enabled, estimate whether

forward the Report according to the multicast list.



【Example】

Fengine(config-igmp-snoop)# igmp-snooping proxy igmpv3-support enable



show igmp-snooping

3.12.7 igmp-snooping proxy vlan

Configure IgmpSnooping proxy VLAN ID

【Command Form】



161

igmp-snooping proxy vlan <1-4094>

【Parameter】

<1-4094>：vlan id

【Node Mode】


【Default】

1

【Using Guide】

This command is to configure proxy VLAN ID, the configured VLAN

should have IP address, for Layer 2 switch, the VLAN is management VLAN.

When management VLAN of Layer 2 switch is changed, the proxy VLAN

should be changed as well.



【Example】

Fengine(config-igmp-snoop)# igmp-snooping proxy vlan 2



show igmp-snooping

3.12.8 igmp-snooping query-send add

Configure vlan and source IP address for IgmpSnooping sending query.

【Command Form】

igmp-snooping query-send add <1-4094> (A.B.C.D)

【Parameter】

<1-4094>:vlan ID

(A.B.C.D):IP address used by query message

【Node Mode】


【Default】

None

【Using Guide】

Since IGMP REPORT of user’s PC need to be triggered by IGMP QUERY,

if there is no router in network, the user PC will not periodically send IGMP

REPORT, then the switch in network will delete these multicast group, then

the multicast data in the network will be forward in broadcast mode and

occupy much bandwidth. When network is simple, for example, for one vlan,

there is a multicast service server, it’s too expensive to use a router to



162

periodically send query. This command can make switch periodically send

igmp query, so the router can send query.

Notice: IP address in the command may not in-band or out-of-band network

management IP address.



【Example】

Fengine(config-igmp-snoop)# igmp-snooping query-send add 1

192.168.1.254


After above command is executed, switch will periodically send igmp query

in vlan 1, IP address of this information is 192.168.1.254


show igmp-snooping，igmp-snooping query-send del

3.12.9 igmp-snooping query-send del

Delete configured proxy query configuration

【Command Form】

igmp-snooping query-send del <1-4094>

【Parameter】

<1-4094>： vlan id

【Node Mode】


【Default】

None

【Using Guide】

This command is to delete proxy sending query in certain VLAN



【Example】

Fengine(config-igmp-snoop)# igmp-snooping query-send del 1



show igmp-snooping，igmp-snooping query-send add

3.12.10 show igmp-snooping

Show configuration of IGMP SNOOP



163

【Command Form】

show igmp-snooping

【Parameter】

None

【Node Mode】


【Default】

None

【Using Guide】

This command is to show switch IGMP protocol configuration.



【Example】

Fengine#show igmp-snooping

igmpSnoop Status : enable

igmpSnoop Aging(seconds) : 300

igmpSnoop QueryMaxResponseTime(seconds) : 10

igmpSnoop FastLeave : disable

igmpSnoop Drop-filtered : enable

igmpSnoop Proxy Status : disable

igmpSnoop Proxy Support Igmpv3 : disable

igmpSnoop Proxy Used Vlan Id : 1

igmpSnoop Query-send : vlan 1 IP 192.168.1.100

Fengine#


show running-config

3.12.11 show igmp-snooping egressport-table

Show multicast group and group member port information learned by IGMP

SNOOP

【Command Form】

show igmp-snooping egressport-table

【Parameter】

None

【Node Mode】


【Default】

None



164

【Using Guide】

This command is to show multicast group and group member port information

learned by IGMP SNOOP.



【Example】

Fengine#show igmp-snooping egressport-table

Vlan MacAddr EgressPorts

1 01:00:5E:01:01:01 6

1 01:00:5E:02:03:22 6

Fengine#


None

3.13 ESR instance configuration command

ESR configuration command is including:

esr (disable|enable)

esr <0-5> (disable|enable)

esr <0-5> ctrl-vlan

esr <0-5> failed-time

esr <0-5> hello-time

esr <0-5> mode (master|transit)

esr <0-5> name

esr <0-5> primary-port

esr <0-5> primary-port trunk

esr <0-5> secondary-port

esr <0-5> secondary-port trunk

show esr

show esr Example

3.13.1 esr (disable|enable)

Enable or disable Etherne ring

【Command Form】



165

esr (disable|enable)

【Parameter】

disable：disable Ethernet ring

enable：enable Ethernet ring

【Node Mode】

Esr configuration node

【Default】

disable

【Using Guide】

This command is to enable or disable Ethernet ring, configure esr instance

after esr is enabled.



【Example】

Fengine(config-system)#esr enable



None

3.13.2 esr <0-5> (disable|enable)

Set disable, enable, delete certain ESR instance.

【Command Form】

esr <0-5> (disable|enable)

【Parameter】

<0-5>：esr instance id

disable：disable certain esr instance

enable：enable cartain esr instance

【Node Mode】

ESR configuration mode

【Default】

None

【Using Guide】

This command is to disable, enable, delete certain ESR instance.



【Example】

Fengine(config-system)# esr 1 enable



166



None

3.13.3 esr <0-5> ctrl-vlan

Set control VLAN of certain instance

【Command Form】

esr <0-5> ctrl-vlan <1-4094>

【Parameter】


<1-4094>：VLAN id

【Node Mode】


【Default】

None

【Using Guide】

This command is to set control VLAN for certain instance



【Example】

Fengine(config-system)# esr 1 ctrl-vlan 1



None

3.13.4 esr <0-5> failed-time

Set failed-time of certain instance

【Command Form】

esr <0-5> failed-time <340-10000000>

【Parameter】

<0-5>:esr instance No.

<340-10000000>:failed time, the time unit is ms

【Node Mode】


【Default】

3000

【Using Guide】



167

This command is to set failed time of certain instance, if the node of the ring is

over 4, we suggest add 100ms for every node.



【Example】

Fengine(config-system)# esr 1 failed-time 500



None

3.13.5 esr <0-5> hello-time

Set Hello time of an instance

【Command Form】

esr <0-5> hello-time <170-10000000>

【Parameter】


<170-10000000>:Hello time, time unit is ms

【Node Mode】


【Default】

170

【Using Guide】

This command is to set hello-time of certain instance



【Example】

Fengine(config-system)# esr 1 hello-time 200



None

3.13.6 esr <0-5> mode (master|transit)

Set mode of an instance

【Command Form】

esr <0-5> mode (master|transit)

【Parameter】




168

master:master control mode

transit:transit mode

【Node Mode】


【Default】

None

【Using Guide】

This command is to set mode of certain instance, one esr instance only permit

one master, and multi transit



【Example】

Fengine(config-system)# esr 1 mode master



None

3.13.7 esr <0-5> name

Set name of certain instance

【Command Form】

esr <0-5> name STRING

【Parameter】


STRING:name character string

【Node Mode】


【Default】

None

【Using Guide】

This command is to set the name of a certain instance



【Example】

Fengine(config-system)# esr 1 name Example1



None



169

3.13.8 esr <0-5> primary-port

Set primary port of a certain instance

【Command Form】

esr <0-5> primary-port <1-65535>

【Parameter】


<1-65535>：port No.

【Node Mode】


【Default】

None

【Using Guide】

This command is to set primary port of a certain instance



【Example】

Fengine(config-system)# esr 1 primary-port 1



None

3.13.9 esr <0-5> primary-port trunk

Set primary port of a certain instance （Trunk ）

【Command Form】

esr <0-5> primary-port trunk <1-4>

【Parameter】


<1-4>：Trunk id

【Node Mode】


【Default】

None

【Using Guide】

This command is to set primary Trunk port of certain instance





170

【Example】

Fengine(config-system)# esr 1 primary-port trunk 1



None

3.13.10 esr <0-5> secondary-port

Set secondary port of certain instance

【Command Form】

esr <0-5> secondary-port <1-65535>

【Parameter】


<1-65535>:secondary-port No.

【Node Mode】


【Default】

None

【Using Guide】

This command is to set secondary port of certain instance



【Example】

Fengine(config-system)# esr 1 secondary-port 2



None

3.13.11 esr <0-5> secondary-port trunk

Set secondary port Trunk of certain instance

【Command Form】

esr <0-5> secondary-port trunk <1-4>

【Parameter】


<1-4>：Trunk id

【Node Mode】


【Default】



171

None

【Using Guide】

This command is to set secondary Trunk of certain instance



【Example】

Fengine(config-system)# esr 1 secondary-port trunk 2



None

3.13.12 show esr

Show ESR global configuration information

【Command Form】

show esr

【Parameter】

None

【Node Mode】


【Default】

None

【Using Guide】

This command is to show switch ESR global configuration information



【Example】

Fengine#show esr

esrEnable : disable

Fengine#


None

3.13.13 show esr instance

Show ESR instance configuration information

【Command Form】

show esr Example [<0-5>]

【Parameter】



172


【Node Mode】


【Default】

None

【Using Guide】

This command is to show switch ESR instance configuration information



【Example】

Fengine#show esr Example

Id Name Mode Status

0 --- master disable






Fengine#


None

3.14 RADIUS configuration command

The switch realize Radius client-end function.

Radius configuration commandis including:

radius (enable| disable)

radius <1-10> name

radius <1-10> response-time

radius <1-10> retransmit

radius <1-10> secret

radius <1-10> server-acc-port

radius <1-10> server-address

radius <1-10> server-auth-port

radius <1-10> status

radius <1-10> type

aaa login radius-server NAME



173

show radius server

3.14.1 radius (enable| disable)

enable disable switch RADIUS Client function

【Command Form】

radius (enable| disable)

【Parameter】

enable：enable RADIUS function

disable ：disable RADIUS function

【Node Mode】

RADIUS configuration mode

【Default】

disable

【Using Guide】

This command is to configure whether switch enable RADIUS function, this

device can permit 10×radius client-end



【Example】

Fengine(config-radius)# radius enable

Fengine(config-radius)#


None

3.14.2 radius <1-10> name

Configure name of radius client. Notice: the switch can configure 10× client

communicating with 10×radius server.

【Command Form】

radius <1-10> name NAME

【Parameter】

<1-10>:configure radius No.

NAME:the name of radius

【Node Mode】


【Default】

None

【Using Guide】



174

This command is to create a radius client, and set name of radius



【Example】

Fengine(config-radius)#radius 1 name test



show radius server 1

3.14.3 radius <1-10> response-time

Configure response-timeout of radius client server.

【Command Form】

radius <1-10> response-time <2-15>

【Parameter】

<1-10>:radius server No.

<2-15>:response timeout （unit is second）

【Node Mode】


【Default】

5

【Using Guide】

This commandis to configure response-timeout of radius server



【Example】

Fengine(config-radius)#radius 1 response-time 8



None

3.14.4 radius <1-10> retransmit

Configure retransmit for radius client to send request to radius server.

【Command Form】

radius <1-10> retransmit <1-255>

【Parameter】

<1-10>:radius client serial No.

<1-255>:retransmit times



175

【Node Mode】


【Default】

3

【Using Guide】

This command is to set retransmit times for switch radius request.



【Example】

Fengine(config-radius)#radius 1 retransmit 2



None

3.14.5 radius <1-10> secret

Configure secret between radius client and server.

【Command Form】

radius <1-10> secret SECRET

【Parameter】

<1-10>:radius client serial No.

SECRET:secret

【Node Mode】


【Default】

None

【Using Guide】

This command is to configure secret between radius client and radius server.



【Example】

Fengine(config-radius)#radius 1 secret 123



None

3.14.6 radius <1-10> server-acc-port

Configure port No.of radius server corresponding to radius client.



176

【Command Form】

radius <1-10> server-acc-port (1813|1646)

【Parameter】

<1-10>:radius server No.

1813:use 1813 Port

1646:use 1646 port

【Node Mode】


【Default】

For radius-end, use Port 1813 to be accounting port client

【Using Guide】

This command is to configure port No. with accounting function

corresponding to radius server.



【Example】

Fengine(config-radius)#radius 1 server-auth-port 1645



None

3.14.7 radius <1-10> server-address

Configure IP address of radius server corresponding to radius client.

【Command Form】

radius <1-10> server-address (A.B.C.D)

【Parameter】

<1-10>:radius client No.

(A.B.C.D):radius server IP address

【Node Mode】


【Default】

None

【Using Guide】

This command is to configure IP address of radius server corresponding to

radius client.



【Example】



177

Fengine(config-radius)#radius 1 server-address 1.1.1.1



show radius server <1-10>

3.14.8 radius <1-10> server-auth-port

Configure port No.of radius server authentication.

【Command Form】

radius <1-10> server-auth-port (1812|1645)

【Parameter】


1812:user Port 1812

1645:use Port 1645

【Node Mode】


【Default】

For Radius client, use Port 1812 to be authority port.

【Using Guide】

This command is to configure port No. with authentication function of radius

server corresponding to radius client.



【Example】

Fengine(config-radius)#radius 1 server-auth-port 1812



None

3.14.9 radius <1-10> status

Enable or disable or destory radius client

【Command Form】

radius <1-10> status (enable|disable|destroy)

【Parameter】


enable:enable corresponding radius client

disable:disable corresponding radius client

destroy:destroy corresponding radius client



178

【Node Mode】

RADIUS configuration mode, RADIUS configuration mode

【Default】

disable

【Using Guide】

This command is to enable or disable radius client



【Example】

Fengine(config-radius)#radius 1 status enable



None

3.14.10 radius <1-10> type

Configure service type of radius client

【Command Form】

radius <1-10> type (acc|auth|both)

【Parameter】


acc:client provide accounting service

auth:client provide authentication service

both:client provide accounting and authentication service

【Node Mode】


【Default】

Radius client provide accounting and authentication service as default

【Using Guide】

This command is to configure service type provided by radius client.



【Example】

Fengine(config-radius)#radius 1 type auth



None

3.14.11 aaa login radius-server NAME



179

Configfure radius-server name for AAA logging authentication

【Command Form】

aaa login radius-server NAME

【Parameter】

NAME： radius-server name

【Node Mode】


【Default】

None

【Using Guide】

This command is to configfure radius-server name for AAA logging

authentication



【Example】

Fengine(config)# aaa login radius-server test

Fengine(config)#


None

3.14.12 show radius server <1-10>

Show switch radius client configuration.

【Command Form】

show radius server <1-10>

【Parameter】

<1-10>：server No.

【Node Mode】


【Default】

None

【Using Guide】

This command is to show switch radius client configuration.



【Example】

Fengine#show radius server 1

Server 1



180

ServerName : test

ServerType : both

ServerIP : 192.168.1.10

ServerAuthPort : 1812

ServerAccPort : 1813

ServerKey : FHN_RADIUS

ServerRetransmit : 3

ServerTimeout time : 5

ServerStatus : notInService

Fengine#


None

3.15 Double-tag protocol configuration command

Double-tag: when enabled double-tag on the interface, the data sent out from this

port will take two vlan tag.

Double-tag configuration command is including:

dtag (enable|disable)

dtag protocol <0-65536>

dtag dot1q (enable|disable)

dtag flexible (enable|disable)

dtag flexible inner <1-4094> outer <1-4094>

show dtag

show interface dtag

show interface dtag flexible

3.15.1 dtag (enable|disable)

Enable double-tag protocol on the port.

【Command Form】


【Parameter】

enable：enable double-tag

disable ：disable double-tag

【Node Mode】

global configuration mode interface configuration mode

【Default】

disable



181

【Using Guide】

This command is invalid, if not enable dtag on interface under global

configuration mode.

Command “dtag enable” under interface configuration, the data packet is

forward according to ingress pvid, quit from uplink port with 2 tags, outer is

ingress pvid, inner is the orginal tag of packet; Under flexible mode, inner tag

of packet is the orginal tag, outer tag is the tag designated by flexible

command.



【Example】

Fengine(config)#dtag enable

Fengine(config)#

Fengine(config-eth-1)#dtag enable



show dtag

show interface dtag

3.15.2 dtag protocol <0-65536>

Configure double-tag tpid

【Command Form】

dtag protocol <0-65536>

【Parameter】

<0-65536>： tpid

【Node Mode】


【Default】

None

【Using Guide】

Configure double-tag tpid is using 0x8100 or 0x9100.



【Example】

Fengine(config)#dtag protocol 37120

Fengine(config)#

3.15.3 dtag dot1q (enable|disable)

enable double-tag dot1q



182

【Command Form】


【Parameter】

enable：enable dtag dot1q

disable ：disable dtag dot1q

【Node Mode】


【Default】

disable

【Using Guide】

set whether port enable 802.1q, if enabled, when received vlan-tagged data,

forward vlan id based on vlan tag. Otherwise, forward port-based pvid. In

order to make vid of double-tagged port external tag to be pvid of message

source port, we suggest to disable source port dot1q mode.



【Example】

Fengine(config-eth-1)#dtag dot1q enable


3.15.4 dtag flexible (enable|disable)

enable flexible dtag

【Command Form】

dtag flexible (enable|disable)

【Parameter】

enable：enable flexible

disable ：disable flexible

【Node Mode】


【Default】

disable

【Using Guide】

enable or disable dtag flexible, enable flexible.first configure dtag dot11q

enabled and configure inner tag and outer tag under interface.



【Example】

Fengine(config-eth-1)#dtag flexible enable




183

3.15.5 dtag flexible inner <1-4094> outer <1-4094>

In flexible mode, configure inner tag and outer tag.

【Command Form】

dtag flexible inner <1-4094> outer <1-4094>

【Parameter】

<1-4094>：inner tag

<1-4094>：outer tag

【Node Mode】


【Default】

None

【Using Guide】

Under flexible mode, configure inner tag and outer tag.



【Example】

Fengine(config-eth1-1)#dtag flexible inner 1 outer 2

Fengine(config-eth1-1)#

3.15.6 show dtag

Show switch global dtag configuration.

【Command Form】

show dtag

【Parameter】

None

【Node Mode】


【Default】

None

【Using Guide】

Show switch global dtag configuration.



【Example】

Fengine#show dtag

protocol : 37120

dtag protocol : disabled



184

Fengine#


None

3.15.7 show interface dtag

Show switch all port dtag configuration.

【Command Form】

show interface dtag

【Parameter】

None

【Node Mode】


【Default】

None

【Using Guide】

Show switch all port dtag configuration.



【Example】

Fengine#show interface dtag

If DtagStatus Dot1qStatus Flexible

1 disable enable ----









Fengine#


None

3.15.8 show interface dtag flexible

Show switch all port dtag flexible configuration.

【Command Form】

show dtag flexible

【Parameter】

None



185

【Node Mode】


【Default】

None

【Using Guide】

Show switch all port dtag flexible configuration.



【Example】

Fengine#show interface dtag flexible

If Inner Outer

1 1 2

Fengine#


None

3.16 IGMP-FILTER configuration command

IGMP Filter is to filter IGMP report

Igmp Filter configuration command is including:

apply-to-ports PORTLIST

apply-to-ports none

igmp-filter <1-26>

no igmp-filter <1-26>

igmp-filter <1-26> (enable|disable)

rule <1-10> (permit|deny) (A.B.C.D) (A.B.C.D)

rule <1-10> (permit|deny) (AA:BB:CC:DD:EE:FF)

no rule <1-10>

rule <1-10> preview

show igmp-filter

show igmp-filter <1-26>

show igmp-filter preview user

3.16.1 apply-to-ports PORTLIST

Apply certain igmp filter to switch port



186

【Command Form】

apply-to-ports PORTLIST

【Parameter】

PORTLIST：port list（1,2,4-8,10）

【Node Mode】

Igmp-filter configuration mode

【Default】

None

【Using Guide】

Apply certain igmp filter to switch port



【Example】

Fengine(config-igmp-filter 1)#apply-to-ports 1,2,4-8

Fengine(config-igmp-filter 1)#


show igmp-filter <1-10>，igmp-filter <1-10> (enable|disable)

3.16.2 apply-to-ports none

Not apply igmp filter to any port

【Command Form】

apply-to-ports none

【Parameter】

None

【Node Mode】


【Default】

disable

【Using Guide】

This command is not to apply igmp filter to any port.



【Example】

Fengine(config-igmp-filter 1)#apply-to-ports none





187

show igmp-filter <1-10>，igmp-filter <1-10> (enable|disable)

3.16.3 igmp-filter <1-26>

Create an igmp filter

【Command Form】

igmp-filter <1-26>

【Parameter】

<1-26>：igmp-filter id

【Node Mode】


【Default】

None

【Using Guide】

This command is to form an igmp filter for switch



【Example】

Fengine(config)#igmp-filter 1



show igmp-filter, no igmp-filter <1-26>

3.16.4 no igmp-filter <1-26>

Delete a igmp filter

【Command Form】

no igmp-filter <1-26>

【Parameter】

<1-26>：igmp-filter No. to be deleted

【Node Mode】


【Default】

None

【Using Guide】

This command is to form a igmp filter





188

【Example】

Fengine(config)#no igmp-filter 1

Fengine(config)#


show radius server 1

3.16.5 igmp-filter <1-26> (enable|disable)

Enable or disable certain igmp filter to be applied to switch port.

【Command Form】


【Parameter】

<1-26>：igmp filter No.

(enable|disable)：enable is to enable, disable is to disable

【Node Mode】


【Default】

disable

【Using Guide】

This command is to apply certain igmp filter to switch port under interface

configuration mode or delete certain igmp to be applied at the port.



【Example】

Fengine(config-eth-2)#igmp-filter 1 enable



apply-to-ports PORTLIST，show igmp-filter <1-26>

3.16.6 rule <1-10> (permit|deny) (A.B.C.D) (A.B.C.D)

Configure rule for igmp filter

【Command Form】


【Parameter】

<1-100>：rule No.

permit：permit rule

deny：deny rule

(A.B.C.D)：filter beginning address of multicast



189

(A.B.C.D)：filter ending address of multicast

【Node Mode】


【Default】

None

【Using Guide】

This command is to configure filter rule for igmp filter, one igmp filter has

multi rules, the matched order is from lower No. to higher No.



【Example】

Fengine(config-igmp-filter 1)#rule 1 permit 239.1.1.1 239.1.1.10




3.16.7 rule <1-10> (permit|deny) (AA:BB:CC:DD:EE:FF)

Configure rule for igmp filter

【Command Form】

rule <1-10> (permit|deny) (AA:BB:CC:DD:EE:FF)

【Parameter】

<1-10>：rule No.

permit：permit rule

deny：deny rule

(AA:BB:CC:DD:EE:FF)：filter multicast MAC address

【Node Mode】


【Default】

None

【Using Guide】

This command is to configure filter rule for igmp filter, one igmp filter has

multi rules, the matched order is from lower No. to higher No.

The mac address should begin with 01.00.5e.



【Example】

Fengine(config-igmp-filter 1)#rule 1 permit 01.00.5e.00.00.01




190



3.16.8 no rule <1-10>

Delete certain rule of igmp filter.

【Command Form】

no rule <1-10>

【Parameter】

<1-10>：rule No.

【Node Mode】


【Default】

disable

【Using Guide】

This command is to delete certain rule of igmp filter



【Example】

Fengine(config-igmp-filter 1)#no rule 1




3.16.9 rule <1-10> preview

Configure igmp preview

【Command Form】

rule <1-10> preview (A.B.C.D) (A.B.C.D) (A.B.C.D) (A.B.C.D) time <1-65535>

interval <1-255>

rule <1-10> preview (A.B.C.D) (A.B.C.D) (A.B.C.D) (A.B.C.D) time <1-65535>

rule <1-10> preview (A.B.C.D) (A.B.C.D) any time <1-65535> interval <1-255>

rule <1-10> preview (A.B.C.D) (A.B.C.D) any time <1-65535>

【Parameter】

<1-10>：rule No.

(A.B.C.D)：multicast beginning address

(A.B.C.D)：multicast ending address

(A.B.C.D)：user beginning address

(A.B.C.D)：user ending address



191

<1-65535>：preview time, unit: minute

<1-255>：times of preview time

【Node Mode】


【Default】

None

【Using Guide】

This command expand the orginal multicast controllable technology, adding

multicast preview control rule, adding time period and user IP control

condition, make multicast control more flexible.



【Example】

Fengine(config-igmp-filter 1)#rule 1 preview




3.16.10 show igmp-filter

Show configured igmp filter list.

【Command Form】

show igmp-filter

【Parameter】

None

【Node Mode】


【Default】

None

【Using Guide】

This command is to show igmp filter configured by the switch



【Example】

Fengine#show igmp-filter

switch igmp-filter configuration

igmp-filter 1 igmp-filter 2

Fengine#


None



192

3.16.11 show igmp-filter <1-26>

Show rule configuration of certain igmp filter and port application.

【Command Form】


【Parameter】

<1-26>：igmp filter list No.

【Node Mode】


【Default】

None

【Using Guide】

This command is to show rule configuration of certain igmp filter and port

application.



【Example】

Fengine#show igmp-filter 1

igmp filter 1's detail information:

state :Active

The rule list :

rule 1 permit 239.1.1.1 239.1.1.10 ,State:Active

The port(s) using this filter:

Interface 1 ,Interface 2 ,Interface 3 ,Interface 4 ,

Interface 5 ,

Fengine#


None

3.16.12 show igmp-filter preview user

Show multicast preview user

【Command Form】

show igmp-filter preview user

【Parameter】

None

【Node Mode】


【Default】

None



193

【Using Guide】

This command is to show switch multicast preview user



【Example】

Fengine#show igmp-filter

switch igmp-filter configuration

igmp-filter 1 igmp-filter 2

Fengine#


None

3.17 DHCP configuration command

DHCP configuration command is including:

dhcp relay (enable|disable)

dhcp relay server-ip

show dhcp

3.17.1 dhcp relay (enable|disable)

Enable or disable Dhcp relay service

【Command Form】

dhcp relay (enable|disable)

【Parameter】

(enable|disable)

【Node Mode】


【Default】

disable

【Using Guide】

This command is to enable or disable DHCP relay service on switch, since

S2200ME-B is Layer 2 switch, DHCP RELAY can be enabled only in

management vlan.



【Example】

Fengine(config-vlan-1)# dhcp relay enable




194


show dhcp

3.17.2 dhcp relay server-ip (A.B.C.D)

Configure IP address of DHCP relay peer end service

【Command Form】

dhcp relay server-ip (A.B.C.D)

【Parameter】

A.B.C.D：IP address

【Node Mode】


【Default】

0.0.0.0

【Using Guide】

This command is to enable DHCP relay service and then configure IP

address of peer end server.



【Example】

Fengine(config-vlan-1)# dhcp relay server-ip 192.168.1.200



show dhcp

3.17.3 show dhcp

Show Dhcp service configuration

【Command Form】

show dhcp

【Parameter】

None

【Node Mode】


【Default】

None

【Using Guide】

This command is to show switch DHCP service configuration.





195

【Example】

Fengine# show dhcp

Dhcp Configure

dhcp relay : enable

dhcp relay server ip :192.138.1.200

Fengine#


None

3.18 SNTP configuration command

SNTP configuration command is including:

sntp (client|none)

sntp peer ip-address

sntp time-offset (plus|minus) <0-86400>

show sntp

3.18.1 sntp (client|none)

Set SNTP role

【Command Form】

sntp (client|none)

【Parameter】

client:enable SNTP server service

none:not enable SNTP protocol

【Node Mode】


【Default】

none

【Using Guide】

This command is to enable switch network clock protocol (SNTP) service,

the switch is only one role.



【Example】

Fengine(config-vlan-1)# sntp client





196

show sntp

3.18.2 sntp peer ip-address

Set IP address of switch SNTP client-end server.

【Command Form】

sntp peer ip-address (A.B.C.D)

【Parameter】

A.B.C.D：server IP address

【Node Mode】


【Default】

0.0.0.0

【Using Guide】

This command is to set IP address of switch SNTP client-end server



【Example】

Fengine(config-vlan-1)# sntp peer ip-address 192.168.1.1



show sntp

3.18.3 sntp time-offset (plus|minus) <0-86400>

Set switch time-offset

【Command Form】

sntp time-offset (plus|minus) <0-86400>

【Parameter】

(plus|minus):plus offset or minus offset

<0-86400>:offset time（second）

【Node Mode】


【Default】

0

【Using Guide】

This command is to set switch time-offset.





197

【Example】

Fengine(config-vlan-1)# sntp time-offset plus 12



show sntp

3.18.4 show sntp

Show switch current SNTP service configuration.

【Command Form】

show sntp

【Parameter】

None

【Node Mode】

privileged configuration mode

【Default】

none

【Using Guide】

This command is to show switch current SNTP service configuration.



【Example】

Fengine# show sntp

Sntp Configure

vlan 1 sntp client

Fengine#


None

3.19 SPNM configuration command

SPNM configuration command is including:

spnm (enable|disable)

spnm community

spnm password

spnm send-access-mac

spnm server-ip



198

spnm access-port

show spnm access-ports

show spnm information

3.19.1 spnm (enable|disable)

Enable or disable SPNM protocol

【Command Form】

spnm (enable|disable)

【Parameter】

(enable|disable)

【Node Mode】

SPNM configuration mode

【Default】

disable

【Using Guide】

This command is to enable or disable switch private network management

(SPNM) protocol.



【Example】

Fengine(config-spnm)# spnm enable

Fengine(config-spnm)#



3.19.2 spnm community

Configure SPNM community of network management platform notified by SPNM

【Command Form】

spnm community STRING

【Parameter】

STRING：:character string of SNMP community

【Node Mode】


【Default】

None

【Using Guide】



199

This command is to set SPNM community of network management

platformnotified by SPNM.



【Example】

Fengine(config-spnm)# spnm community NETMAN




3.19.3 spnm password

Configure password of SPNM protocol communication.

【Command Form】

spnm password STRING

【Parameter】

STRING：password string, the length should not be longer than 64

【Node Mode】


【Default】

None

【Using Guide】

This command is to set password for SPNM protocol communication.



【Example】

Fengine(config-spnm)# spnm password test




3.19.4 spnm send-access-mac

Enable or disable SPNM protocol sending access MAC.

【Command Form】

spnm send-access-mac (enable|disable)

【Parameter】

(enable|disable)



200

【Node Mode】


【Default】

disable

【Using Guide】

This command is to enable or disable SPNM protocol sending access MAC.



【Example】

Fengine(config-spnm)# spnm send-access-mac enable




3.19.5 spnm server-ip

Set IP address of network management platform communicating with switch.

【Command Form】

spnm server-ip (A.B.C.D)

【Parameter】

A.B.C.D：IP address of network management platform

【Node Mode】


【Default】

0.0.0.0

【Using Guide】

This command is to set IP address of network management platform

communicating with the switch.



【Example】

Fengine(config-spnm)# spnm server-ip 192.168.1.200




3.19.6 spnm access-port

Enable or disable switch port to be network access port



201

【Command Form】

spnm access-port (enable|disable)

【Parameter】

(enable|disable)：enable 为 enable ，disable 为 disable

【Node Mode】


【Default】

None

【Using Guide】

This commandis to enable or disable switch port to be SPNM protocol access

port



【Example】

Fengine(config-eth-1)# spnm access-port enable




3.19.7 show spnm access-ports

Show port information when switch enable receiving SPNM protocol.

【Command Form】


【Parameter】

None

【Node Mode】


【Default】

None

【Using Guide】

This command is to show port information when switch enable receiving

SPNM protocol.



【Example】

Fengine# show spnm access-ports

Fengine#



202


None

3.19.8 show spnm information

Show switch private network management configuration.

【Command Form】


【Parameter】

None

【Node Mode】


【Default】

None

【Using Guide】

This command is to show switch private network configuration.



【Example】

Fengine# show spnm information

spnm protocol status : disable

spnm server ip address : 0.0.0.0

spnm send access MAC status : disable

spnm community : NETMAN

spnm FSM state : notReady

Fengine#


None

3.20 interface batch-disposal configuration command

Configuration command are:

port <1-26> description

port PORTLIST dot1q accept (all|tagged-only)

port PORTLIST dtag (enable|disable)

port PORTLIST dtag dot1q (enable|disable)

port PORTLIST duplex (half|full) speed (10|100|1000)

port PORTLIST duplex auto



203

port PORTLIST flow-ctrl (enable|disable)

port PORTLIST igmp-filter <1-100> (enable|disable)

port PORTLIST join trunk

port PORTLIST link-trap (enable|disable)

port PORTLIST loop-check (enable|disable|re-check)

port PORTLIST loop-check vlan

port PORTLIST no-shutdown

port PORTLIST packet-limit

port PORTLIST priority

port PORTLIST pvid

port PORTLIST quit trunk

port PORTLIST rate-limit rx

port PORTLIST rate-limit tx

port PORTLIST rstp priority

port PORTLIST security-mac (enable|disable)

port PORTLIST sgm (enable|disable) vlan

port PORTLIST sgm discovery time

port PORTLIST sgm discovery ttl

port PORTLIST shutdown

port PORTLIST spnm access-port (enable|disable)

port PORTLIST stp (enable|disable)

port PORTLIST stp priority

port PORTLIST user-limit aging-time

port PORTLIST user-limit number

port PORTLIST sgm (enable|disable)

port PORTLIST sgm discovery time (<1-300>|default)

port PORTLIST sgm discovery ttl (<1-255>|default)

port PORTLIST sgm inband enable <1-4094>

port PORTLIST sgm vlan (add|remove) VLAN-LIST

3.20.1 port <1-26> description



204

Set port description of each switch port

【Command Form】

port <1-26> description STRING

【Parameter】

<1-26>:interface No.

STRING:port description character string

【Node Mode】


【Default】

None

【Using Guide】

This command is to set description of each switch port



【Example】

Fengine(config)# port 1 description port1

Fengine(config)#


description STRING

3.20.2 port PORTLIST dot1q accept (all|tagged-only)

Configure switch port to accept data packet type

【Command Form】

port PORTLIST dot1q accept (all|tagged-only)

【Parameter】

PORTLIST:port list (e.g.: 1,2,5-15,20)

all:all type data packet

tagged-only:only accept VLAN tagged data packet

【Node Mode】


【Default】

None

【Using Guide】

This command is to set whether a series port accept all type data packet or

only accept VLAN-tagged data packet.





205

【Example】

Fengine(config)# port 2-7,10 dot1q accept all

Fengine(config)#



3.20.3 port PORTLIST dot1x (enable|disable)

enable or disable switch 802.1x protocol

【Command Form】

port PORTLIST dot1x (enable|disable)

【Parameter】

PORTLIST：port list (e.g.: 1,2,5-15,20)

(enable|disable)

【Node Mode】


【Default】

disable

【Using Guide】

Enable or disable 802.1x protocol on switch port



【Example】

Fengine(config)# port 2-7,10 dot1x enable

Fengine(config)#


dot1x (enable|disable)

3.20.4 port PORTLIST dot1x authenticator max-user

Configure max-user number supported on the port enabled 802.1x protocol

【Command Form】

port PORTLIST dot1x authenticator max-user <1-65535>

【Parameter】


<1-65535>：user number

【Node Mode】


【Default】

None



206

【Using Guide】

Configurequiet-timeout for reauthentication on the port enabled 802.1x

protocol, the time is mainly to prevent vicious attack to the device.



【Example】

Fengine(config)# port 2-7,10 dot1x authenticator max-user 100

Fengine(config)#


dot1x authenticator max-user <1-65535>

3.20.5 port PORTLIST dot1x authenticator quiet-timeout <1-120>

Configure quiet-timeout for reauthentication on the port enabled 802.1x protocol,

the time is mainly to prevent vicious attack to the device.

【Command Form】

port PORTLIST dot1x authenticator quiet-timeout <1-120>

【Parameter】


<1-120>：time (unit: s)

【Node Mode】


【Default】

60

【Using Guide】

Configure quiet-timeout for reauthentication on the port enabled 802.1x

protocol, the time is mainly to prevent vicious attack to the device.


S2200ME-B

【Example】

Fengine(config)# port 2-7,10 dot1x authenticator quiet-timeout <1-120>

Fengine(config)#



3.20.6 port PORTLIST dot1x authenticator quiet-timeout default


the time is mainly to prevent vicious attack to the device.



207

【Command Form】

port PORTLIST dot1x authenticator quiet-timeout default

【Parameter】


【Node Mode】


【Default】

None

【Using Guide】


the time is mainly to prevent vicious attack to the device. This command is to set

the default time (60s).



【Example】

Fengine(config)# port 2-7,10 dot1x authenticator quiet-timeout default

Fengine(config)#


no dot1x authenticator quiet-timeout

3.20.7 port PORTLIST dot1x authenticator radius-server NAME

Configure the name of radius client corresponding to the port enabled 802.1x

protocol.

【Command Form】

port PORTLIST dot1x authenticator radius-server NAME

【Parameter】


NAME：radius client name

【Node Mode】


【Default】

None

【Using Guide】

This command is to configure the name of radius client corresponding to the port

enabled 802.1x protocol, “default” is to delete the name.





208

【Example】

Fengine(config)# port 2-7,10 dot1x authenticator radius-server test

Fengine(config)#


dot1x authenticator radius-server NAME

3.20.8 port PORTLIST dot1x authenticator radius-server default

Delete the name of radius client corresponding to the port enabled 802.1x protocol.

【Command Form】

port PORTLIST dot1x authenticator radius-server default

【Parameter】


【Node Mode】


【Default】

None

【Using Guide】

This command is to delete the name of the radius client corresponding to the

port enabled 802.1x protocol.



【Example】

Fengine(config)# port 2-7,10 dot1x authenticator radius-server default

Fengine(config)#


no dot1x authenticator radius-server

3.20.9 port PORTLIST dot1x authenticator reauthenticate-period

Configure 802.1x protocol reauthentication-period.

【Command Form】

port PORTLIST dot1x authenticator reauthenticate-Period <60-7200>

【Parameter】


<60-7200>：time（unit: s）

【Node Mode】


【Default】



209

3600

【Using Guide】

This command is to set switch 802.1x protocol reauthentication-period,

command “default” is to set reauthentication period to be default (3600s).



【Example】

Fengine(config)# port 2-7,10 dot1x authenticator reauthenticate-Period 4000

Fengine(config)#


dot1x authenticator reauthenticate-Period <60-7200>

3.21.10 port PORTLIST dot1x authenticator reauthenticate-period default

Configure 802.1x protocol reauthentication-period.

【Command Form】

port PORTLIST dot1x authenticator reauthenticate-period default

【Parameter】


【Node Mode】


【Default】

None

【Using Guide】

Configure 802.1x protocol reauthentication-period default (3600s).



【Example】

Fengine(config)# port 2-7,10 dot1x authenticator reauthenticate-timeout

default

Fengine(config)#


no dot1x authenticator reauthenticate-timeout

3.20.11 port PORTLIST dot1x reauthenticate disable

Enable or disable switch port 802.1x reauthentication function.

【Command Form】

port PORTLIST dot1x reauthenticate disable



210

【Parameter】


【Node Mode】


【Default】

None

【Using Guide】

This command is to disable switch port 802.1x reauthentication function.



【Example】

Fengine(config)# port 2-7,10 dot1x reauthenticate disable

Fengine(config)#


dot1x reauthenticate disable

3.20.12 port PORTLIST dot1x reauthenticate enable

Enable or disable switch port 802.1x reauthentication function.

【Command Form】

port PORTLIST dot1x reauthenticate enable

【Parameter】


【Node Mode】


【Default】

None

【Using Guide】

This command is to enable switch port 802.1x reauthentication function.



【Example】

Fengine(config)# port 2-7,10 dot1x reauthenticate enable

Fengine(config)#


dot1x reauthenticate enable

3.20.13 port PORTLIST dtag (enable|disable)



211

Enable double tag protocol on the port.

【Command Form】

port PORTLIST dtag (enable|disable)

【Parameter】


(enable|disable)

【Node Mode】


【Default】

disable

【Using Guide】

After enable this setting, all port egress message will add a tag, ingress

message will delete a tag then forward. The added tag type No. is from global

dtag protocol, vid is from group source port pvid.



【Example】

Fengine(config)# port 2-7,10 dtag enable

Fengine(config)#



3.20.14 port PORTLIST dtag dot1q (enable|disable)

Enable or disable port 802.1q function.

【Command Form】

port PORTLIST dtag dot1q (enable|disable)

【Parameter】


(enable|disable)

【Node Mode】


【Default】

disable

【Using Guide】

Set whether port enable 802.1q function, if enabled, then forward vlan tag-based

vlan id when receiving vlan-tagged data, otherwise, forward port-based pvid. In

order to make vid of double-tag port outer tag to be pvid of message source port,

we suggest to disable source port dot1q mode.




212


【Example】

Fengine(config)# port 2-7,10 dtag dot1q enable

Fengine(config)#



3.20.15 port PORTLIST duplex (half|full) speed (10|100|1000)

Set working mode of switch port.

【Command Form】

port PORTLIST duplex (half|full) speed (10|100|1000)

【Parameter】


half：work mode is half-duplex

full：work mode is full-duplex

(10|100|1000)：rate is 10M or 100M or 1000M

【Node Mode】


【Default】

None

【Using Guide】

This command is to configure switch port work mode.



【Example】

Fengine(config)# port 2-7,10 duplex full speed 100

Fengine(config)#


duplex (half|full) speed (10|100|1000)

3.20.16 port PORTLIST duplex auto

Set switch port work mode to be auto-negotiation mode.

【Command Form】

port PORTLIST duplex auto

【Parameter】


【Node Mode】



213


【Default】

None

【Using Guide】

This command is to set switch port work mode to be auto-negotiation mode.



【Example】

Fengine(config)# port 2-7,10 duplex auto

Fengine(config)#


duplex auto

3.20.17 port PORTLIST flow-ctrl (enable|disable)

Enable or disable switch port flow control.

【Command Form】

port PORTLIST flow-ctrl (enable|disable)

【Parameter】


enable：enable flow control.

disable：disable flow control.

【Node Mode】


【Default】

None

【Using Guide】

Flow control can reduce data frame lose caused by saturated buffer when

terminal is directly connected with switch.



【Example】

Fengine(config)# port 2-7,10 flow-ctrl enable

Fengine(config)#



3.20.18 port PORTLIST igmp-filter <1-100> (enable|disable)



214

Enable or disable certain igmp filter to be applied to the switch port.

【Command Form】

port PORTLIST igmp-filter <1-100> (enable|disable)

【Parameter】


<1-100>：igmp filter list No.

(enable|disable)：enable is to enable, disable is to disable

【Node Mode】


【Default】

disable

【Using Guide】

This command is to apply certain igmp filter to switch port or delete apply

certain igmp filter to the port.



【Example】

Fengine(config)# port 2-7,10 igmp-filter 1 enable

Fengine(config)#



3.20.19 port PORTLIST join trunk

Configure port Trunk ID

【Command Form】

port PORTLIST join trunk <1-1-65535>

【Parameter】


<1-1-65535>：trunk ID

【Node Mode】


【Default】

The port does not belong to any Trunk

【Using Guide】

This command is to configure a series physical port to join Trunk. This

command is invalid when used under Trunk interface configuration mode.




215


【Example】

Fengine(config)# port 2-7,10 join trunk 2

Fengine(config)#


join trunk <1-64>

3.20.20 port PORTLIST link-trap (enable|disable)

Enable or disable switch port link-trap.

【Command Form】

port PORTLIST link-trap (enable|disable)

【Parameter】


enable：enable trap

disable：disable trap

【Node Mode】


【Default】

disable

【Using Guide】

This command is to configure whether notify snmp network management

when interface link state is changed.



【Example】

Fengine(config)# port 2-7,10 link-trap enable

Fengine(config)#


dot link-trap (enable|disable)

3.20.21 port PORTLIST loop-check (enable|disable|re-check)

Enable, disable, repeat port loop-check

【Command Form】

port PORTLIST loop-check (enable|disable|re-check)

【Parameter】


enable：enable loop-check



216

disable：disable loop-check

re-check：repeat loop-check

【Node Mode】


【Default】

None

【Using Guide】

This command is to enable or disable switch port loop-check, and repeat

loop-check for the port.



【Example】

Fengine(config)# port 2-7,10 loop-check enable

Fengine(config)#



3.20.22 port PORTLIST loop-check vlan

Configure the VLAN on which execute loop-check on the port.

【Command Form】

port PORTLIST loop-check vlan <1-4094>

【Parameter】


<1-4094>：VLAN id

【Node Mode】


【Default】

1

【Using Guide】

This command is to configure the VLAN on which execute loop-check on

certain port.



【Example】

Fengine(config)# port 2-7,10 loop-check vlan 1

Fengine(config)#





217

3.20.23 port PORTLIST no-shutdown

Enable switch port

【Command Form】

port PORTLIST no-shutdown

【Parameter】


【Node Mode】


【Default】

None

【Using Guide】

This command is to enable switch port to forward data.



【Example】

Fengine(config)# port 2-7,10 no-shutdown

Fengine(config)#


no shutdown

3.20.24 port PORTLIST packet-limit

Set rate limit of switch port data packet

【Command Form】

port PORTLIST packet-limit broadcast 0-100000 >

port PORTLIST packet-limit dlf <0-100000 >

port PORTLIST packet-limit multicast <0-100000 >

port PORTLIST packet-limit b-m <0-100000>

port PORTLIST packet-limit b-m-dlf <0-100000>

【Parameter】


<0-100000>：rate limit range, unit: kbps

【Node Mode】


【Default】

Broadcast and dlf is 64K as default, multicast has no limit.

【Using Guide】



218

This command is to configure rate limit of switch port data packet, broadcast

is to limit broadcast received at interface, dlf is to limit station unknown data

packet received by interface, multicast is to limit broadcast+multicast packet

received by interface, b-m-dlf is to limit broadcast+multicast+DLF data

packet received by interface.

If the configuration is less than 1792, it should be 64 times of it, if the

configuration is more than2000, it should be 1000 times of it. The whole

switch has only one limit.


S2200ME-B series switch supports limit for interface broadcast, multicast,

dlf data packet.

【Example】

Fengine(config)# port 2-7,10 packet-limit broadcast 512

Fengine(config)#


packet-limit

3.20.25 port PORTLIST priority

Set interface default priority.

【Command Form】

port PORTLIST priority <0-7>

【Parameter】


<0-7>：priority range is 0-7

【Node Mode】


【Default】

None

【Using Guide】

This command is to set interface default priority, if the data received at this

port is untagged data, then scheduling the default priority of this port when

forwarding the data message.



【Example】

Fengine(config)# port 2-7,10 priority 2

Fengine(config)#


priority <0-7>



219

3.20.26 port PORTLIST pvid

Set switch port PVID.

【Command Form】

port PORTLIST pvid <1-4094>

【Parameter】


<1-4094>：switch VLAN id is ranged in 1-4094

【Node Mode】


【Default】

1

【Using Guide】

This command is to set switch port PVID, when an interface receive un-

tagged vlan or priority-tagged data, we consideer the data belong to the vlan

indicated by the pvid of this interface, then forward data in this vlan.



【Example】

Fengine(config)# port 2-7,10 pvid 2

Fengine(config)#


pvid <1-4094>

3.20.27 port PORTLIST quit trunk

Configure switch port exit Trunk

【Command Form】

port PORTLIST quit trunk

【Parameter】


【Node Mode】


【Default】

None

【Using Guide】

This command is to configure physical port to exit Trunk





220

【Example】

Fengine(config)# port 2-7,10 quit trunk

Fengine(config)#


quit trunk

3.20.28 port PORTLIST rate-limit rx

Set rate-limit of switch port receiving direction.

【Command Form】

port PORTLIST rate-limit rx <0-100000>

【Parameter】


<0-100000>：rate range（unit：kbps）, 0 is for no limit

【Node Mode】


【Default】

The default is no configured rate limit

【Using Guide】

This command is to control switch rate, rx is to control receiving data, tx is to

control sending data, if the configuration is less than 1792, it should be 64

times of it, if it is more than 2000, it should be 1000 times of it.



【Example】

Fengine(config)# port 2-7,10 rate-limit rx 0

Fengine(config)#


rate-limit rx <0-100000>

3.20.29 port PORTLIST rate-limit tx

Set rate-limit of switch port sending direction.

【Command Form】

port PORTLIST rate-limit tx <0-100000>

【Parameter】


<0-100000>：rate range（unit：kbps）, 0 is for no limit

【Node Mode】



221


【Default】

None

【Using Guide】

This command is to control rate limit of switch port tx data, on cetain

occasion, need to control port rate so as to provide different bandwidth for

different user, different switch can configure different rate.



【Example】

Fengine(config)# port 2-7,10 rate-limit tx 100

Fengine(config)#


rate-limit tx <0-100000>

3.20.30 port PORTLIST rstp priority

Configure switch port RSTP priority

【Command Form】

port PORTLIST rstp priority <0-15>

【Parameter】


<0-15>：switch port RSTP priority

【Node Mode】


【Default】

8

【Using Guide】

This command is to configure a series of RSTP priority for the switch.



【Example】

Fengine(config)# port 2-7,10 rstp priority 10

Fengine(config)#


rstp priority <0-15>

3.20.31 port PORTLIST security-mac (enable|disable)



222

Enable or disable switch port MAC security access control

【Command Form】

port PORTLIST security-mac (enable|disable)

【Parameter】


(enable|disable)

【Node Mode】


【Default】

disable

【Using Guide】

This command is to enable or disable switch port MAC access security

control.



【Example】

Fengine(config)# port 2-7,10 security-mac enable

Fengine(config)#



3.20.32 port PORTLIST spnm access-port (enable|disable)

Enable or disable switch port to be network access port.

【Command Form】

port PORTLIST spnm access-port (enable|disable)

【Parameter】


(enable|disable)

【Node Mode】


【Default】

None

【Using Guide】

This command is to enable or disable switch port to be SPNM protocol

receiving port.





223

【Example】

Fengine(config)# port 2-7,10 spnm access-port enable

Fengine(config)#


spnm access-port (enable|disable)

3.20.33 port PORTLIST stp (enable|disable)

Enable or disable STP protocol on switch port.

【Command Form】

port PORTLIST stp (enable|disable)

【Parameter】


(enable|disable)

【Node Mode】


【Default】

None

【Using Guide】

STP protocol can check out and disable network loop, and establish backup\

connection between switch, bridge or router. This switch is permitted to

communicate with other bridge device in the network to assure that any two

work station has only one route, when main connection is cut, backup

connection will be auto-start.



【Example】

Fengine(config)# port 2-7,10 stp enable

Fengine(config)#



3.20.34 port PORTLIST stp priority

Configure STP priority of the port.

【Command Form】

port PORTLIST stp priority <0-255>

【Parameter】




224

<0-255>：port stp priority is ranged in 0-255, the lower the priority value is,

the higher the priority weight is.

【Node Mode】


【Default】

128

【Using Guide】

This command is to set port priority of stp protocol, the port with the lowest

prority in subnet port is designated port.



【Example】

Fengine(config)# port 2-7,10 stp priority 100

Fengine(config)#



3.20.35 port PORTLIST user-limit number

Set user-limit number permitted by switch port.

【Command Form】

port PORTLIST user-limit number <0-20>

【Parameter】


<0-20>：user-limit number

【Node Mode】


【Default】

0

【Using Guide】

This command is to set permitted user-number, 0 is for no limit; when this

command take effect, the port will only learn designated mac address, only

the designated user number data flow can be forward by the switch.



【Example】

Fengine(config)# port 2-7,10 user-limit number 10

Fengine(config)#




225

user-limit number <0-20>

3.20.36 port PORTLIST sgm (enable|disable)

Enable or disable sgm on interface.

【Command Form】

port PORTLIST sgm (enable|disable)

【Parameter】

(enable|disable)

【Node Mode】


【Default】

The default is disabled

【Using Guide】

This command is to enable/disable sgm on interface. The interface without

sgm function can not dispose any sgm message.



【Example】

Fengine(config)# port 2-7,10 sgm enable

Fengine(config)#



3.20.37 port PORTLIST sgm discovery time (<1-300>|default)

set discovery time for port transmitting topology.

【Command Form】

port PORTLIST sgm discovery time (<1-300>|default)

【Parameter】

<1-300>：time interval is set within 1~300（unit: second）

default: 30 second

【Node Mode】


【Default】

The default is 30 second

【Using Guide】

this command is used for discovery time of switch port transmitting SGM

topology.





226

【Example】

Fengine (config-eth-1)# port 2-7,10 sgm discovery time 100




3.20.38 port PORTLIST sgm discovery ttl (<1-255>|default)

set time interval of direct connection with neoghbour for aging port.

【Command Form】

port PORTLIST sgm discovery ttl (<1-255>|default)

【Parameter】

<1-255>：time interval of discovery

default:90

【Node Mode】


【Default】

Default is 90

【Using Guide】

this command is to set time interval of direct connection with neoghbour for

aging port in SGM, we suggest it to be 3 times of discovery time of

transmitting topology.



【Example】

Fengine (config-eth-1)#port 2-7,10 sgm discovery ttl 100




3.20.39 port PORTLIST sgm inband enable <1-4094>

Enable sgm configuration interface on designated vlan.

【Command Form】

port PORTLIST sgm inband disable

port PORTLIST sgm inband enable <1-4094>

【Parameter】

<1-4094>：vlan ID for operation

【Node Mode】




227

【Default】

None

【Using Guide】

This command is to enable/disable sgm configuration interface vlan. When

received message is not in vlan that port joined, then no disposal for it. Both

the command switch and member switch need to configure.



【Example】

Fengine (config-eth-1)# port 2-7,10 sgm inband enable 1



None

3.20.40 port PORTLIST sgm vlan (add|remove) VLAN-LIST

Set vlan list for interface add or remove.

【Command Form】

port PORTLIST sgm vlan (add|remove) VLAN-LIST

【Parameter】

(add|remove)：add/remove

VLAN-LIST：vlan list for operation

【Node Mode】


【Default】

None

【Using Guide】

This command is to set vlan list for interface add or remove. When received

message is not in vlan list that port added, then no disposal for it.



【Example】

Fengine (config-eth-1)# port 2-7,10sgm vlan add 1,3




3.21 anti-arp attack configuration command

anti-arp (enable|disable)



228

anti-arp trust ip (A.B.C.D)

anti-arp trust ip (A.B.C.D) mac (AA.BB.CC.DD.EE.FF)

no anti-arp trust ip

no anti-arp trust ip (A.B.C.D)

show anti-arp

3.21.1 anti-arp (enable|disable)

Enable/disable anti-arp attack module

【Command Form】

anti-arp (enable|disable)

【Parameter】

(enable|disable)

【Command Mode】


【Default】

disable

【Using Guide】

This command is to enable or disable anti-arp attack module

【Example】

Fengine (config)# anti-arp enable

Fengine#


show anti-arp

3.21.2 anti-arp trust ip (A.B.C.D)

Configure reliable address

【Command Form】

anti-arp trust ip (A.B.C.D)

【Parameter】

(A.B.C.D)：reliable IP address

【Command Mode】


【Default】

None

【Using Guide】

Configure reliable address, only the arp packet sent by reliable can send to

cpu for disposal, other arp packet will be filter.

【Example】



229

Fengine (config)# anti-arp trust ip 192.168.1.102

Fengine#





show anti-arp

3.21.3 anti-arp trust ip (A.B.C.D) mac (AA.BB.CC.DD.EE.FF)

Configure reliable IP+MAC address

【Command Form】


【Parameter】

(A.B.C.D)：reliable source IP address

(AA.BB.CC.DD.EE.FF)：reliable source MAC address

【Command Mode】


【Default】

None

【Using Guide】

Configure reliable IP+MAC address, only arp packet sent by reliable address

will be send to cpu for disposal, other arp packet will be filter.

【Example】

Fengine (config)# anti-arp trust ip 192.168.1.102 mac 00:04:67:80:75:57

Fengine#




show anti-arp

3.21.4 no anti-arp trust ip

Delete all anti-arp list.

【Command Form】


【Parameter】



230

None

【Command Mode】


【Default】

None

【Using Guide】

Delete all anti-arp list.

【Example】

Fengine (config)# no anti-arp trust ip

Fengine#



show anti-arp

3.21.5 no anti-arp trust ip (A.B.C.D)

Delete a designated anti-arp list.

【Command Form】


【Parameter】

(A.B.C.D)：reliable source IP address

【Command Mode】


【Default】

None

【Using Guide】

Delete a designated anti-arp list.

【Example】


Fengine#


show anti-arp

3.21.6 show anti-arp

Show all anti-arp list.

【Command Form】

show anti-arp

【Parameter】



231

None

【Command Mode】


【Default】

None

【Using Guide】

Show all anti-arp list.

【Example】


Fengine#


show anti-arp

3.22 VLAN transmission configuration command

translation-vlan <1-4094> <1-4094> mapped <1-4094>

join translation-vlan VLANLIST uplink <1-64>

translation-vlan nto1 (enable|disable)

show translation-vlan

show interface translation-vlan

3.22.1 translation-vlan <1-4094> <1-4094> mapped <1-4094>

Configure vlan transmission list, NO form of this command is to delete list.

【Command Form】

translation-vlan <1-4094> <1-4094> mapped <1-4094>

【Parameter】

<1-4094>： vlan transmission list id

<1-4094>：vlan id for mapping

<1-4094>：vlan id for mapping

【Command Mode】


【Default】

None

【Using Guide】

Use this command to create an vlan transmission list, transmit vlan id for

mapping vlan to configured mapping vlan id.



【Example】



232

Fengine (config)# translation-vlan 1 100 mapped 1000

Fengine#


no translation-vlan <1-4094> mapped

3.22.2 join translation-vlan VLANLIST uplink <1-64>

Designate vlan transmission uplink port.

【Command Form】

join translation-vlan VLANLIST uplink <1-64>

【Parameter】

VLANLIST：vlanlist

<1-64>：interface No.

【Command Mode】


【Default】

None

【Using Guide】

Designate vlan transmission uplink port.



【Example】

Fengine (config)#join translation-vlan 1 uplink 12

Fengine#


quit translation-vlan VLANLIST

3.22.3 translation-vlan nto1 (enable|disable)

Enable or disable N ：1 vlan transmission function

【Command Form】

translation-vlan nto1 (enable|disable)

【Parameter】

(enable|disable)

【Command Mode】


【Default】

disable

【Using Guide】



233

N ：1 vlan transmission function, that is transmit multi vlan of one port into

1 vlan tag.

【Example】

Fengine (config)# translation-vlan nto1 enable

Fengine#


show interface translation-vlan

.22.4 show translation-vlan mapped

Show vlan transmission mapping information

【Command Form】

show translation-vlan mapped

show translation-vlan mapped TRANSLATIONVLANLIST

【Parameter】

TRANSLATIONVLANLIST：vlan transmission list

【Command Mode】


【Default】

None

【Using Guide】

Show vlan transmission mapping information



【Example】

S2200ME#sh translation-vlan mapped

Vlan-Translation Uplink Port: 24

Index VID Map-VID

1 1 10


3.22.5 show interface translation-vlan

Show interface vlan transmission configuration

【Command Form】

show interface translation-vlan [<1-64>]

【Parameter】


【Command Mode】



234


【Default】

None

【Using Guide】

Show interface vlan transmission configuration



【Example】

S2200ME#sh int translation-vlan

If Translation-vlan Uplink Nto1Status

2 1 9 enable


3.23 ACL configuration command

ACL（access control list）configuration command is including:

match access-list ACLLIST

description

rule <1-1024> mac

rule <1-1024> l2type

rule <1-1024> vlan

rule <1-1024> ttl

rule <1-1024> tos

rule <1-1024> ip

rule <1-1024> icmp

rule <1-1024> tcp

rule <1-1024> udp

rule <1-1024> action (permit|deny)

rule <1-1024> action cos change (inner|outer) <0-7>

rule <1-1024> arp

3.23.1 match access-list ACLLIST

Enable designated ACL list to all port. NO form of this command is to disable

enable.

【Command Form】

match access-list ACLLIST

no match access-list ACLLIST

【Parameter】

ACLLIST：acl list. e.g.: 1,2-5,7 is for ACL 1,2,3,4,5,7

【Default】



235

Not enable

【Node Mode】


【Using Guide】

None



【Example】

Fengine(config-acl-1)#match access-list 1,2

Fengine(config-acl-1)#


show access-list cursory

3.23.2 description

Configuration ACL group name

【Command Form】

description STRING

【Parameter】

STRING：ACL group description

【Node Mode】

ACL configuration mode

【Default】

None

【Using Guide】

None



【Example】

Fengine(config-acl-1)#description acl1




3.23.3 rule <1-1024> mac

Configure a rule of data packet mac address.

【Command Form】

rule <1-1024> mac (AA:BB:CC:DD:EE:FF) (AA:BB:CC:DD:EE:FF)

rule <1-1024> mac (AA:BB:CC:DD:EE:FF) any

rule <1-1024> mac any (AA:BB:CC:DD:EE:FF)



236

【Parameter】

<1-1024>：rule order in ACL group, priority of this rule

AA:BB:CC:DD:EE:FF：designate a detail mac address, the former is for

source mac, the later is for destination mac

any：ant mac address

【Node Mode】


【Default】

None

【Using Guide】

None



【Example】

Fengine(config-acl-1)#rule 8 mac 00:19:D1:05:74:EF any


Configure a data packet source mac address 00-19-D1-05-74-EF, destination

mac address is any mac address rule.


show access-list detail

3. 23.4 rule <1-1024> l2type

Configure a rule of data packet Layer 2 protocol type.

【Command Form】

rule <1-1024> l2type TYPE

【Parameter】

<1-1024>：rule order in ACL group, it is priority of rule.

TYPE：Layer protocol type protocol, use hexadecimal.

【Node Mode】


【Default】

None

【Using Guide】

None



【Example】

Fengine(config-acl-1)#rule 8 l2type 0x0802




237

Configure a data packet Layer2 protocol No. 0x0802, rule of arp protocol.



3. 23.5 rule <1-1024> vlan

Configure a rule of vlan.

【Command Form】

rule <1-1024> vlan (outer|inner) <1-4094>

rule <1-1024> outer-vlan <1-4094> inner-vlan <1-4094>

【Parameter】

<1-1024>：rule order No. in ACL group, priority of rule

outer|inner：outer vlan tag /inner vlan tag

<1-4096>：vlan id

【Node Mode】


【Default】

None

【Using Guide】

None



【Example】

Fengine(config-acl-1)#rule 8 vlan inner 100


Configure a data packe rule whose inner vlan tag is 100.



3. 23.6 rule <1-1024> ttl

Configure a rule about TTL

【Command Form】

rule <1-1024> ttl <1-255>

【Parameter】


<1-255>：ttl hops

【Node Mode】


【Default】

None



238

【Using Guide】

None



【Example】

Fengine(config-acl-1)#rule 8 ttl 10


Configure a rule with ttl hops 10



3. 23.7 rule <1-1024> tos

Configure a rule about data packet IP service type.

【Command Form】

rule <1-1024> tos <0-7>

【Parameter】


<0-7>：TOS

【Node Mode】


【Default】

None

【Using Guide】

None



【Example】

Fengine(config-acl-1)#rule 8 tos 5


Configure a rule with service type 5



3. 23.8 rule <1-1024> ip

Configure a rule of data packet ip address.

【Command Form】

rule <1-1024> ip (A.B.C.D) (A.B.C.D) (A.B.C.D) (A.B.C.D)

rule <1-1024> ip any (A.B.C.D) (A.B.C.D)

rule <1-1024> ip (A.B.C.D) (A.B.C.D) any



239

rule <1-1024> ip any any

【Parameter】

<1-1024>：rule order of ACL group, it is also the priority of the rule

(A.B.C.D) (A.B.C.D) (A.B.C.D) (A.B.C.D) : source IP address, source IP

address mask, destination IP address, destination IP address mask.

Any: any IP address

【Node Mode】


【Default】

None

【Using Guide】

None



【Example】

Fengine(config-acl-1)#rule 8 ip 192.168.1.2 255.255.255.0 any


Configure a rule with data source IP is 192.168.1.2, 24 bits mask, destination

IP can be any IP.



3. 23.9 rule <1-1024> icmp

Configure a rule of data packet icmp protocol.

【Command Form】

rule <1-1024> icmp (A.B.C.D) (A.B.C.D) (A.B.C.D) (A.B.C.D)

rule <1-1024> icmp any (A.B.C.D) (A.B.C.D)

rule <1-1024> icmp (A.B.C.D) (A.B.C.D) any

rule <1-1024> icmp any any

【Parameter】


(A.B.C.D) (A.B.C.D) (A.B.C.D) (A.B.C.D) : source IP address, source IP

address mask, destination IP address, destination IP address mask.

Any: any IP address

【Node Mode】


【Default】

None

【Using Guide】

None



240



【Example】

Fengine(config-acl-1)#rule 8 icmp 192.168.1.2 255.255.255.0 any


Configure a rule with the data packet source icmp to be 192.168.1.2，24 bit

mask, destination IP is any IP.



3. 23.10 rule <1-1024> tcp/udp

Configure a rule of data packet tcp/udp protocol.

【Command Form】

rule <1-1024> (tcp|udp) (A.B.C.D) (A.B.C.D) <1-65535> (A.B.C.D)

(A.B.C.D) <1-65535>

rule <1-1024> (tcp|udp) any <1-65535> (A.B.C.D) (A.B.C.D) <1-65535>

rule <1-1024> (tcp|udp) (A.B.C.D) (A.B.C.D) <1-65535> any <1-65535>

rule <1-1024> (tcp|udp) any <1-65535> any <1-65535>

rule <1-1024> (tcp|udp) (A.B.C.D) (A.B.C.D) (A.B.C.D) (A.B.C.D) <1-

65535>

rule <1-1024> (tcp|udp) any (A.B.C.D) (A.B.C.D) <1-65535>

rule <1-1024> (tcp|udp) (A.B.C.D) (A.B.C.D) any <1-65535>

rule <1-1024> (tcp|udp) any any <1-65535>

rule <1-1024> (tcp|udp) (A.B.C.D) (A.B.C.D) <1-65535> (A.B.C.D)

(A.B.C.D)

rule <1-1024> (tcp|udp) any <1-65535> (A.B.C.D) (A.B.C.D)

rule <1-1024> (tcp|udp) (A.B.C.D) (A.B.C.D) <1-65535> any

rule <1-1024> (tcp|udp) any <1-65535> any

rule <1-1024> (tcp|udp) any any

rule <1-1024> tcp (A.B.C.D) (A.B.C.D) <1-65535> (A.B.C.D) (A.B.C.D)

<1-65535> established

rule <1-1024> tcp any <1-65535> (A.B.C.D) (A.B.C.D) <1-65535>

established

rule <1-1024> tcp (A.B.C.D) (A.B.C.D) <1-65535> any <1-65535>

established

rule <1-1024> tcp any <1-65535> any <1-65535> established

rule <1-1024> tcp (A.B.C.D) (A.B.C.D) (A.B.C.D) (A.B.C.D) <1-65535>

established

rule <1-1024> tcp any (A.B.C.D) (A.B.C.D) <1-65535> established

rule <1-1024> tcp (A.B.C.D) (A.B.C.D) any <1-65535>established

rule <1-1024> tcp any any <1-65535> established

rule <1-1024> tcp (A.B.C.D) (A.B.C.D) <1-65535> (A.B.C.D) (A.B.C.D)

established



241

rule <1-1024> tcp any <1-65535> (A.B.C.D) (A.B.C.D) established

rule <1-1024> tcp (A.B.C.D) (A.B.C.D) <1-65535> any established

rule <1-1024> tcp any <1-65535> any established

rule <1-1024> tcp any any established

rule <1-1024> (tcp|udp) (A.B.C.D) (A.B.C.D) (A.B.C.D) (A.B.C.D)

【Parameter】


tcp/udp：TCP/UDP protocol

(A.B.C.D) (A.B.C.D) <1-65535> (A.B.C.D) (A.B.C.D) <1-65535>：source

IP address、source IP address mask、source port、destination IP address、

destination IP address mask、destination port

any：any IP address

established：for configure reversed acl when configuring tcp protocol.

【Node Mode】


【Default】

None

【Using Guide】

Established fragment is to configure contrary access control list, it is mainly

used under anti-virus.



【Example】

Fengine(config-acl-1)#rule 8 tcp 172.16.3.0 255.255.255.0 172.16.4.0

255.255.255.0 established


Configure a rule, this rule is generally used for all PC accessing 172.16.4.0

from 172.16.3.0, the precondition is that TCP connection is established.

When TCP connection is not established, not permit 172.16.3.0 to access

172.16.4.0.



3. 23.11 rule <1-1024> action (permit|deny)

Configure corresponding action of the rule

【Command Form】

rule <1-1024> action (permit|deny)

【Parameter】

<1-1024>：rule No. of ACL group, it is also the priority of the rule.

(permit|deny)：permit or deny



242

【Node Mode】


【Default】

None

【Using Guide】

None



【Example】

Fengine(config-acl-1)#rule 8 action deny


Disable data packet of rule 8.



3. 23.12 rule <1-1024> action cos change

Configure cos action of the rule.

【Command Form】

rule <1-1024> action cos change (inner|outer) <0-7>

rule defaction cos change (inner|outer) <0-7>

【Parameter】


(inner|outer)：inner COS or outer COS

<0-7>：COS

defaction：configure this action to be default action of acl rule

【Node Mode】


【Default】

None

【Using Guide】

None



【Example】

Fengine(config-acl-1)#rule 8 action cos change inner 3


Change inner cos meeting with rule 8 data packet to be 3.

Fengine(config-acl-1)#rule defaction cos change inner 3




243

Change inner COS meeting with the data packet without action rule to be 3.



3. 23.13 rule <1-1024> action cos new <0-7>

Configure cos action of rule.

【Command Form】

rule <1-1024> action cos new <0-7>

rule defaction cos new <0-7>

【Parameter】


<0-7>：COS

defaction：configure this action to be default action of acl group rule.

【Node Mode】


【Default】

None

【Using Guide】

None



【Example】

Fengine(config-acl-1)#rule 8 action cos new 3


Add outer COS meeting with rule 8 to be 3.



3. 23.14 rule <1-1024> action tos <0-7>

Configure TOS action of rule.

【Command Form】

rule <1-1024> action tos <0-7>

rule defaction tos <0-7>

【Parameter】


<0-7>：TOS

defaction：configure this action to be default of acl rule.

【Node Mode】



244


【Default】

None

【Using Guide】

None



【Example】

Fengine(config-acl-1)#rule 8 action tos 3


Set ip service type of rule 8 to be 3.



3. 23.15 rule <1-1024> action dscp DSCP

Configure DSCP action of rule.

【Command Form】

rule <1-1024> action dscp DSCP

rule defaction dscp DSCP

【Parameter】


DSCP：dscp by hex

defaction：configure this action to be default of acl rule.

【Node Mode】


【Default】

None

【Using Guide】

None



【Example】

Fengine(config-acl-1)#rule 8 action dscp 0x3a


Set dscp of rule 8 to be 0x3a



3. 23.16 rule <1-1024> action trapcpu (only|forward)



245

Configure the corresponding rule data packet flow action

【Command Form】

rule <1-1024> action trapcpu (only|forward)

rule defaction trapcpu (only|forward)

【Parameter】


(only|forward)：data packet only get on CPU or get on CPU then forward.

defaction：configure this action to be default action of acl rule.

【Node Mode】


【Default】

None

【Using Guide】

None



【Example】

Fengine(config-acl-1)#rule 8 action trapcpu forward


Set data packet of rule 8 to get on CPU then forward out.



3. 23.17 rule <1-1024> action ratelimit <64-1000000>

Configure rule action of rate limit.

【Command Form】

rule <1-1024> action ratelimit <64-1000000>

rule defaction ratelimit <64-1000000>

【Parameter】


<64-1000000>：limited rate, unit: kbps, which should be times of 64kbps.


【Node Mode】


【Default】

None

【Using Guide】

None



246



【Example】

Fengine(config-acl-1)#rule 8 action ratelimit 128


Set rate of rule 8 to be 128kbps



3. 23.18 rule <1-1024> action (mirror|redirect) <1-64>

Configure the corresponding data packet to mirror or redirect to certain port.

【Command Form】

rule <1-1024> action (mirror|redirect) <1-64>

rule defaction (mirror|redirect) <1-64>

【Parameter】


(mirror|redirect)：mirror or redirect to certain port

<1-64>：port No.


【Node Mode】


【Default】

None

【Using Guide】

None



【Example】

Fengine(config-acl-1)#rule 8 action redirect 10


Set data packet of rule 8 redirect to port 10.



3. 23.19 rule <1-1024> action sendqueue <0-7>

Configure the corresponding data packet to be sent to designated queue.

【Command Form】

rule <1-1024> action sendqueue <0-7>

rule defaction sendqueue <0-7>



247

【Parameter】


<0-7>：queue No.


【Node Mode】


【Default】

None

【Using Guide】

None



【Example】

Fengine(config-acl-1)#rule 8 action sendqueue 5


Send data packet of rule 8 to queue 5.



3. 23.20 no rule <1-1024>

Delete a rule.

【Command Form】

no rule <1-1024>

【Parameter】

<1-1024>：rule No of ACL group, also the priority of this rule.

【Node Mode】


【Default】

None

【Using Guide】

None



【Example】

Fengine(config-acl-1)#no rule 8


Delete rule 8




248


3. 23.21 no rule <1-1024> action

Delete the action corresponding to the designated rule

【Command Form】

no rule <1-1024> action

【Parameter】


【Node Mode】


【Default】

None

【Using Guide】

None



【Example】

Fengine(config-acl-1)#no rule 8 action


Delete action of rule 8.



3. 23.22 match access-list <1-399>

Apply acl rule to the interface, NO form of this command is to cancel the

application.

【Command Form】

match access-list <1-399>

no match access-list

【Parameter】

<1-399>：acl group No.

【Node Mode】


【Default】

None

【Using Guide】

In or out limit only configure one group




249


【Example】

Fengine(config-eth-2)#match access-list 1


Apply ACL1 to interface2


show access-list port

3. 23.23 show access-list [<1-399>]

Show configuration of ACL.

【Command Form】

show access-list [<1-399>]

【Parameter】

[<1-399>]：ACL group No. optional

【Node Mode】


【Default】

None

【Using Guide】

None



【Example】

Fengine#show access-list 100

appointed ACL detail infromation

access-list 100

description:

rule number: 1

rules of this ACL:

rule 1 tcp-- src any src port[100]to[100] dest any

actions of this ACL:

rule 1 action deny

Fengine#



3. 23.24 show access-list port [<1-64>]

Show ACL applied on the port.

【Command Form】



250

show access-list port [<1-64>]

【Parameter】

[<1-64>]：optional parameter is for port No.

【Node Mode】


【Default】

None

【Using Guide】

None



【Example】

Fengine#show access-list port 1

ACL port information:

Port 1

in direction: acl [none]

out direction: acl [1]

Fengine#



3. 23.25 rule <1-1024> arp

Configure a rule of data packet arp protocol

【Command Form】

rule <1-1024> arp (A.B.C.D) (A.B.C.D) (A.B.C.D) (A.B.C.D)

rule <1-1024> arp (A.B.C.D) (A.B.C.D) any

rule <1-1024> arp any (A.B.C.D) (A.B.C.D)

rule <1-1024> arp any any

【Parameter】

(A.B.C.D) (A.B.C.D) (A.B.C.D) (A.B.C.D)：source IP address、source IP

address mask, destination IP address, destination IP address mask

any：any IP address

【Node Mode】

RULE configuration mode

【Default】

None

【Using Guide】

None



251



【Example】

Fengine(config-acl-1)# rule 2 arp 192.168.1.2 255.255.255.0 any

Configure a rule of arp (code 1), the data packet of the rule required source

IP should be 192.168.1.2, 24 bits mask, destination IP is any IP.



3.24 802.1X configuration command

802.1X protocol configuration command is including:


dot1x authenticator link-mode

dot1x authenticator logical-port

dot1x authenticator max-request

dot1x authenticator supplicant-timeout

dot1x authenticator txwhen-timeout

dot1x authenticator max-user

dot1x authenticator quiet-timeout

dot1x authenticator radius-server

dot1x authenticator reauthenticate-period

dot1x reauthenticate

dot1x user <0-63> USERNAME password PASSWORD

dot1x user <0-63> bind-to mac AA:BB:CC:DD:EE:FF

dot1x user <0-63> bind-to port <1-64>

dot1x user <0-63> max-time <1-100>

dot1x user lock

dot1x user lock fail-times

dot1x user lock trap

no dot1x authenticator user all

no dot1x interface <1-64> user



252

show dot1x authenticator user


show dot1x user

3.24.1 dot1x (enable|disable)

enable or disable switch 802.1x protocol

【Command Form】


【Parameter】

enable：enable 802.1x

disable ：disable 802.1x

【Node Mode】

global configuration mode，interface configuration mode

【Default】

disable

【Using Guide】

This command is to configure whether switch is enabled 802.1x protocol or

enable/disable 802.1x protocol on certain port.



【Example】

Fengine(config)# dot1x enable

Fengine(config)#


None

3.24.2 dot1x authenticator link-mode

Use this command to set a mode for physical port and user when establishing

authentication connection.

【Command Form】

dot1x authenticator link-mode (passive|active)

【Parameter】

passive：physical interface is using passive connection mode, authentication

request is sent by client-end.

Active：physical interface is using active connection mode, authentication

request is sent by device to client-end.

【Node Mode】




253

【Default】

None

【Using Guide】

Use this command to set a mode for physical port and user when establishing

authentication connection.



【Example】

Fengine((config-eth1/2))#dot1x authenticator link-mode passive

Fengine((config-eth1/2))#


None

3.24.3 dot1x authenticator logical-port

Use this command to set a mode to create an interface 802.1x logical port.

【Command Form】

dot1x authenticator logical-port (port-mac|port-mac-vlan|port)

【Parameter】

port：logical port is formed according to physical port

port-mac：logical port is formed according to physical port and MAC

address

port-mac-vlan：logical port is formed according to physical port and

MACaddress and VLAN ID.

【Node Mode】


【Default】

None

【Using Guide】

Use this command to set a mode to create an interface 802.1x logical port.



【Example】

Fengine((config-eth1/2))# dot1x authenticator logical-port port



None

3.24.4 dot1x authenticator max-request



254

Use this command to set max times of an interface 802.1x authentication

request.

【Command Form】

dot1x authenticator max-request (<1-10>|default)

【Parameter】

<1-10>：max times of authentication request

default：default is 2

【Node Mode】


【Default】

2

【Using Guide】

Use this command to set max times of an interface 802.1x authentication

request.



【Example】

Fengine((config-eth1/2))# dot1x authenticator max-request 3



None

3.24.5 dot1x authenticator supplicant-timeout

Use this command to set supplicant timer of an interface 802.1x.

【Command Form】

dot1x authenticator supplicant-timeout (<1-65535>|default)

【Parameter】

<1-65535>：timeout of 802.1x supplicant timer. Unit: second

default：the default is 30 second

【Node Mode】


【Default】

30

【Using Guide】

Use this command to set supplicant timer of an interface 802.1x .





255

【Example】

Fengine((config-eth1/2))# dot1x authenticator supplicant-timeout 1200



None

3.24.6 dot1x authenticator txwhen-timeout

Use this command to set txWhen timer of an interface 802.1x.

【Command Form】

dot1x authenticator txwhen-timeout (<1-65535>|default)

【Parameter】

<1-65535>：timeout of 802.1x txWhen timer, unit: second

default：the default is 30 second

【Node Mode】


【Default】

30

【Using Guide】

Use this command to set txWhen timer of an interface 802.1x.



【Example】

Fengine((config-eth1/2))# dot1x authenticator txwhen-timeout 5000



None

3.24.7 dot1x authenticator max-user

Configure max user number supported by the port enabled 802.1x.

【Command Form】

dot1x authenticator max-user <1-65535>

【Parameter】

<1-65535>：user number

【Node Mode】


【Default】



256

The default permits 10 IEEE802.1x user.

【Using Guide】

This command is to configure max user number supported by the port enabled

802.1x.



【Example】

Fengine(config-eth-2)#dot1x authenticator max-user 6



dot1x (enable|disable), show dot1x interface

3.24.8 dot1x authenticator quiet-timeout

Configure quiet-timeout on the port enabled 802.1x protocol for second accept

user’s authenticator, the time is to prevent vicious attack for the device.

【Command Form】

dot1x authenticator quiet-timeout (<1-120>|default)

【Parameter】

<1-120>：time（unit: s）

【Node Mode】


【Default】

60

【Using Guide】

Configure quiet-timeout on the port enabled 802.1x protocol for second accept

user’s authenticator, the time is to prevent vicious attack for the device.



【Example】

Fengine(config-eth-2)#dot1x authenticator quiet-timeout 100



None

3.24.9 dot1x authenticator radius-server

Configure name of the port enabled 802.1x protocol and corresponding radius

client.



257

【Command Form】

dot1x authenticator radius-server NAME mode (normal|relay)

no dot1x authenticator radius-server

【Parameter】

NAME：radius client name

normal：normal mode

relay：relay mode

【Node Mode】


【Default】

If the device IEEE802.1x does not identify radius client name, use local

authentication mode

【Using Guide】

This command is to configure name of the port enabled 802.1x protocol port

authenticator radius client, NO form of this command is to delete name.



【Example】

Fengine(config-eth-2)#dot1x authenticator radius-server test



None

3.24.10 dot1x authenticator reauthenticate-Period

Configure 802.1x reauthenticate-period

【Command Form】

dot1x authenticator reauthenticate-Period (<60-7200>|default)

【Parameter】

<60-7200>：time（unit: s）

【Node Mode】


【Default】

3600

【Using Guide】

This command is to set switch 802.1x reauthentication period.





258

【Example】

Fengine(config-eth-2)#dot1x authenticator reauthenticate-Period 100



None

3.24.11 dot1x reauthenticate

enable or disable 802.1x reauthentication function

【Command Form】

dot1x reauthenticate

no dot1x reauthenticate

【Parameter】

None

【Node Mode】


【Default】

None

【Using Guide】

This command is to enable or disable 802.1x reauthentication, NO form of

this command is to disable.



【Example】

Fengine(config-eth-2)#dot1x reauthenticate



None

3.24.12 dot1x user <0-63> USERNAME password PASSWORD

Configure user name and password of 802.1x authentication.

【Command Form】

dot1x user <0-63> USERNAME password PASSWORD

no dot1x user <0-63>

【Parameter】

<0-63>：user ID index

USERNAME：user name

PASSWORD：password

【Node Mode】



259


【Default】

None

【Using Guide】

This command is to add and delete user for 802.1x authentication. Switch

may not use radius authentication, and use local authentication for accessing

user, the default is local authentication. But if radius authentication is

designated to use, the authentication is decided by radius, local user

configured on this device is no use.



【Example】

Fengine (config)# dot1x user 1 test password test

Fengine (config)#


show dot1x-user

3.24.13 dot1x user <0-63> bind-to mac AA:BB:CC:DD:EE:FF

Bind certain user to particular mac address

【Command Form】

dot1x user <0-63> bind-to mac AA:BB:CC:DD:EE:FF

【Parameter】

<0-63>：user ID index

AA:BB:CC:DD:EE:FF：designagted mac address

【Node Mode】


【Default】

None

【Using Guide】

None



【Example】

Fengine (config)# dot1x user 1 bind-to mac 00:19:D1:05:74:EF

Fengine (config)#


show dot1x-user

3.24.14 dot1x user <0-63> bind-to port <1-64>



260

Bind certain user to particular interface

【Command Form】

dot1x user <0-63> bind-to port <1-64>

【Parameter】

<0-63>：user No. index

<1-64>：designated port

【Node Mode】


【Default】

None

【Using Guide】

None



【Example】

Fengine (config)# dot1x user 1 bind-to port 1

Fengine (config)#


show dot1x-user

3.24.15 dot1x user <0-63> max-time <1-100>

Set user max logging times

【Command Form】

dot1x user <0-63> max-time <1-100>

【Parameter】

<0-63>：user No. index

<1-100>：logging times

【Node Mode】


【Default】

None

【Using Guide】

None



【Example】

Fengine (config)# dot1x user 1 max-time 10

Fengine (config)#



261


show dot1x-user

3.24.16 dot1x user lock

Set whether permit to lock user

【Command Form】

dot1x user lock (enable|disable)

【Parameter】

(enable|disable)：permit/not permit to lock user

【Node Mode】


【Default】

None

【Using Guide】

Set whether permit to lock user



【Example】

Fengine (config)#dot1x user lock enable

Fengine (config)#


show dot1x-user

3.24.17 dot1x user lock fail-times

Set user authentication failure times for lock

【Command Form】

dot1x user lock fail-times <1-20>

【Parameter】

<1-20>：authentication failure times

【Node Mode】


【Default】

None

【Using Guide】

Set user authentication times for lock



【Example】



262

Fengine (config)# dot1x user lock fail-times 5

Fengine (config)#


show dot1x-user

3.24.18 dot1x user lock trap

Set whether send trap when user is locked

【Command Form】

dot1x user lock trap (enable|disable)

【Parameter】

(enable|disable)：enable /disable sending trap

【Node Mode】


【Default】

None

【Using Guide】

Set whether send trap when user is locked



【Example】

Fengine (config)# dot1x user lock trap enable

Fengine (config)#


show dot1x-user

3.24.19 no dot1x authenticator user all

force all users with authentication of 802.1x protocol on switch to get off the line

【Command Form】

no dot1x authenticator user all

【Parameter】

None

【Node Mode】


【Default】

None

【Using Guide】

this command is to configure all users with authentication of 802.1x protocol

on switch to get off the line.



263



【Example】

Fengine(config)# no dot1x authenticator user all

Fengine(config)#



3.24.20 no dot1x interface <1-64> user

force all users with authentication of 802.1x protocol on certain interface of switch

to get off the line

【Command Form】

no dot1x interface <1-64> user <0-65535>

no dot1x interface <1-64> user all

【Parameter】


<0-65535>：user No.

【Node Mode】


【Default】

None

【Using Guide】

this command is to configure that a certain user on a certain interface which

passed 802.1x protocol or all users to be offline.



【Example】

Fengine(config)# no dot1x interface <1-64> user all

Fengine(config)#



3.24.21 show dot1x authenticator user

show information of all users that passed 802.1x protocol authentication.

【Command Form】


【Parameter】

None



264

【Node Mode】


【Default】

None

【Using Guide】

this command is to show user configuration information of all 802.1x

protocol that user configured on the switch.



【Example】

Fengine# show dot1x authenticator user

Fengine#


None

3.24.22 show dot1x interface

show the information of 802.1x protocol configured at switch port.

【Command Form】


【Parameter】

None

【Node Mode】


【Default】

None

【Using Guide】

this command is to show the information of 802.1x protocol configured at

switch port.



【Example】

Fengine#show dot1x interface

Port Users Maxusers

5 0 24

Fengine#


None

3.24.23 show dot1x user



265

show user’s information of all 802.1x protocol that user configured.

【Command Form】

show dot1x-user

【Parameter】

None

【Node Mode】


【Default】

None

【Using Guide】

this command is to show user’s configuration and user locked configuration

of all 82.1x protocol that user configured on the switch.



【Example】

Fengine#show dot1x user

UserId UserName Password

0 test1 test1

1 test2 test2

Fengine#


None

3.25 DHCP-SNOOP configuration command

The configuration command are:

dhcp-snoop (enable|disable)

dhcp-snoop option82 (enable|disable)

dhcp-snoop (trust|untrust)

show dhcp-snoop trust

show dhcp-snoop interface

show dhcp-snoop interface binding

3.25.1 dhcp-snoop (enable|disable)

enable disable dhcp snoop service

【Command Form】

dhcp-snoop (enable|disable)

【Parameter】

(enable|disable)

【Node Mode】



266

global configuration mode、interface configuration mode

【Default】

disable

【Using Guide】

This command is to enable or disable dhcp snoop service on switch.



【Example】

Fengine (config)# dhcp-snoop enable

Fengine (config)#



3.25.2 dhcp-snoop option82 (enable|disable)

enable and disable dhcp 82 options

【Command Form】

dhcp-snoop option82 (enable|disable)

【Parameter】

(enable|disable)

【Node Mode】


【Default】

disable

【Using Guide】

This command is to enable or disable dhcp 82 options on switch



【Example】

Fengine (config)# dhcp-snoop option82 enable

Fengine (config)#



3.25.3 dhcp-snoop (trust|untrust)

enable and disable dhcp trust port

【Command Form】

dhcp-snoop (trust|untrust)



267

【Parameter】

(trust|untrust)：trust is enable, untrust is disable

【Node Mode】


【Default】

disable

【Using Guide】

This command is to enable or disable dhcp trust port on switch, dhcp server

should be connected with trust port to prevent dhcp cheat attack.



【Example】

Fengine (config)# dhcp-snoop trust

Fengine (config)#


show dhcp trust

3.25.4 show dhcp-snoop trust

Show whether dhcp-snoop service is trust by interface

【Command Form】

show dhcp-snoop trust

【Parameter】

None

【Node Mode】


【Default】

None

【Using Guide】

None



【Example】

None


None

3.25.5 show dhcp-snoop interface



268

Show whether dhcp-snoop service is enabled on interface.

【Command Form】


【Parameter】

None

【Node Mode】


【Default】

None

【Using Guide】

None



【Example】

None


None

3.25.6 show dhcp-snoop interface binding

Show binding information of dhcp-snoop on interface, including mac address, ip

address.

【Command Form】


【Parameter】

None

【Node Mode】


【Default】

None

【Using Guide】

None



【Example】

None


None



269

3.26 RLINK configuration command

The configuration command are:

rlink <1-16> protect-vlan

join rlink <1-16> (master|slave|uplink|downlink)

show rlink config

show rlink interface

3.26.1 rlink <1-16> protect-vlan

Configure or delete protection vlan of rlink instance

【Command Form】

rlink <1-16> protect-vlan <1-4094>

rlink <1-16> protect-vlan VLANLIST

no rlink <1-16> protect-vlan <1-4094>

no rlink <1-16> protect-vlan VLANLIST

【Parameter】

<1-16>：rlink instance id

<1-4094>：vlan id

VLANLIST：vlan list

【Command Mode】


【Default】

None

【Using Guide】

If Protection vlan is configured, for main port A, the VLAN is forward status

on port A, and be blocked status on backup port B. when link of main port A

is fault, the status of backup port B will switch to forward status.



【Example】

Fengine (config)#link 1 protect-vlan 10


3.26.2 join rlink <1-16> (master|slave|uplink|downlink)

Configure port rlink status

【Command Form】

join rlink <1-16> (master|slave|uplink|downlink)



270

no join rlink <1-16>

【Parameter】

<1-16>：rlink instance id

(master|slave|uplink|downlink)：main port,backup port, uplink port,

downlink port

【Command Mode】


【Default】

None

【Using Guide】

Configure current port to be main port, backup port, uplink port or

downlinkport.



【Example】

Fengine(config-ge1/1)#rlink 1 master

3.26.3 show rlink config

Show rlink configuration

【Command Form】

show rlink config

【Parameter】

None

【Node Mode】


【Default】

None

【Using Guide】

None



【Example】

None


None

3.26.4 show rlink interface



271

Show rlink interface configuration

【Command Form】

show rlink interface

show rlink interface <1-64>

【Parameter】

None

【Node Mode】


【Default】

None

【Using Guide】

None



【Example】

None


None


Chapter 4 Command switch

configure member switch

272

Chapter 4 Command switch configure member switch

S2200ME-B series switch support SGM, use CLI to configure member switch.

Configure member switch is shown as below:

1． Input “sgm member (AA.BB.CC.DD.EE.FF)” to select member switch to

configure under global configuration mode.

Example:

Fengine (config-sgm)#sgm member 00.04.67.90.be.42

************************************************

* Switch OS (Version 1.06 ) *

* *

* For Fengine Fengine *

* *

* Copyright 2000-2007 FiberHome Networks *

************************************************

User Access Verification

Username:

2． Then input user name and password to enter corresponding configuration

mode of member switch and do operation for member switch. The verbose

command can refer to Chpater 3 of this book.

F-Engine S2200ME-B Carrier Ethernet Switch CLI Manual(V3.0)

Documents

time0ms ttl128

oldest record

system state

snooping proxy

applicable

cn spnm send

finish export

export information