Allied-telesis AT-S60 Bedienungsanleitung

AT-S60Management SoftwareAT-S60◆Command Line User’s GuideAT-8400 SERIES SWITCHVERSION 2.0.0®PN 613-50401-00 Rev B

Preface8❑ Chapter 7: Port Parameter Commands❑ Chapter 8: Port Security Command❑ Chapter 9: Port Trunking Commands❑ Chapter 10: Port Mirroring Commands

Chapter 7: Port Parameter Commands98The following command sets port priority to the high priority queue and activates the broadcast filter for Ports 5

AT-S60 Command Line User’s Guide99SHOW SWITCH PORTSyntaxshow switch port[=port]Parametersport Specifies the port whose parameter settings you want to

100Chapter 8Port Security CommandThis chapter contains the following command:❑ SET SWITCH PORT SECURITYMODE on page 101NoteRemember to save your chang

AT-S60 Command Line User’s Guide101SET SWITCH PORT SECURITYMODESyntaxset switch port=port [securitymode=automatic|limited|secure|locked] [learn=intege

Chapter 8: Port Security Command102learn Specifies the maximum number of dynamic MAC addresses a port on the switch can learn. This parameter applies

AT-S60 Command Line User’s Guide103The following command sets the security level to Secure for Ports 1 through 4 on the line card in Slot 9 and the in

104Chapter 9Port Trunking CommandsThis chapter contains the following commands:❑ ADD SWITCH TRUNK on page 105❑ CREATE SWITCH TRUNK on page 106❑ DELETE

AT-S60 Command Line User’s Guide105ADD SWITCH TRUNKSyntaxadd switch trunk=name port=portsParameterstrunk Specifies the name of the port trunk to be mo

Chapter 9: Port Trunking Commands106CREATE SWITCH TRUNKSyntaxcreate switch trunk=name port=ports speed=10_100m|1000mParameterstrunk Specifies the name

AT-S60 Command Line User’s Guide107The following command creates a port trunk of two 1000 Mbps ports on two AT-8413 line cards in Slots 3 and 4. It as

AT-S60 Command Line User’s Guide9SecurityFeaturesAs mentioned above, the commands for both the AT-S60 version 2.0.0 NE and 2.0.0 software are included

Chapter 9: Port Trunking Commands108DELETE SWITCH TRUNKSyntaxdelete switch trunk=name port=ports|allParameterstrunk Specifies the name of the trunk to

AT-S60 Command Line User’s Guide109DESTROY SWITCH TRUNKSyntaxdestroy switch trunk=nameParametertrunk Specifies the name of the trunk to be deleted. Th

Chapter 9: Port Trunking Commands110SET SWITCH TRUNKSyntaxset switch trunk=name speed=10_100m|1000mParameterstrunk Specifies the name of the port trun

AT-S60 Command Line User’s Guide111SHOW SWITCH TRUNKSyntaxshow switch trunkParametersNone.DescriptionThis command displays the names and ports of the

112Chapter 10Port Mirroring CommandsThis chapter contains the following commands:❑ ADD SWITCH MIRROR on page 113❑ CREATE SWITCH MIRROR on page 114❑ DE

AT-S60 Command Line User’s Guide113ADD SWITCH MIRRORSyntaxadd switch mirror=destinationport port=sourceportParametersmirror Specifies the destination

Chapter 10: Port Mirroring Commands114CREATE SWITCH MIRRORSyntaxcreate switch mirror=destinationport port=sourceportParametersmirror Specifies the des

AT-S60 Command Line User’s Guide115DELETE SWITCH MIRRORSyntaxdelete switch mirror=destinationport port=sourceportParametersmirror Specifies the destin

Chapter 10: Port Mirroring Commands116DESTROY SWITCH MIRRORSyntaxdestroy switch mirror=destinationportParametermirror Specifies the destination port o

AT-S60 Command Line User’s Guide117DISABLE SWITCH MIRRORSyntaxdisable switch mirror=destinationportParametermirror Specifies the destination port of t

Preface10Document ConventionsThis document uses the following conventions:NoteNotes provide additional information.WarningWarnings inform you that per

Chapter 10: Port Mirroring Commands118ENABLE SWITCH MIRRORSyntaxenable switch mirror=destinationportParametermirror Specifies the destination port of

AT-S60 Command Line User’s Guide119SET SWITCH MIRRORSyntaxset switch mirror=destinationport port=sourceportParametersmirror Specifies the destination

Chapter 10: Port Mirroring Commands120SHOW SWITCH MIRRORSyntaxshow switch mirrorParametersNone.DescriptionThis command displays the source and destina

121Chapter 11File System CommandsThis chapter contains the following commands:❑ COPY on page 122❑ CREATE CONFIG on page 123❑ DELETE FILE on page 124❑

Chapter 11: File System Commands122COPYSyntaxcopy filename1.ext filename2.extParametersfilename1.ext The name of the file to be copied.filename2.ext T

AT-S60 Command Line User’s Guide123CREATE CONFIGSyntaxcreate config=filenameParameterconfig Specifies the name of the configuration file.DescriptionTh

Chapter 11: File System Commands124DELETE FILESyntaxdelete file=filenameParameterfile Specifies the name of the file or files to be deleted.Descriptio

AT-S60 Command Line User’s Guide125RENAMESyntaxrename filename1 filename2ParametersNone.DescriptionThis command renames the specified file. The source

Chapter 11: File System Commands126SET CONFIGSyntaxset config=filenameParameterconfig Specifies the name of a configuration file.DescriptionThis comma

AT-S60 Command Line User’s Guide127SHOW FILESyntaxshow file=filenameParameterfile Specifies the name of the file to be displayed.DescriptionThis comma

AT-S60 Command Line User’s Guide11Where to Find Web-based GuidesThe installation and user guides for all Allied Telesyn products are available in Port

128Chapter 12File Download and Upload CommandsThis chapter contains the following commands:❑ LOAD on page 129❑ UPLOAD on page 134NoteFor background in

AT-S60 Command Line User’s Guide129LOADSyntaxload method=tftp|xmodem|remoteswitch destfile=filename server=ipaddress file=filename switchlist=switches

Chapter 12: File Download and Upload Commands130destfile Specifies the name under which the file is to be stored on the switch. server Specifies the I

AT-S60 Command Line User’s Guide131The XMODEM download method uses the XMODEM utility to download a file onto the switch from a terminal or computer w

Chapter 12: File Download and Upload Commands132❑ If you are downloading files switch-to-switch using the REMOTESWITCH command, use the SHOW REMOTELIS

AT-S60 Command Line User’s Guide133The following command downloads a new AT-S60 image to the switch using TFTP. Since this is a TFTP download, you can

Chapter 12: File Download and Upload Commands134UPLOADSyntaxupload method=tftp|xmodem destfile=filename server=ipaddress file=filenameParametersmethod

AT-S60 Command Line User’s Guide135The METHOD parameter states the type of upload. There are two possible types of uploads. A TFTP upload uses the TFT

Chapter 12: File Download and Upload Commands136ExamplesThe following command uses Xmodem to upload a switch’s configuration file called sw22_boot.cfg

137Chapter 13STP CommandsThis chapter contains the following commands:❑ ACTIVATE STP on page 138❑ DISABLE STP on page 139❑ ENABLE STP on page 140❑ RES

Preface12Contacting Allied TelesynThis section provides Allied Telesyn contact information for technical support as well as sales or corporate informa

Chapter 13: STP Commands138ACTIVATE STPSyntaxactivate stpParametersNone.DescriptionUse this command to designate STP as the active spanning tree on th

AT-S60 Command Line User’s Guide139DISABLE STPSyntaxdisable stpParametersNone.DescriptionThis command disables the Spanning Tree Protocol on the switc

Chapter 13: STP Commands140ENABLE STPSyntaxenable stpParametersNone.DescriptionThis command enables the Spanning Tree Protocol on the switch. The defa

AT-S60 Command Line User’s Guide141RESET STPSyntaxreset stpParametersNone.DescriptionThis command returns all STP bridge and port parameters to the de

Chapter 13: STP Commands142SET STPSyntaxset stp [default] [priority=priority] [hellotime=hellotime] [forwarddelay=forwarddelay] [maxage=maxage]Paramet

AT-S60 Command Line User’s Guide143hellotime Specifies the time interval between generating and sending configuration messages by the bridge. This par

Chapter 13: STP Commands144ExamplesThe following command sets the switch’s bridge priority value to 45,056 (increment 11):set stp priority=11The follo

AT-S60 Command Line User’s Guide145SET STP PORTSyntaxset stp port=port|all [default] [portcost=portcost] [portpriority=portpriority]Parametersport Spe

Chapter 13: STP Commands146DescriptionThis command configures the following STP parameter settings for a switch port:❑ Port cost❑ Port priorityExample

AT-S60 Command Line User’s Guide147SHOW STPSyntaxshow stp [port=port]Parameterport Specifies the port whose STP parameters you want to view. You can s

AT-S60 Command Line User’s Guide13Obtaining Management Software UpdatesNew releases of management software for our managed products can be downloaded

148Chapter 14RSTP CommandsThis chapter contains the following commands:❑ ACTIVATE RSTP on page 149❑ DISABLE RSTP on page 150❑ ENABLE RSTP on page 151❑

AT-S60 Command Line User’s Guide149ACTIVATE RSTPSyntaxactivate rstpParametersNone.DescriptionUse this command to designate RSTP as the active spanning

Chapter 14: RSTP Commands150DISABLE RSTPSyntaxdisable rstpParametersNone.DescriptionThis command disables the Rapid Spanning Tree Protocol on the swit

AT-S60 Command Line User’s Guide151ENABLE RSTPSyntaxenable rstpParametersNone.DescriptionThis command enables the Rapid Spanning Tree Protocol on the

Chapter 14: RSTP Commands152RESET RSTPSyntaxreset rstpParametersNone.DescriptionThis command returns all RSTP bridge and port parameters to the defaul

AT-S60 Command Line User’s Guide153SET RSTPSyntaxset rstp [default] [priority=priority] [hellotime=hellotime] [forwarddelay=forwarddelay] [maxage=maxa

Chapter 14: RSTP Commands154hellotime Specifies the time interval between generating and sending configuration messages by the bridge. The range of th

AT-S60 Command Line User’s Guide155❑ Forwarding delay❑ Maximum age time❑ Port priority❑ Force version of STP or normal RSTPExamplesThe following comma

Chapter 14: RSTP Commands156SET RSTP PORTSyntaxset rstp port=port|all [default] [portcost=portcost|auto] [portpriority=portpriority][edgeport=yes|no]

AT-S60 Command Line User’s Guide157portpriority Specifies the port’s priority. This parameter is used as a tie breaker when two or more ports are dete

14Chapter 1Starting a Command Line Management SessionThis chapter contains the following topics:❑ Starting a Management Session on page 15❑ Command Li

Chapter 14: RSTP Commands158migrationcheck This parameter resets a RSTP port, allowing it to send RSTP BPDUs. When an RSTP bridge receives STP BPDUs o

AT-S60 Command Line User’s Guide159SHOW RSTPSyntaxshow rstp [portconfig=port|portstate=port]Parametersportconfig Displays the RSTP port settings. You

Chapter 14: RSTP Commands160The following command displays RSTP port status for port 5 on the module in slot 8:show rstp portstate=8.5

161Chapter 15MSTP CommandsThis chapter contains the following commands:❑ ACTIVATE MSTP on page 163❑ ADD MSTP on page 164❑ CREATE MSTP on page 165❑ DEL

Chapter 15: MSTP Commands162NoteRefer to the AT-S60 Management Software User’s Guide for background information on the Multiple Spanning Tree Protocol

AT-S60 Command Line User’s Guide163ACTIVATE MSTPSyntaxactivate mstpParametersNone.DescriptionThis command designates MSTP as the active spanning tree

Chapter 15: MSTP Commands164ADD MSTPSyntaxadd mstp mstiid=mstiid mstivlanassoc=vidsParametersmstiid Specifies the ID of the multiple spanning tree ins

AT-S60 Command Line User’s Guide165CREATE MSTPSyntaxcreate mstp mstiid=mstiid [mstivlanassoc=vids]Parametersmstiid Specifies the MSTI ID of the spanni

Chapter 15: MSTP Commands166DELETE MSTPSyntaxdelete mstp mstiid=mstiid mstivlanassoc=vidsParametersmstiid Specifies the MSTI ID of the spanning tree i

AT-S60 Command Line User’s Guide167DESTROY MSTP MSTIFormatdestroy mstp mstiid=mstiidParametermstiid Specifies the MSTI ID of the spanning tree instanc

AT-S60 Command Line User’s Guide15Starting a Management SessionIn order to manage an AT-8400 Series switch using the command line, you must first star

Chapter 15: MSTP Commands168DISABLE MSTPSyntaxdisable mstpParametersNone.DescriptionThis command disables the Multiple Spanning Tree Protocol on the s

AT-S60 Command Line User’s Guide169ENABLE MSTPSyntaxenable mstpParametersNone.DescriptionThis command enables Multiple Spanning Tree Protocol on the s

Chapter 15: MSTP Commands170RESET MSTPSyntaxreset mstpParametersNone.DescriptionThis command returns all MSTP bridge and port parameters settings to t

AT-S60 Command Line User’s Guide171SET MSTPSyntaxset mstp [default] [forceversion=forcestpcompatible|normalmstp] [hellotime=hellotime] [forwarddelay=f

Chapter 15: MSTP Commands172forwarddelay Specifies the waiting period before a bridge changes to a new state, for example, becomes the new root bridge

AT-S60 Command Line User’s Guide173DescriptionThis command configures the following MSTP parameter settings. ❑ Hello time❑ Forwarding delay❑ Maximum a

Chapter 15: MSTP Commands174SET MSTP CISTSyntaxset mstp cist priority=priorityParameterpriority Specifies the CIST priority number for the switch. The

AT-S60 Command Line User’s Guide175SET MSTP MSTISyntaxset mstp msti mstiid=mstiid priority=priority]Parametersmstiid Specifies a MSTI ID. You can spec

Chapter 15: MSTP Commands176The PRIORITY parameter specifies the new MSTI priority value. The range is 0 (zero) to 61,440 in increments of 4,096, with

AT-S60 Command Line User’s Guide177SET MSTP MSTIVLANASSOCSyntaxset mstp mstivlanassoc mstiid=mstiid vlanlist=vidsParametersmstiid Specifies the ID of

Chapter 1: Starting a Command Line Management Session16Command Line Interface FeaturesThe following features are supported in the command line interfa

Chapter 15: MSTP Commands178SET MSTP PORTSyntaxset mstp port=port|all [default] [intportcost=auto|portcost] [extportcost=portcost] [portpriority=prior

AT-S60 Command Line User’s Guide179edgeport Defines whether the port is functioning as an edge port. An edge port is connected to a device operating a

Chapter 15: MSTP Commands180migrationcheck This parameter resets a MSTP port, allowing it to send MSTP BPDUs. When a MSTP bridge receives STP BPDUs on

AT-S60 Command Line User’s Guide181SHOW MSTPSyntaxshow mstp [portconfig=ports|all] [portstate=ports|all] [msti] [cist] [mstivlanassoc]Parametersportco

Chapter 15: MSTP Commands182❑ Maximum age❑ Maximum hops❑ Configuration name❑ Reversion level❑ Bridge identifierThe PORTCONFIG parameter displays the f

183Chapter 16VLANs and Multiple VLAN CommandsThis chapter contains the following commands:❑ ADD VLAN on page 184❑ CREATE VLAN on page 187❑ DELETE VLAN

Chapter 16: VLAN and MVLAN Commands184ADD VLANSyntax 1add vlan=name [vid=vid] port=ports|all frame=untagged|taggedSyntax 2add vlan=name [vid=vid] tagg

AT-S60 Command Line User’s Guide185This command has two syntaxes. You can use either command to add ports to a VLAN. The difference between the two is

Chapter 16: VLAN and MVLAN Commands186Using Syntax 2, you can add both types of ports with just one command:add vlan=Service untaggedports=2.7-8 tagge

AT-S60 Command Line User’s Guide187CREATE VLANSyntax 1create vlan=name vid=vid port=ports|ALL frame=untagged|taggedSyntax 2create vlan=name vid=vid ta

AT-S60 Command Line User’s Guide17Command FormattingThe following formatting conventions are used in this manual:❑ screen text font - This font illust

Chapter 16: VLAN and MVLAN Commands188port Specifies the ports (that is, slot.port) on the switch that are either tagged or untagged members of the ne

AT-S60 Command Line User’s Guide189Tagged ports of the new VLAN remain as tagged and untagged members of their current VLAN assignments. No change is

Chapter 16: VLAN and MVLAN Commands190Syntax 2 allows you to create a VLAN of both tagged and untagged ports all in one command. Here is the command t

AT-S60 Command Line User’s Guide191DELETE VLANSyntax 1delete vlan=name [vid=vid] port=ports|all frame=untagged|taggedSyntax 2delete vlan=name [vid=vid

Chapter 16: VLAN and MVLAN Commands192NoteTo delete a VLAN, see DESTROY VLAN on page 194.NoteYou cannot change a VLAN’s name or VID. When you remove a

AT-S60 Command Line User’s Guide193To delete both tagged and untagged ports from a VLAN using Syntax 1 takes two commands. For example, if you had a V

Chapter 16: VLAN and MVLAN Commands194DESTROY VLANSyntaxdestroy vlan=name [vid=vid]Parametersvlan Specifies the name of the VLAN to be deleted.vid Spe

AT-S60 Command Line User’s Guide195RESET VLANSyntaxreset vlanParametersNone.DescriptionThis command deletes all port-based and tagged VLANs on a switc

Chapter 16: VLAN and MVLAN Commands196SET SWITCH MANAGEMENTVLANSyntaxset switch managementvlan=name|VIDParametermanagementvlan Specifies the managemen

AT-S60 Command Line User’s Guide197SET SWITCH SWITCHMODESyntaxset switch switchmode=basic|taggedParametervlanmode Controls the switch’s VLAN mode. Opt

Copyright © 2004 Allied Telesyn, Inc.960 Stewart Drive Suite B, Sunnyvale, CA 94085 USAAll rights reserved. No part of this publication may be reprodu

Chapter 1: Starting a Command Line Management Session18NoteThe AT-8413 G/BT line card comes with one 10/100/1000Base-T twisted pair port and one GBIC

Chapter 16: VLAN and MVLAN Commands198SET VLANMODESyntaxset switch vlanmode=userconfigured|dotqmultiple| multiple [uplinkport=port]Parametersvlanmode

AT-S60 Command Line User’s Guide199ExamplesThe following command configures the switch for the 802.1Q-compliant multiple VLAN mode and specifies port

Chapter 16: VLAN and MVLAN Commands200SHOW VLANSyntaxshow vlan[=name|vid]Parametervlan Specifies the name or VID of the VLAN.DescriptionThis command d

201Chapter 17GARP VLAN Registration Protocol CommandsThis chapter contains the following commands:❑ DISABLE GARP on page 202❑ ENABLE GARP on page 203❑

Chapter 17: GARP VLAN Registration Protocol Commands202DISABLE GARPSyntaxdisable garp=gvrp [gip]Parametersgarp Specifies the GARP application you want

AT-S60 Command Line User’s Guide203ENABLE GARPSyntaxenable garp=gvrp [gip]Parametersgarp Specifies the GARP application you want to enable. The only G

Chapter 17: GARP VLAN Registration Protocol Commands204RESET GARPSyntaxreset garp=gvrpParametergarp Specifies the GARP application you want to reset.

AT-S60 Command Line User’s Guide205SET GARP PORTSyntaxset garp=gvrp port=port|ALL [mode=normal|none]Parametersgarp Specifies the GARP application you

Chapter 17: GARP VLAN Registration Protocol Commands206The following command activates GVRP on port 3 on the line card in slot 12:set garp=gvrp port=1

AT-S60 Command Line User’s Guide207SET GARP TIMERSyntaxset garp=gvrp timer [default] [jointime=integer] [leavetime=integer] [leavealltime=integer]Para

19Chapter 2Basic Command-Line CommandsThis chapter contains the following commands:❑ CLEAR SCREEN on page 20❑ LOGOFF and QUIT on page 21❑ MENU on page

Chapter 17: GARP VLAN Registration Protocol Commands208ExamplesThe following command sets the Join Period timer to 0.1 second, Leave Period timer to 0

AT-S60 Command Line User’s Guide209SHOW GARPSyntaxshow garp=gvrpParametergarp Specifies the GARP application you want to display. The only GARP applic

Chapter 17: GARP VLAN Registration Protocol Commands210SHOW GARP COUNTERSyntaxshow garp=gvrp counterParametergarp Specifies the GARP application you w

AT-S60 Command Line User’s Guide211❑ Receive GARP Messages: JoinIn❑ Transmit GARP Messages: JoinIn❑ Receive GARP Messages: LeaveEmpty❑ Transmit GARP M

Chapter 17: GARP VLAN Registration Protocol Commands212SHOW GARP DATABASESyntaxshow garp=gvrp databaseParametersgarp Specifies the GARP application yo

AT-S60 Command Line User’s Guide213SHOW GARP GIPSyntaxshow garp=gvrp gipParametergarp Specifies the GARP application you want to display. The only GAR

Chapter 17: GARP VLAN Registration Protocol Commands214SHOW GARP MACHINESyntaxshow garp=gvrp machineParametergarp Specifies the GARP application you w

215Chapter 18MAC Address Table CommandsThis chapter contains the following commands:❑ ADD SWITCH FDB on page 216❑ DELETE SWITCH FDB on page 218❑ SET S

Chapter 18: MAC Address Table Commands216ADD SWITCH FDBSyntaxadd switch fdb macaddress=macaddress port=port vlan=name|vidParametersmacaddress Specifie

AT-S60 Command Line User’s Guide217The following command adds the multicast MAC address 01:00:51:00:00 10 to Port 1-5 in Slot 6. The ports belongs to

Chapter 2: Basic Command Line Commands20CLEAR SCREENSyntaxclear screenParametersNone.DescriptionThis command clears the screen.ExampleThe following co

Chapter 18: MAC Address Table Commands218DELETE SWITCH FDBSyntaxdelete switch fdb macaddress=macaddress|dynamic [vlan=name|vid]Parametersmacaddress Sp

AT-S60 Command Line User’s Guide219SET SWITCH AGINGTIMERSyntaxset switch agingtimer=valueParameteragingtimer Specifies the aging timer for the MAC add

Chapter 18: MAC Address Table Commands220SHOW SWITCH FDB Syntaxshow switch fdb [address=macaddress] [port=port] [status=static|dynamic|multicast] [vla

AT-S60 Command Line User’s Guide221The following command displays the port number on which the MAC address 00:A0:D2:18:1A:11 was learned (dynamic) or

222Chapter 19IGMP Snooping CommandsThis chapter contains the following commands:❑ SET IP IGMP on page 223❑ SHOW IP IGMP on page 225NoteRemember to use

AT-S60 Command Line User’s Guide223SET IP IGMPSyntaxset ip igmp [snoopingstatus=enabled|disabled] [hoststatus=singlehost|multihost] [timeout=integer]

Chapter 19: IGMP Snooping Commands224numbermulticastgroups Specifies the maximum number of multicast addresses the switch learns. This parameter is us

AT-S60 Command Line User’s Guide225SHOW IP IGMPSyntaxshow ip igmp [hostlist] [routerlist]Parametershostlist Displays a list of the multicast groups le

226Chapter 20Statistics CommandsThis chapter contains the following commands:❑ RESET SWITCH COUNTER on page 227❑ RESET SWITCH LINECARD COUNTER on page

AT-S60 Command Line User’s Guide227RESET SWITCH COUNTERSyntaxreset switch counterParametersNone.DescriptionThis command returns all statistic counters

AT-S60 Command Line User’s Guide21LOGOFF and QUITSyntaxlogoffquitParametersNone.DescriptionBoth commands perform the same function: they end a managem

Chapter 20: Statistics Commands228RESET SWITCH LINECARD COUNTERSyntaxreset switch linecard=slotnumber counterParameterlinecard Specifies the slot cont

AT-S60 Command Line User’s Guide229RESET SWITCH PORT COUNTERSyntaxreset switch port=port|all counterParameterport Specifies the port whose statistics

Chapter 20: Statistics Commands230SHOW SWITCH COUNTERSyntaxshow switch counterParametersNone.DescriptionThis command displays switch operating statist

AT-S60 Command Line User’s Guide231SHOW SWITCH LINECARD COUNTERSyntaxshow switch linecard=slotnumber counterParameterlinecard Specifies the slot conta

Chapter 20: Statistics Commands232SHOW SWITCH PORT COUNTERSyntaxshow switch port=port counterParameterport Specifies the port whose statistics you wan

233Chapter 21Web Server CommandsThis chapter contains the following commands:❑ DISABLE HTTP SERVER on page 234❑ ENABLE HTTP SERVER on page 235❑ RESET

Chapter 21: Web Server Commands234DISABLE HTTP SERVERSyntaxdisable http serverParametersNone.DescriptionThis command disables the HTTP server on the s

AT-S60 Command Line User’s Guide235ENABLE HTTP SERVERSyntaxenable http serverParametersNone.DescriptionThis command activates the HTTP server on the s

Chapter 21: Web Server Commands236RESET HTTP SERVERSyntaxreset http serverParametersNone.DescriptionThis command resets the HTTP server on the switch

AT-S60 Command Line User’s Guide237SET HTTP SERVERSyntaxset http server [security=enabled|disabled] [sslkey=key-id] [port=port]Parameterssecurity Spec

Chapter 2: Basic Command Line Commands22MENUSyntaxmenuParametersNone.DescriptionThis command displays the AT-S60 Main Menu. For instructions on how to

Chapter 21: Web Server Commands238ExampleThe following command disables the HTTP server:disable http serverThe following command configures the switch

AT-S60 Command Line User’s Guide239Example of Creating a Self-Signed CertificateHere is an example of creating a self-signed certificate.#set date 29-

Chapter 21: Web Server Commands2409. Disable the switch’s web server using DISABLE HTTP SERVER on page 234.10. Configure the web server using SET HTTP

AT-S60 Command Line User’s Guide241SHOW HTTP SERVERSyntaxshow http serverParametersNone.DescriptionThis command displays the following information abo

242Chapter 22Encryption CommandsThis chapter contains the following commands:❑ CREATE ENCO KEY on page 243❑ DESTROY ENCO KEY on page 246❑ SET ENCO KEY

AT-S60 Command Line User’s Guide243CREATE ENCO KEYSyntaxcreate enco key=key-id type=rsa [length=key-length] [description=description-string] [file=fil

Chapter 22: Encryption Commands244DescriptionThis command creates an encryption key and stores the key information in the switch’s file system. This c

AT-S60 Command Line User’s Guide245NoteIn the above command, you are creating a key id. Therefore, the key id of 300 must not exist before this comman

Chapter 22: Encryption Commands246DESTROY ENCO KEYSyntaxdestroy enco key=key-idParameterkey A number in the range 0 to 65535. There is no default.Desc

AT-S60 Command Line User’s Guide247SET ENCO KEYSyntaxset enco key=key-id [description=description-string]Parameterskey A number in the range 0 to 6553

AT-S60 Command Line User’s Guide23SAVE CONFIGURATIONSyntaxsave configurationParametersNone.DescriptionThis command saves your changes to the switch’s

Chapter 22: Encryption Commands248SHOW ENCO KEYSyntaxshow enco key=key-idParameterkey A number in the range of 0 to 65535. There is no default.Descrip

AT-S60 Command Line User’s Guide249Chapter 23Public Key Infrastructure (PKI) CommandsThis chapter contains the following commands:❑ ADD PKI CERTIFICAT

Chapter 23: PKI Commands250ADD PKI CERTIFICATESyntaxadd pki certificate=certificate-name location=file-name [trusted=true|false] [type=ca|ee|self]Para

AT-S60 Command Line User’s Guide251The LOCATION parameter specifies the file name of the certificate. This is the name that is used to retrieve a cert

Chapter 23: PKI Commands252CREATE PKI CERTIFICATESyntaxcreate pki certificate=certificate-name keypair=key-id serialnumber=serial-number [format=der|p

AT-S60 Command Line User’s Guide253DescriptionThis command creates a self-signed certificate using an ENCO private RSA key and the switch’s distinguis

Chapter 23: PKI Commands254CREATE PKI ENROLLMENTREQUESTSyntaxcreate pki enrollmentrequest=request-name keypair=key-id [format=der|pem] [type=pkcs10]Pa

AT-S60 Command Line User’s Guide255The FORMAT parameter specifies the type of encoding format for the request. The DER value specifies that the enroll

Chapter 23: PKI Commands256DELETE PKI CERTIFICATESyntaxdelete pki certificate=certificate-nameParametercertificate A character string, 1 to 24 charact

AT-S60 Command Line User’s Guide257PURGE PKISyntaxpurge pkiParameterNone.DescriptionThis command deletes any certificates saved on the switch and rese

Chapter 2: Basic Command Line Commands24SET PROMPTSyntaxset prompt=”prompt”Parameterprompt Specifies the command line prompt. The prompt can be from o

Chapter 23: PKI Commands258SET PKI CERTIFICATESyntaxset pki certificate=certificate-name [trusted=true|false] [type=ca|ee|self]Parametercertificate A

AT-S60 Command Line User’s Guide259ExampleThe following command configures a trusted certificate with a type of self:set pki certificate=giftcertifica

Chapter 23: PKI Commands260SET PKI CERTSTORELIMITSyntaxset pki certstorelimit=certificate-limitParametercertstorelimit A number between 12 and 256. Th

AT-S60 Command Line User’s Guide261SET SYSTEM DISTINGUISHEDNAMESyntaxset system distinguishedname=distinguished-nameParameterdistinguishedname Specifi

Chapter 23: PKI Commands262SHOW PKISyntaxshow pkiParametersNone.DescriptionThis command displays the following information about the PKI module:❑ Maxi

AT-S60 Command Line User’s Guide263SHOW PKI CERTIFICATESyntaxshow pki certificate=certificate-nameParametercertificate A character string, 1 to 24 cha

264Chapter 24Secure Sockets Layer (SSL) CommandsThis chapter contains the following command: ❑ SET SSL on page 265❑ SHOW SSL on page 266NoteThe SSL fe

AT-S60 Command Line User’s Guide265SET SSLSyntaxset ssl cachetimeout=timeout value in seconds [maxsessions=maximum-sessions]Parameterscachetimeout A d

Chapter 24: SSL Commands266SHOW SSLSyntaxshow sslParametersNone.DescriptionThis command displays current values for the following SSL parameters:❑ Ver

267Chapter 25Secure Shell (SSH) CommandsThis chapter contains the following commands: ❑ DISABLE SSH SERVER on page 268❑ ENABLE SSH SERVER on page 269❑

AT-S60 Command Line User’s Guide25SET SWITCH CONSOLEMODESyntaxset switch consolemode=menu|cliParameterconsolemode Specifies the mode you want manageme

Chapter 25: SSH Commands268DISABLE SSH SERVERSyntaxdisable ssh serverParametersNone.DescriptionThis command disables the Secure Shell server. When the

AT-S60 Command Line User’s Guide269ENABLE SSH SERVERSyntaxenable ssh server hostkey=key-id serverkey=key-id [expirytime=hours] [logintimeout=seconds]P

Chapter 25: SSH Commands270SET SSH SERVERSyntaxset ssh server hostkey=key-id serverkey=key-id [expirytime=hours] [logintimeout=seconds]Parametershostk

AT-S60 Command Line User’s Guide271Creating aSecure ShellServerThis section provides a procedure to configure the switch as a secure shell server. It

Chapter 25: SSH Commands272TACACS+ feature. For information about how to configure RADIUS and TACACS+, see TACACS+ and RADIUS Commands on page 284.Exa

AT-S60 Command Line User’s Guide273SHOW SSHSyntaxshow sshParametersNone.DescriptionThis command displays current values for the following SHOW SSH con

274Chapter 26802.1x Port-Based Access Control CommandsThis chapter contains the following commands: ❑ DISABLE PORTACCESS on page 275❑ ENABLE PORTACCES

AT-S60 Command Line User’s Guide275DISABLE PORTACCESSSyntaxdisable portaccessParametersNone.DescriptionThis command disables 802.1x Port-based Access

Chapter 26: 802.1x Port-Based Access Control Commands276ENABLE PORTACCESSSyntaxenable portaccessParametersNone.DescriptionThis command enables 802.1x

AT-S60 Command Line User’s Guide277SET PORTACCESSSyntaxset portaccess authmethod=RADIUSEAPParametersauthmethod Indicates the authentication method for

Chapter 2: Basic Command Line Commands26SHOW USERSyntaxshow userParameterNone.DescriptionDisplays the user account you used to log on to the switch. T

Chapter 26: 802.1x Port-Based Access Control Commands278SET PORTACCESS PORT AUTHENTICATORSyntaxset portaccess port=port|all authenticator [control=aut

AT-S60 Command Line User’s Guide279quietperiod Sets the number of seconds that the switch remains in the quiet state following a failed authentication

Chapter 26: 802.1x Port-Based Access Control Commands280SET PORTACCESS PORT ROLESyntaxset portaccess port=port|all role=none|authenticator|supplicantP

AT-S60 Command Line User’s Guide281SET PORTACCESS PORT SUPPLICANTSyntaxset portaccess port=port|all supplicant [authperiod=integer] [heldperiod=intege

Chapter 26: 802.1x Port-Based Access Control Commands282password Specifies the password for the port. The port sends the password to the authenticatio

AT-S60 Command Line User’s Guide283SHOW PORTACCESSSyntaxshow portaccess config|status|[port=port [authenticator|supplicant] [config|status]]Parameters

284Chapter 27TACACS+ and RADIUS CommandsThis chapter contains the following commands:❑ ADD RADIUSSERVER on page 285❑ ADD TACACSSERVER on page 286❑ DEL

AT-S60 Command Line User’s Guide285ADD RADIUSSERVERSyntaxadd radiusserver ipaddress=ipaddress order=integer [secret=string] [port=integer]Parametersip

Chapter 27: TACACS+ and RADIUS Commands286ADD TACACSSERVERSyntaxadd tacacsserver ipaddress=ipaddress order=integer [secret=string]Parametersipaddress

AT-S60 Command Line User’s Guide287DELETE RADIUSSERVERSyntaxdelete radiusserver ipaddress=ipaddressParameteripaddress Specifies the IP address of the

27Chapter 3Basic Switch CommandsThis chapter contains the following commands:❑ DISABLE DHCPBOOTP on page 29❑ DISABLE TELNET on page 30❑ ENABLE DHCPBOO

Chapter 27: TACACS+ and RADIUS Commands288DELETE TACACSSERVERSyntaxdelete tacacsserver ipaddress=ipaddressParameteripaddress Specifies the IP address

AT-S60 Command Line User’s Guide289DISABLE AUTHENTICATIONSyntaxdisable authenticationParametersNone.DescriptionUse this command to disable TACACS+ and

Chapter 27: TACACS+ and RADIUS Commands290ENABLE AUTHENTICATIONSyntaxenable authenticationParametersNone.DescriptionUse this parameter to enable TACAC

AT-S60 Command Line User’s Guide291RESET AUTHENTICATIONSyntaxreset authenticationParametersNone.DescriptionThis command disables authentication. When

Chapter 27: TACACS+ and RADIUS Commands292SET AUTHENTICATIONSyntaxset authentication method=[tacacs|radius] [secret=string] [timeout=integer]Parameter

AT-S60 Command Line User’s Guide293The following command selects TACACS+ as the authentication protocol and specifies a global encryption key of tiger

Chapter 27: TACACS+ and RADIUS Commands294SHOW AUTHENTICATIONSyntaxshow authenticationParametersNone.DescriptionUse this command to display the follow

295IndexNumerics [0]802.1Q multiple VLAN mode 198802.1x port-based access controlauthenticator portconfiguring 278displaying 283specifying 280disablin

Index296Bback pressure 95Basic VLAN mode 197BOOTPactivating 42disabling 29enabling 31status, displaying 52BPDU 154, 172bridge forwarding delay 142, 15

AT-S60 Command Line User’s Guide297Eedge port 156, 178ENABLE AUTHENTICATION command 290ENABLE DHCPBOOTP command 31ENABLE GARP command 203ENABLE HTTP S

1Table of ContentsPreface ...

Chapter 3: Basic Switch Commands28❑ SET SYSTEM on page 48❑ SET SYSTEM TEMPTHRESHOLD on page 49❑ SHOW ASYN on page 50❑ SHOW CONFIG on page 51❑ SHOW DHC

Index298Lline card counter statisticsdisplaying 231resetting 228line card information, displaying 56LOAD command 129location, configuring 48LOGOFF com

AT-S60 Command Line User’s Guide299creating 106deleting 108destroying 109displaying 111setting 110speed, setting 110ports, specifying 17PURGE IP comma

Index300SET SWITCH PORT SECURITYMODE command 101SET SWITCH STACKMODE command 91SET SWITCH SWITCHMODE command 197SET SWITCH TRUNK command 110SET SYSTEM

AT-S60 Command Line User’s Guide301configuring 281displaying 283role 280switchaccessing via enhanced stacking 88configuration, displaying 51distinguis

AT-S60 Command Line User’s Guide29DISABLE DHCPBOOTPSyntaxdisable dhcpbootpParametersNone.DescriptionThis command deactivates the DHCP and BOOTP client

Chapter 3: Basic Switch Commands30DISABLE TELNETSyntaxdisable telnetParametersNoneDescriptionThis command disables Telnet access to the switch.Caution

AT-S60 Command Line User’s Guide31ENABLE DHCPBOOTPSyntaxenable dhcpbootpParametersNone.DescriptionThis command activates the DHCP and BOOTP client sof

Chapter 3: Basic Switch Commands32ENABLE TELNETSyntaxenable telnetParametersNone.DescriptionThis command enables Telnet access to the switch.ExampleTh

AT-S60 Command Line User’s Guide33PINGSyntaxping ipaddressParameteripaddress Specifies the IP address of an end node you want the switch to ping.Descr

Chapter 3: Basic Switch Commands34PURGE IPSyntaxpurge ip [ipaddress] [netmask] [route]Parametersipaddress Returns the switch’s IP address to the defau

AT-S60 Command Line User’s Guide35RESET ASYNSyntaxreset asynParameterNone.DescriptionThis command resets the speed of the serial port on the AT-8401 m

Chapter 3: Basic Switch Commands36RESET IPSyntaxreset ip interface=1Parameterinterface Specifies the interface number. This value is always 1. Descrip

AT-S60 Command Line User’s Guide37RESET IP ROUTESyntaxreset ip routeParameterNone.DescriptionThis command returns the default gateway address to its d

Table of Contents2RESET IP ROUTE ...

Chapter 3: Basic Switch Commands38RESET SYSTEMSyntaxreset system [name] [contact] [location]Parametersname Deletes the name of the switch.contact Dele

AT-S60 Command Line User’s Guide39RESTART REBOOTSyntaxrestart rebootParametersNone.DescriptionThis command returns the switch’s operating parameters t

Chapter 3: Basic Switch Commands40RESTART SWITCHSyntaxrestart switchParametersNone.DescriptionThis command resets the switch. The system reset takes a

AT-S60 Command Line User’s Guide41SET ASYNSyntaxset asyn speed=1200|2400|4800|9600|19200|38400|57600|115200Parameterspeed Sets the speed of the serial

Chapter 3: Basic Switch Commands42SET IPSyntaxset ip interface=1 ipaddress=ipaddress|DHCP netmask=subnetmaskParametersinterface Specifies the interfac

AT-S60 Command Line User’s Guide43ExamplesThe following command sets the switch’s IP address to 140.35.22.22 and the subnet mask to 255.255.255.0:set

Chapter 3: Basic Switch Commands44SET IP ROUTESyntaxset ip route ipaddress=ipaddressParameteripaddress Specifies the IP address of the default gateway

AT-S60 Command Line User’s Guide45SET PASSWORD MANAGERSyntaxset password managerParametersNone.DescriptionThis command sets the manager’s password. Th

Chapter 3: Basic Switch Commands46SET PASSWORD OPERATORSyntaxset password operatorParametersNone.DescriptionThis command sets the operator’s password.

AT-S60 Command Line User’s Guide47SET SWITCH CONSOLETIMERSyntaxset switch consoletimer=valueParameterconsoletimer Specifies the console timer in minut

3Chapter 7Port Parameter Commands ...

Chapter 3: Basic Switch Commands48SET SYSTEMSyntaxset system [name=”name”] [contact=”contact”] [location=”location”]ParametersThe parameters are defin

AT-S60 Command Line User’s Guide49SET SYSTEM TEMPTHRESHOLDSyntaxset system tempthreshold=temperatureParameterThe parameter is defined below:tempthresh

Chapter 3: Basic Switch Commands50SHOW ASYNSyntaxshow asynParametersNone.DescriptionThis command displays the following operating parameters of the se

AT-S60 Command Line User’s Guide51SHOW CONFIGSyntaxshow configParametersNone.DescriptionThis command displays the following information:❑ Boot configu

Chapter 3: Basic Switch Commands52SHOW DHCPBOOTPSyntaxshow dhcpbootpParametersNone.DescriptionThis command displays the status of the DHCP and BOOTP c

AT-S60 Command Line User’s Guide53SHOW IPSyntaxshow ip interface=1Parametersinterface Specifies the switch’s interface number. This value is always 1.

Chapter 3: Basic Switch Commands54SHOW IP ROUTESyntaxshow ip routeParametersNone.DescriptionThis command displays the switch’s default gateway address

AT-S60 Command Line User’s Guide55SHOW SWITCHSyntaxshow switchParametersNone.DescriptionThis command displays the following switch parameters:❑ Applic

Chapter 3: Basic Switch Commands56SHOW SWITCH LINECARDSyntaxshow switch linecard=slotnumberParameterlinecard Specifies the slot number containing the

AT-S60 Command Line User’s Guide57SHOW SYSTEMSyntaxshow systemParametersNone.DescriptionThis command displays the following information:❑ Application

Table of Contents4Chapter 14RSTP Commands ...

58Chapter 4Simple Network Time Protocol (SNTP) CommandsThis chapter contains the following commands:❑ ADD SNTPSERVER IPADDRESS on page 59❑ DELETE SNTP

AT-S60 Command Line User’s Guide59ADD SNTPSERVER IPADDRESSSyntaxadd sntpserver ipaddress=ip-addressParameteripaddress Specifies the IP address of the

Chapter 4: SNTP Commands60DELETE SNTPSERVER IPADDRESSSyntaxdelete sntpserver ipaddress=ip-addressParameteripaddress Specifies the IP address of the SN

AT-S60 Command Line User’s Guide61DISABLE SNTPSyntaxdisable sntpParametersNone.DescriptionThis command disables SNTP.ExampleThe following command disa

Chapter 4: SNTP Commands62ENABLE SNTPSyntaxenable sntpParametersNone.DescriptionThis command enables SNTP.ExampleThe following command enables SNTP:en

AT-S60 Command Line User’s Guide63RESET SNTPSyntaxreset sntpParametersNone.DescriptionThis command resets SNTP to its default values.ExampleThe follow

Chapter 4: SNTP Commands64SET DATESyntaxset date dd-mm-yyyyParameterdate Specifies the date for the SNTP server in day/month/year format.DescriptionTh

AT-S60 Command Line User’s Guide65SET SNTPSyntaxset sntp[dst=enabled|disabled] [pollinterval=integer] [utcoffset=integer]Parametersdst Daylight saving

Chapter 4: SNTP Commands66SET TIMESyntaxset time hh:mm:ssParametertime Specifies the hour, minutes, and seconds of the current time in 24-hour format.

AT-S60 Command Line User’s Guide67SHOW SNTPSyntaxshow sntpParametersNone.DescriptionThis command displays the following information:❑ Status❑ Server I

5SET SWITCH AGINGTIMER ...

Chapter 4: SNTP Commands68SHOW TIMESyntaxshow timeParametersNone.DescriptionThis command shows the current system time.ExampleThe following command sh

69Chapter 5SNMP Community Strings and Trap CommandsThis chapter contains the following commands:❑ ADD SNMP COMMUNITY on page 70❑ CREATE SNMP COMMUNITY

Chapter 5: SNMP Community Strings and Trap Commands70ADD SNMP COMMUNITYSyntaxadd snmp community=community [traphost=ipaddress] [manager=ipaddress]Para

AT-S60 Command Line User’s Guide71The following command adds the IP address of 149.212.10.11 as a trap receiver to the “public” community string:add s

Chapter 5: SNMP Community Strings and Trap Commands72CREATE SNMP COMMUNITYSyntaxcreate snmp community=community [access=read|write] [open=yes|no] [tra

AT-S60 Command Line User’s Guide73DescriptionThis command creates a new SNMP community string on the switch. The switch comes with two default communi

Chapter 5: SNMP Community Strings and Trap Commands74The following command creates the new community string “wind11” with read and write access level.

AT-S60 Command Line User’s Guide75DELETE SNMP COMMUNITYSyntaxdelete snmp community=community traphost=ipaddress manager=ipaddressParameterscommunity S

Chapter 5: SNMP Community Strings and Trap Commands76DESTROY SNMP COMMUNITYSyntaxdestroy snmp community=communityParametercommunity Specifies a SNMP c

AT-S60 Command Line User’s Guide77DISABLE SNMPSyntaxdisable snmpParametersNone. DescriptionThis command disables SNMP on the switch. When SNMP is disa

Table of Contents6SET SSH SERVER ...

Chapter 5: SNMP Community Strings and Trap Commands78DISABLE SNMP AUTHENTICATETRAPSyntaxdisable snmp authenticatetrapParametersNone.DescriptionThis co

AT-S60 Command Line User’s Guide79DISABLE SNMP COMMUNITYSyntaxdisable snmp community=communityParameterscommunity Specifies an SNMP community string t

Chapter 5: SNMP Community Strings and Trap Commands80ENABLE SNMPSyntaxenable snmpParametersNone.DescriptionThis command activates SNMP on the switch.

AT-S60 Command Line User’s Guide81ENABLE SNMP AUTHENTICATETRAPSyntaxenable snmp authenticatetrapParametersNone.DescriptionThis command configures the

Chapter 5: SNMP Community Strings and Trap Commands82ENABLE SNMP COMMUNITYSyntaxenable snmp community=stringParameterscommunity Specifies an SNMP comm

AT-S60 Command Line User’s Guide83SET SNMP COMMUNITYSyntaxset snmp community=community [access=read|write] [open=yes|no]Parameterscommunity Specifies

Chapter 5: SNMP Community Strings and Trap Commands84The following command changes the access level for the SNMP community string “serv12” to read and

AT-S60 Command Line User’s Guide85SHOW SNMPSyntaxshow snmp [community=communitystring]Parametercommunity Specifies a community string on the switch. T

Chapter 5: SNMP Community Strings and Trap Commands86❑ Trap receiver IP addresses - The IP addresses of management stations to receive traps from the

87Chapter 6Enhanced Stacking CommandsThis chapter contains the following commands:❑ ACCESS SWITCH on page 88❑ EXIT on page 90❑ SET SWITCH STACKMODE on

7PrefaceThis guide contains information about the AT-S60 command line interface. The commands for both the AT-S60 version 2.0.0 NE and 2.0.0 software

Chapter 6: Enhanced Stacking Commands88ACCESS SWITCHSyntaxaccess switch number=number|macaddress=macaddressParametersnumber Specifies the number of th

AT-S60 Command Line User’s Guide89ExamplesThe following command starts a management session on switch number 12:access switch number=12The following c

Chapter 6: Enhanced Stacking Commands90EXITSyntaxexitParametersNone.DescriptionThis command ends a management session. The menu or screen that is disp

AT-S60 Command Line User’s Guide91SET SWITCH STACKMODESyntaxset switch stackmode=[master|slave|unavailable]Parameterstackmode Specifies the enhanced s

Chapter 6: Enhanced Stacking Commands92SHOW REMOTELISTSyntaxshow remotelist [sorted=macaddress|name]Parametersorted Sorts the list either by MAC addre

93Chapter 7Port Parameter CommandsThis chapter contains the following commands:❑ RESET SWITCH PORT on page 94❑ SET SWITCH PORT on page 95❑ SHOW SWITCH

Chapter 7: Port Parameter Commands94RESET SWITCH PORTSyntaxreset switch port=portParameterport Specifies the port to reset. You can specify more than

AT-S60 Command Line User’s Guide95SET SWITCH PORTSyntaxset switch port=port [status=enabled|disabled] [flowcontrol=disable|enable|auto] [holblocking=e

Chapter 7: Port Parameter Commands96broadcastfilter Controls the broadcast filter. Possible values are:enabled The port accepts and forwards broadcas

AT-S60 Command Line User’s Guide97NoteThe selections 10mfauto, 100mhauto, 100mfauto, and 1000mfauto cause a port to Auto-Negotiate to a lower speed an