Introduction
COMMANDO Solider IE2000 Series Industrial Ethernet, Managed Switches are fully managed, PoE+ Gigabit Ethernet switch with network resiliency and high availability, delivering robust performance and intelligent switching for growing networks. This series switches are easy to deploy, use, manage and designed exclusively for the networking needs of growing businesses and provide PoE+/PoE++ power on all ports. The security features equipped with today’s advance networking hardware and software technology. This Series switches can be deployed in harsh environments to deliver hassle free mission-critical network services and surveillance requirements.
COMMANDO Solider IE2000 Series Industrial Ethernet, Managed Switches Series are fixed-configuration, with flexible uplinks Gigabit Ethernet switches that provide enterprise-class access for campus and branch applications. These Gigabit Ethernet switch enables home and office users to easily connect and supply power to high power wireless access points, PTZ (Pan Tilt Zoom) IP cameras, Surveillance cameras, VoIP telephony systems, kiosks, POS terminals, thin client, 802.11ac and 802.11ax access points, small cells, and connected LED lighting. It also provides the opportunity to add additional Ethernet devices like computers, printers, and Network Attached Storage (NAS) onto a network. This compact PoE+/PoE++ switch operates quietly, making it ideal for use in virtually any room or office. These switches are powerful and flexible enough for users to deploy wireless access points, surveillance cameras, IP phones and other PoE supported devices over longer distances up to 250 meters and support temperature range -40 C to 80° C. COMMANDO Solider IE2000 Series Industrial Ethernet, Managed provide easy device rack and wall mounting, on boarding, configuration, monitoring, and troubleshooting. These fully managed switches can provide advanced Layer 2+ and basic Layer 3 features as well as supports IEEE 802.3bt type-4 compliant PoE++ (Power over Ethernet Plus Plus)and 802.3at-compliant PoE+ (Power over Ethernet plus). Each switchport is capable to deliver 90 W PoE++ or 30 W PoE+ power on all ports along with automated power (ON/OFF) scheduling. All Switches are PoE+/PoE++ capable to provide power across all access ports for wireless APs, security cameras, and other IoT devices. Designed for operational simplicity to lower total cost of ownership, they enable scalable, secure, and energy-efficient business operations with intelligent and automated services.
COMMANDO Solider IE2000 Series Industrial Ethernet, Managed Switches Series provides a convenient and cost-effective wired access rack and wall mountable solution that can be quickly set up with Zero Touch Provisioning. Theses switches deliver enhanced application, visibility, network reliability, and network resiliency and high availability.
COMMANDO Solider IE2000 Series Industrial Ethernet, Managed Switches has wire-speed back haul bandwidth capacity with flexible up to 1 Gigabit Ethernet copper/Fiber uplinks. This series also offers robust QoS, To optimize traffic on your Business Network, these switches provide (Port-based/802.1p/DSCP) QoS to keep latency-sensitive video and voice traffic jitter-free moving smoothly. Additionally, port-based, tag-based VLAN, Voice Vlans can improve security and meet more network segmentation requirements. This series switches also have provisioning of QOS, Static routing, IPV6 features. Moreover, with its innovative energy-efficient technology, can save up to 58% of power consumption, making it an eco-friendly perfect solution for your business network.
The COMMANDO SoldierOS IP Base switches provides CLI and WEBUI based PoE/PoE+ scheduling Premium feature. PoE/PoE+ Scheduling is a feature which allows you to specify the amount of time at scheduled time that power is delivered to a PoE/PoE+ port automatically making Switch intelligent . This not only can be used to save power when devices are not in use, but as a security feature to prevent wireless access from being available outside of business hours.It is possible to set a schedule for PoE/PoE+, a start time, an end time and which ports the PoE/PoE+ schedule applies to.
Intended Audience:
This document is intended for:
Network Device configuration and Troubleshooting Engineers
Internetworking Professionals and Experts
System maintenance engineers
Command Symbols
The command symbols that may be found in this document are defined as follows.
Table 1. General command symbols
|
Symbols |
Description |
|
Boldface |
The keywords of a command line are in boldface. These Keywords are command syntax. |
|
Italic |
Command arguments are in italics. |
|
[ ] |
Items (keywords or arguments) in brackets [ ] are optional. |
|
< > |
Compulsory input. |
|
{ } |
Optional items. |
|
| |
Separated by vertical bars. One item is selected. |
|
# |
# sign is comments. |
Management Access Modes
COMMANDO SoldierOS IP Base switches Management is made easy via a web-based Graphical User Interface (WEBUI) access via HTTP/HTTPS or industry-standard Command Line Interface (CLI) via Console/Telnet with administration traffic protected via , SNMP v1/v2C/v3, SSH v1/v2, RMON v1/v2 which enables the switch to be polled for valuable status information and allows it to send traps when abnormal events occur.
Simplified Configuration and Management
Zero-Touch Provisioning (ZTP) simplifies installation of the switch. Easy to manage via Console/web-Based Management (WEBUI)/Telnet/SSH/ HTTPS.
Remote Manageability
Remote management is the process that allows the administrators to take full control of all operations using a remote. This remote management via WEBUI / Telnet/ SSH/ HTTPS will reduce time and money spent on management and maintenance and physical presence of Network Engineer.
Management by CLI- Console, Telnet (RFC854) up to 3 sessions
Management by WebUI- HTTP, HTTPS for management Based on Remote Configuration and maintenance Using Telnet.
In this CLI guide we will understand Management by Command Line Interface(CLI) through console port, telnet management mode.
Accessing the Switch via console port
How to Login COMMANDO Series IE2000 via console port?
The console interface is used by connecting the Switch to an VT100–compatible terminal or a computer running an ordinary terminal emulator program (e.g., the HyperTerminal program included with the Windows operating system) using an RS–232C serial cable. Your terminal parameters will need to be set to:
• VT–100 compatible
• 115200 baud
• 8 data bits
• No parity
• One stop bit
• No flow control
Users may also access the same functions over a Telnet interface. Once you have set an IP address for your Switch, you can use a Telnet program (in VT–100 compatible terminal mode) to access and control the Switch. All of the screens are identical, whether accessed from the console port or from a Telnet interface.
Step 1 :Connect the Switch console port with PC/Laptop via console cable.
Fig-1. Connection of console port with PC/Laptop via console cable.
Step 2 :The communication parameters configuration of the Putty Terminal with console is shown below Baud rate (Speed):115200
Fig-2. Putty configuration in PC for console port access
Step 3 : Click on “Open”. You will get following window.
With the console port properly connected to a management computer, the following screen should be visible.
Fig-3. COMMANDO Series IE2000 Switch CLI access via console port
How to Login COMMANDO Series IE2000 WEBUI and Enable Telnet?
Before Accessing Command Line Interface via telnet you have to login to WEBUI of COMMANDO IE2000 Switch. Connect one Ethernet port to your system with RJ45 LAN cable.
Fig-4. COMMANDO Series IE2000 Switch port connected with PC via RJ45 LAN cable.
In PC following LAN setting required.
IP Address: : 192.168.0.(2-254)
Subnet Mask: 255.255.255.0
Default Gateway: 192.168.0.1
Fig-5. Local Area Connection properties for Web Interface
Now Open any web browser type http://192.168.0.1 and hit “Enter” following window will appear.
Fig-6. COMMANDO IE2000 Switch WEBUI Administrator Login Page
Use following login details to enter in WEBUI mode,Username: admin
Password: ********
(Note:- Password is mentioned on backside of device)
Enter the login button. COMMANDO IE2000 series switch starting Page appears .
Following steps are required to access CLI via telnet lines.
Click on "Management"
Click on "Management Access
Click on "Management Services
Telnet Click on
“Apply” and “Save” the configuration.
This is required stage before accessing COMMANDO IE2000 Switch Command Line Interface (CLI) to enable “Telnet”. By default “Telnet” service is disabled so you have to enable it.
To view and configure Telnet, SSH,HTTP,HTTPS, SNMP along with , Session Timeout,Password Retry Count,Silent Time click on Management>>Management Access>>Management Service
Note:- By default HTTP access is enabled.
Now you will be able to login through Telnet by using any putty software.
Fig-7. COMMANDO IE2000 Switch Management Access service.
Users access CLI through TELNET
Following are the steps to access CLI via telnet.
Step 1 : Connect the LAN port of PC/Laptop with any Ethernet port of the switch by LAN cable.
Step 2 : The communication parameters configuration of the Putty Terminal with TELNET is shown below:
IP Address: 192.168.0.1
Port: 23
Fig-8. Putty configuration in PC for Telnet access
Step 3: Click on “Open”. You will get following window.
Username: admin
Password: ********
(Note:- Password is mentioned on backside of device)
Fig-9. COMMANDO Series IE2000 Switch CLI access via telnet
Administration
|
Syntax |
clear (authentication|gvrp|interfaces|ip|ipv6 |lacp|line|lldp|logging|mac|mvr|port-security|rmon|spanning-tree) |
|
Mode |
Privileged EXEC |
|
Example |
This example shows how to clear interfaces, Switch# clear interfaces GigabitEthernet 1 counters |
1.4 ENABLE
In User EXEC mode, user only allows to do a few actions. Most of commands are only available in privileged EXEC mode. Use “enable” command to enter the privileged mode to do more actions on switch. In privileged EXEC mode, use “exit” command is able to go back to user EXEC mode with original user privilege level. If you need to go back to user EXEC mode with different privilege level, use “disable” command to specify the privilege level you need. In privileged EXEC mode, the prompt will show“Switch#”.
Switch>enable [<1-15>]
Switch#disable [<1-14>]
|
Syntax |
enable [<1-15>] disable [<1-14>] |
|
Parameter |
<1-15> Specify privileged level to enable <1-14> Specify privileged level to disable |
|
Default |
Default privilege level is 15 if no privilege level is specified on enable command. Default privilege level is 1 if no privilege level is specified on disable command. |
|
Mode |
User EXEC |
|
Example |
This example shows how to enter privileged EXEC mode and show current privilege level. Switch>enable Password: Switch# show privilege Switch# disable Switch> |
1.5 END
Use “end” command to return to privileged EXEC mode directly. Every mode except User EXEC mode has the “end” command.
Switch#configure terminal
Switch(config)# interface GigabitEthernet 1
Switch(config-if)# end
|
Syntax |
end |
|
Mode |
Privileged EXEC Global Configuration Interface Configuration Line Configuration |
|
Example |
This example shows how to enter Interface Configuration mode and use end command to go back to privileged EXEC mode Switch#configure terminal Switch(config)# interface GigabitEthernet 1 Switch(config-if)# end Switch# |
1.6 EXIT
In User EXEC mode, “exit” command will close current CLI session. In other modes, “exit” command will go to the parent mode. And every mode has the “exit” command.
Switch# exit
|
Syntax |
exit |
|
Mode |
User EXEC Privileged EXEC Global Configuration Interface Configuration Line Configuration |
|
Example |
This example shows how to enter privileged EXEC mode and use exit command to go back to user EXEC mode. Switch>enable Switch# exit Switch> |
1.7 HISTORY
Use “history” command to specify the maximum commands history number for CLI running on console, telnet or ssh service. Every command input by user will record in history buffer. If all history commands exceed configured history number, older ones will be deleted from buffer. Use “no history” to disable the history feature. And use “show history” to show all history commands.
Switch#configure terminal
Switch(config)# line console
Switch(config-line)# history 100
Switch(config-line)# exit
|
Syntax |
history <1-256> no history |
|
Parameter |
<1-256>Specify maximum CLI history entry number. |
|
Default |
Default maximum history entry number is 128. |
|
Mode |
Line Configuration |
|
This example shows how to change console history number to 100, telnet history number to 150 and ssh history number to 200. Switch#configure terminal Switch(config)# line console Switch(config-line)# history 100 Switch(config-line)# exit Switch(config)# line telnet Switch(config-line)# history 150 Switch(config-line)# exit Switch(config)# line ssh Switch(config-line)# history 200 Switch(config-line)# exit This example shows how show line information. Switch# show line This example shows how show history commands. Switch# show history |
1.8 HOSTNAME
Use “hostname” command to modify hostname of the switch. The system name is also used to be CLI prompt.
Switch#configure terminal
Switch(config)# hostname {WORD}
|
Syntax |
hostname {WORD} |
|
Parameter |
WORD Specify the hostname of the switch. |
|
Default |
Default name string is “Switch”. |
|
Mode |
Global Configuration |
|
Example |
This example shows how to modify contact information Switch#configure terminal Switch(config)# hostname commando commando(config)# |
1.9 INTERFACE
Some configurations are port based. In order to configure these configurations, we need to enter Interface Configuration mode to configure them. Use “interface” command to enter the Interface Configuration mode and select the port to be configured. In Interface Configuration mode, the prompt will show as “Switch(config- if)#”
Switch#configure terminal
Switch(config)# interface {IF_PORTS}
Switch(config)# interface range {IF_PORT starting - IF_PORT ending }
|
Syntax |
interface {IF_PORTS} interface range {IF_PORTS} |
|
Parameter |
IF_PORTSSpecify the port to select. This parameter allows partial port name and ignore case. For Example: GigabitEthernet 1, GigabitEthernet2, GigabitEthernet3 and so on If port range is specified, the list format is also available. For Example: gi1,3,5 gi2,gi1-3 |
|
Mode |
Global Configuration |
|
Usage |
Some configurations are port based. In order to configure these configurations, we need to enter Interface Configuration mode to configure them. Use “interface” command to enter the Interface Configuration mode and select the port to be configured. In Interface Configuration mode, the prompt will show as “Switch(config- if)#” |
|
Example |
This example shows how to enter Interface Configuration mode Switch#configure terminal Switch(config)# interface GigabitEthernet 1 Switch(config-if)# Switch#configure terminal Switch(config)# interface range GigabitEthernet 1-3 Switch(config-if-range)# |
1.10 IP ADDRESS
Use “ip address” command to modify administration ipv4 address. This address is very important. When we try to use telnet, ssh, http, https, snmp to connect to the switch, we need to use this ip address to access IE2000 series switches.
Note:- By default Switch is having 192.168.0.1 as access IP.
Switch#configure terminal
Switch(config)# ip address {A.B.C.D} [mask {A.B.C.D}]
|
Syntax |
ip address A.B.C.D [mask A.B.C.D] |
|
Parameter |
address A.B.C.D Specify IPv4 address for switch mask A.B.C.D Specify net mask address for switch |
|
Default |
Default IP address is 192.168.0.1 and default net mask is 255.255.255.0. |
|
Mode |
Global Configuration |
|
Example |
This example shows how to modify the ipv4 address of the switch. Default setting of IE2000 series Switches Switch#configure terminal Switch(config)# ip address 192.168.1.1 mask 255.255.255.0 After this configuration you can access Switch with 192.168.1.1 IP address. Accessing New IP address with Telnet. This way to access with newly set IP address. |
1.11 DEFAULT-GATEWAY
Use “ip default-gateway” command to modify default gateway address. And use “no ip default-gateway” to restore default gateway address to factory default.
Switch#configure terminal
Switch(config)# ip default-gateway {A.B.C.D}
Switch(config)# no ip default-gateway
|
Syntax |
ip default-gateway {A.B.C.D} no ip default-gateway |
|
Parameter |
A.B.C.D Specify default gateway IPv4 address for switch |
|
Default |
Default IP address of default gateway is 192.168.0.254. |
|
Mode |
Global Configuration |
|
Example |
This example shows how to modify the ipv4 address of the switch. Switch#configure terminal Switch(config)# ip default-gateway 192.168.1.10 This example shows how to show current ipv4 default gateway of the switch. |
1.12 IP DHCP
Use “ip dhcp” command to enabled dhcp client to get IP address from remote DHCP server.
Use “no ip dhcp” command to disabled dhcp client and use static ip address.
Switch#configure terminal
Switch(config)# ip dhcp
Switch(config)# no ip dhcp
|
Syntax |
ip dhcp no ip dhcp |
|
Default |
Default DHCP client is disabled. |
|
Mode |
Global Configuration |
|
Example |
This example shows how to enable dhcp client. Switch#configure terminal Switch(config)# ip dhcp This example shows how to show current dhcp client state of the switch. Switch# show ip dhcp |
1.13 IPV6 AUTOCONFIG
Use “ipv6 autoconfig” command to enabled IPv6 auto configuration feature. Use “no ipv6 autoconfig”command to disabled IPv6 auto configuration feature.
Switch#configure terminal
Switch(config)# ipv6 autoconfig
Switch(config)# no ipv6 autoconfig
|
Syntax |
ipv6 autoconfig no ipv6 autoconfig |
|
Default |
Default IPv6 auto config is enabled. |
|
Mode |
Global Configuration |
|
Example |
This example shows how to enable IPv6 auto config. Switch#configure terminal Switch(config)# ipv6 autoconfig This example shows how to show current IPv6 auto config state. Switch# show ipv6 |
1.14 IPV6 ADDRESS
Use “ipv6 address” command to specify static IPv6 address.
Switch#configure terminal
Switch(config)# ipv6 address {X:X::X:X} prefix <0-128>
|
Syntax |
ipv6 address X:X::X:X prefix <0-128> |
|
Parameter |
addressX:X::X:X Specify IPv6 address for switch prefix<0-128> Specify IPv6 prefix length for switch |
|
Mode |
Global Configuration |
|
Example |
This example shows how to add static ipv6 address of the switch. Switch#configure terminal Switch(config)# ipv6 address fe80::20e:2eff:fef1:4b3c prefix 128 This example shows how to show current ipv6 address of the switch. Switch# show ipv6 |
1.15 IPV6 DEFAULT-GATEWAY
Use “ipv6 default-gateway” command to modify default gateway IPv6.
Switch#configure terminal
Switch(config)# ipv6 default-gateway {X:X::X:X}
|
Syntax |
ipv6 default-gateway {X:X::X:X} |
|
Parameter |
X:X::X:X Specify default gateway IPv6 address for switch |
|
Mode |
Global Configuration |
|
Example |
This example shows how to modify the ipv6 default gateway address of the switch. Switch#configure terminal Switch(config)# ipv6 default-gateway fe80::dcad:beff:feef:103 Switch# show ipv6 |
1.16 IPV6 DHCP
Use “ipv6 dhcp” command to enabled dhcpv6 client to get IP address from remote DHCPv6 server.Use “no ipv6 dhcp” command to disabled dhcpv6 client and use static ipv6 address or ipv6 auto config address.
Switch#configure terminal
Switch(config)# ipv6 dhcp
Switch(config)# no ipv6 dhcp
|
Syntax |
ipv6 dhcp no ipv6 dhcp |
|
Default |
Default DHCPv6 client is disabled. |
|
Mode |
Global Configuration |
|
Example |
This example shows how to enable dhcp client. Switch#configure terminal Switch(config)# ipv6 dhcp This example shows how to show current dhcpv6 client state of the switch. Switch# show ipv6 |
1.17 IP SERVICE
This is one of very important command to enable/disable management access via CLI. Use “ip (telnet | ssh | http | https)” command to enable all kinds of management services. Such as telnet, ssh, http and https from CLI.
Switch#configure terminal
Switch(config)# ip (telnet | ssh | http | https)
Switch(config)# no ip (telnet | ssh | http | https)
|
Syntax |
ip (telnet | ssh | http | https) no ip (telnet | ssh | http | https) |
|
Parameter |
telnet Enable/Disable telnet service ssh Enable/Disable ssh service http Enable/Disable http service https Enable/Disable https service |
|
Default |
Default telnet service is disabled. Default ssh service is disabled. Default http service is enabled. Default https service is disabled. |
|
Mode |
Global Configuration |
|
Example |
This example shows how to enable telnet service and show current telnet service status. Switch#configure terminal Switch(config)# ip telnet Telnet daemon enabled. Switch(config)# exit Switch# show line telnet This example shows how to enable https service and show current https service status. Switch#configure terminal Switch(config)# ip https Switch(config)# exit Switch# show ip https |
1.18 IP SESSION-TIMEOUT
Use “ip session-timeout” command to specify the session timeout value for http or https service. When user login into WEBGUI and do not do any action after session timeout will be logged out.
Switch#configure terminal
Switch(config)# ip (http | https) session-timeout <0-86400>
|
Syntax |
ip (http | https) session-timeout <0-86400> |
|
Parameter |
httpSpecify session timeout for http service. https Specify session timeout for https service. <0-86400>Specify session timeout minutes. 0 means never timeout. |
|
Default |
Default session timeout for http and https is 10 minutes. |
|
Mode |
Global Configuration |
|
Example |
This example shows how to change http session timeout to 15min and https session timeout to 20min Switch#configure terminal Switch(config)# ip http session-timeout 15 Switch(config)# ip https session-timeout 20 This example shows how to enable https service and show current https service status. Switch# show ip http Switch# show ip https
|
1.19 IP SSH
Use “ip ssh” command to generate the key files for ssh connection.
Switch#configure terminal
Switch(config)# ip ssh (v1|v2|all)
Switch(config)# no ip ssh (v1|v2|all)
|
Syntax |
ip ssh (v1|v2|all) no ip ssh (v1|v2|all) |
|
Parameter |
v1 Generate/Delete version 1 key files v2 Generate/Delete version 2 key files all Generate/Delete version 1 and 2 key files |
|
Default |
Version 2 key files will be generated by default |
|
Mode |
Global Configuration |
|
Example |
This example shows how to delete and re-generate ssh version 2 key files. Switch#configure terminal Switch(config)# no ip ssh v2 Switch(config)# do show flash Switch(config)# ip ssh v2 Switch(config)# do show flash |
1.20 LINE
Some configurations are line based. In order to configure these configurations, we need to enter Line Configuration mode to configure them. Use “line” command to enter the Line Configuration mode and select the line to be configured.In Line Configuration mode, the prompt will show as “Switch(config-line)#”
Switch#configure terminal
Switch(config)# line ( console | telnet | ssh )
|
Syntax |
line ( console | telnet | ssh ) |
|
Parameter |
console Select console line to configure. Telnet Select telnet line to configure. Ssh Select ssh line to configure. |
|
Mode |
Global Configuration |
|
Example |
This example shows how to enter Interface Configuration mode Switch# configure Switch(config)# line console Switch(config-line)# |
1.21 REBOOT
Use “reboot” command to make system hot restart. Switch will be Power OFF and again ON ( Restart ) with this command.
Switch#reboot
|
Syntax |
reboot |
|
Mode |
Privileged EXEC |
|
Example |
This example shows how to restart the system Switch# reboot |
1.22 ENABLE PASSWORD
Use “enable password” command to edit password for each privilege level for enable authentication. Use “no enable” command to restore enable password to default empty value. The only way to show this configuration is using “show running-config” command.
Switch#configure terminal
Switch(config)# enable [privilege <1-15>] (password UNENCRYPY-PASSWORD | secret UNENCRYPY-PASSWORD | secret encrypted ENCRYPT-PASSWORD)
Switch(config)# no enable [privilege <0-15>]
|
Syntax |
enable [privilege <1-15>] (password UNENCRYPT-PASSWORD | secret UNENCRYPT-PASSWORD | secret encrypted ENCRYPT-PASSWORD) no enable [privilege <0-15>] |
|
Parameter |
privilege<0-15>Specify the privilege level to configure. If no privilege level is specified, default is 15. password UNENCRYPT-Specify password string and make it not encrypted. secret UNENCRYPT- PASSWORDSpecify password string and make it encrypted. secret encrypted ENCRYPT- PASSWORD Enter an encrypted password. Use this keyword to enter a password that is already encrypted (for instance, a password that you copied from another the configuration file of another device). |
|
Default |
No default enable password for all privilege levels.
|
|
Mode |
Global Configuration |
|
Example |
This example shows how to edit enable password for privilege level 15 Switch#configure terminal Switch(config)# enable password abc Configuration of privileged level for enable passwords This example shows how to set privilege level for enable password. Switch#configure terminal Switch(config)# enable privilege 15 secret xyz
|
1.23 EXEC-TIMEOUT
Use “exec-timeout” command to specify the session timeout value for CLI running on console, telnet or ssh service. When user login into CLI and do not do any action after session timeout will be logged out from the CLI session.
Switch#configure terminal
Switch(config)# line console
Switch(config-line)# exec-timeout <0-65535>
|
Syntax |
exec-timeout <0-65535> |
|
Parameter |
<0-65535>Specify session timeout minutes. 0 means never timeout |
|
Default |
Default session timeout for all lines are 10 minutes. |
|
Mode |
Line Configuration |
|
Example |
This example shows how to change console session timeout to 15min, telnet session timeout to 20min and ssh session timeout to 25min. Timeout after specified minutes (0 means no timeout) Switch#configure terminal Switch(config)# line console Switch(config-line)# exec-timeout 15 Switch(config-line)# exit Switch(config)# line telnet Switch(config-line)# exec-timeout 20 Switch(config-line)# exit Switch(config)# line ssh Switch(config-line)# exec-timeout 25 Switch(config-line)# exit This example shows how show line information. Switch# show line |
1.24 PASSWORD-THRESH
Use “password-thresh” command to specify the password fail retry number for CLI running on console, telnet or ssh service. When user input password to login and authenticate failed, the fail retry number will increase one. After fail retry number exceed configured one, the CLI will block login for the period of silent time which configured by the command “silent-time”.
Switch#configure terminal
Switch(config)# line console
Switch(config-line)# password-thresh 4
|
Syntax |
password-thresh <0-120> |
|
Parameter |
<0-120>Specify password fail retry number. 0 means no limit. |
|
Default |
Default password fail retry number is 3. |
|
Mode |
Line Configuration |
|
Example |
This example shows how to change console fail retry number to 4, telnet fail retry number to 5 and ssh fail retry number to 6. The number of allowed password attempts. (Range: 0-120; 0: no threshold) Switch#configure terminal Switch(config)# line console Switch(config-line)# password-thresh 4 Switch(config-line)# exit Switch(config)# line telnet Switch(config-line)# password-thresh 5 Switch(config-line)# exit Switch(config)# line ssh Switch(config-line)# password-thresh 6 Switch(config-line)# exit This example shows how show line information. Switch# show line |
1.25 PING
Ping (Packet Internet Groper) tests the connection between two network nodes by sending packets to a host and measure the round-trip time. Use “ping” command to do network ping diagnostic.
Switch# ping HOSTNAME [count <1-999999999>]
|
Syntax |
ping HOSTNAME [count <1-999999999>] |
|
Parameter |
HOSTNAME Specify IPv4/IPv6 address or domain name to ping. count<1-999999999> Specify how many times to ping. |
|
Mode |
User EXEC Privileged EXEC |
|
Example |
This example shows how to ping remote host 192.168.0.21 Switch# ping 192.168.0.21 |
1.26 TRACEROUTE
Traceroute discovers the IP routes along which packets were forwarded by sending an IP packet to the target host and back to the device. The Trace route page shows each hop between the device and a target host, and the round-trip time to each such hop.
Use “traceroute” command to do network trace route diagnostic.
Switch# traceroute {A.B.C.D} [max_hop<2-255>]
|
Syntax |
Traceroute {A.B.C.D} [max_hop<2-255>] |
|
Parameter |
A.B.C.D Specify IPv4 to trace. max_hop<2-255>Specify maximum hop to trace. |
|
Mode |
User EXEC Privileged EXEC |
|
Example |
This example shows how to trace route host 192.168.0.21. Switch# traceroute 192.168.0.21 |
1.27 SHOW ARP
Use “show arp” command to show all arp entries.
Switch# show arp
|
Syntax |
show arp |
|
Mode |
User EXEC Privileged EXEC |
|
Example |
This example shows how to show arp entries. Switch# show arp |
1.28 SHOW CPU UTILIZATION
Use “show cpu utilization” command to show current CPU utilization.
Switch# show cpu utilization
|
Syntax |
show cpu utilization |
|
Mode |
Privileged EXEC |
|
Example |
This example shows how to show current CPU utilization. Switch# show cpu utilization
|
1.29 SHOW HISTORY
Use “show history” to show commands we input before.
Switch# show history
|
Syntax |
show history |
|
Mode |
User EXEC Privileged EXEC Global Configuration |
|
Example |
This example shows how show history commands. Switch# show history |
1.30 SHOW INFO
Use “show info” command to show system summary information.
Switch#show info
|
Syntax |
show info |
|
Mode |
User EXEC Privileged EXEC |
|
Example |
This example shows how to show system version. Switch# show info |
1.31 SHOW IP
Use “show ip” command to show system IPv4 address, net mask and default gateway.
Switch#show ip
|
Syntax |
show ip |
|
Mode |
User EXEC Privileged EXEC |
|
Example |
This example shows how to show current ipv4 address of the switch. Switch# show ip |
1.32 SHOW IP DHCP
Use “show ip dhcp” command to show IPv4 dhcp client enable state.
Switch#show ip dhcp
|
Syntax |
show ip dhcp |
|
Mode |
User EXEC Privileged EXEC |
|
Example |
This example shows how to show current dhcp client state of the switch. Switch# show ip dhcp |
1.33 SHOW IP HTTP
Use “show ip http” command to show HTTP/HTTPS information.
Switch#show ip (http|https)
|
Syntax |
show ip (http|https) |
|
Mode |
Privileged EXEC |
|
Example |
This example shows how to show current ipv4 address of the switch. Switch# show ip http Switch# show ip https |
1.34 SHOW IPV6
Use “show ipv6” command to show system IPv6 address, net mask, default gateway and auto config state.
Switch#show ipv6
|
Syntax |
show ipv6 |
|
Mode |
User EXEC Privileged EXEC |
|
Example |
This example shows how to show current ipv6 address of the switch. Switch# show ipv6 |
1.35 SHOW LINE
Use “show line” command to show all line configurations including session timeout, history count, password retry number and silent time. For telnet and ssh, it also shows the service enable/disable state.
Switch#show line [(console | telnet | ssh)]
|
Syntax |
show line [(console | telnet | ssh)] |
|
Parameter |
console Select console line to show. telnet Select telnet line to show. Ssh Select ssh line to show. |
|
Mode |
Privileged EXEC |
|
Example |
This example shows how show all lines’ information. Switch# show line |
1.36 SHOW MEMORY STATISTICS
Use “show memory statistics” command to show current memory utilization.
Switch#show memory statistics
|
Syntax |
show memory statistics |
|
Mode |
Privileged EXEC |
|
Example |
This example shows how to show current system memory statistics. Switch# show memory statistics |
1.37 SHOW PRIVILEGE
Use “show privilege” command to show the privilege level of the current user.
Switch#show privilege
|
Syntax |
show privilege |
|
Mode |
User EXEC Privileged EXEC |
|
Example |
This example shows how to show arp entries. Switch# show privilege |
1.38 SHOW USERNAME
Use “show username”command shows all user accounts in local database.
Switch#show username
|
Syntax |
show username |
|
Mode |
Privileged EXEC |
|
Example |
This example shows how to show existing user accounts. Switch# show username |
1.39 SHOW USERS
Use “show users” command show information of all active users.
Switch#show users
|
Syntax |
show users |
|
Mode |
Privileged EXEC |
|
Example |
This example shows how to show existing user accounts. Switch# show users |
1.40 SHOW VERSION
Use “show version” command to show loader and firmware version and build date.
Switch#show version
|
Syntax |
show version |
|
Mode |
User EXEC Privileged EXEC |
|
Example |
This example shows how to show system version. Switch# show version |
1.41 SILENT-TIME
Use “silent time” command to specify the silent time for CLI running on console, telnet or ssh service. When user input password to login and authenticate failed, the fail retry number will increase one. After fail retry number exceed configured one, the CLI will block login for the period of silent time which configured by the command “silent-time”.
Switch#configure terminal
Switch(config)# line {console|telnet|ssh|http}
Switch(config-line)# silent-time <0-65535>
|
Syntax |
silent-time <0-65535> |
|
Parameter |
<0-65535>Specify silent time with unit seconds. 0 means do not salient. |
|
Default |
Default silent time is 0. |
|
Mode |
Line Configuration |
|
Example |
This example shows how to change console silent time to 10, telnet silent time to 15 and ssh silent time to 20. Switch#configure terminal Switch(config)# line console Switch(config-line)# silent-time 10 Switch(config-line)# exit Switch(config)# line telnet Switch(config-line)# silent-time 15 Switch(config-line)# exit Switch(config)# line ssh Switch(config-line)# silent-time 20 Switch(config-line)# exit This example shows how show line information. Switch# show line |
1.42 SSL
Use “ssl” command to generate security certificate files such as RSA, DSA.
Switch#ssl
|
Syntax |
ssl |
|
Mode |
Global Configuration |
|
Example |
This example shows how to generate certificate files. Switch# ssl Switch# show flash |
1.43 SYSTEM NAME
Use “system name” command to modify system name information of the switch. The system name is also used to be CLI prompt.
Switch#configure terminal
Switch(config)#system name {NAME}
|
Syntax |
system name {NAME} |
|
Parameter NAME |
NAME Specify system name string. |
|
Default |
Default name string is “Switch”. |
|
Mode |
Global Configuration |
|
Example |
This example shows how to modify contact information Switch#configure terminal Switch(config)# system name commando commando(config)# commando# show info |
1.44 SYSTEM CONTACT
Use “system contact” command to modify contact information of the switch.
Switch#configure terminal
Switch(config)# system contact {CONTACT}
|
Syntax |
system contact {CONTACT} |
|
Parameter |
CONTACT Specify contact string. |
|
Default |
Default contact string is “Default Contact”. |
|
Mode |
Global Configuration |
|
Example |
This example shows how to modify contact information Switch#configure terminal Switch(config)# system contact callcommando Switch# show info |
1.45 SYSTEM LOCATION
Use “system location” command to modify location information of the switch.
Switch#configure terminal
Switch(config)# system location {LOCATION}
|
Syntax |
system location {LOCATION} |
|
Parameter |
LOCATION Specify location string. |
|
Default |
Default location string is “Default Location”. |
|
Mode |
Global Configuration |
|
Example |
This example shows how to modify contact information Switch#configure terminal Switch(config)# system location home This example shows how to show system location information Switch# show info |
1.46 TERMINAL LENGTH
Use “terminal length” command to specify the maximum line number the terminal is able to print.
Switch#terminal length <0-24>
|
Syntax |
terminal length <0-24> |
|
Parameter |
<0-24>Specify terminal length value. 0 means no limit. |
|
Default |
Default terminal length is 24. |
|
Mode |
User EXEC Privileged EXEC |
|
Example |
This example shows how to change terminal length. Switch# terminal length 3 Switch# show running-config |
1.47 USERNAME
Use “username” command to add a new user account or edit an existing user account. And use “no username” to delete an existing user account. The user account is a local database for login authentication.
Switch#configure terminal
Switch(config)# usernameWORD<0-32>[privilege (admin|user|<0-15>)] (nopassword | password UNENCRYPY-PASSWORD | secret UNENCRYPY-PASSWORD | secret encrypted ENCRYPT-PASSWORD)
Switch(config)# no username WORD<0-32>
|
Syntax |
username WORD<0-32>[privilege (admin|user|<0-15>)] (nopassword | password UNENCRYPY-PASSWORD | secret UNENCRYPY-PASSWORD | secret encrypted ENCRYPT-PASSWORD) no username WORD<0-32> |
|
Parameter |
UsernameWORD<0-32> Specify user name to add/delete/edit. privilege admin Specify privilege level to be admin (privilege 15) privilege user Specify privilege level to be user (privilege 1) privilege<0-15> Specify custom privilege level password. UNENCRYPY- PASSWORD Specify password string and make it not encrypted. Secret UNENCRYPY- PASSWORD Specify password string and make it encrypted. secret encrypted ENCRYPT- PASSWORD Enter an encrypted password. Use this keyword to enter a password that is already encrypted (for instance, a password that you copied from another the configuration file of another device). |
|
Default |
Default username “admin” has password “commando” with privilege 15. |
|
Mode |
Global Configuration |
|
Example |
This example shows how to add a new user account. Switch#configure terminal Switch(config)# username test secret passwd This example shows how to show existing user accounts. Switch# show username |
