Page 1 Yamaha L2 Switch Intelligent L2 PoE SWR2311P-10G Command Reference Rev.2.02.09...
Page 2: Table Of Contents
2 | Command Reference | TOC Contents Preface: Introduction ....................12 Chapter 1: How to read the command reference ..........13 1.1 Applicable firmware revision ........................13 1.2 How to read the command reference ......................13 1.3 Interface names ............................13 1.4 Input syntax for commands starting with the word "no" ................14 Chapter 2: How to use the commands ..............15 2.1 Operation via console...
Page 3 Command Reference | TOC | 3 4.3.5 Erase startup configuration ......................33 4.3.6 Copy startup configuration ......................34 4.3.7 Set description for startup config ....................34 4.3.8 Select startup config ........................35 4.4 Manage boot information ...........................35 4.4.1 Show boot information ........................35 4.4.2 Clear boot information ........................36 4.4.3 Set SD card boot ..........................36...
Page 4 4 | Command Reference | TOC 4.10.10 Show SNMP view settings ......................56 4.10.11 Show SNMP group settings .....................57 4.10.12 Show SNMP user settings .......................57 4.11 RMON ..............................57 4.11.1 Set RMON function ........................57 4.11.2 Set RMON Ethernet statistical information group ..............58 4.11.3 Set RMON history group ......................59 4.11.4 Set RMON event group...
Page 5 Command Reference | TOC | 5 4.19 LLDP ................................81 4.19.1 Enable LLDP function .......................81 4.19.2 Set system description .......................82 4.19.3 Set system name ........................82 4.19.4 Create LLDP agent ........................83 4.19.5 Set automatic setting function by LLDP ...................83 4.19.6 Set LLDP transmission/reception mode ..................84 4.19.7 Set type of management address ....................84...
Page 6 6 | Command Reference | TOC 4.23.3 Initialize settings ........................107 4.23.4 Mount SD card ........................107 4.23.5 Unmount SD card ........................107 4.23.6 Set default LED mode ......................108 4.23.7 Show LED mode ........................108 4.23.8 Show port error LED status .....................109 4.23.9 Backup system information .....................109 4.23.10 Restore system information ....................110...
Page 7 Command Reference | TOC | 7 5.3.13 Set the guest VLAN .........................139 5.3.14 Suppression period settings following failed authentication ...........140 5.3.15 Set reauthentication interval ....................140 5.3.16 Set the reply wait time for the RADIUS server overall ............141 5.3.17 Set supplicant reply wait time ....................141 5.3.18 Set RADIUS server host ......................142...
Page 8 8 | Command Reference | TOC 6.2.10 Set private VLAN port type ....................166 6.2.11 Set private VLAN host port .....................166 6.2.12 Set promiscuous port for private VLAN .................167 6.2.13 Set voice VLAN ........................168 6.2.14 Set CoS value for voice VLAN ....................169 6.2.15 Set DSCP value for voice VLAN ....................169...
Page 9 Command Reference | TOC | 9 7.2.4 Show summary of the route entries registered in the IPv4 Routing Information Base .....196 7.3 ARP ................................196 7.3.1 Show ARP table ........................196 7.3.2 Clear ARP table .........................196 7.3.3 Set static ARP entry ........................197 7.3.4 Set ARP timeout ........................197 7.4 IPv4 ping...
Page 10 10 | Command Reference | TOC 9.1.4 Generate IPv6 access list ......................219 9.1.5 Add comment to IPv6 access list ....................220 9.1.6 Apply IPv6 access list .......................220 9.1.7 Generate MAC access list ......................221 9.1.8 Add comment to MAC access list .....................222 9.1.9 Apply MAC access list ......................223 9.1.10 Show generated access list...
Page 11 Command Reference | TOC | 11 9.2.38 Set egress queue (DSCP-Queue) .....................252 9.2.39 Show policy map information ....................253 9.2.40 Show map status ........................254 9.2.41 Set egress queue scheduling ....................256 9.2.42 Set traffic shaping (individual port) ..................256 9.2.43 Set traffic-shaping (queue units) .....................257 9.3 Flow control ..............................258...
Page 12: Preface Introduction
The contents of this document are subject to change without notice. • Yamaha disclaims all responsibility for any damages caused by loss of data or other problems resulting from the use of this product. The warranty is limited to this physical product itself. Please be aware of these points.
Page 13: Chapter 1: How To Read The Command Reference
URL and see the information in the WWW server. http://www.rtpro.yamaha.co.jp 1.2 How to read the command reference This command reference describes the commands that you enter from the console of the Yamaha Intelligent L2 Switch SWR2311P. Each command is described by a combination of the following items.
Page 14: Input Syntax For Commands Starting With The Word "No
14 | Command Reference | How to read the command reference 1.4 Input syntax for commands starting with the word "no" Many commands also have a form in which the command input syntax starts with the word no. If you use a syntax that with begins with the word no, the settings of that command are deleted and returned to the default value, unless explained otherwise.
Page 15: Chapter 2: How To Use The Commands
Command Reference | How to use the commands | 15 Chapter How to use the commands The SWR2311P lets you perform command operations in the following two ways. Type of operation Method of operation Description • Access from a console terminal Issue commands one by one to Operation via console •...
Page 16: Access From An Ssh Client
16 | Command Reference | How to use the commands To make VTY port settings, use the line vty command to specify the target VTY port, and then move to line mode. ID management for virtual terminal ports is handled within the SWR2311P, but since login session and ID assignments depend on the connection timing, you should normally make the same settings for all VTY ports.
Page 17: Operation Via Configuration (Config) Files
Command Reference | How to use the commands | 17 Setting item Content of setting command Setting 1) is a function that temporarily applies to the user who is using the terminal, and is applied as soon as the command is executed. Setting 2) applies starting with the next session.
Page 18: Login
Password: • Console screen following login SWR2311P Rev.2.02.06 (Tue Mar 13 08:41:39 2018) Copyright (c) 2018 Yamaha Corporation. All Rights Reserved. SWR2311P> 2.4 Command input mode 2.4.1 Command input mode basics In order to change the settings of the SWR2311P or to reference the status, you must move to the appropriate command input mode and then execute the command.
Page 19: Individual Configuration Mode
Command Reference | How to use the commands | 19 The basic commands related to moving between command input modes are described below. For commands that move from global configuration mode mode to individual configuration mode, refer to "individual configuration mode." •...
Page 20: Keyboard Operations When Using The Console
20 | Command Reference | How to use the commands 2.5 Keyboard operations when using the console 2.5.1 Basic operations for console input The SWR2311P allows the following operations in the command line. • Moving the cursor Keyboard operation Description and notes →...
Page 21: Input Command Completion And Keyword Candidate List Display
Command Reference | How to use the commands | 21 SWR2311P#show vlan 2.5.3 Input command completion and keyword candidate list display If you press the "Tab" key while entering a command in the console, the command name is completed. If you press the "Tab" key after entering a keyword, a list of keyword candidates that can be entered next is shown.
Page 22 22 | Command Reference | How to use the commands Discarding port1.1: Port Number 905 - Ifindex 5001 - Port Id 0x8389 - Role Disabled - State Forwarding port1.2: Port Number 906 - Ifindex 5002 - Port Id 0x838a - Role Disabled - State Forwarding port1.3: Port Number 907 - Ifindex 5003 - Port Id 0x838b - Role Disabled - State Forwarding...
Page 23: Chapter 3: Configuration
Login password of no user none Password Administrator password none Password encryption not encrypted Time zone JST (UTC + 9.0H) Time management NTP server none NTP update cycle once per hour RMON Behavior enabled firmware-update url http:// Firmware update Download URL www.rtpro.yamaha.co.jp/firmware/ revision-up/swr2311p.bin...
Page 24 Maintenance VLAN VLAN interface VLAN #1 Automatic MAC address learning enabled Automatic MAC address learning 300 sec aging time L2 switching Spanning tree enabled Proprietary loop detection disabled DNS cliant Behavior enabled Interface control PoE power supply...
Page 25 Command Reference | Configuration | 25 Category Setting item Default value QoS trust mode Traffic control Flow control (IEEE 802.3x) disabled Storm control disabled Power supply operation enabled PoE power supply Power supply priority LLDP agent Transmit/Receive mode transmit and receive •...
Page 26: Chapter 4: Maintenance And Operation Functions
26 | Command Reference | Maintenance and operation functions Chapter Maintenance and operation functions 4.1 Passwords 4.1.1 Set password for unnamed user [Syntax] password password no password [Parameter] password Login password for unnamed user Single-byte alphanumeric characters, and symbols other than the single-byte characters '|', '>', and '?' (32 characters or less) The first character must be a single-byte alphanumeric character [Initial value]...
Page 27: Encrypt Password
Command Reference | Maintenance and operation functions | 27 [Description] Specifies the administrator password needed to enter priviledged EXEC mode. If this command is executed with the "no" syntax, the administrator password is deleted. [Note] If the password was encrypted by the password-encryption command, it is shown in the configuration in the form "enable password 8 password."...
Page 28: User Account Maintenance
28 | Command Reference | Maintenance and operation functions [Parameter] switch Allow login by special password Setting value Description enable Allow disable Don't allow [Initial value] force-password enable [Input mode] global configuration mode [Description] Enable login with special password. If this is enabled, only when logging in from a serial console, it is possible to log in using "w,lXlma" (lowercase W, comma, lowercase L, uppercase X, and lowercase L, M, and A) instead of the specified user password.
Page 29: Show Login User Information
Command Reference | Maintenance and operation functions | 29 Single-type alphanumeric characters and " and ' and | and ? and single-byte symbols other than space characters (32characters or less) The first character must be a single-byte alphanumeric character [Initial value] none [Input mode] global configuration mode...
Page 30: Set Banner
[Example] Set the banner display to "Hello World!". Username: Password: SWR2311P Rev.2.02.06 (Tue Mar 13 08:41:39 2018) Copyright (c) 2018 Yamaha Corporation. All Rights Reserved. SWR2311P>enable SWR2311P#configure terminal Enter configuration commands, one per line. End with CNTL/Z. SWR2311P(config)#banner motd Hello World!
Page 31: Configuration Management
Command Reference | Maintenance and operation functions | 31 SWR2311P> 4.3 Configuration management 4.3.1 Save running configuration [Syntax] copy running-config startup-config [config_num] [Parameter] config_num Configuration number Setting value Description <0-4> Startup configuration #0-#4 Startup config in SD card [Input mode] priviledged EXEC mode [Description] Saves the current operating settings (running configuration) as the settings for startup (startup configuration).
Page 32: Show The Running Configuration
32 | Command Reference | Maintenance and operation functions Succeeded to write configuration. SWR2311P# 4.3.3 Show the running configuration [Syntax] show running-config [section] [Parameter] section Section to be shown Setting value Description access-list Access list related http-server HTTP server related interface Interface related IP related...
Page 33: Erase Startup Configuration
Command Reference | Maintenance and operation functions | 33 Setting value Description <0-4> Startup configuration #0-#4 Startup config in SD card [Input mode] priviledged EXEC mode [Description] Shows the startup settings (startup configuration). If config_num is omitted, the startup config that will be used for the next startup is shown. [Example] Show the startup configuration on the next startup.
Page 34: Copy Startup Configuration
34 | Command Reference | Maintenance and operation functions [Example] Erase the startup configuration. SWR2311P#erase startup-config Succeeded to erase configuration. SWR2311P# 4.3.6 Copy startup configuration [Syntax] copy startup-config src_config_num dst_config_num [Parameter] src_config_num Copy source configuration number Setting value Description <0-4> Startup configuration #0-#4 Startup config in SD card dst_config_num...
Page 35: Select Startup Config
Command Reference | Maintenance and operation functions | 35 SWR2311P#startup-config description 1 TEST_CONFIG_1 4.3.8 Select startup config [Syntax] startup-config select config_num [Parameter] config_num Configuration number Setting Description <0-4> Startup config #0-#4 Startup config on the SD card [Input mode] priviledged EXEC mode [Description] Select the settings to use at startup (startup config), and restart.
Page 36: Clear Boot Information
36 | Command Reference | Maintenance and operation functions SWR2311P>show boot list No. Date Time Info --- ---------- -------- ------------------------------------------------- 0 2018/03/15 09:50:29 Restart by reload command 1 2018/03/14 20:24:40 Power-on boot --- ---------- -------- ------------------------------------------------- 4.4.2 Clear boot information [Syntax] clear boot list [Input mode]...
Page 37: Show Unit Information
Description Vendor Vendor name Product ID Version ID, 0 if invalid Serial number [Example] Show inventory information. SWR2311P>show inventory NAME: L2 PoE switch DESCR: SWR2311P-10G Vendor: Yamaha PID: SWR2311P-10G VID: 0000 SN: S00000000 SWR2311P> 4.5.2 Show operating information [Syntax] show environment...
Page 38: Show Currently-Executing Processes
38 | Command Reference | Maintenance and operation functions • Fan status • Fan speed • Firmware file • Startup configuration file • Serial baud rate • Boot time • Current time • Elapsed time from boot • Temperature status •...
Page 39: Save Technical Support Information
[Example] Show technical support information. SWR2311P#show tech-support # Information for Yamaha Technical Support *** show running-config *** dns-client enable # End of Information for Yamaha Technical Support SWR2311P# 4.5.5 Save technical support information [Syntax] copy tech-support sd [Input mode] priviledged EXEC mode [Description] Saves technical support information to the SD card.
Page 40: Time Management
40 | Command Reference | Maintenance and operation functions [Example] Save technical support information to the SD card. SWR2311P#copy tech-support sd SWR2311P# 4.6 Time management 4.6.1 Set clock manually [Syntax] clock set time month day year [Parameter] time hh:mm:ss Time month <1-12>...
Page 41: Show Current Time
Command Reference | Maintenance and operation functions | 41 SWR2311P(config)#clock timezone JST Set the time zone to UTC+9 hours. SWR2311P(config)#clock timezone +9:00 4.6.3 Show current time [Syntax] show clock [Input mode] unprivileged EXEC mode, priviledged EXEC mode [Description] Shows the current time, year, month, and date. [Example] Show current time.
Page 42: Synchronize Time From Ntp Server (One-Shot Update)
42 | Command Reference | Maintenance and operation functions Specify fe80::2a0:deff:fe11:2233%vlan1 as the NTP server. SWR2311P(config)#ntpdate server ipv6 fe80::2a0:deff:fe11:2233%vlan1 Specify ntp.example.com as the NTP server. SWR2311P(config)#ntpdate server name ntp.example.com 4.6.5 Synchronize time from NTP server (one-shot update) [Syntax] ntpdate oneshot [Input mode] priviledged EXEC mode [Description]...
Page 43: Terminal Settings
Command Reference | Maintenance and operation functions | 43 [Description] Shows the settings that are related to time synchronization from an NTP server. [Example] Show time synchronization settings. *If the synchronization update interval is one hour SWR2311P#show ntpdate NTP Server 1 : ntp.nict.jp NTP Server 2 : none adjust time : Thu Jan 1 09:00:00 2015 + interval 1 hour sync server : ntp.nict.jp...
Page 44: Set Terminal Login Timeout
44 | Command Reference | Maintenance and operation functions [Input mode] global configuration mode [Description] After enabling the specified VTY ports, moves to line mode for making VTY port settings. If this command is executed with the "no" syntax, the specified VTY ports are disabled. If you specify port2, a range of ports is specified;...
Page 45: Set The Number Of Lines Displayed Per Page On The Terminal
Command Reference | Maintenance and operation functions | 45 [Input mode] unprivileged EXEC mode, priviledged EXEC mode [Description] Changes the number of lines displayed per page for the terminal in use. If line is set to 0, the display is not paused per page. If the terminal no length command is executed, the number of lines is set to 24 in the case of a serial console, or to the window size when connected in the case of VTY.
Page 46: Syslog
46 | Command Reference | Maintenance and operation functions [Initial value] management interface vlan1 [Input mode] global configuration mode [Description] Set the VLAN that is used for management. By setting this command, it will be possible to set and acquire the IP address assigned by the L2MS master to the corresponding VLAN when operating as an L2MS slave.
Page 47: Set Log Output Level (Informational)
Command Reference | Maintenance and operation functions | 47 [Input mode] global configuration mode [Description] Output the debug level log to SYSLOG. If this command is executed with the "no" syntax, the log is not output. Since enabling debug level will output a large volume of log data, you should enable this only if necessary. If you use the logging host command to send notifications to the SYSYLOG server, you should ensure that there is sufficient disk space on the host.
Page 48: Set Log Output In Event Units
48 | Command Reference | Maintenance and operation functions [Initial value] no logging stdout info [Input mode] global configuration mode [Description] Outputs the informational level SYSLOG to the console. If this command is executed with the "no" syntax, the log is not output. [Example] Output the informational level SYSLOG to the console.
Page 49: Set Log Backup To Sd Card
Command Reference | Maintenance and operation functions | 49 SWR2311P#save logging 4.9.8 Set log backup to SD card [Syntax] logging bakcup sd enable logging bakcup sd disable no logging bakcup sd [Keyword] enable Enable log backup to SD card disable Disable log backup to SD card [Initial value] logging backup sd disable...
Page 50: Snmp
50 | Command Reference | Maintenance and operation functions The log contains a maximum of 10,000 events. If this maximum number is exceeded, the oldest events are successively deleted. In order to save more than the maximum number of logs, you must use the logging host command to forward the log to the SYSLOG server and save it on the host.
Page 51: Set Notification Type To Transmit
Command Reference | Maintenance and operation functions | 51 Setting value Description priv Authentication / Encryption (authPriv) user User name (maximum 32 characters) This can be specified only if version is '3' [Initial value] none [Input mode] global configuration mode [Description] Set the destination of SNMP notifications.
Page 52: Set System Contact
52 | Command Reference | Maintenance and operation functions Setting value Description rmon When RMON event is executed termmonitor When terminal monitoring is detected [Initial value] no snmp-server enable trap [Input mode] global configuration mode [Description] Specifies the type of trap notification that is sent. If this command is executed with the "no"...
Page 53: Set Snmp Community
Command Reference | Maintenance and operation functions | 53 [Input mode] global configuration mode [Description] Sets the MIB variable sysLocation. sysLocation is a variable that is generally used to enter the installed location of the unit. If this command is executed with the "no" syntax, the setting is deleted. [Example] Set the system location as "MainOffice-1F".
Page 54: Set Snmp Group
54 | Command Reference | Maintenance and operation functions Setting value Description include Include the specified object ID in management Exclude the specified object ID from exclude management [Initial value] none [Input mode] global configuration mode [Description] Sets the SNMP MIB view. The MIB view is the set of MIB objects to specify when allowing access rights.
Page 55: Set Snmp User
Command Reference | Maintenance and operation functions | 55 [Initial value] none [Input mode] global configuration mode [Description] Sets the user group. Access to MIB objects not included in the MIB view specified by this command is prohibited. The MIB view is defined by the snmp-server view command. The maximum number of entries is 16.
Page 56: Show Snmp Community Information
56 | Command Reference | Maintenance and operation functions [Description] Specifies a user. The group name of this command specifies the name defined by the snmp-server group command; according to the security level specified by the group setting, it specifies the algorithm and password that are used to authenticate and encrypt the content of communication.
Page 57: Show Snmp Group Settings
Command Reference | Maintenance and operation functions | 57 OID: 1.6.1 Type: include View Name: standard OID: 1.3.6.1.2.1 Type: include 4.10.11 Show SNMP group settings [Syntax] show snmp group [Input mode] unprivileged EXEC mode, priviledged EXEC mode [Description] Shows the contents of the SNMP group settings. Shows the group name, security level, reading view, and writing view.
Page 58: Set Rmon Ethernet Statistical Information Group
58 | Command Reference | Maintenance and operation functions no rmon [Parameter] switch RMON function operation Setting value Description enable Enable RMON function disable Disable RMON function [Initial value] rmon enable [Input mode] global configuration mode [Description] Sets the system-wide operation of the RMON function. If this command is executed with the "no"...
Page 59: Set Rmon History Group
Command Reference | Maintenance and operation functions | 59 [Note] To enable the Ethernet statistical information group setting of the RMON function, it is necessary to enable the system-wide RMON function in addition to this command. If this command is overwritten, the previously collected statistical information is deleted, and collection is once again started. If the system-wide RMON function is disabled, collection of statistical information is interrupted.
Page 60: Set Rmon Event Group
60 | Command Reference | Maintenance and operation functions 4.11.4 Set RMON event group [Syntax] rmon event index type community [description description] [owner owner] no rmon event index [Parameter] index <1 - 65535> Index of event group (eventIndex) type Event type (eventType) Setting value Description Record in log...
Page 61 Command Reference | Maintenance and operation functions | 61 rmon alarm index variable interval interval [type] falling-threshold falling_threshold event falling_event_index [owner owner] no rmon alarm index [Parameter] index <1-65535> Index of alarm group (alarmIndex) variable MIB object to be monitored (alarmVariable) interval <1-2147483647>...
Page 62: Show Rmon Function Status
62 | Command Reference | Maintenance and operation functions Set variable as the MIB object that will be the target of monitoring by the RMON alarm group. Of the etherStatsEntry(. 1.3.6.1.2.1.16.1.1.1) MIB objects, variable can be specified only as a MIB object that has a counter type. This can be specified in the following three formats.
Page 63: Show Rmon Ethernet Statistical Information Group Status
Command Reference | Maintenance and operation functions | 63 [Description] Shows the settings and status of the RMON function. The following items are shown. • System-wide RMON function settings • RMON function settings for each group • Ethernet statistical information group •...
Page 64: Show Rmon History Group Status
64 | Command Reference | Maintenance and operation functions rmon collection index 1 stats->ifindex = 5001 input packets 7, bytes 600, drop events 0, multicast packets 4 output packets 17, bytes 2091, multicast packets 17 broadcast packets 0 4.11.8 Show RMON history group status [Syntax] show rmon history [Input mode]...
Page 65: Clear Counters Of The Rmon Ethernet Statistical Information Group
Command Reference | Maintenance and operation functions | 65 [Description] Shows the settings and status of the RMON alarm group. The following items are shown. • Index • Alarm status • MIB object to be monitored • Sampling interval • Sampling type •...
Page 66: Show Telnet Server Settings
66 | Command Reference | Maintenance and operation functions [Parameter] port <1-65535> Listening port of the Telnet server (if omitted: 23) [Initial value] telnet-server disable [Input mode] global configuration mode [Description] Enables the Telnet server. You can also specify the listening TCP port number. If this command is executed with the "no"...
Page 67: Restrict Access To The Telnet Server According To The Ip Address Of The Client
Command Reference | Maintenance and operation functions | 67 [Note] If telnet-server enable is not specified, this command does not function. [Example] Allow access to the Telnet server from the hosts connected to VLAN #1 and VLAN #2. SWR2311P(config)#telnet-server interface vlan1 SWR2311P(config)#telnet-server interface vlan2 4.12.4 Restrict access to the TELNET server according to the IP address of the client [Syntax]...
Page 68: Telnet Client
68 | Command Reference | Maintenance and operation functions 4.13 Telnet client 4.13.1 Start Telnet client [Syntax] telnet host [port] [Parameter] host Remote host name, IPv4 address (A.B.C.D), or IPv6 address(X:X::X:X) If you specify an IPv6 link local address, you must also specify the output interface (fe80::X%vlanN format) port <1-65535>...
Page 69: Start Tftp Server And Change Listening Port Number
Command Reference | Maintenance and operation functions | 69 4.14.1 Start TFTP server and change listening port number [Syntax] tftp-server enable [port] tftp-server disable no tftp-server [Keyword] enable TFTP server is enabled disable TFTP server is disable [Parameter] port <1-65535> Listening port number of the TFTP server (if omitted: 69) [Initial value] tftp-server disable...
Page 70: Http Server
70 | Command Reference | Maintenance and operation functions [Input mode] global configuration mode [Description] Sets the VLAN interface that allows access to the TFTP server. If this command is executed with the "no" syntax, the specified interface is deleted This command can be used to specify up to eight items, which are applied in the order that they are specified.
Page 71: Show Http Server Settings
Command Reference | Maintenance and operation functions | 71 Listening port number of the secure HTTP server (if omitted: 443) [Initial value] http-server secure disable [Input mode] global configuration mode [Description] Enables the secure HTTP server. You can also specify the listening TCP port number. If this command is executed with the "no"...
Page 72: Restrict Access To The Http Server According To The Ip Address Of The Client
72 | Command Reference | Maintenance and operation functions If this command is executed with the "no" syntax, the specified interface is deleted. This command can be used to specify up to eight items, which are applied in the order that they are specified. If this command is not set, access is permitted only from the management VLAN.
Page 73: Web Gui Display Language
Command Reference | Maintenance and operation functions | 73 SWR2311P(config)#http-server access deny 192.168.10.0/24 SWR2311P(config)#http-server access permit any 4.15.6 Web GUI display language [Syntax] http-server language lang no http-server language [Parameter] lang Specify the language Setting value Description japanese Japanese english English [Initial value] http-server language japanese...
Page 74: Http Proxy
74 | Command Reference | Maintenance and operation functions 4.16 HTTP Proxy 4.16.1 Enable HTTP Proxy function [Syntax] http-proxy switch no http-proxy [Parameter] switch Whether to enable HTTP Proxy function Setting value Description enable Enable disable Disable [Initial value] http-proxy disable [Input mode] global configuration mode [Description]...
Page 75: Ssh Server
Command Reference | Maintenance and operation functions | 75 [Description] Shows the settings of the HTTP Proxy function. The following items are shown. • HTTP Proxy function enabled/disabled status • Timeout time [Example] Show the settings of the HTTP Proxy function. SWR2311P#show http-proxy Service:Enable Timeout:60...
Page 76: Set Host That Can Access The Ssh Server
76 | Command Reference | Maintenance and operation functions • VLAN interface permitted to access the SSH server • Filter that controls access to the SSH server [Example] Show the settings of the SSH server. SWR2311P#show ssh-server Service:Enable Port:23 Hostkey:Generated Management interface(vlan): 1 Interface(vlan):1, 2, 3 Access:...
Page 77: Generate Ssh Server Host Key
Command Reference | Maintenance and operation functions | 77 Setting value Description Specifies an IPv4 address (A.B.C.D) with subnet A.B.C.D/M mask length (Mbit) X:X::X:X Specifies an IPv6 address (X:X::X:X) Specifies an IPv6 address (X:X::X:X) with X:X::X:X/M subnet mask length (Mbit) Applies to all IPv4 addresses and IPv6 address [Initial value] none...
Page 78: Clear Ssh Server Host Key
78 | Command Reference | Maintenance and operation functions It might take several minutes of time to generate the host keys. This command can be executed only if the SSH server is disabled. [Example] Generate a 2048-bit RSA key and a DSA key. SWR2311P#ssh-server host key generate bit 2048 4.17.6 Clear SSH server host key [Syntax]...
Page 79: Set Ssh Client Alive Checking
Command Reference | Maintenance and operation functions | 79 ssh-dss 1024 MD5:XX:XX:a8:b9:51:93:9d:d2:ec:40:1a:43:66:3a:XX:XX +---[DSA 1024]----+ .* . |=*=+. o |E+X+ | o . + = + . |..O X . |oo=.B.*.o +------[MD5]------+ 1024 SHA256:XXXXearwsCXvYTfIKrS6yYSrjMh0fW6W0Bw7aAOXXXX +---[DSA 1024]----+ . +E. o X S + = * .
Page 80: Ssh Client
80 | Command Reference | Maintenance and operation functions [Description] Sets whether to perform client alive checking. A message requesting a response is sent to the client at intervals of the number of seconds specified by "interval". If there is no response for a successive number of times specified by "count", the connection with this client is cut and the session is ended.
Page 81: Clear Ssh Host Information
Command Reference | Maintenance and operation functions | 81 Setting value Description disable Disable [Initial value] ssh-client disable [Input mode] global configuration mode [Description] Enables use of the ssh command as an SSH client. If this command is executed with the "no" syntax, the SSH client is disabled. [Example] Enable the SSH client.
Page 82: Set System Description
82 | Command Reference | Maintenance and operation functions [Example] Enable LLDP function transmission and reception for LAN port #1. SWR2311P#configure terminal Enter configuration commands, one per line. End with CNTL/Z. SWR2311P(config)#lldp run SWR2311P(config)#interface port1.1 SWR2311P(config-if)#lldp-agent SWR2311P(lldp-agent)#set lldp enable txrx 4.19.2 Set system description [Syntax] lldp system-description line...
Page 83: Create Lldp Agent
[Input mode] global configuration mode [Description] Enables the function by which LLDP frames transmitted by specific Yamaha devices can automatically modify the settings of a switch. The functions that can be set are flow control, QoS, IGMP snooping, and EEE.
Page 84: Set Lldp Transmission/Reception Mode
84 | Command Reference | Maintenance and operation functions 4.19.6 Set LLDP transmission/reception mode [Syntax] set lldp enable type set lldp disable no set lldp enable [Parameter] type Transmission/reception mode Setting value Description rxonly Set receive-only mode txonly Set transmit-only mode txrx Set transmit and receive [Initial value]...
Page 85: Set Basic Management Tlvs
Command Reference | Maintenance and operation functions | 85 SWR2311P(config)#lldp run SWR2311P(config)#interface port1.1 SWR2311P(config-if)#lldp-agent SWR2311P(config-lldp)#set management-address mac-address 4.19.8 Set basic management TLVs [Syntax] tlv-select basic-mgmt no tlv-select basic-mgmt [Initial value] none [Input mode] LLDP agent mode [Description] Adds basic management TLVs to transmitted frames. If this command is executed with the "no"...
Page 86: Set Ieee-802.3 Tlv
86 | Command Reference | Maintenance and operation functions SWR2311P(config-if)#lldp-agent SWR2311P(config-lldp)#tlv-select ieee-8021-org-specific 4.19.10 Set IEEE-802.3 TLV [Syntax] tlv-select ieee-8023-org-specific no tlv-select ieee-8023-org-specific [Initial value] none [Input mode] LLDP agent mode [Description] Adds IEEE-802.3 TLVs to transmitted frames. If this command is executed with the "no" syntax, exclude IEEE-802.3 TLVs from transmitted frames. This command adds the following TLVs to LLDP frames.
Page 87: Set Lldp Frame Transmission Interval For High Speed Transmission Period
Command Reference | Maintenance and operation functions | 87 no set timer msg-tx-interval [Parameter] tx_interval <5-3600> LLDP frame transmission interval (seconds) [Initial value] set timer msg-tx-interval 30 [Input mode] LLDP agent mode [Description] Sets LLDP frame transmission interval. If this command is executed with the "no" syntax, the setting returns to the default. [Example] Set 60 seconds as the LLDP frame transmission interval on LAN port #1.
Page 88: Set Multiplier For Calculating Time To Live (Ttl) Of Device Information
88 | Command Reference | Maintenance and operation functions Time from LLDP frame transmission stop until re-initialization (seconds) [Initial value] set timer reinit-delay 2 [Input mode] LLDP agent mode [Description] Sets the time from when LLDP frame transmission stops until re-initialization occurs. If this command is executed with the "no"...
Page 89: Set Maximum Number Of Connected Devices Manageable By A Port
Command Reference | Maintenance and operation functions | 89 [Input mode] LLDP agent mode [Description] Sets the number of LLDP frames transmitted during the high speed transmission period. If this command is executed with the "no" syntax, the setting returns to the default. [Example] Set 2 as the number of LLDP frames transmitted during the high speed transmission period on LAN port #1.
Page 90 90 | Command Reference | Maintenance and operation functions If "neighbor" is specified, information for the device connected to the interface is shown. The following items are shown. For show lldp interface ifname • Interface and its statistical information Agent Mode Bridge mode (fixed as nearest bridge) Enable (tx/rx) Transmission mode/Reception mode (Y:enable, N:disable)
Page 91 MED Application Type Application type MED Vlan id ID of VLAN MED Tag/Untag VLAN tagged or untagged MED L2 Priority L2 priority order MED DSCP Val DSCP value priority order MED Location Data Format Format of location data Latitude Res...
Page 92: Show Information For Connected Devices Of All Interfaces
: port1.1 System Name : SWR2311P-10G System Description : SWR2311P Rev.2.02.06 (Tue Mar 13 08:41:39 2018) Port Description : port1.3 System Capabilities : L2 Switching Interface Numbering Interface Number : 5003 OID Number Management MAC Address : ac44.f230.0000 Mandatory TLVs...
Page 93: Clear Lldp Frame Counters
Network Policy MED Capabilities Dev Type : End Point Class-3 MED Application Type : Reserved MED Vlan id MED Tag/Untag : Untagged MED L2 Priority MED DSCP Val MED Location Data Format : ECS ELIN Latitude Res Latitude Longitude Res Longitude...
Page 94: Set L2Ms Function
Operate as an L2MS master that sets and master controls SWR series units that are connected subordinate to it Be managed from a Yamaha device that is operating as an L2MS master, such as an slave SWR2311P-10G unit that is set as the L2MS...
Page 95: Set L2Ms Slave Watch Interval
In order for a change to be applied, the system must be restarted. If the same network includes multiple Yamaha routers or firewalls on which L2MS (switch controller function) is enabled, or multiple SWR series units that are set to be L2MS masters, the L2MS function will not operate correctly.
Page 96: Set Terminal Management Function
96 | Command Reference | Maintenance and operation functions [Initial value] slave-watch down-count 3 [Input mode] L2MS mode [Description] Sets the number of query frames that are transmitted without receiving a response frame from the slave until it is determined that the L2MS slave is down.
Page 97: Set L2Ms Control Frame Transmit/Receive
Command Reference | Maintenance and operation functions | 97 [Parameter] time <1800-86400> Acquisition interval (seconds) [Initial value] terminal-watch interval 1800 [Input mode] L2MS mode [Description] Specifies the time interval at which network device information is acquired. Information for the devices existing on the network is acquired when the time specified by time has elapsed.
Page 98: Reset Slave Management
98 | Command Reference | Maintenance and operation functions SWR2311P(config)#interface port1.5 SWR2311P(config-if)#l2ms filter enable 4.20.9 Reset slave management [Syntax] l2ms reset [Input mode] priviledged EXEC mode [Description] Removes all L2MS slaves managed by the L2MAS master from management, and searches for L2MS slaves once again. [Note] This can be executed only if L2MS is operating as master.
Page 99: Set The Device Information Acquisition Time Interval For Downstream Of A Wireless Ap
Command Reference | Maintenance and operation functions | 99 • Settings applied • Number of terminals connected to the L2MS slave • Information of terminals connected to the L2MS slave (in the case of a switch) • MAC address • Ports connected •...
Page 100: Set Event Monitoring Function
100 | Command Reference | Maintenance and operation functions [Input mode] L2MS mode [Description] Specifies the time interval at which device information for a device downstream of a wireless AP is acquired. Information for the devices existing downstream the wireless AP is acquired when the time specified by time has elapsed. If this command is executed with the "no"...
Page 101: Set Whether To Use The L2Ms Slave's Zero Config Function
Sets whether to use the L2MS slave device's zero config function. If the zero config function is enabled, and the L2MS slave's Yamaha switch or wireless AP settings (config) are saved, the saved settings (config) are automatically applied when the L2MS slave in its factory-set state is connected to the network.
Page 102: Set Whether To Include Terminals In The Snapshot Comparison
102 | Command Reference | Maintenance and operation functions [Initial value] snapshot disable [Input mode] global configuration mode [Description] Enables the snapshot function. If this command is executed with the "no" syntax, disables the snapshot function. [Note] This command is valid only if L2MS is operating as master. [Example] Enable the snapshot function.
Page 103: Delete Snapshot
[Parameter] Single-byte alphanumeric characters and single-byte symbols (255 characters or less) URL at which the firmware is located [Initial value] firmware-update url http://www.rtpro.yamaha.co.jp/firmware/revision-up/swr2311p.bin [Input mode] global configuration mode [Description] Specify the download source URL used when updating the firmware from a firmware file located on a web server.
Page 104: Set Firmware Download Timeout Duration
104 | Command Reference | Maintenance and operation functions [Description] Compares the firmware file located on the web server with the revision of the currently-running firmware, and executes the update if rewriting is possible. If firmware of a revision that can be rewritten exists, you will be asked for confirmation; enter "Y" if you want to update, or enter "N"...
Page 105: Show Firmware Update Function Settings
Download source URL • Download timeout duration • Allow revision-down [Example] Show the current settings of the firmware update function. SWR2311P#show firmware-update url:http://www.rtpro.yamaha.co.jp/firmware/revision-up/swr2311p.bin timeout:300 (seconds) revision-down:disable SWR2311P# 4.22.6 Update firmware from SD card [Syntax] firmware-update sd execute [no-confirm] [sd-unmount] [Keyword]...
Page 106: Set Firmware Update Reload Time
The host name specified by this command is used as the command prompt. If SNMP access is possible, this is used as the value of the MIB variable sysName. If this command is executed with the "no" syntax, the setting returns to the default value. [Example] Set the host name as "yamaha." SWR2311P(config)#hostname yamaha yamaha(config)#...
Page 107: Reload System
Command Reference | Maintenance and operation functions | 107 4.23.2 Reload system [Syntax] reload [Input mode] priviledged EXEC mode [Description] Reboots the system. [Note] If the currently-running settings (running configuration) have been changed from the settings at the time of boot (startup configuration), reboot will discard those changes.
Page 108: Set Default Led Mode
108 | Command Reference | Maintenance and operation functions [Input mode] unprivileged EXEC mode, priviledged EXEC mode [Description] Unmounts the SD card. If this command is not executed, or if the SD card is removed from the SD card slot without executing the unmount process from the web GUI, there are some cases in which the operating system will generate a warning to repair the card's file system.
Page 109: Show Port Error Led Status
Command Reference | Maintenance and operation functions | 109 [Example] Show the LED mode setting and status. SWR2311P>show led-mode default mode : off current mode : link-act 4.23.8 Show port error LED status [Syntax] show error port-led [Input mode] unprivileged EXEC mode, priviledged EXEC mode [Description] Shows the ID of ports that are generating an error, and the following error causes.
Page 110: Restore System Information
110 | Command Reference | Maintenance and operation functions 4.23.10 Restore system information [Syntax] restore system [Input mode] priviledged EXEC mode [Description] System information previously backed up to SD card is restored to the unit. If a firmware file exists in the backup folder of the SD card, the firmware will also be updated using that file. After restore, restart will occur.
Page 111: Chapter 5: Interface Control
Command Reference | Interface control | 111 Chapter Interface control 5.1 Interface basic settings 5.1.1 Set description [Syntax] description line no description [Parameter] line Single-byte alphanumeric characters and single-byte symbols (80characters or less) Description of the applicable interface [Initial value] no description [Input mode] interface mode...
Page 112: Set Mru
112 | Command Reference | Interface control [Parameter] type Speed and duplex mode types Speed and duplex mode types Description auto Auto negotiation 10000-full 10Gbps/Full 1000-full 1000Mbps/Full 100-full 100Mbps/Full 100-half 100Mbps/Half 10-full 10Mbps/Full 10-half 10Mbps/Half [Initial value] speed-duplex auto [Input mode] interface mode [Description] Sets the speed and duplex mode.
Page 113: Set Cross/Straight Automatic Detection
Command Reference | Interface control | 113 SWR2311P(config)#interface port1.1 SWR2311P(config-if)#mru 9000 5.1.5 Set cross/straight automatic detection [Syntax] mdix auto action no mdix auto [Parameter] type Cross/straight automatic detection operations Setting value Description enable Enable cross/straight automatic detection disable Disable cross/straight automatic detection [Initial value] mdix auto enable [Input mode]...
Page 114: Show Eee Capabilities
114 | Command Reference | Interface control When this command is used to change the settings, link-down temporarily occurs for the corresponding interface. [Example] Enable EEE for LAN port #1. SWR2311P(config)#interface port1.1 SWR2311P(config-if)#eee enable 5.1.7 Show EEE capabilities [Syntax] show eee capabilities interface ifname [Parameter] ifname LAN port interface name...
Page 115: Set Port Mirroring
Command Reference | Interface control | 115 Item Description interface Interface name EEE(efficient-ethernet) Whether EEE is enabled Rx LPI Status Low-power mode status of the receiving unit Tx LPI Status Low-power mode status of the transmitting unit Wake Error Count Error count [Example] Show EEE status of LAN port #1.
Page 116: Show Port Mirroring Status
116 | Command Reference | Interface control [Initial value] no mirror interface [Input mode] interface mode [Description] Mirrors the traffic specified by direct, with the applicable interface as the mirror port and ifname as the monitor port. If this command is executed with the "no" syntax, the mirroring setting is deleted. [Note] This command can be specified only for LAN/SFP port.
Page 117 Command Reference | Interface control | 117 [Parameter] type Interface type Interface type Description port Physical interface vlan VLAN interface Static logical interface LACP logical interface index Index number Interface ID Description Specifies the stack ID (S) of the physical interface, and the number printed on the chassis (X).
Page 118 118 | Command Reference | Interface control Item Description • trunk : tagged Status of ingress filtering Ingress filter • enable : enabled • disable : disabled Frame types that can be received • all : All frames are received (regardless of whether they are Acceptable frame types tagged or untagged)
Page 119: Show Brief Interface Status
Command Reference | Interface control | 119 Acceptable frame types : all Default Vlan Configured Vlans Interface counter: input packets : 320 bytes : 25875 multicast packets: 301 output packets : 628 bytes : 129895 multicast packets: 628 broadcast packets: 0 drop packets Show the status of VLAN #1.
Page 120: Show Frame Counter
120 | Command Reference | Interface control [Example] Show brief interface status. SWR2311P#show interface brief Codes: ETH - Ethernet, LB - Loopback , AGG - Aggregate , MLAG - MLAG Aggregate FR - Frame Relay, TUN -Tunnel, PBB - PBB Logical Port, VP - Virtual Port CVP - Channelised Virtual Port, METH - Management Ethernet, UNK- Unknown ED - ErrDisabled, PD - Protocol Down, AD - Admin Down , NA - Not Applicable NOM - No operational members , PVID - Port Vlan-id...
Page 121 Command Reference | Interface control | 121 Item Description Number of undersize packets received (packets smaller than Undersize packets 64 octets) Number of oversize packets received (packets larger than Oversize packets 1523 octets*1) Number of fragment packets received (packs smaller than 64 Fragments octets with abnormal CRC) Number of jabber packets received (packs larger than 1523...
Page 122: Clear Frame Counters
122 | Command Reference | Interface control Received and Transmitted: 64octet packets : 1 65-127octet packets : 166 128-255octet packets : 7 256-511octet packets : 1 512-1023octet packets : 0 1024-MAXoctet packets : 0 5.1.14 Clear frame counters [Syntax] clear counters ifname [Parameter] ifname Interface name of LAN/SFP port or logical interface...
Page 123: Set Sfp Module Optical Reception Level Monitoring
Command Reference | Interface control | 123 port1.26 port1.27 3.34 3.89 3.70 2.89 2.70 port1.28 Unsupported Unsupported Unsupported Unsupported Unsupported Current High Alarm High Warning Low Warning Low Alarm Interface (mA) Threshold Threshold Threshold Threshold ------------ ------------ ------------ ------------ ------------ ------------ port1.25 16.0 15.0...
Page 124: Show Static Logical Interface Status
124 | Command Reference | Interface control [Parameter] link-id <1-96> static logical interface number [Input mode] interface mode [Description] Associates the applicable interface with the static logical interface specified by link-id. If this command is executed with the "no" syntax, the applicable interface is dissociated from the static logical interface. [Note] This command can be specified only for LAN/SFP port.
Page 125: Set Lacp Logical Interface
Command Reference | Interface control | 125 5.2.3 Set LACP logical interface [Syntax] channel-group link-id mode mode no channel-group [Parameter] link-id <1-127> LACP logical interface number mode Operation mode mode Description Operate LACP in active mode. In active mode, it active actively sends LACP frames to the other device.
Page 126: Show Lacp Logical Interface Status
126 | Command Reference | Interface control 5.2.4 Show LACP logical interface status [Syntax] show etherchannel [ifname] [Parameter] ifname Interface name of the LAN/SFP port Interfaces that make up the LACP logical interface [Input mode] unprivileged EXEC mode, priviledged EXEC mode [Description] If ifname is omitted, shows the status of the LACP logical interface.
Page 127: Set Lacp System Priority Order
Command Reference | Interface control | 127 Information shows the following items. Item Description LACP system ID (priority, MAC address) Admin Key ID that is the basis of the LACP key (logical port number) Port priority LACP port priority order Ifindex Interface number Timeout...
Page 128: Show Lacp System Priority
128 | Command Reference | Interface control [Input mode] global configuration mode [Description] Sets the LACP system priority order. If this command is executed with the "no" syntax, the setting returns to the default value. [Note] If an LACP logical interface is connected to the other device, the system priorities are compared, and control privilege is given to the device with the higher priority.
Page 129: Clear Lacp Frame Counters
Command Reference | Interface control | 129 LACP timeout indicates the time since the last LACP frame received from the other device, after which it is determined that the link has gone down. The LACP timeout setting is placed in a LACP frame and sent to the other device; after receiving this, the other device will transmit LACP frames at intervals of 1/3 of this LACP timeout.
Page 130: Set Load Balance Function Rules
130 | Command Reference | Interface control port1.17 309 1350 port1.23 186 5.2.10 Set load balance function rules [Syntax] port-channel load-balance type no port-channel loac-balance [Parameter] type Rules to specify the forwarding destination interface type Description dst-ip Destination IPv4/IPv6 address dst-mac Destination MAC address dst-port...
Page 131 Command Reference | Interface control | 131 [Input mode] unprivileged EXEC mode, priviledged EXEC mode [Description] Shows the status of the LACP logical interface specified by link-id. If link-id is omitted, shows the status of all LACP logical interface. If summary is specified, an abbreviated display is shown; if detail is specified, details are shown. sIf both summary and detail are omitted, the result is as though summary was specified.
Page 132: Set Lacp Port Priority Order
132 | Command Reference | Interface control Aggregator po1 4601 Status Ready Partner LAG 0x8000, 00-a0-de-11-11-11 Partner Key 0001 Link count Aggregator po2 4602 Status Not ready Partner LAG 0x8000, 00-a0-de-11-11-11 Partner Key 0001 Link count Aggregator po127 4727 Status Not ready Partner LAG 0x8000, 00-a0-de-11-11-11...
Page 133: Port Authentication
Command Reference | Interface control | 133 [Description] Sets the LACP port priority order. If this command is executed with the "no" syntax, the setting returns to the default value. [Note] If up to eight LAN/SFP ports are combined into an LACP logical interface, they are immediately combined into the LACP logical interface;...
Page 134: Configuring The Web Authentication Function For The Entire System
134 | Command Reference | Interface control [Note] In order to actually use MAC authentication, you need to enable MAC authentication on the applicable interface as well. (auth- mac enable command) [Example] Enable MAC authentication for the entire system. SWR2311P(config)#aaa authentication auth-mac 5.3.3 Configuring the Web authentication function for the entire system [Syntax] aaa authentication auth-web...
Page 135: Set For Forwarding Control On An Unauthenticated Port For Ieee 802.1X Authentication
Command Reference | Interface control | 135 [Example] This command can be specified only for LAN/SFP port. SWR2311P(config)#interface port1.1 SWR2311P(config-if)#dot1x port-control auto 5.3.5 Set for forwarding control on an unauthenticated port for IEEE 802.1X authentication [Syntax] dot1x control-direction direction no dot1x control-direction [Parameter] direction Sets the packet forwarding operation for unauthenticated ports...
Page 136: Set The Mac Authentication Function
136 | Command Reference | Interface control [Description] Sets the maximum value for the EAPOL packet transmission count for the applicable interface. If this command is executed with the "no" syntax, the setting returns to the default. [Note] This command can be specified only for LAN/SFP port. To use this command, you must enable the port authentication function for the applicable interface.
Page 137: Set The Web Authentication Function
Command Reference | Interface control | 137 [Initial value] auth-mac auth-user hyphen lower-case [Input mode] global configuration mode [Description] Changes the format of the user name and password used for authentication during MAC authentication. During MAC authentication, the MAC address of the supplicant is used as a user name and password, and a request is sent to the RADIUS server for authentication.
Page 138: Set Re-Authentication
138 | Command Reference | Interface control Operation mode Description This mode allows communication with multiple supplicants for each port. If the first supplicant multi-host passes authentication, all other supplicants of the same port will be allowed to communicate without authentication. This mode allows communication with multiple multi-supplicant supplicants for each port.
Page 139: Set Dynamic Vlan
Command Reference | Interface control | 139 [Example] Enable re-authenticatio of LAN port #1. SWR2311P(config)#interface port1.1 SWR2311P(config-if)#auth reauthentication 5.3.12 Set dynamic VLAN [Syntax] auth dynamic-vlan-creation no auth dynamic-vlan-creation [Initial value] no auth dynamic-vlan-creation [Input mode] interface mode [Description] Sets dynamic VLAN for the applicable interface. If this is executed with the "no"...
Page 140: Suppression Period Settings Following Failed Authentication
140 | Command Reference | Interface control [Example] This specifies guest VLAN #10 for LAN port #1. SWR2311P(config)#interface port1.1 SWR2311P(config-if)#auth guest-vlan 10 5.3.14 Suppression period settings following failed authentication [Syntax] auth timeout quiet-period time no auth timeout quiet-period [Parameter] time <1-65535>...
Page 141: Set The Reply Wait Time For The Radius Server Overall
Command Reference | Interface control | 141 SWR2311P(config)#interface port1.1 SWR2311P(config-if)#auth timeout reauth-period 120 5.3.16 Set the reply wait time for the RADIUS server overall [Syntax] auth timeout server-timeout time no auth timeout server-timeout [Parameter] time <1-65535> Reply wait time from the authentication server for the authentication request (seconds) [Initial value] auth timeout server-timeout 30 [Input mode]...
Page 142: Set Radius Server Host
142 | Command Reference | Interface control 5.3.18 Set RADIUS server host [Syntax] radius-server host host [auth-port port] [timeout time] [retransmit count] [key secret] no radius-server host [Keyword] auth-port Sets the UDP port number used for authenticating the RADIUS server timeout Sets the reply standby time for requests sent to the RADIUS server retransmit...
Page 143: Set Number Of Times To Resend Requests To Radius Server
Command Reference | Interface control | 143 Standby time for replying to requests (seconds) [Initial value] radius-server timeout 5 [Input mode] global configuration mode [Description] Sets the reply wait time for each RADIUS server. If this command is executed with the "no" syntax, the setting returns to the default. [Note] If a server-specific wait time for replying to requests has been set using the radius-server host command, the radius-server host command settings are used.
Page 144: Set Time Of Radius Server Usage Prevention
144 | Command Reference | Interface control [Initial value] no radius-server key [Input mode] global configuration mode [Description] Sets the shared password used when communicating with a RADIUS server. If this command is executed with the "no" syntax, the setting returns to the default. [Note] If a server-specific shared password has been set using the radius-server host command, the radius-server host command settings are used.
Page 145: Show Supplicant Information
Command Reference | Interface control | 145 802.1X Port-Based Authentication : Enabled MAC-Based Authentication : Disabled WEB-Based Authentication : Enabled Clear-state time : Not configured Redirect URL : Not configured RADIUS server address : 192.168.100.101 (port:1812) [Interface information] Interface port1.1 (up) 802.1X Authentication : Auto (configured:auto) MAC Authentication...
Page 146: Show Statistical Information
146 | Command Reference | Interface control -------- ----------------- ----------------- --------------- ---- ------ port1.1 0011.2233.4455 user Authenticated 1 802.1X 5.3.25 Show statistical information [Syntax] show auth statistics [interface ifname] [Keyword] interface Shows statistical information for only the specified interface [Parameter] ifname Interface name Interface to show...
Page 147: Show Radius Server Setting Information
Command Reference | Interface control | 147 [Description] Clears the packet statistical information during port authentication. [Example] Clear the statistical information for LAN port #1. SWR2311P#clear auth statistics interface port1.1 5.3.27 Show RADIUS server setting information [Syntax] show radius-server [Input mode] priviledged EXEC mode [Description] Shows setting information related to the RADIUS server.
Page 148: Clear The Authentication State
148 | Command Reference | Interface control 5.3.29 Clear the authentication state [Syntax] clear auth state [all] [interface ifname] [Keyword] Clears the authentication state for all supplicants interface Clears the authentication state for supplicants connected to specific interfaces [Parameter] ifname Interfacee name Interface to clear [Input mode]...
Page 149: Locate The File For Customizing The Web Authentication Screen
Command Reference | Interface control | 149 [Initial value] no auth clear-state time [Input mode] interface mode [Description] Sets the time at which the authentication state of the supplicant is cleared for the applicable interface. If this command is executed with the "no" syntax, deletes the time setting for clearing the authentication state. [Note] This command can be specified only for a LAN/SFP port.
Page 150: Delete The File For Customizing The Web Authentication Screen
150 | Command Reference | Interface control 5.3.33 Delete the file for customizing the Web authentication screen [Syntax] erase auth-web custom-file all config_num erase auth-web custom-file filename config_num [Keyword] Deletes the file for customizing all Web authentication screens [Parameter] filename Single-byte alphanumeric characters and single-byte symbols Filename of the file for customizing the Web authentication screen config_num...
Page 151: Register Permitted Mac Addresses
Command Reference | Interface control | 151 SWR2311P(config)#interface port1.1 SWR2311P(config-if)#port-security enable 5.4.2 Register permitted MAC addresses [Syntax] port-security mac-address no port-security mac-address [Initial value] none [Input mode] global configuration mode [Description] Registers MAC addresses that are allowed to communicate on ports for which port security has been enabled. If this command is executed with the "no"...
Page 152: Error Detection Function
152 | Command Reference | Interface control [Example] Show the port security information. SWR2311P#show port-security status port Security Action Status Port Security Action Status Last violation -------- --------- --------- --------- ----------------- port1.1 Enabled Discard Blocking 00a0.de00.0003 port1.2 Disabled Discard Normal port1.3 Disabled Discard...
Page 153: Show Error Detection Function Information
Command Reference | Interface control | 153 5.5.2 Show error detection function information [Syntax] show errdisable [Input mode] unprivileged EXEC mode, priviledged EXEC mode [Description] Shows information for the error detection function. The following items are shown. • Whether automatic recovery from the errdisable state is enabled or disabled •...
Page 154: Set Poe Power Supply Function (Interface)
154 | Command Reference | Interface control SWR2311P(config)#power-inline enable Disable the system-wide PoE power supply function. SWR2311P(config)#power-inline disable 5.6.2 Set PoE power supply function (interface) [Syntax] power-inline switch no power-inline [Parameter] switch PoE power supply function settings for the applicable interface Setting value Description Enables the PoE power supply function for the...
Page 155: Set Poe Port Power Supply Priority
Command Reference | Interface control | 155 [Description] Sets the description text of the PD device to connect to PoE port. [Note] The description text that was set is shown with the show power-inline command. [Example] Set the description of the PD device connected to port1.1 as "AP1". SWR2311P(config)#interface port1.1 SWR2311P(config-if)#power-inline description ap1 5.6.4 Set PoE port power supply priority...
Page 156 156 | Command Reference | Interface control [Example] Show PoE power supply information. SWR2311P#show power-inline Show power supply information for port1.1. SWR2311P#show power-inline interface port1.1...
Page 157: Chapter 6: Layer 2 Functions
Command Reference | Layer 2 functions | 157 Chapter Layer 2 functions 6.1 FDB (Forwarding Data Base) 6.1.1 Set MAC address acquisition function [Syntax] mac-address-table learning enable mac-address-table learning disable no mac-address-table learning [Keyword] enable Enables MAC address learning function disable Disables MAC address learning function [Initial value]...
Page 158: Clear Dynamic Entry
158 | Command Reference | Layer 2 functions SWR2311P(config)#mac-address-table ageing-time 600 6.1.3 Clear dynamic entry [Syntax] clear mac-address-table dynamic clear mac-address-table dynamic adress mac-addr clear mac-address-table dynamic vlan vlan-id clear mac-address-table dynamic interface ifname [instance inst] [Keyword] address Specifies the MAC address vlan Specifies the VLAN ID interface...
Page 159: Show Mac Address Table
Command Reference | Layer 2 functions | 159 Setting value Description discard Discard ifname Name of LAN/SFP port or logical interface Applicable interface vlan-id <1-4094> Applicable VLAN ID [Initial value] none [Input mode] global configuration mode [Description] Registers a static entry in the MAC address table. action is specified as "forward,"...
Page 160: Vlan
160 | Command Reference | Layer 2 functions 6.2 VLAN 6.2.1 Move to VLAN mode [Syntax] vlan database [Input mode] global configuration mode [Description] Moves to VLAN mode in order to make VLAN interface settings. [Note] To return from VLAN mode to global configuration mode, use the exit command. To return to priviledged EXEC mode, use the end command.
Page 161: Set Private Vlan
Command Reference | Layer 2 functions | 161 Multiple VLAN IDs can be specified for vlan-id. However, if multiple VLAN IDs are specified, the name cannot be specified. To specify multiple items, use "-" or "," as shown below • To select from VLAN #2 through VLAN #4: 2-4 •...
Page 162: Set Access Port (Untagged Port)
162 | Command Reference | Layer 2 functions private-vlan vlan-id association remove 2nd-vlan-ids no private-vlan vlan-id association [Keyword] Associate the specified VLAN remove Remove the association of the specified VLAN [Parameter] vlan-id <2-4094> VLAN ID specified for the primary VLAN 2nd-vlan-ids <2-4094>...
Page 163: Set Associated Vlan Of An Access Port (Untagged Port)
Command Reference | Layer 2 functions | 163 [Description] Specifies the port type of the applicable interface as an access port. [Note] This command can be specified only for LAN/SFP port and logical interface. If this command is applied to a logical interface, the settings of every LAN/SFP port associated with that interface are changed. If the port type is changed from a trunk port to an access port, the setting of the switchport trunk allowed vlan command and the switchport trunk native vlan command return to their default settings.
Page 164: Set Associated Vlan For Trunk Port (Tagged Port)
164 | Command Reference | Layer 2 functions [Initial value] none [Input mode] interface mode [Description] Specifies the port type of the applicable interface as an trunk port. If "ingress-filter" is omitted, "enable" is specified. If ingress filtering is enabled, frames are forwarded only if the VLAN ID of the received frame matches the VLAN associated with the interface.
Page 165: Set Native Vlan For Trunk Port (Tagged Port)
Command Reference | Layer 2 functions | 165 [Note] This command can be set only for a LAN/SFP port or logical interface for which the switchport mode trunk command is set. If this command is applied to a logical interface, the settings of every LAN/SFP port associated with that interface are changed. If the port type is changed to access port, the setting of this command returns to the default setting.
Page 166: Set Private Vlan Port Type
166 | Command Reference | Layer 2 functions • If you use the switchport trunk allowed vlan command to specify the associated VLAN ID, and then specify this command, it is removed from the specified VLAN ID. • If the VLAN ID specified by this command is associated using the switchport trunk allowed vlan command, switchport trunk native vlan none is specified.
Page 167: Set Promiscuous Port For Private Vlan
Command Reference | Layer 2 functions | 167 2nd-vlan-id <2-4094> VLAN ID specified as the secondary VLAN [Initial value] none [Input mode] interface mode [Description] Specifies the primary VLAN that is associated as the host port of the private VLAN for the applicable interface, and associates the secondary VLAN.
Page 168: Set Voice Vlan
168 | Command Reference | Layer 2 functions [Input mode] interface mode [Description] Specifies the primary VLAN that is associated with the applicable interface as the promiscuous port, and associates the secondary VLAN. If this is executed with the "no" syntax, the setting of the primary VLAN that is associated with the applicable interface as the promiscuous port, and the association of the secondary VLAN, are deleted.
Page 169: Set Cos Value For Voice Vlan
Command Reference | Layer 2 functions | 169 If untagged is specified, untagged frames are used as voice traffic. [Example] Assign LAN port #1 as voice VLAN to VLAN #100. SWR2311P(config)#interface port1.1 SWR2311P(config-if)#switchport voice vlan 100 6.2.14 Set CoS value for voice VLAN [Syntax] switchport voice cos value no switchport voice cos...
Page 170: Show Vlan Information
170 | Command Reference | Layer 2 functions 6.2.16 Show VLAN information [Syntax] show vlan vlan-id show vlan brief [Keyword] brief Show all VLAN information [Parameter] vlan-id <1-4094> VLAN ID to show [Input mode] unprivileged EXEC mode, priviledged EXEC mode [Description] Shows information for the specified VLAN ID.
Page 171: Stp (Spanning Tree Protocol)
Command Reference | Layer 2 functions | 171 Item Description Type of secondary VLAN TYPE • isolated : Isolated VLAN • community : Community VLAN INTERFACES Interfaces that are associated as a host port [Example] Show private VLAN information. SWR2311P>show vlan private-vlan PRIMARY SECONDARY TYPE...
Page 172: Set Maximum Aging Time
If this command is executed with the "no" syntax, the setting returns to the default. [Note] The maximum aging time is the time that the L2 switch waits without receiving a spanning tree configuration message, and after which time it attempts to reconfigure.
Page 173: Set Spanning Tree For An Interface
Command Reference | Layer 2 functions | 173 SWR2311P(config)#spanning-tree priority 4096 6.3.5 Set spanning tree for an interface [Syntax] spanning-tree switch [Parameter] switch Spanning tree operation Setting value Description enable Enable spanning tree disable Disable spanning tree [Initial value] spanning-tree enable [Input mode] interface mode [Description]...
Page 174: Set Interface Bpdu Filtering
174 | Command Reference | Layer 2 functions [Example] Set the LAN port #1 link type to "shared." SWR2311P(config)#interface port1.1 SWR2311P(config-if)#spanning-tree link-type shared 6.3.7 Set interface BPDU filtering [Syntax] spanning-tree bpdu-filter filter no spanning-tree bpdu-filter [Parameter] filter BPDU filtering operation Setting value Description enable...
Page 175: Set Interface Path Cost
Command Reference | Layer 2 functions | 175 If this command is executed with the "no" syntax, the setting returns to the default. [Note] This command can be specified only for LAN/SFP port and logical interface. It is not possible to specify this command for a LAN/SFP port that is associated to a logical interface. If a LAN/SFP port is associated with a logical interface, the setting of this command for the corresponding LAN/SFP port returns to the default.
Page 176: Set Edge Port For Interface
176 | Command Reference | Layer 2 functions [Parameter] priority <0-240> (multiple of 16) Priority value [Initial value] spanning-tree priority 128 [Input mode] interface mode [Description] Sets the priority of the applicable interface. If this command is executed with the "no" syntax, the setting returns to the default. Lower numeric values indicate a higher priority, increasing the probability that the other interface will become the root port.
Page 177 Command Reference | Layer 2 functions | 177 [Parameter] ifname Name of LAN/SFP port or logical interface Interface to show [Input mode] unprivileged EXEC mode, priviledged EXEC mode [Description] Shows the spanning tree status. If "interface" is omitted, the status of all interfaces is shown. In the case of MSTP, shows CIST (instance #0) information.
Page 178 178 | Command Reference | Layer 2 functions Item Description Forward Delay Forward delay time setting value Forward Timer Actual forward delay timer Timer at which the interface destroys BPDU information. Msg Age Timer With the default setting, count down from 20 seconds for STP, or count down Hello Time x 3 for RSTP/MSTP.
Page 179: Show Spanning Tree Bpdu Statistics
Command Reference | Layer 2 functions | 179 6.3.13 Show spanning tree BPDU statistics [Syntax] show spanning-tree statistics [interface ifname] [Keyword] interface Specifies the interface to show [Parameter] ifname Name of LAN/SFP port or logical interface Interface to show [Input mode] unprivileged EXEC mode, priviledged EXEC mode [Description] Shows spanning tree BPDU statistics.
Page 180: Clear Protocol Compatibility Mode
180 | Command Reference | Layer 2 functions % Total Src Mac Rcvd % Next State : Discard/Blocking % Topology Change Time % Other Bridge information & Statistics -------------------------------------- % STP Multicast Address : 01:80:c2:00:00:00 % Bridge Priority : 32768 % Bridge Mac Address : ac:44:f2:30:01:10 % Bridge Hello Time...
Page 181: Generate Mst Instance
Command Reference | Layer 2 functions | 181 6.3.16 Generate MST instance [Syntax] instance instance-id no instance [Parameter] instance-id <1-15> Instance ID [Initial value] none [Input mode] MST mode [Description] Generates an MST instance. If this command is executed with the "no" syntax, the MST instance is deleted. [Note] MST instance generation and association with a VLAN is specified by the instance vlan command.
Page 182: Set Priority Of Mst Instance
182 | Command Reference | Layer 2 functions 6.3.18 Set priority of MST instance [Syntax] instance instance-id priority priority no instance instance-id priority [Parameter] instance-id <1-15> Instance ID priority <0-61440> (multiple of 4096) Priority value [Initial value] instance instance-id priority 32768 [Input mode] MST mode [Description]...
Page 183: Set Mst Instance For Interface
Command Reference | Layer 2 functions | 183 Revision number [Initial value] revision 0 [Input mode] MST mode [Description] Sets the revision number of the MST region. If this command is executed with the "no" syntax, the setting returns to the default. [Example] Set the revision number as 2 for the MST region.
Page 184: Set Interface Path Cost For Mst Instance
184 | Command Reference | Layer 2 functions [Input mode] interface mode [Description] Sets the priority for the applicable interface in the MST instance. If this command is executed with the "no" syntax, the setting returns to the default. [Note] This command can be specified only for LAN/SFP port and logical interface.
Page 185: Show Mst Region Information
Command Reference | Layer 2 functions | 185 6.3.24 Show MST region information [Syntax] show spanning-tree mst config [Input mode] unprivileged EXEC mode, priviledged EXEC mode, interface mode [Description] Shows distinguishing information for the MST region. [Example] Show distinguishing information for the MST region. SWR2311P>show spanning-tree mst config MSTP Configuration Information for bridge Default : %------------------------------------------------------...
Page 186: Show Mst Instance Information
186 | Command Reference | Layer 2 functions SWR2311P>show spanning-tree mst detail interface port1.19 % Default: Bridge up - Spanning Tree Enabled - topology change detected % Default: CIST Root Path Cost 0 - CIST Root Port 0 - CIST Bridge Priority 32768 % Default: Forward Delay 15 - Hello Time 2 - Max Age 20 - Transmit Hold Count 6 - Max-hops 20 % Default: CIST Root Id 8000ac44f2300110...
Page 187: Loop Detection
Command Reference | Layer 2 functions | 187 [Note] A LAN/SFP port that is associated with a logical interface cannot be specified as ifname. [Example] Show information for MST instance #1. SWR2311P>show spanning-tree mst instance 1 % Default: MSTI Root Path Cost 0 - MSTI Root Port 0 - MSTI Bridge Priority 32768 % Default: MSTI Root Id 8001ac44f2300110 % Default: MSTI Bridge Id 8001ac44f2300110 port1.19: Port Number 923 - Ifindex 5019 - Port Id 0x839b - Role Designated -...
Page 188: Set Loop Detection Function (Interface)
188 | Command Reference | Layer 2 functions 6.4.2 Set loop detection function (interface) [Syntax] loop-detect switch no loop-detect [Parameter] switch Set loop detection function for the applicable interface Setting value Description Enables loop detection function for the enable applicable interface Disables loop detection function for the disable applicable interface...
Page 189: Reset Loop Detection Status
Command Reference | Layer 2 functions | 189 no loop-detect blocking [Parameter] switch Set port blocking for the applicable interface Setting value Description enable Enables port blocking for the applicable interface Disables port blocking for the applicable disable interface [Initial value] loop-detect blocking enable [Input mode] interface mode...
Page 190 190 | Command Reference | Layer 2 functions • Setting of the loop detection function (loop-detect) for LAN/SFP port. If the loop detection function is operating, (*) is added • Status of the Port Blocking setting (port-blocking) • Loop detection status (status) [Example] Show the loop detection status.
Page 191: Chapter 7: Layer 3 Functions
Command Reference | Layer 3 functions | 191 Chapter Layer 3 functions 7.1 IPv4 address management 7.1.1 Set IPv4 address [Syntax] ip address ip_address/mask [label textline] ip address ip_address netmask [label textline] no ip address [Keyword] label Set label as IPv4 address [Parameter] ip_address A.B.C.D...
Page 192: Automatically Set Ipv4 Address By Dhcp Client
192 | Command Reference | Layer 3 functions [Description] Shows the IPv4 address for each interface. The following content is shown. • IPv4 address • If an IPv4 address has been specified by the ip address dhcp command, an "*" is shown added before the displayed IPv4 address.
Page 193: Show Dhcp Client Status
Command Reference | Layer 3 functions | 193 SWR2311P(config)#interface vlan100 SWR2311P(config-if)#ip address dhcp 7.1.4 Show DHCP client status [Syntax] show dhcp lease [Input mode] unprivileged EXEC mode, priviledged EXEC mode [Description] Shows the DHCP client status. The following items are shown. •...
Page 194: Ipv4 Route Control
194 | Command Reference | Layer 3 functions [Description] For the VLAN interface, enables the Auto IP function which automatically generates the IPv4 link local address (169.254.xxx.xxx/16). The Auto IP function works only if an IPv4 address cannot be obtained from the DHCP server after the ip address dhcp command is specified.
Page 195: Show Ipv4 Forwarding Information Base
Command Reference | Layer 3 functions | 195 [Description] Adds a static route for IPv4. If this command is executed with the "no" syntax, the specified route is deleted. [Example] Set the default gateway to 192.168.1.1. SWR2311P(config)#ip route 0.0.0.0/0 192.168.1.1 For the destination 172.16.0.0/16, set the gateway to 192.168.2.1.
Page 196: Show Summary Of The Route Entries Registered In The Ipv4 Routing Information Base
196 | Command Reference | Layer 3 functions SWR2311P>show ip route database Codes: C - connected, S - static > - selected route, * - FIB route *> 0.0.0.0/0 [1/0] via 192.168.100.1, vlan1 *> 172.16.0.0/16 [1/0] via 192.168.200.240, vlan100 *> 192.168.1.1/32 [1/0] is directly connected, vlan100 *>...
Page 197: Set Static Arp Entry
Command Reference | Layer 3 functions | 197 7.3.3 Set static ARP entry [Syntax] arp ip_address mac_address interface no arp ip_address [Parameter] ip_address A.B.C.D IP address mac_address HHHH.HHHH.HHHH MAC address interface portN.M Physical interface name [Initial value] none [Input mode] global configuration mode [Description] Creates a static group ARP entry.
Page 198: Check Ipv4 Route
198 | Command Reference | Layer 3 functions [Keyword] repeat Specifies the number of times to execute size Specifies the length of the ICMP payload (byte units) timeout Specifies the time to wait for a reply after transmitting the specified number of Echo requests [Parameter] host Target to which ICMP Echo is sent...
Page 199: Ipv6 Address Management
Command Reference | Layer 3 functions | 199 192.168.10.1 (192.168.10.1) 0.563 ms 0.412 ms 0.428 ms 192.168.20.1 (192.168.20.1) 0.561 ms 0.485 ms 0.476 ms 192.168.30.1 (192.168.30.1) 0.864 ms 0.693 ms 21.104 ms 192.168.40.1 (192.168.40.1) 0.751 ms 0.783 ms 0.673 ms 192.168.50.1 (192.168.50.1) 7.689 ms 7.527 ms...
Page 200: Set Ra For Ipv6 Address
200 | Command Reference | Layer 3 functions If the ipv6 address autoconfig was executed before executing this command, the setting of the ipv6 address autoconfig command is automatically deleted If this command is executed with the "no" syntax, the specified IPv6 address is deleted. [Note] It is not possible to assign an IPv6 address of the same subnet to multiple interfaces.
Page 201: Ipv6 Route Control
Command Reference | Layer 3 functions | 201 SWR2311P>show ipv6 interface brief Interface IPv6-Address Admin-Status Link-Status vlan1 2001:db8:1::2/64 fe80::2a0:deff:fe:2/64 vlan2 2001:db8:2::2/64 fe80::2a0:deff:fe:2/64 down vlan3 unassigned down 7.6 IPv6 route control 7.6.1 Set IPv6 static route [Syntax] ipv6 route ipv6_address/prefix_len gateway [number] ipv6 route ipv6_address/prefix_len null [number] no ipv6 route ipv6_address/prefix_len [gateway [number]] no ipv6 route ipv6_address/prefix_len [null [number]]...
Page 202: Show Ipv6 Routing Information Base
202 | Command Reference | Layer 3 functions [Parameter] ipv6_address X:X::X:X IPv6 address mask <0-128> IPv6 prefix length (if omitted: 128) [Input mode] unprivileged EXEC mode, priviledged EXEC mode [Description] Shows the IPv6 Forwarding Information Base (FIB). If the IPv6 address is omitted, the entire content of the FIB is shown. If the IPv6 address or network address is specified, detailed information for the routing entry that matches the destination is shown.
Page 203: Neighbor Cache
Command Reference | Layer 3 functions | 203 [Input mode] unprivileged EXEC mode, priviledged EXEC mode [Description] Shows a summary of the route entries that are registered in the IPv6 Routing Information Base (RIB). [Note] [Example] Show a summary of the IPv6 Routing Information Base. SWR2311P>show ipv6 route summary IPv6 routing table name is Default-IPv6-Routing-Table(0) IPv6 routing table maximum-paths is 1...
Page 204: Clear Neighbor Cache Table
204 | Command Reference | Layer 3 functions [Example] Show the neighbor cache table. SWR2311P>show ipv neighbors IPv6 Address MAC Address Interface Type 2001:db8:1:0:3538:5dc7:6bc4:1a23 0011.2233.4455 vlan1 dynamic 2001:db8:cafe::1 00a0.de80.cafe vlan1 static fe80::0211:22ff:fe33:4455 0011.2233.4455 vlan1 dynamic fe80::6477:88ff:fe99:aabb 6677.8899.aabb vlan1 dynamic 7.7.3 Clear neighbor cache table [Syntax] clear ipv6 neighbors [Input mode]...
Page 205: Check Ipv6 Route
Command Reference | Layer 3 functions | 205 [Description] Send ICMPv6 Echo to the specified host, and wait for ICMPv6 Echo Reply. When it is received, indicate this. Show simple statistical information when the command ends. [Note] [Example] Ping fe80::2a0:deff:fe11:2233. SWR2311P#ping6 fe80::2a0:deff:fe11:2233%vlan1 PING fe80::2a0:deff:fe11:2233%vlan1 (fe80::2a0:deff:fe11:2233%vlan1): 56 data bytes 64 bytes from fe80::2a0:deff:fe11:2233: seq=0 ttl=64 time=2.681 ms...
Page 206: Set Dns Server List
206 | Command Reference | Layer 3 functions [Input mode] global configuration mode [Description] Enables or disables the DNS lookup function. If this command is executed with the "no" syntax, the function is disabled. [Example] Enable the DNS lookup function. SWR2311P(config)#dns-client enable 7.10 Set DNS server list [Syntax]...
Page 207: Set Search Domain List
Command Reference | Layer 3 functions | 207 [Input mode] global configuration mode [Description] Specifies the default domain name used for DNS queries. If this command is executed with the "no" syntax, the default domain name is deleted. [Note] The setting of this command takes priority if the default domain name (option code 15) was obtained from the DHCP server by the ip address dhcp command.
Page 208 208 | Command Reference | Layer 3 functions Item Description Default domain Default domain name Domain list Search domain list Name Servers DNS server list (IP address) [Example] Show the DNS client information. SWR2311P>show dns-client DNS client is enabled Default domain : example.com Domain list : example1.com example2.com...
Page 209: Chapter 8: Ip Multicast Control
Command Reference | IP multicast control | 209 Chapter IP multicast control 8.1 IP multicast basic settings 8.1.1 Set processing method for unknown multicast frames [Syntax] l2-unknown-mcast mode [Parameter] mode Sets the processing method for multicast frames Setting value Description...
Page 210: Set Igmp Snooping Fast-Leave
210 | Command Reference | IP multicast control [Example] Enable IGMP snooping for VLAN #2. SWR2311P#configure terminal SWR2311P(config)#interface vlan2 SWR2311P(config-if)#ip igmp snooping enable Disable IGMP snooping for VLAN #2. SWR2311P#configure terminal SWR2311P(config)#interface vlan2 SWR2311P(config-if)#ip igmp snooping disable 8.2.2 Set IGMP snooping fast-leave [Syntax] ip igmp snooping fast-leave no ip igmp snooping fast-leave...
Page 211: Set Query Transmission Function
Command Reference | IP multicast control | 211 The multicast router must be connected to the specified LAN/SFP port. If an IGMP report is received from the receiver, it is forwarded to the specified LAN/SFP port. [Example] Specify LAN port #8 as a connection destination of the multicast router. SWR2311P#configure terminal SWR2311P(config)#interface vlan2 SWR2311P(config-if)#ip igmp snooping mrouter interface port1.8...
Page 212: Set Ttl Value Verification Function For Igmp Packets
212 | Command Reference | IP multicast control [Note] This command can be specified only for VLAN interface. Also, this can be specified only if IGMP snooping is enabled. [Example] Set the VLAN #2 query transmission interval to 30 seconds. SWR2311P#configure terminal SWR2311P(config)#interface vlan2 SWR2311P(config-if)#ip igmp snooping query-interval 30...
Page 213: Show Multicast Router Connection Port Information
Command Reference | IP multicast control | 213 IGMP version [Initial value] ip igmp snooping version 3 [Input mode] interface mode [Description] Sets the IGMP version. If this command is executed with the "no" syntax, the IGMP version returns to the default setting (V3). [Note] This command can be specified only for VLAN interface.
Page 214: Show An Interface's Igmp-Related Information
214 | Command Reference | IP multicast control [Parameter] A.B.C.D Multicast group address ifname VLAN interface name Interface to show [Input mode] unprivileged EXEC mode, priviledged EXEC mode [Description] Shows IGMP group membership information. [Example] Show IGMP group membership information. SWR2311P#show ip igmp snooping groups IGMP Snooping Group Membership Group source list: (R - Remote, S - Static)
Page 215: Clear Igmp Group Membership Entries
Command Reference | IP multicast control | 215 Number of v2-leaves: 0 Number of v3-reports: 127 Active Ports: port1.26 port1.5 8.2.11 Clear IGMP group membership entries [Syntax] clear ip igmp snooping clear ip igmp snooping group A.B.C.D clear ip igmp snooping interface ifname [Keyword] group Specifies the multicast group address to be cleared...
Page 216: Chapter 9: Traffic Control
216 | Command Reference | Traffic control Chapter Traffic control 9.1 ACL 9.1.1 Generate IPv4 access list [Syntax] access-list ipv4-acl-id [seq_num] action protocol src-info [src-port] dst-info [dst-port] [ack] [fin] [psh] [rst] [syn] [urg] no access-list ipv4-acl-id [seq_num] [action protocol src-info [src-port] dst-info [dst-port] [ack] [fin] [psh] [rst] [syn] [urg]] [Keyword] If tcp is specified as the protocol, the ACK flag of the TCP header is specified as a condition.
Page 217 Command Reference | Traffic control | 217 Setting value Description Specifies an IPv4 address (A.B.C.D) with subnet A.B.C.D/M mask length (Mbit) host A.B.C.D Specifies a single IPv4 address (A.B.C.D) Applies to all IPv4 addresses src-port <0-65535> If protocol is specified as tcp or udp, this specifies the transmission source port number <0-65535> that is the condition.
Page 218: Add Comment To Ipv4 Access List
218 | Command Reference | Traffic control Delete IPv4 access list #1. SWR2311P(config)#no access-list 1 9.1.2 Add comment to IPv4 access list [Syntax] access-list ipv4-acl-id description line no access-list ipv4-acl-id description [Parameter] ipv4-acl-id <1-2000> ID of IPv4 access list to which a comment will be added line Comment to add.
Page 219: Generate Ipv6 Access List
Command Reference | Traffic control | 219 If this command is executed with the "no" syntax, the applied access list is deleted from the LAN/SFP port. [Note] The restrictions of the access list apply only to frames that are subject to being relayed. Frames that are transmitted autonomously are excluded from these restrictions.
Page 220: Add Comment To Ipv6 Access List
220 | Command Reference | Traffic control [Note] An access list that is applied to an interface cannot be deleted using the "no" syntax. Before you can delete the access list, you must rescind the application of that list. [Example] Create IPv6 access list #3002 which will deny frames from 3ffe:506::/32.
Page 221: Generate Mac Access List
Command Reference | Traffic control | 221 [Initial value] none [Input mode] interface mode [Description] Applies an IPv6 access list to the LAN/SFP port. If the received/transmitted frame matches the conditions in the access list, the action in the access list will be the action (permit, deny) for the corresponding frame.
Page 222: Add Comment To Mac Access List
222 | Command Reference | Traffic control Setting value Description Specifies the MAC address HHHH.HHHH.HHHH (HHHH.HHHH.HHHH) with wildcard bits WWWW.WWWW.WWWW (WWWW.WWWW.WWWW) Specifies an individual MAC address host HHHH.HHHH.HHHH (HHHH.HHHH.HHHH) Applies to all MAC addresses [Initial value] none [Input mode] global configuration mode [Description] Generates a MAC access list.
Page 223: Apply Mac Access List
Command Reference | Traffic control | 223 [Example] Create MAC access list #2000 which denies frames from MAC address 00-A0-DE-12-34-56, and add the comment "Test." SWR2311P(config)#access-list 2001 deny mac 00A0.DE12.3456 0000.0000.0000 any SWR2311P(config)#access-list 2001 description Test 9.1.9 Apply MAC access list [Syntax] access-group mac-acl-id direction no access-group mac-acl-id direction...
Page 224: Clear Counters
224 | Command Reference | Traffic control If an access list is applied to an interface, and one or more frames that match the conditions are received or forwarded, the total number (match) of those frames is also shown. [Example] Show all lists.
Page 225: Set Access List For Vlan Access Map
Command Reference | Traffic control | 225 [Input mode] global configuration mode [Description] Create a VLAN access map with the name specified by access-map-name, and then move to VLAN access map mode in order to make VLAN access map settings. If this command is executed with the "no"...
Page 226: Show Vlan Access Map
226 | Command Reference | Traffic control [Input mode] global configuration mode [Description] Sets the VLAN access map filter for the specified VLAN. If this command is executed with the "no" syntax, the VLAN access map filter for the specified VLAN is deleted. [Note] It is not possible to specify this command for a VLAN ID that is set to the "disable"...
Page 227: Enable/Disable Qos
Command Reference | Traffic control | 227 9.2.1 Enable/disable QoS [Syntax] qos action qos_disable [Parameter] action Operation for Qos Setting value Description enable Qos is enabled disable Qos is disabled [Initial value] no qos [Input mode] global configuration mode [Description] Enables QoS.
Page 228: Set Trust Mode
228 | Command Reference | Traffic control SWR2311P(config-if)#qos cos 2 Return the default CoS value to the default value. SWR2311P(config-if)#no qos cos 9.2.3 Set trust mode [Syntax] qos trust mode no qos trust [Parameter] mode Trust mode Setting value Description Determines the egress queue based on the CoS value Determines the egress queue based on the DSCP...
Page 229: Show Status Of Qos Function Setting
Command Reference | Traffic control | 229 SWR2311P(config-if)#qos trust dscp Set the trust mode of the LAN/SFP port to the default setting (CoS). SWR2311P(config-if)#no qos trust SWR2311P(config-if)#qos trust cos 9.2.4 Show status of QoS function setting [Syntax] show qos [Input mode] unprivileged EXEC mode, priviledged EXEC mode [Description] Shows the enabled (Enable) or disabled (Disable) status of the QoS function.
Page 230: Show Egress Queue Usage Ratio
230 | Command Reference | Traffic control [Note] In order to execute this command, QoS must be enabled. [Example] Show the QoS settings of LAN port #1. (trust mode CoS) SWR2311P#show qos interface port1.1 Port Trust Mode: CoS Port Default CoS Priority: 0 Egress Traffic Shaping: Rate 30016 Kbps, Burst 1876 KByte Queue Scheduling: Queue0 : Weight...
Page 231: Set Cos - Egress Queue Id Conversion Table
Command Reference | Traffic control | 231 [Description] Shows the usage ratio for each egress queue of the specified LAN/SFP port. The queue usage ratio is calculated as follows. (queue usage ratio) = (number of buffers held in the queue) / (maximum length of the queue) [Note] This command can be used regardless of the QoS status (enabled/disabled).
Page 232: Set Dscp - Egress Queue Id Conversion Tabl
232 | Command Reference | Traffic control [Example] Assign egress queue #4 to CoS value "0". SWR2311P(config)#qos cos-queue 0 4 Return the egress queue ID of CoS value "0" to the default value. SWR2311P(config)#no qos cos-queue 0 9.2.8 Set DSCP - egress queue ID conversion tabl [Syntax] qos dscp-queue dscp-value queue-id no qos dscp-queue dscp-value...
Page 233: Specify Egress Queue Of Frames Transmitted From The Switch Itself
Command Reference | Traffic control | 233 [Parameter] queue-id <0-7> Egress queue ID assigned to LAN/SFP port [Initial value] qos port-priority-queue 2 [Input mode] interface mode [Description] Specifies the priority (egress queue ID) for the receiving port. If this is executed with the "no" syntax, he egress queue ID for the specified port is returned to the default setting (2). The port priority is used to determine the egress queue when the trust mode is set to "port priority."...
Page 234: Associate Class Map
234 | Command Reference | Traffic control [Input mode] global configuration mode [Description] Generates a class map. A class map defines the conditions used to classify received frames into traffic classes, and consists of conditions defined by the match command and the corresponding action (permit/deny).Class map actions are handled as follows. Class map actions are handled as follows.
Page 235: Set Traffic Classification Conditions (Access-List)
Command Reference | Traffic control | 235 [Traffic class definition] SWR2311P(config)#access-list 1 permit any 10.1.0.0 0.0.255.255 any SWR2311P(config)#class-map class1 SWR2311P(config-cmap)#match access-list 1 SWR2311P(config-cmap)#exit [Policy settings] SWR2311P(config)#policy-map policy1 SWR2311P(config-pmap)#class class1 SWR2311P(config-pmap-c)#police 48 12 12 yellow-action remark red-action drop SWR2311P(config-pmap-c)#remark-map yellow ip-dscp 10 SWR2311P(config-pmap-c)#exit SWR2311P(config-pmap)#exit SWR2311P(config)#interface port1.1...
Page 236: Set Traffic Classification Conditions (Tos Precedence)
236 | Command Reference | Traffic control [Description] Uses the CoS value of the VLAN tag header as the condition to classify the traffic class. If this is executed with the "no" syntax, the CoS condition setting is deleted. The setting can be repeated up to the maximum number (eight) of registrations. [Note] In order to execute this command, QoS must be enabled.
Page 237: Set Traffic Classification Conditions (Ethernet Type)
Command Reference | Traffic control | 237 [Example] Specify DSCP values "48" and "56" as the classification conditions for class map "class1." SWR2311P(config)#class-map class1 SWR2311P(config-cmap)#match ip-dscp 48 56 9.2.17 Set traffic classification conditions (Ethernet Type) [Syntax] match ethertype type no match ethertype [Parameter] type 0xXXXX...
Page 238: Show Class Map Information
238 | Command Reference | Traffic control [Parameter] id-start <1 - 4094> Starting VLAN ID value used as classification condition. id-end <1 - 4094> Ending VLAN ID value used as classification condition. The range from the specified starting value to the ending value can be a maximum of 30. [Input mode] class map mode [Description]...
Page 239: Generate Policy Map For Received Frames
Command Reference | Traffic control | 239 Class-Map Name: class1 Match vlan 10 9.2.21 Generate policy map for received frames [Syntax] policy-map name no policy-map name [Parameter] name Name of policy map (maximum 32 characters; uppercase and lowercase are distinguished) [Input mode] global configuration mode [Description]...
Page 240: Set Pre-Marking (Cos)
240 | Command Reference | Traffic control [Input mode] interface mode [Description] Applies the policy map to the corresponding LAN/SFP port. If this is executed with the "no" syntax, the policy map is deleted from the LAN/SFP port. [Note] In order to execute this command, QoS must be enabled. If a policy map has already been applied to the LAN/SFP port, an error occurs.
Page 241: Set Pre-Marking (Tos Precedence)
Command Reference | Traffic control | 241 [Example] Make the following settings for received frames of LAN port #1 • Permit traffic from the 10.1.0.0 network • Change the classified traffic class to the CoS value "2" [Traffic class definition] SWR2311P(config)#access-list 1 permit any 10.1.0.0 0.0.255.255 any SWR2311P(config)#class-map class1 SWR2311P(config-cmap)#match access-list 1...
Page 242: Set Individual Policers (Single Rate)
242 | Command Reference | Traffic control [Parameter] value <0 - 63> DSCP value specified by pre-marking [Input mode] policy map class mode [Description] Changes the DSCP value of the classified traffic class to the specified DSCP value. In addition, reassign the egress queue according to the egress queue ID table that corresponds to the trust mode.
Page 243: Set Individual Policers (Twin Rate)
Command Reference | Traffic control | 243 Burst size of conformant token bucket (kbyte) <11 - 2097120> Burst size of excess token bucket (kbyte) action Operation for packets categorized by bandwidth class Setting value Operation transmit Forward drop Discard remark Remarking (CoS/TOS/DSCP) [Input mode] policy map class mode...
Page 244 244 | Command Reference | Traffic control [Keyword] twin-rate Use twin rate policers [Parameter] <1 - 102300000> Traffic rate (kbps) <1 - 102300000> Peak traffic rate (kbps). A value less than CIR cannot be specified. <11 - 2097120> Burst size of conformant token bucket (kbyte) <11 - 2097120>...
Page 245: Set Remarking Of Individual Policers
Command Reference | Traffic control | 245 SWR2311P(config-pmap-c)#remark-map yellow ip-dscp 10 SWR2311P(config-pmap-c)#exit SWR2311P(config-pmap)#exit SWR2311P(config)#interface port1.1 SWR2311P(config-if)#service-policy input policy1 9.2.28 Set remarking of individual policers [Syntax] remark-map color type value no remark-map [Parameter] color Bandwidth class to remark Setting value Description Make remarking settings for bandwidth class yellow Yellow...
Page 246: Generate Aggregate Policer
246 | Command Reference | Traffic control [Example] Make the following settings for received frames of LAN port #1@ • Permit traffic from the 10.1.0.0 network • Categorize bandwidth classes as CIR:48kbps, CBS:12kbyte, and EBS:12kbyte • Green: forward, Yellow: rewrite DSCP value to 10, Red: discard [Traffic class definition] SWR2311P(config)#access-list 1 permit any 10.1.0.0 0.0.255.255 any SWR2311P(config)#class-map class1...
Page 247: Set Aggregate Policer (Twin Rate)
Command Reference | Traffic control | 247 [Parameter] <1 - 102300000> Traffic rate (kbps) <11 - 2097120> Burst size of conformant token bucket (kbyte) <11 - 2097120> Burst size of excess token bucket (kbyte) action Operation for packets categorized by bandwidth class Setting value Operation transmit...
Page 248: Set Remarking Of Aggregate Policers
248 | Command Reference | Traffic control Traffic rate (kbps) <1 - 102300000> Peak traffic rate (kbps). A value less than CIR cannot be specified. <11 - 2097120> Burst size of conformant token bucket (kbyte) <11 - 2097120> Burst size of peak token bucket (kbyte) action Operation for packets categorized by bandwidth class Setting value...
Page 249: Show Aggregate Policers
Command Reference | Traffic control | 249 Setting value Description Make remarking settings for bandwidth class type Type of remarking Setting value Description CoS remarking ip-precedence TOS precedence remarking ip-dscp DSCP remarking value <0 - 7> CoS or TOS precedence remarking value <0 - 63>...
Page 250: Apply Aggregate Policer
250 | Command Reference | Traffic control [Parameter] name Aggregate policer name. If this is omitted, the command applies to all aggregate policers. [Input mode] unprivileged EXEC mode, priviledged EXEC mode [Description] Shows the contents of an aggregate policer. The contents shown are the same as in the police section shown by the show class- map command.
Page 251: Show Metering Counters
Command Reference | Traffic control | 251 SWR2311P(config-pmap)#exit SWR2311P(config)#interface port1.1 SWR2311P(config-if)#service-policy input policy1 9.2.35 Show metering counters [Syntax] show qos metering-counters [ifname] [Parameter] ifname LAN/SFP port name. If this is omitted, the command applies to all ports. [Input mode] unprivileged EXEC mode, priviledged EXEC mode [Description] Shows the metering totals for all policers (individual policers / aggregate policers) on the specified LAN/SFP port.
Page 252: Set Egress Queue (Cos-Queue)
252 | Command Reference | Traffic control [Example] Clear the metering totals for LAN port #1. SWR2311P#clear qos metering-counter port1.1 9.2.37 Set egress queue (CoS-Queue) [Syntax] set cos-queue value no set cos-queue [Parameter] value <0 - 7> CoS value corresponding to egress queue [Input mode] policy map class mode [Description]...
Page 253: Show Policy Map Information
Command Reference | Traffic control | 253 Use the DSCP value to specify the egress queue; the egress queue that is assigned is based on the "DSCP-egress queue ID conversion table." If this is executed with the "no" syntax, the specification of egress queue based on traffic class is removed. [Note] In order to execute this command, QoS must be enabled.
Page 254: Show Map Status
254 | Command Reference | Traffic control Item Description - Set IP DSCP (Pre-marking setting : DSCP value) - Set CoS-Queue (Specify egress queue : CoS - Set IP-DSCP-Queue (Specify egress queue : DSCP) Police Metering/policing/remarking setting * For details, refer to the following Details of metering, policing, and remarking settings are as follows.
Page 255 Command Reference | Traffic control | 255 [Parameter] type Type of map to show Setting value Description policy Show policy map status information class Show class map status information name The name of the policy map (or class map) to show. If this is omitted, all policy maps (or class maps) [Input mode] unprivileged EXEC mode, priviledged EXEC mode [Description]...
Page 256: Set Egress Queue Scheduling
256 | Command Reference | Traffic control 9.2.41 Set egress queue scheduling [Syntax] qos wrr-weight queue-id weight no qos wrr-weight queue-id [Parameter] queue-id <0-7> Egress queue ID weight <1-32> Weight of WRR [Initial value] no qos wrr-weight 0 no qos wrr-weight 1 no qos wrr-weight 2 no qos wrr-weight 3 no qos wrr-weight 4...
Page 257: Set Traffic-Shaping (Queue Units)
Command Reference | Traffic control | 257 [Initial value] no traffic-shape rate [Input mode] interface mode [Description] Specifies shaping for the port. If this is executed with the "no" syntax, the port shaping setting is disabled. [Note] In order to execute this command, QoS must be enabled. Since rounding occurs on the traffic rate, the value actually applied to the input value might be less.
Page 258: Flow Control
258 | Command Reference | Traffic control Input value Traffic rate granularity (kbps) 18 - 23476 17.28 23477 - 1000000 [Example] Reduce transmission from queue #0 of LAN port #1 down to CIR:10 Mbps and Bc:64000 byte. SWR2311P(config)#interface port1.1 SWR2311P(config-if)#traffic-shape queue 0 rate kbps 10000 burst 64 9.3 Flow control 9.3.1 Set flow control (IEEE 802.3x PAUSE send/receive) (system) [Syntax]...
Page 259: Show Flow Control Operating Status
Command Reference | Traffic control | 259 [Initial value] flowcontrol disable [Input mode] interface mode [Description] Enables flow control for the LAN/SFP port (IEEE 802.3x PAUSE frames send/receive). If this is executed with the "no" syntax, flow control is disabled. [Note] This command can be specified only for LAN/SFP port.
Page 260: Storm Control
260 | Command Reference | Traffic control port1.4 Disable port1.5 Disable port1.6 Disable port1.7 Disable port1.8 Disable port1.9 Disable 9.4 Storm control 9.4.1 Set storm control [Syntax] storm-control type [type..] level level no storm-control [Parameter] type Storm control type Storm control type Description broadcast Enables broadcast storm control...
Page 261 Command Reference | Traffic control | 261 If the interface name is omitted, all interfaces are shown. [Example] Show the setting status of all interfaces. SWR2311P#show storm-control Port BcastLevel McastLevel UcastLevel port1.1 30.00% 30.00% 100.00% port1.2 20.00% 20.00% 20.00% port1.3 100.00% 100.00% 100.00%...
Page 262 262 | Command Reference | Index Index copy auth-web custom-file copy running-config startup-config aaa authentication auth-mac copy startup-config aaa authentication auth-web copy tech-support sd aaa authentication dot1x access-group (IPv4) access-group (IPv6) access-group (MAC) description access-list (IPv4) dns-client access-list (IPv6) dns-client domain-list access-list (MAC) dns-client domain-name access-list description (IPv4)
Page 263 (policy map class mode) ipv6 neighbor police twin-rate (aggregate policer mode) ipv6 route police twin-rate (policy map class mode) police-aggregate policy-map port-channel load-balance l2-unknown-mcast port-security enable l2ms configuration port-security mac-address l2ms enable port-security violation l2ms filter enable power-inline (global configuration mode)
Page 264 264 | Command Reference | Index set msg-tx-hold show qos metering-counters set timer msg-fast-tx show qos queue-counters set timer msg-tx-interval show radius-server set timer reinit-delay show rmon set too-many-neighbors limit show rmon alarm set tx-fast-init show rmon event sfp-monitor rx-power show rmon history show access-group show rmon statistics...
Page 265 Command Reference | Index | 265 ssh-server client alive terminal-watch interval ssh-server host key generate tftp-server ssh-server interface tftp-server interface startup-config description tlv-select basic-mgmt startup-config select tlv-select ieee-8021-org-specific static-channel-group tlv-select ieee-8023-org-specific storm-control tlv-select med switchport access vlan traceroute switchport mode access traceroute6 switchport mode private-vlan traffic-shape queue rate...
Page 266 266 | Command Reference | Index...

Yamaha L2 Command Reference Manual

Preface Introduction

Chapter 1: How to Read the Command Reference

Chapter 2: How to Use the Commands

Chapter 3: Configuration

Chapter 4: Maintenance and Operation Functions

Chapter 5: Interface Control

Chapter 6: Layer 2 Functions

Quick Links

Related Manuals for Yamaha L2

Summary of Contents for Yamaha L2