tp-link TL-SG3210 Reference Guide
en
TL-SG3210/TL-SG3216/TL-SG3424/TL-SG3424P
JetStream L2 Managed Switch
CLI Reference Guide
REV3.0.1
1910011346
COPYRIGHT & TRADEMARKS
Specifications are subject to change without notice. is a registered trademark of
TP-LINK TECHNOLOGIES CO., LTD. Other brands and product names are trademarks or
registered trademarks of their respective holders.
No part of the specifications may be reproduced in any form or by any means or used to make any
derivative such as translation, transformation, or adaptation without permission from TP-LINK
TECHNOLOGIES CO., LTD. Copyright 2015 TP-LINK TECHNOLOGIES CO., LTD. All rights
reserved.
http://www.tp-link.com
I
CONTENTS
Preface .............................................................................................................. 1
Chapter 1 Using the CLI ......................................................................................... 4
1.1 Accessing the CLI ........................................................................................................... 4
1.1.1 Logon by a console port ....................................................................................... 4
1.1.2 Configuring the Privileged EXEC Mode Password ............................................... 5
1.1.3 Logon by Telnet .................................................................................................... 5
1.1.4 Logon by SSH ...................................................................................................... 9
1.2 CLI Command Modes ................................................................................................... 14
1.3 Security Levels ............................................................................................................. 16
1.4 Conventions .................................................................................................................. 17
1.4.1 Format Conventions ........................................................................................... 17
1.4.2 Special Characters ............................................................................................. 17
1.4.3 Parameter Format .............................................................................................. 17
Chapter 2 User Interface ...................................................................................... 19
enable .................................................................................................................................... 19
service password-encryption ................................................................................................. 19
enable password ................................................................................................................... 20
enable secret ......................................................................................................................... 21
disable ................................................................................................................................... 22
configure ................................................................................................................................ 22
exit ......................................................................................................................................... 22
end ........................................................................................................................................ 23
history .................................................................................................................................... 23
history clear ........................................................................................................................... 24
Chapter 3 IEEE 802.1Q VLAN Commands .......................................................... 25
vlan ........................................................................................................................................ 25
interface vlan ......................................................................................................................... 25
name ..................................................................................................................................... 26
switchport mode .................................................................................................................... 26
switchport access vlan ........................................................................................................... 27
switchport trunk allowed vlan ................................................................................................. 27
switchport general allowed vlan ............................................................................................. 28
switchport pvid ....................................................................................................................... 29
II
show vlan summary ............................................................................................................... 29
show vlan brief ...................................................................................................................... 30
show vlan .............................................................................................................................. 30
show interface switchport ...................................................................................................... 31
Chapter 4 MAC-based VLAN Commands ............................................................ 32
mac-vlan mac-address .......................................................................................................... 32
show mac-vlan ...................................................................................................................... 32
Chapter 5 Protocol-based VLAN Commands ....................................................... 34
protocol-vlan template ........................................................................................................... 34
protocol-vlan vlan .................................................................................................................. 35
protocol-vlan group ................................................................................................................ 35
show protocol-vlan template .................................................................................................. 36
show protocol-vlan vlan ......................................................................................................... 36
Chapter 6 Voice VLAN Commands ...................................................................... 37
voice vlan .............................................................................................................................. 37
voice vlan aging time ............................................................................................................. 37
voice vlan priority ................................................................................................................... 38
voice vlan mac-address ......................................................................................................... 38
switchport voice vlan mode ................................................................................................... 39
switchport voice vlan security ................................................................................................ 40
show voice vlan ..................................................................................................................... 40
show voice vlan oui ............................................................................................................... 41
show voice vlan switchport .................................................................................................... 41
Chapter 7 GVRP Commands ............................................................................... 42
gvrp(global) ........................................................................................................................... 42
gvrp(interface) ....................................................................................................................... 42
gvrp registration ..................................................................................................................... 43
gvrp timer .............................................................................................................................. 43
show gvrp global ................................................................................................................... 44
show gvrp interface ............................................................................................................... 45
Chapter 8 Etherchannel Commands .................................................................... 46
channel-group ....................................................................................................................... 46
port-channel load-balance ..................................................................................................... 47
lacp system-priority ............................................................................................................... 47
III
lacp port-priority ..................................................................................................................... 48
show etherchannel ................................................................................................................ 48
show etherchannel load-balance ........................................................................................... 49
show lacp .............................................................................................................................. 49
show lacp sys-id .................................................................................................................... 50
Chapter 9 User Manage Commands .................................................................... 51
user name (password) ........................................................................................................... 51
user name (secret) ................................................................................................................ 52
user access-control ip-based ................................................................................................. 53
user access-control mac-based ............................................................................................. 54
user access-control port-based ............................................................................................. 55
line ......................................................................................................................................... 55
password ............................................................................................................................... 56
login ....................................................................................................................................... 57
login local .............................................................................................................................. 58
telnet...................................................................................................................................... 58
show user account-list ........................................................................................................... 59
show user configuration......................................................................................................... 59
show telnet-status .................................................................................................................. 60
Chapter 10 HTTP and HTTPS Commands ............................................................ 61
ip http server .......................................................................................................................... 61
ip http max-users ................................................................................................................... 61
ip http session ....................................................................................................................... 62
ip http secure-server .............................................................................................................. 63
ip http secure-protocol ........................................................................................................... 63
ip http secure-ciphersuite ...................................................................................................... 64
ip http secure-max-users ....................................................................................................... 64
ip http secure-session............................................................................................................ 65
ip http secure-server download certificate ............................................................................. 66
ip http secure-server download key ....................................................................................... 67
show ip http configuration ...................................................................................................... 67
show ip http secure-server .................................................................................................... 68
Chapter 11 Binding Table Commands .................................................................... 69
ip source binding ................................................................................................................... 69
ip source binding index .......................................................................................................... 70
ip dhcp snooping ................................................................................................................... 71
IV
ip dhcp snooping global ......................................................................................................... 71
ip dhcp snooping information option ...................................................................................... 72
ip dhcp snooping information strategy ................................................................................... 73
ip dhcp snooping information remote-id................................................................................. 73
ip dhcp snooping information circuit-id .................................................................................. 74
ip dhcp snooping trust ........................................................................................................... 75
ip dhcp snooping mac-verify .................................................................................................. 75
ip dhcp snooping limit rate ..................................................................................................... 76
ip dhcp snooping decline ....................................................................................................... 76
show ip source binding .......................................................................................................... 77
show ip dhcp snooping information ....................................................................................... 78
show ip dhcp snooping interface gigabitEthernet .................................................................. 78
Chapter 12 ARP Inspection Commands................................................................. 79
ip arp inspection(global) ........................................................................................................ 79
ip arp inspection trust ............................................................................................................ 79
ip arp inspection(interface) .................................................................................................... 80
ip arp inspection limit-rate ...................................................................................................... 81
ip arp inspection recover ....................................................................................................... 81
show ip arp inspection ........................................................................................................... 82
show ip arp inspection interface ............................................................................................ 82
show ip arp inspection statistics ............................................................................................ 83
clear ip arp inspection statistics ............................................................................................. 83
Chapter 13 DoS Defend Command ....................................................................... 84
ip dos-prevent ........................................................................................................................ 84
ip dos-prevent type ................................................................................................................ 84
show ip dos-prevent .............................................................................................................. 85
Chapter 14 IEEE 802.1X Commands ..................................................................... 86
dot1x system-auth-control ..................................................................................................... 86
dot1x auth-method ................................................................................................................ 86
dot1x guest-vlan(global) ........................................................................................................ 87
dot1x quiet-period .................................................................................................................. 88
dot1x timeout ......................................................................................................................... 88
dot1x max-reauth-req ............................................................................................................ 89
dot1x...................................................................................................................................... 89
dot1x guest-vlan(interface) .................................................................................................... 90
dot1x port-control .................................................................................................................. 90
V
dot1x port-method ................................................................................................................. 91
radius..................................................................................................................................... 92
radius server-account ............................................................................................................ 93
show dot1x global .................................................................................................................. 94
show dot1x interface ............................................................................................................. 94
show radius accounting ......................................................................................................... 95
show radius authentication .................................................................................................... 95
Chapter 15 System Log Commands ...................................................................... 96
logging buffer ......................................................................................................................... 96
logging file flash ..................................................................................................................... 97
logging file flash frequency .................................................................................................... 97
logging file flash level ............................................................................................................ 98
clear logging .......................................................................................................................... 98
logging host index ................................................................................................................. 99
show logging local-config .................................................................................................... 100
show logging loghost ........................................................................................................... 100
show logging buffer ............................................................................................................. 101
show logging flash ............................................................................................................... 101
Chapter 16 SSH Commands ................................................................................ 103
ip ssh server ........................................................................................................................ 103
ip ssh version ...................................................................................................................... 103
ip ssh algorithm ................................................................................................................... 104
ip ssh timeout ...................................................................................................................... 104
ip ssh max-client .................................................................................................................. 105
ip ssh download ................................................................................................................... 105
show ip ssh .......................................................................................................................... 106
Chapter 17 MAC Address Commands ................................................................. 107
mac address-table static ...................................................................................................... 107
mac address-table aging-time ............................................................................................. 108
mac address-table filtering .................................................................................................. 108
mac address-table max-mac-count ..................................................................................... 109
show mac address-table ...................................................................................................... 110
show mac address-table aging-time .................................................................................... 110
show mac address-table max-mac-count interface gigabitEthernet .................................... 111
show mac address-table interface gigabitEthernet .............................................................. 111
show mac address-table count ............................................................................................ 112
VI
show mac address-table address ........................................................................................ 112
show mac address-table vlan .............................................................................................. 113
Chapter 18 System Configuration Commands ...................................................... 113
system-time manual ............................................................................................................ 114
system-time ntp ................................................................................................................... 114
system-time dst predefined ................................................................................................. 116
system-time dst date ........................................................................................................... 117
system-time dst recurring .................................................................................................... 118
hostname ............................................................................................................................. 119
location ................................................................................................................................ 119
contact-info .......................................................................................................................... 120
ip management-vlan ............................................................................................................ 120
ip address ............................................................................................................................ 121
ip address-alloc dhcp .......................................................................................................... 121
ip address-alloc bootp ......................................................................................................... 122
reset .................................................................................................................................... 122
reboot .................................................................................................................................. 123
copy running-config startup-config ...................................................................................... 123
copy startup-config tftp ........................................................................................................ 124
copy tftp startup-config ........................................................................................................ 124
firmware upgrade ................................................................................................................ 125
ping ..................................................................................................................................... 126
tracert .................................................................................................................................. 127
show system-time ................................................................................................................ 127
show system-time dst .......................................................................................................... 128
show system-time ntp .......................................................................................................... 128
show system-info ................................................................................................................. 129
show running-config ............................................................................................................ 129
show cable-diagnostics interface ......................................................................................... 129
Chapter 19 IPv6 Address Configuration Commands ............................................ 131
ipv6 enable .......................................................................................................................... 131
ipv6 address autoconfig ....................................................................................................... 131
ipv6 address link-local ......................................................................................................... 132
ipv6 address dhcp ............................................................................................................... 132
ipv6 address ra .................................................................................................................... 133
ipv6 address eui-64 ............................................................................................................. 134
VII
ipv6 address ........................................................................................................................ 134
show ipv6 interface vlan ...................................................................................................... 135
Chapter 20 Ethernet Configuration Commands ................................................... 136
interface gigabitEthernet ...................................................................................................... 136
interface range gigabitEthernet ........................................................................................... 136
description ........................................................................................................................... 137
shutdown ............................................................................................................................. 137
flow-control .......................................................................................................................... 138
media-type ........................................................................................................................... 138
duplex .................................................................................................................................. 139
speed................................................................................................................................... 140
storm-control broadcast ....................................................................................................... 140
storm-control multicast ........................................................................................................ 141
storm-control unicast ........................................................................................................... 142
bandwidth ............................................................................................................................ 142
clear counters ...................................................................................................................... 143
show interface status ........................................................................................................... 144
show interface counters ....................................................................................................... 144
show interface description ................................................................................................... 145
show interface flowcontrol ................................................................................................... 145
show interface configuration ................................................................................................ 146
show storm-control .............................................................................................................. 146
show bandwidth ................................................................................................................... 147
Chapter 21 QoS Commands ................................................................................ 148
qos ...................................................................................................................................... 148
qos dscp .............................................................................................................................. 148
qos queue cos-map ............................................................................................................. 149
qos queue dscp-map ........................................................................................................... 150
qos queue mode .................................................................................................................. 151
show qos interface .............................................................................................................. 152
show qos cos-map .............................................................................................................. 152
show qos dscp-map ............................................................................................................ 153
show qos queue mode ........................................................................................................ 153
show qos status ................................................................................................................... 154
Chapter 22 Port Mirror Commands ...................................................................... 155
monitor session destination interface .................................................................................. 155
VIII
monitor session source interface ......................................................................................... 156
show monitor session .......................................................................................................... 157
Chapter 23 Port Isolation Commands .................................................................. 158
port isolation ........................................................................................................................ 158
show port isolation interface ................................................................................................ 158
Chapter 24 Loopback Detection Commands ....................................................... 160
loopback-detection(global) .................................................................................................. 160
loopback-detection interval .................................................................................................. 160
loopback-detection recovery-time ........................................................................................ 161
loopback-detection(interface) .............................................................................................. 161
loopback-detection config .................................................................................................... 162
loopback-detection recover ................................................................................................. 162
show loopback-detection global .......................................................................................... 163
show loopback-detection interface ...................................................................................... 163
Chapter 25 PoE Commands ................................................................................ 165
power inline consumption (global) ....................................................................................... 165
power inline disconnect-method .......................................................................................... 165
power profile ........................................................................................................................ 166
power time-range ................................................................................................................ 167
power holiday ...................................................................................................................... 168
absolute ............................................................................................................................... 168
periodic ................................................................................................................................ 169
holiday ................................................................................................................................. 170
power inline consumption(interface) .................................................................................... 170
power inline priority ............................................................................................................. 171
power inline supply .............................................................................................................. 172
power inline profile .............................................................................................................. 172
power inline time-range ....................................................................................................... 173
show power inline ................................................................................................................ 173
show power inline configuration interface ............................................................................ 174
show power inline information interface............................................................................... 174
show power profile .............................................................................................................. 174
show power holiday ............................................................................................................. 175
show power time-range ....................................................................................................... 175
Chapter 26 ACL Commands ................................................................................ 176
IX
time-range ........................................................................................................................... 176
absolute ............................................................................................................................... 176
periodic ................................................................................................................................ 177
holiday ................................................................................................................................. 178
holiday(global) ..................................................................................................................... 178
access-list create ................................................................................................................. 179
mac access-list .................................................................................................................... 179
access-list standard ............................................................................................................. 180
access-list extended ............................................................................................................ 181
rule ...................................................................................................................................... 182
access-list policy name ........................................................................................................ 183
access-list policy action ....................................................................................................... 184
redirect interface .................................................................................................................. 184
redirect vlan ......................................................................................................................... 185
s-condition ........................................................................................................................... 185
s-mirror ................................................................................................................................ 186
qos-remark .......................................................................................................................... 186
access-list bind(interface) .................................................................................................... 187
access-list bind(vlan) ........................................................................................................... 188
show time-range .................................................................................................................. 188
show holiday ........................................................................................................................ 188
show access-list .................................................................................................................. 189
show access-list policy ........................................................................................................ 189
show access-list bind .......................................................................................................... 190
Chapter 27 MSTP Commands ............................................................................. 191
spanning-tree(global) ........................................................................................................... 191
spanning-tree(interface) ...................................................................................................... 191
spanning-tree common-config ............................................................................................. 192
spanning-tree mode ............................................................................................................. 193
spanning-tree mst configuration .......................................................................................... 193
instance ............................................................................................................................... 194
name ................................................................................................................................... 195
revision ................................................................................................................................ 195
spanning-tree mst instance ................................................................................................. 196
spanning-tree mst ................................................................................................................ 196
spanning-tree priority ........................................................................................................... 197
spanning-tree tc-defend ....................................................................................................... 198
X
spanning-tree timer .............................................................................................................. 198
spanning-tree hold-count ..................................................................................................... 199
spanning-tree max-hops ...................................................................................................... 200
spanning-tree bpdufilter ....................................................................................................... 200
spanning-tree bpduguard .................................................................................................... 201
spanning-tree guard loop ..................................................................................................... 201
spanning-tree guard root ..................................................................................................... 202
spanning-tree guard tc ......................................................................................................... 202
spanning-tree mcheck ......................................................................................................... 203
show spanning-tree active ................................................................................................... 203
show spanning-tree bridge .................................................................................................. 204
show spanning-tree interface .............................................................................................. 204
show spanning-tree interface-security ................................................................................. 205
show spanning-tree mst ...................................................................................................... 205
Chapter 28 IGMP Snooping Commands .............................................................. 207
ip igmp snooping(global) ..................................................................................................... 207
ip igmp snooping(interface) ................................................................................................. 207
ip igmp snooping immediate-leave ...................................................................................... 208
ip igmp snooping drop-unknown .......................................................................................... 208
ip igmp snooping vlan-config ............................................................................................... 209
ip igmp snooping multi-vlan-config ...................................................................................... 210
ip igmp snooping filter add-id ..............................................................................................