Page 2 - UMN:CLI User Manual; Important Notice on Product Safety; The same text in German:
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 2 A50010-Y3-C150-2-7619 Important Notice on Product Safety Elevated voltages are inevitably present at specific points in this electrical equipment. Some of the parts may also have elevated operating temperatures. Non-observance of these conditions...
Page 4 - Contents
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 4 A50010-Y3-C150-2-7619 This document consists of a total 381 pages. All pages are issue 2. Contents 1 Introduction ....................................................................................................... 20 1.1 Audience ...............
Page 17 - Illustrations
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 17 Illustrations Fig. 2.1 Network Structure with hiD 6615 S223/S323 .................................................23 Fig. 3.1 Software mode structure ............................................................................
Page 19 - Tables
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 19 Tables Tab. 1.1 Overview of Chapters.....................................................................................20 Tab. 1.2 Command Notation of Guide Book ..............................................................
Page 20 - Introduction; Ethernet networking technology and standards; Structure; Overview of Chapters
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 20 A50010-Y3-C150-2-7619 1 Introduction 1.1 Audience This manual is intended for SURPASS hiD 6615 S223/S323 single-board Fast Ethernet switch operators and maintenance personnel for providers of Ethernet services. This manual assumes that you are f...
Page 21 - Convention; Information; Notation; Command Notation of Guide Book; CE Declaration of Conformity
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 21 1.3 Document Convention This guide uses the following conventions to convey instructions and information. Information This information symbol provides useful information when using commands to configure and means reader tak...
Page 22 - Warranty
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 22 A50010-Y3-C150-2-7619 1.6 GPL/LGPL Warranty and Liability Exclusion The Siemens product, SURPASS hiD 6615, contains both proprietary software and “Open Source Software”. The Open Source Software is licensed to you at no charge under the GNU Gene...
Page 24 - Features; VLAN
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 24 A50010-Y3-C150-2-7619 2.1 System Features Main features of hiD 6615 S223/S323, having Fast Ethernet switch and Layer 3 switching function which supports both Ethernet switching and IP routing, are follow. Routing functionalities such as RIP, OSP...
Page 27 - Mode
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 27 3 Command Line Interface (CLI) This chapter describes how to use the Command Line Interface (CLI) which is used to configure the hiD 6615 S223/S323 system. • Command Mode • Useful Tips 3.1 Command Mode You can configure and...
Page 29 - Privileged EXEC View Mode; Privileged EXEC Enable Mode; enable; Global Configuration Mode; configure terminal
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 29 3.1.1 Privileged EXEC View Mode When you log in to the switch, the CLI will start with Privileged EXEC View mode that is a read-only mode. In this mode, you can see a system configuration and information with several comman...
Page 30 - Configuration Mode; Bridge Configuration; bridge
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 30 A50010-Y3-C150-2-7619 Tab. 3.3 shows a couple of important main commands of Global Configuration mode. Command Description access-list Configures policy to limit routing information on the standard of AS. arp Registers IP address and MAC address...
Page 31 - Rule Configuration Mode; rule
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 31 Tab. 3.4 shows a couple of main commands of Bridge Configuration mode. Command Description auto-reset Configures the system for automatic rebooting dhcp-server-filter Configures packet filtering of DHCP server. erp Configur...
Page 32 - ip dhcp pool; DHCP Option 82 Configuration Mode; ip dhcp option82
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 32 A50010-Y3-C150-2-7619 3.1.6 DHCP Configuration Mode To open DHCP Configuration mode, use the command, ip dhcp pool POOL , on Global Configuration mode as follow. Then the prompt is changed from SWITCH(config)# to SWITCH(config-dhcp[POOL])#. Comm...
Page 33 - interface; RMON Configuration Mode
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 33 3.1.8 Interface Configuration Mode To open Interface Configuration mode, enter the command, interface INTERFACE , on Global Configuration mode, and then the prompt is changed from SWITCH(config)# to SWITCH(config-if)#. Comm...
Page 34 - Configuration
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 34 A50010-Y3-C150-2-7619 3.1.10 Router Configuration Mode To open Router Configuration mode, use the following command. The system prompt is changed from SWITCH(config)# to SWITCH(config-router)#. Command Mode Description router IP-PROTOCOL Global ...
Page 35 - Route-Map Configuration Mode; Route-map Configuration; Route-map Configuration
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 35 3.1.12 Route-Map Configuration Mode To open Route-map Configuration mode, use the following command. The prompt is changed from SWITCH(config)# to SWITCH(config-route-map)#. Command Mode Description route-map NAME { permit ...
Page 36 - Tips; Available; ENTER
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 36 A50010-Y3-C150-2-7619 3.2 Useful Tips This section provides useful functions for user’s convenience while using CLI commands. They are as follow. • Listing Available Commands • Calling Command History • Using Abbreviation • Using Command of Priv...
Page 37 - Privileged EXEC; ” in; write; . Please note that you must; Calling Command History; row key, the latest command you used will be displayed one by one.
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 37 Command Mode Description show list Shows available commands of the current mode. show cli All Shows available commands of the current mode with tree structure. The following is an example of displaying list of available com...
Page 39 - Exit Current Command Mode; To exit to the previous command mode, use the following command.; If you use the command,; exit; Privileged EXEC View
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 39 3.2.5 Exit Current Command Mode To exit to the previous command mode, use the following command. Command Mode Description exit Exits to the previous command mode. end All Exits to Privileged EXEC enable mode. If you use the...
Page 40 - System Connection and IP Address; Connection; Login; Step 1; Step 3
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 40 A50010-Y3-C150-2-7619 4 System Connection and IP Address 4.1 System Connection After installing switch, the hiD 6615 S223/S323 is supposed to examine that each port is rightly connected to network and management PC. And then, user connects to sy...
Page 41 - password enable
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 41 4.1.2 Password for Privileged EXEC Mode You can configure a password to enhance the security for Privileged EXEC Enable mode. To configure a password for Privileged EXEC Enable mode, use the following command. Command Mode ...
Page 42 - Management for System Account; System
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 42 A50010-Y3-C150-2-7619 To disable password encryption, use the following command. Command Mode Description no service password-encryption Global Disables password encryption. 4.1.3 Changing Login Password To configure a password for created accou...
Page 45 - To delete a configured security level, use the following command.
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 45 To delete a configured security level, use the following command. Command Mode Description no privilege Deletes all configured security levels. no privilege bgp level <0-15> { COMMAND | all } no privilege bridge level...
Page 46 - The following is an example of creating the system account
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 46 A50010-Y3-C150-2-7619 To display a configured security level, use the following command. Command Mode Description show privilege Shows a configured security level. show privilege now View Enable Global Shows a security level of current mode. The...
Page 47 - Limiting Number of User; Access
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 47 leged EXEC Enable mode; however as level 1, it is possible to use not only the com- mands in level 1 but also time configuration commands in Privileged EXEC Enable mode and accessing commands to Global Configuration mode. 4...
Page 48 - Rebooting; Manual System Rebooting; To restart the system manually, use the following command.
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 48 A50010-Y3-C150-2-7619 4.1.7 Auto Log-out For security reasons of the hiD 6615 S223/S323, if no command is entered within the configured inactivity time, the user is automatically logged out of the system. Administra-tor can configure the inactiv...
Page 49 - Auto System Rebooting; Authentication
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 49 4.1.8.2 Auto System Rebooting The hiD 6615 S223/S323 reboots the system according to user’s configuration. There are two basises for system rebooting. These are CPU and memory. CPU is rebooted in case CPU Load or Interrupt ...
Page 50 - Method; Interface
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 50 A50010-Y3-C150-2-7619 4.2.1 Authentication Method To set the system authentication method, use the following command. Command Mode Description login { local | remote } { radius | tacacs | host | all } enable Set the system authentication method....
Page 51 - Server; RADIUS Server for System Authentication; RADIUS Server Priority; Timeout of Authentication Request; To specify a timeout value, use the following command.
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 51 4.2.4 RADIUS Server 4.2.4.1 RADIUS Server for System Authentication To add/delete the RADIUS server for system authentication, use the following command. Command Mode Description login radius server A.B.C.D KEY Adds the RAD...
Page 52 - of; TACACS Server for System Authentication; TACACS Server Priority
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 52 A50010-Y3-C150-2-7619 4.2.4.4 Frequency of Retransmit If there is no response from RADIUS server, the hiD 6615 S223/S323 is supposed to re-transmit an authentication request. To set the frequency of retransmitting an authentica-tion request, use...
Page 53 - To define the priority level of user, use the following command.
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 53 To specify a timeout value, use the following command. Command Mode Description login tacacs timeout <1-100> Global Specifies a timeout value. 1-100: waiting-time for the response (default: 3) 4.2.5.4 Additional TACAC...
Page 54 - To set an accounting mode, use the following command.
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 54 A50010-Y3-C150-2-7619 4.2.6 Accounting Mode The hiD 6615 S223/S323 provides the accounting function of AAA (Authentication, Au-thorization, and Accounting). Accounting is the process of measuring the resources a user has consumed. Typically, acc...
Page 55 - [Sample Configuration 1] Configuration RADIUS server; Displayed according to priority.
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 55 4.2.8 Sample Configuration [Sample Configuration 1] Configuration RADIUS server The following is an example of configuring authorization method in SURPASS hiD 6615. It is configured to add RADIUS to default method in case o...
Page 56 - IP; Displayed according to the priority
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 56 A50010-Y3-C150-2-7619 [Sample Configuration 2] Configuration TACACS+ server The following is an example of configuring authorization method as TACACS+. SWITCH(config)# user add user test1 Changing password for user Enter the new password (minimu...
Page 57 - Interface Configuration Mode; Interface Configuration; Interface Configuration
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 57 place with TCP/IP through SNMP or telnet, it requires IP address. You can enable interface to communicate with switch interface on network and assign IP address as the following: • Enabling Interface • Disabling Interface •...
Page 58 - To disable the assigned IP address, use the following command.; Static Route and Default Gateway; To configure static route, use the following command.; To configure default gateway, use the following command on
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 58 A50010-Y3-C150-2-7619 4.3.3 Assigning IP Address to Network Interface After enabling interface, you need to assign IP address. To assign IP address to specified network interface, use the following command. Command Mode Description ip address IP...
Page 59 - To display configured static route, use the following command.; Forwarding
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 59 The following is an example of configuring static route to reach three destinations, which are not directly connected. SWITCH(config)# ip route 100.1.1.0/24 10.1.1.2 SWITCH(config)# ip route 200.1.1.0/24 20.1.1.2 SWITCH(con...
Page 60 - The followings are examples of enabling interface 1 in two ways.; The following is an example of configuring default gateway.
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 60 A50010-Y3-C150-2-7619 4.3.7 Displaying Interface To display interface status and configuration, use the following command. Command Mode Description show interface [ INTERFACE ] Enable Global Interface Shows interface status and configuration. IN...
Page 61 - Enabling SSH Server; Displaying Connection History of SSH Client
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 61 4.4 SSH (Secure Shell) Network security is getting more important according to using network has been general-ized between users. However, typical FTP and telnet service has weakness for security. SSH (Secure Shell) is secu...
Page 62 - Assigning Specific Authentication Key; Client; Login to SSH Server; Copy
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 62 A50010-Y3-C150-2-7619 4.4.1.5 Assigning Specific Authentication Key After enabling ssh server, each client will upload generated key. The ssh server can as-sign specific key among the uploaded keys from several clients. To verify Authentication ...
Page 63 - Configure the authentication key in the switch.; Connect to SSH server with the authentication key.
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 63 To configure authentication key in the hiD 6615 S223/S323, use the following command. Command Mode Description ssh keygen { rsa1 | rsa | dsa } Global Configures authentication key. rsa1: SSH ver. 1 public key for the authen...
Page 64 - EAPOL
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 64 A50010-Y3-C150-2-7619 4.5 802.1x Authentication To enhance security and portability of network management, there are two ways of au-thentication based on MAC address and port-based authentication which restrict clients attempting to access to po...
Page 65 - RADIUS; RADIUS Servers; Authentication request; Multiple Authentication Servers
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 65 4.5.1 802.1x Authentication 4.5.1.1 Enabling 802.1x To configure 802.1x, the user should enable 802.1x daemon first. In order to enable 802.1x daemon, use the following command. Command Mode Description dot1x system-auth-co...
Page 67 - Port; Authorization; Follows the authentication of RADIUS server.
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 67 4.5.1.4 Authentication Port After configuring 802.1x authentication mode, you should select the authentication port. Command Mode Description dot1x nas-port PORTS Designates 802.1x authentication port. no dot1x nas-port POR...
Page 68 - Configuring Number of Request to RADIUS Server; Configuring Interval of Request to RADIUS Server; Configure the interval of re-authentication; Executing 802.1x re-authenticating regardless of the interval
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 68 A50010-Y3-C150-2-7619 4.5.1.7 Configuring Number of Request to RADIUS Server After 802.1x authentication configured as explained above and the user tries to connect with the port, the process of authentication is progressed among user’s PC and t...
Page 73 - Basic; on; Selecting Port Type
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 73 5 Port Configuration It is possible for user to configure basic environment such as auto-negotiate, transmit rate, and flow control of the hiD 6615 S223/S323 port. Also, it includes instructions how to con-figure port mirro...
Page 74 - Ethernet Port Configuration; Enabling Ethernet Port; The following is an example of disabling the Ethernet port 1 to 3.
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 74 A50010-Y3-C150-2-7619 Command Mode Description port medium PORT { sfp | rj45 } Bridge Selects port type (Default: RJ45) To view the configuration of switch port type, use the following command. Command Mode Description show port medium Enable Gl...
Page 75 - Rate; To set transmit rate of Ethernet port, use the following command.
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 75 5.2.2 Auto-negotiation Auto-negotiation is a mechanism that takes control of the cable when a connection is es-tablished to a network device. Auto-negotiation detects the various modes that exist in the network device on th...
Page 76 - To set duplex mode, use the following command.; Control
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 76 A50010-Y3-C150-2-7619 SWITCH(bridge)# show port 1 ------------------------------------------------------------------- NO TYPE PVID STATUS MODE FLOWCTRL INSTALLED (ADMIN/OPER) ------------------------------------------------------------------- 1:...
Page 77 - The following is an example of configuring flow control to port 25.; Description; To view description of port, use the following command.
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 77 To configure flow control of the Ethernet port, use the following command. Command Mode Description port flow-control PORTS { on | off } Bridge Configures flow control for a specified port, enter the port number. (default: ...
Page 78 - Statistics; The Packets Statistics
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 78 A50010-Y3-C150-2-7619 5.2.7 Traffic Statistics 5.2.7.1 The Packets Statistics To display traffic statistic of each port or interface with MIB or RMON MIB data defined, use the following commands. Command Mode Description show port statistics avg...
Page 79 - To enable/disable protocol statistics
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 79 Otherwise, to clear all recorded statistics of port and initiate, use the following command. Command Mode Description clear port statistics { PORTS | all } Enable Global Bridge Clears all recorded port statistics. 5.2.7.2 T...
Page 80 - Status; To display a port status, use the following command.; Initializing Port Statistics; Mirroring
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 80 A50010-Y3-C150-2-7619 5.2.8 Port Status To display a port status, use the following command. Command Mode Description show port PORTS Shows configured state of port, enter the port number. show port description [ PORTS ] Shows port specific desc...
Page 81 - Designate the monitor port, use the following command.; Designate the mirrored ports, use the following command.
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 81 Fig. 5.2 Port Mirroring To configure port mirroring, designate mirrored ports and monitor port. Then enable port mirroring function. Monitor port should be connected to the watch program installed PC. You can designate only...
Page 83 - Name; Time and Date
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 83 6 System Environment 6.1 Environment Configuration You can configure a system environment of the hiD 6615 S223/S323 with the following items: • Host Name • Time and Date • Time Zone • Network Time Protocol • Simple Network ...
Page 84 - Zone; World Time Zone; Network Time Protocol; To enable/disable the NTP function, use the following command.
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 84 A50010-Y3-C150-2-7619 The following is an example of setting system time and date as 10:20pm, July 4th, 2005. SWITCH# clock 06 Mar 2006 10:20 Mon, 6 Mar 2006 10:20:00 GMT+0000 SWITCH# 6.1.3 Time Zone The hiD 6615 S223/S323 provides three kinds o...
Page 85 - To display a configured NTP, use the following command.; The following is an example of releasing NTP and showing it.
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 85 To display a configured NTP, use the following command. Command Mode Description show ntp Enable Global Shows a configured NTP function. The following is an example of configuring 203.255.112.96 as NTP server, running it an...
Page 86 - To display SNTP configuration, use the following command.
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 86 A50010-Y3-C150-2-7619 always correct and there won't be any subsequent time jumps after the initial correction. Unlike NTP, SNTP usually uses just one Ethernet Time Server to calculate the time and then it "jumps" the system time to the ...
Page 87 - Banner; To set system login and log-out banner, use the following command.; To set a DNS server, use the following command.
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 87 6.1.8 Login Banner It is possible to set system login and log-out banner. Administrator can leave a message to other users with this banner. To set system login and log-out banner, use the following command. Command Mode De...
Page 88 - Operation; You can display PID of daemon with the; Threshold; Load; To set a threshold of CPU load, use the following command.
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 88 A50010-Y3-C150-2-7619 Command Mode Description no dns Global Deletes DNS server and domain name. 6.1.10 Fan Operation In hiD 6615 S223/S323, it is possible to control fan operation. To control fan operation, use the following command. Command Mo...
Page 89 - Traffic; To set a threshold of port traffic, use the following command.; When you set a threshold of fan operation,
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 89 To show a configured threshold of CPU load, use the following command. Command Mode Description show cpuload All Shows a configured threshold of CPU load. 6.1.12.2 Port Traffic To set a threshold of port traffic, use the fo...
Page 90 - Temperature; Memory; Enabling FTP Server; The follwing is an example of displaying the status of FTP server.
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 90 A50010-Y3-C150-2-7619 6.1.12.4 System Temperature To set a threshold of system temperature, use the following command. Command Mode Description threshold temp VALUE VALUE Sets a threshold of system temperature in the unit of centigrade (°C). VAL...
Page 91 - Assigning IP Address of FTP Client; Management; Displaying System Configuration
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 91 6.1.14 Assigning IP Address of FTP Client Serveral IP addresses can be assigned on hiD 6615 S223/S323. But user can specify one source IP address connecting FTP server when the switch is a client. To configure FTP binding a...
Page 92 - System Configuration; When you use the command,; , make sure there is no key input until; System Configuration File; To manage a system configuration file, use the following command.
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 92 A50010-Y3-C150-2-7619 The following is an example to display a configuration of syslog. SWITCH# show running-config syslog ! syslog start syslog output info local volatile syslog output info local non-volatile ! SWITCH# 6.2.2 Saving System Confi...
Page 93 - Restoring Default Configuration
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 93 To back up a system configuration file using FTP or TFTP, use the following command. Command Mode Description copy { ftp | tftp } config upload { FILE-NAME | startup-config } Uploads a file to ftp or fttp server with a name...
Page 94 - ping
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 94 A50010-Y3-C150-2-7619 After restoring a default configuration, you need to restart the system to initiate. The following is an example of restoring a default configuration of the system. SWITCH(config)# restore factory-defaults You have to resta...
Page 95 - The following is the basic information to operate ping test.; Options for Ping
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 95 The following is the basic information to operate ping test. Items Description Protocol [ip] Supports ping test. Default is IP. Target IP address Sends ICMP echo message by inputting IP address or host name of destination i...
Page 96 - Options for Ping for Multiple IP Addresses
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 96 A50010-Y3-C150-2-7619 The following is the information to use ping test for multiple IP addresses. Items Description Source address or interface Designates the address where the relative device should respond in source ip address. Type of servic...
Page 97 - IP ICMP Source-Routing; Ping Test for Network Status; PC
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 97 6.3.2 IP ICMP Source-Routing If you implement PING test to verify the status of network connection, icmp request ar-rives at the final destination as the closest route according to the routing theory. Fig. 6.1 Ping Test for...
Page 98 - Tracing Packet Route; traceroute
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 98 A50010-Y3-C150-2-7619 To perform ping test as the route which the manager designated, use the following steps. Step 1 Enable IP source-routing function from the equipment connected to PC which the PING test is going to be performed. To enable/di...
Page 99 - User; Table
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 99 The following is an example of tracing packet route sent to 10.2.2.20. SWITCH# traceroute 10.2.2.20 traceroute to 10.2.2.20 (10.2.2.20), 30 hops max, 38 byte packets 1 10.2.2.20 (10.2.2.20) 0.598 ms 0.418 ms 0.301 ms SWITCH...
Page 100 - Ageing; To specify the Ageing time, use the following command.; Running Time of System; To display running time of the system, use the following command.; To display the system information, use the following command.
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 100 A50010-Y3-C150-2-7619 6.3.6 Configuring Ageing time SURPASS hiD 6615 records MAC Table to prevent Broadcast packets from transmitting. And unnecessary MAC address that does not response during specified time is deleted from the MAC table automa...
Page 101 - System Memory Information; To display a system memory status, use the following command.; CPU packet limit; To limit the packets of CPU, use the following command.; Average of CPU Load
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 101 6.3.9 System Memory Information To display a system memory status, use the following command. Command Mode Description show memory Shows system memory information. show memory { bgp | dhcp | imi | lib | nsm | ospf | pim | ...
Page 102 - Displaying System Image; To check a current system image version, use the following command.; Installed; To display utilization of flash memory, use the followng command.; OS
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 102 A50010-Y3-C150-2-7619 The following is an example of displaying information of the running processes. SWITCH# show process USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND admin 1 0.2 0.2 1448 596 ? S 20:12 0:05 init [3] admin 2 0.0 0.0 0...
Page 104 - Simple Network Management Protocol (SNMP); Community; Global configuration
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 104 A50010-Y3-C150-2-7619 7 Network Management 7.1 Simple Network Management Protocol (SNMP) Simple Network Management Protocol (SNMP) system is consisted of three parts: SNMP manager, a managed device and SNMP agent. SNMP is an application-layer p...
Page 105 - Information of SNMP Agent; To set basic information of SNMP agent, use the following command.
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 105 To display a configured SNMP community, use the following command. Command Mode Description show snmp community Enable Global Shows a created SNMP community. The following is an example of creating 2 SNMP communities. SWIT...
Page 106 - Com2sec; com2sec; Group
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 106 A50010-Y3-C150-2-7619 7.1.3 SNMP Com2sec SNMP v2 authorizes the host to access the agent according to the identity of the host and community name. The command, com2sec , specifies the mapping from the identity of the host and community name to ...
Page 107 - To configure an SNMP view record, use the following command.; To display a created SNMP view record, use the following command.; The following is an example of creating an SNMP view record.; Permission to Access SNMP View Record
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 107 7.1.5 SNMP View Record You can create an SNMP view record to limit access to MIB objects with object identity (OID) by an SNMP manager. To configure an SNMP view record, use the following command. Command Mode Description ...
Page 108 - SNMP Version 3 User; To create/delete SNMP version 3 user, use the following command.; To display SNMP version 3 user, use the following command.; Trap
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 108 A50010-Y3-C150-2-7619 To display a granted an SNMP group to access a specific SNMP view record, use the fol-lowing command. Command Mode Description show snmp access Enable Global Shows a granted an SNMP group to access a specific SNMP view rec...
Page 110 - Enabling SNMP Trap; authentication-failure
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 110 A50010-Y3-C150-2-7619 7.1.8.3 Enabling SNMP Trap The system provides various kind of SNMP trap, but it may inefficiently work if all these trap messages are sent very frequently. Therefore, you can select each SNMP trap sent to an SNMP trap hos...
Page 111 - Disabling SNMP Trap; To disable SNMP trap, use the following command.; When you use the; no snmp; command, all configurations concerning SNMP will be
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 111 snmp trap dhcp-lease Configures the system to send SNMP trap when no more IP address that can be assigned in the subnet of DHCP server is left. snmp trap fan Configures the system to send SNMP trap when the fan begins to o...
Page 112 - SNMP; To display a configuration of SNMP trap, use the following command.; Alarm
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 112 A50010-Y3-C150-2-7619 7.1.8.5 Displaying SNMP Trap To display a configuration of SNMP trap, use the following command. Command Mode Description show snmp trap Enable Global Shows a configuration of SNMP trap. The following is an example of conf...
Page 113 - To configure a priority of alarm, use the following command.; Severity; you will see only an alarm whose severity is; The order of alarm severity is
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 113 7.1.9.2 Default Alarm Severity To configure a priority of alarm, use the following command. Command Mode Description snmp alarm-severity default { critical | major | minor | warning | intermediate } Global Configures the p...
Page 114 - To configure generic alarm severity, use the following command.
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 114 A50010-Y3-C150-2-7619 7.1.9.4 Generic Alarm Severity To configure generic alarm severity, use the following command. Command Mode Description snmp alarm-severity fan-fail { critical | major | minor | warning | intermediate } Configures the prio...
Page 117 - STP Guard Alarm Severity; Displaying SNMP Configuration; To display all configurations of SNMP, use the following command.
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 117 Command Mode Description snmp alarm-severity erp-domain-reach-fail { critical | major | minor | warning | intermedi- ate } Sends alarm notification with the sever-ity when there is disconnection between ERP domains snmp al...
Page 118 - To display a current alarm report, use the following command.; To disable SNMP feature, use the following command.
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 118 A50010-Y3-C150-2-7619 To display a configured severity of alarm, use the following commands. Command Mode Description show snmp alarm-severity Enable Global Shows a configured severity of alarm. To deletes a recorded alarm in the system, use th...
Page 119 - Loopback; To enable/disable local OAM function, use the following command.
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 119 7.2 Operation, Administration and Maintenance (OAM) In the enterprise, Ethernet links and networks have been managed via Simple Network Management Protocol (SNMP). Although SNMP provides a very flexible management so-lutio...
Page 120 - Local OAM Mode; To configure Local OAM, use the following command.; Unidirection; To configure the mode of remote OAM, use the following command.
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 120 A50010-Y3-C150-2-7619 7.2.2 Local OAM Mode To configure Local OAM, use the following command. Command Mode Description oam local mode { active | passive } PORTS Bridge Configures the mode of local OAM. Both request and loopback are possible for...
Page 121 - Displaying OAM Configuration; To display OAM configuration, use the following command.
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 121 To display the information of peer host using OAM function, use the following command. Command Mode Description oam remote alarm optical <1-3> <0-65535> PORTS oam remote alarm temperature <0-255> PORTS oa...
Page 123 - If you activated LLDP on a port, configure LLDP operation type.; To configure how to operate LLDP, use the following command.; TLV
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 123 7.3 Link Layer Discovery Protocol (LLDP) Link Layer Discovery Protocol (LLDP) is the function of transmitting data for network management for the switches connected in LAN according to IEEE 802.1ab standard. 7.3.1 LLDP Ope...
Page 124 - Message; Default for sending LLDP message is 4 times in every 30 seconds.; Interval and Delay Time
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 124 A50010-Y3-C150-2-7619 In hiD 6615 S223/S323, the administrator can enable and disable basic TLV by selecting it. To enable basic TLV by selecting it, use the following command. Command Mode Description lldp enable PORTS { portdescrip- tion | sy...
Page 125 - Displaying LLDP Configuration; To display LLDP configuration, use the following command.; The following is to configure to enable LLDP function on
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 125 7.3.6 Displaying LLDP Configuration To display LLDP configuration, use the following command. Command Mode Description show lldp config PORTS Shows LLDP configuration. show lldp remote PORTS Show statistics for remote entr...
Page 126 - Monitoring; History; RMON-history Configuration
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 126 A50010-Y3-C150-2-7619 7.4 Remote Monitoring (RMON) Remote Monitoring (RMON) is a function to monitor communication status of devices connected to Ethernet at remote place. While SNMP can give information only about the device mounted SNMP agent...
Page 127 - Source Port of Statistical Data; Subject of RMON History; To identify subject using RMON history, use the following command.; Number of Sample Data; Interval of Sample Inquiry
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 127 want to list available commands. The following is an example of listing available commands on RMON Configuration mode. SWITCH(config-rmonhistory[5])# ? RMON history configuration commands: active Activate the history data-...
Page 128 - Activating RMON History; To activate RMON history, use the following command.; Deleting Configuration of RMON History; To delete RMON history, use the following command.; To display RMON history, use the following command.; The following is an example of displaying RMON history.
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 128 A50010-Y3-C150-2-7619 1 sec is the minimum time which can be selected. But the minimum sampling interval currently is 30 sec, i.e., all intervals will be round up to a multiple of 30 seconds. 7.4.1.5 Activating RMON History To activate RMON his...
Page 129 - Absolute Comparison; : Comparing sample data with the threshold at configured in-; Delta Comparison; : Comparing difference between current data and the latest data; The following is an example of listing available commands on; Subject of RMON Alarm
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 129 7.4.2 RMON Alarm There are two ways to compare with the threshold: absolute comparison and delta com-parison. • Absolute Comparison : Comparing sample data with the threshold at configured in- terval, if the data is more t...
Page 130 - Object of Sample Inquiry
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 130 A50010-Y3-C150-2-7619 7.4.2.2 Object of Sample Inquiry User needs object value used for sample inquiry to provide RMON Alarm. The following is rule of object for sample inquiry. To assign object used for sample inquiry, use the follow-ing comma...
Page 131 - Lower Bound of Threshold; Configuring Standard of the First Alarm
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 131 7.4.2.5 Lower Bound of Threshold If you need to occur alarm when object used for sample inquiry is less than lower bound of threshold, you should configure lower bound of threshold. To configure lower bound of threshold, u...
Page 132 - Event; You need to open
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 132 A50010-Y3-C150-2-7619 To configure interval of sample inquiry for RMON alarm, use the following command. Command Mode Description sample-interval <0-65535> RMON Configures interval of sample inquiry. (unit: second) 7.4.2.8 Activating RMON...
Page 133 - To make a description about event, use the following command.; Subject of RMON Event; Type; To configure event type, use the following command.; Activating RMON Event
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 133 To configure community for trap message transmission, use the following command. Command Mode Description community NAME RMON Configures password for trap message transmission right. NAME: community name 7.4.3.2 Event Desc...
Page 134 - Deleting Configuration of RMON Event; To delete RMON event, use the following command.; To display RMON alarm, use the following command.
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 134 A50010-Y3-C150-2-7619 Command Mode Description active RMON Activates RMON event. 7.4.3.6 Deleting Configuration of RMON Event Before changing the configuration of RMON event, you should delete RMON event of the number and configure it again. To...
Page 135 - Syslog Output Level; Syslog Output Level without a Priority
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 135 7.5 Syslog The syslog is a function that allows the network element to generate the event notification and forward it to the event message collector like a syslog server. This function is enabled as default, so even though...
Page 136 - The order of priority is
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 136 A50010-Y3-C150-2-7619 Syslog Output Level with a Priority To set a user-defined syslog output level with a priority, use the following command. Command Mode Description syslog output priority { auth | authpriv | cron | daemon | kern | local1 | ...
Page 137 - Code; To set a facility code, use the following command.; Bind
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 137 The following is an example of configuring syslog message to send all logs higher than notice to remote host 10.1.1.1 and configuring local1.info to transmit to console. SWITCH(config)# syslog output notice remote 10.1.1.1...
Page 138 - Debug Message for Remote Terminal; To disable the syslog manually, use the following command.; Displaying Syslog Message; Syslog Configuration
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 138 A50010-Y3-C150-2-7619 7.5.4 Debug Message for Remote Terminal To display a syslog debug message to a remote terminal, use the following command. Command Mode Description terminal monitor Enables a terminal monitor function. no terminal monitor ...
Page 139 - Rule and QoS; How to Operate Rule and QoS; mirror
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 139 7.6 Rule and QoS The hiD 6615 S223/S323 provides rule and QoS feature for traffic management. The rule classifies incoming traffic, and then processes the traffic according to user-defined poli-cies. You can use the physic...
Page 140 - Creation; Rule Configuration; apply; Priority
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 140 A50010-Y3-C150-2-7619 • Scheduling Algorithm To handle overloading of traffics, you need to configure differently processing orders of graphic by using scheduling algorithm. The hiD 6615 S223/S323 provides: – Strict Priority Queuing (SPQ) – Wei...
Page 141 - Classification
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 141 7.6.2.3 Packet Classification After configuring a packet classification for a rule, then configure how to process the packets. To specify a packet-classifying pattern, use the following command. When specifying a source an...
Page 143 - Action; To specify a rule action (; match; ) for the packets matching configured classifying patterns,
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 143 7.6.2.4 Rule Action To specify a rule action ( match ) for the packets matching configured classifying patterns, use the following command. Command Mode Description match deny Denies a packet. match permit Permits a packet...
Page 144 - not; matching configured classifying
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 144 A50010-Y3-C150-2-7619 To delete a specified rule action ( match ), use the following command. Command Mode Description no match deny no match permit no match redirect no match mirror no match dscp no match cos no match ip-prec no match bandwidt...
Page 145 - show rule; Modifying and Deleting Rule
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 145 To delete a specified rule action ( no-match ), use the following command. Command Mode Description no no-match deny no no-match redirect no no-match mirror no no-match dscp no no-match cos no no-match ip-prec no no-match ...
Page 147 - Algorithm; Weighted Round Robin
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 147 7.6.3.1 Scheduling Algorithm To process incoming packets by the queue scheduler, the hiD 6615 S223/S323 provides the scheduling algorithm as Strict Priority Queuing (SP), Weighted Round Robin (WRR) and Weighted Fair Queuin...
Page 148 - Output Scheduler; Strict Priority Queuing
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 148 A50010-Y3-C150-2-7619 Fig. 7.2 Weighted Fair Queuing Strict Priority Queuing (SP) SPQ processes first more important data than the others. Since all data are processed by their priority, data with high priority can be processed fast but data wi...
Page 149 - WRR; . And it is possible to assign a different scheduling; Weight
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 149 To select a packet scheduling mode, use the following command. Command Mode Description qos scheduling-mode { sp | wrr } Selects a packet scheduling mode for a ports: sp: strict priority queuing wrr: weighted round robin q...
Page 150 - Parameter; To configure a queue parameter, use the following command.; QoS; To display a configuration of QoS, enter following command.
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 150 A50010-Y3-C150-2-7619 To define an 802.1p priory-to-queue map for 8 queues, use the following command. Command Mode Description qos map <0-7> <0-3> Global Priority to queue number mapping, priority value (0-7) according to 802.1p: 0...
Page 154 - . That is, if several rules being different only in one; To modify a rule, use the following command.; To delete a rule, use the following command.
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 154 A50010-Y3-C150-2-7619 execution of command, apply . That is, if several rules being different only in one value should be created, then only the one changed value needs to be entered again. 7.6.4.6 Modifying and Deleting Rule To modify a rule, ...
Page 155 - Filtering; Internet; Information Shared; NetBIOS Filtering
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 155 7.7 NetBIOS Filtering NetBIOS (Network Basic Input/Output System) is a program that allows applications on different computers to communicate within a local area network (LAN). NetBIOS is used in Ethernet, included as part...
Page 156 - To see a configuration of Martian filter, use the; Host; To configure max host, use the following command.
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 156 A50010-Y3-C150-2-7619 The following is an example of configuring NetBIOS filtering in port 1~5 and showing it. SWITCH(bridge)# netbios-filter 1-5 SWITCH(bridge)# show netbios-filter o:enable .:disable -------------------------- 1 2 123456789012...
Page 157 - To display configured max host, use the following command.; The following is an example of displaying configured max hosts.; New
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 157 Command Mode Description max-hosts PORTS <1-16> Limits the number of connection to a port by setting maximum host: PORTS: enter the port number. 1-16: enter the maximum MAC number. no max-hosts PORTS Bridge Deletes c...
Page 158 - To delete configured max new hosts, use the following command.; To display configured max new hosts, use the following command.; Security; Port Security on Port; Enable port security on the port.
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 158 A50010-Y3-C150-2-7619 To configure max new hosts, use the following command. Command Mode Description max-new-hosts PORTS MAX- MAC-NUMBER The number of MAC address that can be learned on the port for a second. max-new-hosts system PORTS MAX-MAC...
Page 160 - This is an example of configuring port security on port 7.; absolute; from the secure source addresses for the specified time period.
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 160 A50010-Y3-C150-2-7619 To display the configuration of port security, use the following command. Command Mode Description show port security [ PORTS ] Bridge Shows port security on the port. This is an example of configuring port security on por...
Page 161 - To manage MAC table in the switch, use the following command.
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 161 To disable the configuration of port secure aging, use the following command. Command Mode Description no port security PORTS aging static Disables aging for only statistically configured secure addresses. no port security...
Page 162 - more; – on standby status. Press any key to search more. After you find the in-
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 162 A50010-Y3-C150-2-7619 To remove registered dynamic MAC addresses from the MAC table, use the following command. Command Mode Description clear mac Clears dynamic MAC addresses. clear mac NAME Clears dynamic MAC addresses. clear mac NAME PORT Cl...
Page 163 - Default Policy of MAC Filtering; Sample Configuration; This is an example of blocking all packets in port 1~3 and port 7.; Adding Policy of MAC Filter
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 163 7.12 MAC Filtering It is possible to forward frame to MAC address of destination. Without specific perform-ance degradation, maximum 4,096 MAC addresses can be registered. 7.12.1 Default Policy of MAC Filtering The basic p...
Page 164 - Deleting MAC Filter Policy; To delete MAC filtering policy, use the following command.
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 164 A50010-Y3-C150-2-7619 Command Mode Description mac-filter add MACADDR { deny | permit } Bridge Allows or blocks packet which brings configured mac address to specified port. Variable MAC-ADDRESS is composed of twelve digits number in Hexa decim...
Page 165 - The following is an example of displaying one configuration.
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 165 Sample Configuration The latest policy is recorded as number 1. The following is an example of permitting MAC address 00:02:a5:74:9b:17 and 00:01:a7:70:01:d2 and showing table of filter policy. SWITCH(bridge)# mac-filter a...
Page 166 - ARP
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 166 A50010-Y3-C150-2-7619 7.13.1.1 Registering ARP Table The contents of ARP table are automatically registered when MAC address corresponds to MAC address is founded. The network administrator could use MAC address of spe-cific IP address in Netwo...
Page 167 - Alias; To display ARP alias, use the following command.; Inspection
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 167 7.13.2 ARP Alias Although clients are joined in same client switch, it may be impossible to communicate between clients for their private security. When you need to make them communicate each other, the hiD 6615 S223/S323 ...
Page 169 - To configure Proxy-ARP, you need to enter; ICMP Message Control
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 169 7.13.4 Gratuitous ARP Gratuitous ARP is a broadcast packet like an ARP request. It containing IP address and MAC address of gateway, and the network is accessible even though IP addresses of specific host’s gateway are rep...
Page 170 - ICMP Message Type; Blocking Echo Reply Message; Interval for Transmit ICMP Message
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 170 A50010-Y3-C150-2-7619 Type Value Type Value ICMP_ECHOREPLY 0 ICMP_DEST_UNREACH 3 ICMP_SOURCE_QUENCH 4 ICMP_REDIRECT 5 ICMP_ECHO 8 ICMP_TIME_EXCEEDED 11 ICMP_PARAMETERPROB 12 ICMP_TIMESTAMP 13 ICMP_TIMESTAMPREPLY 14 ICMP_INFO_REQUEST 15 ICMP_INF...
Page 171 - Tab. 7.3 shows the result of mask calculation of default value.; Mask Calculation of Default Value
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 171 To configure interval to transmit ICMP message, the administrator should configure the type of message and the interval time. Use the following command, to configure the interval for transmit ICMP message. Command Mode Des...
Page 172 - Transmitting ICMP Redirect Message
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 172 A50010-Y3-C150-2-7619 To configure the limited ICMP transmission time, use the following command. Command Mode Description ip icmp interval rate-limit IN- TERVAL Global Configures a limited ICMP transmission time. INTERVAL: 0-2000000000 (unit: ...
Page 173 - The policy of unreached messages; IP TCP Flag Control
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 173 The following is an example for configuring ICMP Redirect Message and checking the configuration. SWITCH(config)# show running-config (omitted) interface 1 ip address 222.121.68.247/24 ! ! ! SWITCH(config)# ip redirects SW...
Page 174 - Dump; Verifying Packet Dump; Packet Dump by Protocol
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 174 A50010-Y3-C150-2-7619 help prevent that hackers can find impossible connections. To configure not to send the message that informs TCP connection can not be done, use the following command. Command Mode Description ip tcp ignore rst-unknown Con...
Page 176 - Options for Packet Dump
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 176 A50010-Y3-C150-2-7619 Tab. 7.4 shows the options for packet dump. Option Description -a Change Network & Broadcast address to name. -d Change the complied packet-matching code to readable letters and close it -e Output link-level header of ...
Page 177 - Debug Packet Dump; To debug packet dump, use the following command.; Basically, user can save current configuration with; the dump file is not saved.; Displaying the usage of the packet routing table
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 177 7.16.2 Debug Packet Dump The hiD 6615 S223/S323 provides network debugging function to prevent system over-head for unknown packet inflow. Monitoring process checks CPU load per 5 seconds. If there is more traffic than thr...
Page 178 - System Main Functions; Enlarged Network Bandwidth
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 178 A50010-Y3-C150-2-7619 8 System Main Functions 8.1 VLAN The first step in setting up your bridging network is to define VLAN on your switch. VLAN is a bridged network that is logically segmented by customer or function. Each VLAN con-tains group...
Page 180 - To configure VLAN on user’s network, use the following command.; PVID; Assigning Port to VLAN; To assign a port to VLAN, use the following command.; To delete VLAN, use the following command.
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 180 A50010-Y3-C150-2-7619 8.1.1.1 Creating VLAN To configure VLAN on user’s network, use the following command. Command Mode Description vlan create VLANS Bridge Creates new VLAN by assigning VLAN ID: VLANS: enter the number of VLAN ID (from 1 to 4...
Page 181 - To display a configuration of VLAN, use the following command.; configured on and operates VLAN.; MAC address-based VLAN
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 181 8.1.1.5 Displaying VLAN To display a configuration of VLAN, use the following command. Command Mode Description show vlan [ VLANS ] Enable Global Bridge Shows the configuration for specific VLAN, enter VLAN ID. 8.1.2 Proto...
Page 182 - Parse the frame and apply the membership rules (implicit tagging).; VLAN Tag
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 182 A50010-Y3-C150-2-7619 Command Mode Description vlan macbase MAC-ADDRESS <1-4094> Configure VLAN based on MAC address no vlan macbase MAC- ADDRESS Bridge Clears configured VLAN based on MAC address. 8.1.4 Subnet-based VLAN In order to conf...
Page 183 - Advantages and Disadvantages of Tagged VLAN; Mapping Frames to VLAN; To configure the tagged VLAN, use the following command.; You can describe each VLAN with the following command; Displaying VLAN Information
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 183 Advantages Disadvantages VLAN association rules only need to be applied once. Tags can only be interpreted by VLAN aware devices. Only edge switches need to know the VLAN as-sociation rules. Edge switches must strip tags b...
Page 184 - Example of QinQ Configuration; Tunnel Port
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 184 A50010-Y3-C150-2-7619 8.1.8 QinQ QinQ or Double Tagging is one way for tunneling between networks T U T U T T T U U T T T VLAN 200 VLAN 200 VLAN 201 VLAN 201 VLAN 641 PVID 641 T: TaggedU: Untagged Customer A Customer A Customer B Customer B Tru...
Page 185 - Designate the QinQ port.; To disable double tagging, use the following command
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 185 able of carrying double-tagged traffic. A trunk port is always connected to another trunk port on a different switch. Switching shall be performed between trunk ports and tunnels ports and between different trunk ports. 8....
Page 186 - Layer 2 Isolation; Private VLAN Edge
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 186 A50010-Y3-C150-2-7619 • DT and HTLS cannot be configured at the same time. (If switch should operate as DT, HTSL has to be disabled.) • TPID value of all ports on switch is same. • Access Port should be configured as Untagged, and Uplink port a...
Page 187 - Isolation; port protected; command, packet cannot be transmitted between; In Case Packets Going Outside in Layer 2 environment
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 187 isolation. If you want to configure Private VLAN on the hiD 6615 S223/S323 switch, refer to Port Isolation configuration. 8.1.9.1 Port Isolation The Port Isolation feature is a method that restricts L2 switching between is...
Page 188 - In Case External Packets Enter under Layer 2 environment (2)
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 188 A50010-Y3-C150-2-7619 Fig. 8.5 In Case External Packets Enter under Layer 2 environment (1) To transmit the untagged packet from uplink port to subscriber, a new VLAN should be created including all subscriber ports and uplink ports. This makes...
Page 189 - Translation
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 189 8.1.10 VLAN Translation VLAN Translation is simply an action of Rule. This function is to translate the value of specific VLAN ID which classified by Rule. The switch makes Tag adding PVID on Untagged packets, and use Tagg...
Page 190 - default br2
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 190 A50010-Y3-C150-2-7619 | 1 2 3 4 Name( VID| FID) |123456789012345678901234567890123456789012 ----------------------------------------------------------------- default( 1| 1) |u...uuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuu br2( 2| 2) |.u................
Page 191 - [Sample Configuration 4] Configuring QinQ; [Sample Configuration 5] Configuring Shared VLAN with FID
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 191 --------------------------------------------------------------- | 1 2 3 4 Ethertype | VID |123456789012345678901234567890123456789012 --------------------------------------------------------------- 0x0800 5 .p................
Page 192 - Aggregation
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 192 A50010-Y3-C150-2-7619 default br2 br3 br4 Outer Network Uplink Port SWITCH(bridge)# vlan create br2 SWITCH(bridge)# vlan create br3 SWITCH(bridge)# vlan create br4 SWITCH(bridge)# vlan del default 3-8 SWITCH(bridge)# vlan add br2 3,4 untagged S...
Page 193 - Link Aggregation; Trunk; Configuring Port Trunk
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 193 Bandwidth with 1 port Enlarged bandwidth with many ports A logical port that can be made by aggregating a number of the ports. Fig. 8.7 Link Aggregation The hiD 6615 S223/S323 supports two kinds of link aggregation as port...
Page 194 - dstip; Disabling Port Trunk; Displaying Port Trunk Configuration; Link Aggregation Control Protocol (LACP)
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 194 A50010-Y3-C150-2-7619 enter. It is decided with Source IP address, Destination IP address, Source MAC address, Destination Mac address and the user could get information of packets to decided packet route. • dstip : Destination IP address • dst...
Page 195 - LACP; Step 2; Route
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 195 • Configuring LACP • Packet Route • Operating Mode of Member Port • Priority of Switch • Identifying Member Ports within LACP • BPDU Transmission Rate • Key value of Member Port • Priority • Displaying LACP Configuration 8...
Page 196 - Operating Mode of Member Port
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 196 A50010-Y3-C150-2-7619 • dstip : Destination IP address • dstmac: Destination MAC address • srcdstip: Runs by reference to both Source IP address and Destination IP address • srcdstmac: Source MAC address and Destination MAC address • srcip: Sou...
Page 197 - Identifying Member Ports within LACP; BPDU Transmission Rate; Key value of Member Port
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 197 8.2.2.4 Identifying Member Ports within LACP The port configured as member port is basically configured to aggregate to LACP. How-ever, even though the configuration as member port is not released, they could operate as in...
Page 198 - Priority of Member Port
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 198 A50010-Y3-C150-2-7619 To delete key value of configured member port, use the following command. Command Mode Description no lacp port admin-key PORTS Bridge Deletes key value of selected member port, select the member port number. 8.2.2.7 Prior...
Page 199 - To display a configured LACP, use the following command.; To clear LACP statistics information, use the following command.
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 199 8.2.2.9 Displaying LACP Configuration To display a configured LACP, use the following command. Command Mode Description show lacp aggregator Shows the information of aggregated port. show lacp aggregator AGGRE- GATIONS Sho...
Page 200 - Principle of Spanning Tree Protocol
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 200 A50010-Y3-C150-2-7619 8.3 Spanning-Tree Protocol (STP) LAN, which is composed of double-path like token ring, has the advantage that it is pos-sible to access in case of disconnection with one path. However, there is another problem named Loop ...
Page 201 - Root Switch; ROOT
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 201 Meanwhile, RSTP (Rapid Spanning-Tree Protocol) defined in IEEE 802.1w innovate re-duces the time of network convergence on STP (Spanning-Tree Protocol). It is easy and fast to configure new protocol. Also, 802.1w includes ...
Page 202 - Designated Switch
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 202 A50010-Y3-C150-2-7619 After configuring STP, these switches exchange their information. The priority of SWITCH A is 8, the priority of SWITCH B is 9 and the priority of SWITCH C is 10. In this case, SWITCH A is automatically configured as a roo...
Page 203 - Root; PATH 1 is chosen; Port Priority
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 203 Designated Port and Root Port A Root Port is the port in the active topology that provides connectivity from the Desig-nated Switch toward the root. A Designated Port is a port in the active topology used to forward traffi...
Page 205 - Port States; Switch B
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 205 8.3.2 RSTP Operation STP or RSTP is configured on network where Loop can be created. However, RSTP is more rapidly progressed than STP at the stage of reaching to the last topology. This sec-tion describes how the RSTP mor...
Page 207 - Convergence of 802.1d Network
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 207 Switch B Switch C BPDU Flow ROOT Switch D 1. New link created 2. Transmit BPDU at listening state 3. Block to prevent loop Switch A Fig. 8.16 Convergence of 802.1d Network This is very an epochal way of preventing a loop. ...
Page 209 - STP BPDU; STP BPDU
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 209 It is same with 802.1d to block the connection of SWITCH D and SWITCH C. However, 802.1w does not need any configured time to negotiate between switches to make for-warding state of specific port. So it is very fast progre...
Page 210 - CST
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 210 A50010-Y3-C150-2-7619 Operation Here explains how STP/MSTP differently operates on the LAN. Suppose to configure 100 of VLAN from Switch A to B, C. In case of STP, there’s only a STP on all of VLAN and it does not provide multiple instances. Wh...
Page 212 - Switch
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 212 A50010-Y3-C150-2-7619 8.3.5 Configuring STP/RSTP/MSTP To configure STP and RSTP, use the following steps. Step 1 Decide STP mode using the stp force-version { stp | rstp } command. Step 2 Activate MST daemon using the stp mst enable command. St...
Page 214 - Region; To set configuration ID, use the following command.; To delete configuration ID, use the following command.
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 214 A50010-Y3-C150-2-7619 8.3.5.5 MST Region If MSTP is established in the hiD 6615 S223/S323, decide which MST region the switch is going to belong to by configuring MST configuration ID. Configuration ID contains region name, revision, VLAN map. ...
Page 215 - Protocol; To configure the protocol, use the following command.; MAC; Ports; To configure edge port mode, use the following command.
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 215 8.3.5.6 MSTP Protocol MSTP protocol has a backward compatibility. MSTP is compatible with STP and RSTP. If some other bridge runs with STP mode and send BPDU version of STP or RSTP, MSTP automatically changes to STP mode. ...
Page 216 - command, you can check configuration ID with the; ii
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 216 A50010-Y3-C150-2-7619 To delete the edge port mode, use the following command. Command Mode Description no stp edge-port PORTS Bridge Deletes port edge mode: PORTS: select the port number. 8.3.5.9 Displaying Configuration To display the configu...
Page 217 - Example of PVSTP
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 217 8.3.6 Configuring PVSTP/PVRSTP STP and RSPT are designed with one VLAN in the network. If a port becomes blocking state, the physical port itself is blocked. But PVSTP (Per VLAN Spanning Tree Protocol) and PVRSTP (Per VLAN...
Page 219 - Guard; Switch A; Service provider; Root Guard; Protocol Migration
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 219 8.3.7 Root Guard The standard STP does not allow the administrator to enforce the position of the root bridge, as any bridge in the network with lower bridge ID will take the role of the root bridge. Root guard feature is ...
Page 220 - Bridge Protocol Data Unit Configuration; Hello Time; ured from 1 to 10 seconds. The default is 2 seconds.; Max Age; time is named forward delay.; Time
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 220 A50010-Y3-C150-2-7619 To clear configured Restarting Protocol Migration, use the following command. Command Mode Description stp clear-detected-protocol PORTS Bridge Configures restarting protocol migration function. 8.3.9 Bridge Protocol Data ...
Page 221 - Delay; To delete a configured forward delay, use the following command.; Age
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 221 To clear configured hello-time, use the following command. Command Mode Description no stp mst hello-time Returns to the default hello time value of STP, RSTP and MSTP. no stp pvst hellow-time VLAN- RANGE Bridge Returns to...
Page 222 - Hop; Filter
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 222 A50010-Y3-C150-2-7619 To delete a configured max age, use the following command. Command Mode Description no stp mst max-age Returns to the default max-age value of STP, RSTP and MSTP. no stp pvst max-age VLAN- RANGE Bridge Returns to the defau...
Page 223 - Configure the specific port as edge-port.; Configure BPDU Guard.; Self Loop Detection
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 223 To configure BPDU guard in the switch, perform the following procedure. Step 1 Configure the specific port as edge-port. Command Mode Description stp edge-port PORTS Configures the port as Edge port. no stp edge-port PORTS...
Page 224 - To display a configuration for BPDU, use the following command.; Displaying BPDU Configuration; To display the configuration for BPDU, use the following command.
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 224 A50010-Y3-C150-2-7619 To enable/disable self loop detection, use the following command. Command Mode Description self-loop-detect { enable | dis- able } Bridge Enables/disables self loop detection function. To display a configuration for BPDU, ...
Page 225 - Backup Route; Example of Layer 2 Network Design in RSTP Environment
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 225 8.3.10 Sample Configuration Backup Route When you design layer 2 network, you must consider backup route for stable STP net-work. This is to prevent network corruption when just one additional path exits. Switch A Switch B...
Page 226 - MSTP Configuration; Example of Layer 2 Network Design in MSTP Environment
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 226 A50010-Y3-C150-2-7619 MSTP Configuration Router VLAN 101 ~ 200 MST Region 1Instance 1 VLAN 111~120Instance 2 VLAN 121~130Instance 3 VLAN 131~140Region Name : testRevision :1 MST Region 2Instance 1 VLAN 170Instance 2 VLAN 180~190Instance 3 VLAN ...
Page 227 - Virtual Router Redundancy Protocol (VRRP); Default Gateway; Virtual Router; VRRP Operation
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 227 8.4 Virtual Router Redundancy Protocol (VRRP) Virtual router redundancy protocol (VRRP) is configuring Virtual router (VRRP Group) consisted of VRRP routers to prevent network failure caused by one dedicated router. You ca...
Page 228 - VRRP; To delete the VRRP configuration, use the following command.
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 228 A50010-Y3-C150-2-7619 8.4.1 Configuring VRRP To configure the hiD 6615 S323 as device in Virtual Router, use the following command on Global Configuration mode. Then you can configure VRRP by opening VRRP Configu- ration mode. Command Mode Desc...
Page 231 - VRRP Track Function
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 231 <Layer 3 SWITCH1: IP address - 10.0.0.1/24> SWTICH1(config)# router vrrp default 1 SWITCH1(config-router)# associate 10.0.0.5 SWITCH1(config-router)# exit SWITCH1(config)# show vrrp default - virtual router 1 -------...
Page 232 - VRRP Track; To release VRRP Track configuration, use the following command.; Password
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 232 A50010-Y3-C150-2-7619 Internet Master Router 1 IP : 10.0.0.3/24 Default Gateway : 10.0.0.5/24 Backup Router 1 IP : 10.0.0.2/24 Backup Router 2 IP : 10.0.0.1/24 Virtual Router Associate IP : 10.0.0.5/24 1. Link Down If the interface doesn ’ t re...
Page 233 - The following is an example of disabling Preempt.
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 233 To configure an authentication password for security of Virtual Router, use the following command on VRRP configuration mode. Command Mode Description authentication clear_text PASSWORD Configures an authentication passwor...
Page 234 - Limit
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 234 A50010-Y3-C150-2-7619 Also, to make Preempt “enable” as default setting, use the following command on VRRP configuration mode. Command Mode Description no preempt VRRP Deletes the former configuration of Preempt to enable it. 8.4.1.7 VRRP Stati...
Page 235 - Configuring Rate Limit; To set a port bandwidth, use the following command.
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 235 8.5.1 Configuring Rate Limit To set a port bandwidth, use the following command. Command Mode Description rate PORTS RATE [ egress | in- gress ] Sets port bandwidth. If you input egress or ingress, you can configure outgoi...
Page 236 - Bandwidth; Rate Limit and Flood Guard
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 236 A50010-Y3-C150-2-7619 8.6 Flood Guard Flood-guard limits number of packets, how many packets can be transmitted, in config-ured bandwidth, whereas Rate limit controls packets through configuring width of band-width, which packets pass through. ...
Page 237 - To delete a configured bandwidth, use the following command.; The following is an example of configuration to bandwidth as 1000.
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 237 8.6.2 Sample Configuration The following is an example of showing the configuration after limiting the number of packets transmitted to the port number 1 as 10,000. SWITCH(bridge)# mac-flood-guard 1 10000 SWITCH(bridge)# s...
Page 238 - Dynamic Host Configuration Protocol (DHCP); Saving Cost; DHCP Server or Relay Agent; DHCP Packet; Subnet; DHCP Service Structure
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 238 A50010-Y3-C150-2-7619 8.8 Dynamic Host Configuration Protocol (DHCP) Dynamic host configuration protocol (DHCP) is a TCP/IP standard for simplifying the ad-ministrative management of IP address configuration by automating address configura-tion...
Page 239 - service dhcp
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 239 The hiD 6615 S223/S323 flexibly provides the functions as the DHCP server or DHCP re-lay agent according to your DHCP configuration. This chapter contains the following sections: • DHCP Server • DHCP Address Allocation wit...
Page 240 - Pool; To create a DHCP pool, use the following command.; The following is an example of creating the DHCP pool as; To specify a subnet of the DHCP pool, use the following command.; You can also specify several subnets in a single DHCP pool.; Range of IP Address
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 240 A50010-Y3-C150-2-7619 8.8.1.1 DHCP Pool Creation The DHCP pool is a group of IP addresses that will be assigned to DHCP clients by DHCP server. You can create various DHCP pools that can be configured with a different network, default gateway a...
Page 241 - Gateway; IP Lease Time; To specify IP lease time, use the following command.
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 241 The following is an example for specifying the range of IP addresses. SWITCH(config)# service dhcp SWITCH(config)# ip dhcp pool sample SWITCH(config-dhcp[sample])# network 100.1.1.0/24 SWITCH(config-dhcp[sample])# default-...
Page 242 - The following is an example of specifying a DNS server.; If you want to specify a DNS server for all the DHCP pools, use the; dns server; Binding
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 242 A50010-Y3-C150-2-7619 The following is an example of setting default and maximum IP lease time. SWITCH(config)# service dhcp SWITCH(config)# ip dhcp pool sample SWITCH(config-dhcp[sample])# network 100.1.1.0/24 SWITCH(config-dhcp[sample])# defa...
Page 243 - To set a domain name, use the following command.; DHCP Server Option; To specify a DHCP server option, use the following command.; Mapping; To perform a static mapping, use the following command.; Recognition of DHCP Client
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 243 8.8.1.8 Domain Name To set a domain name, use the following command. Command Mode Description domain-name DOMAIN Sets a domain name. no domain-name DHCP Pool Deletes a specified domain name. 8.8.1.9 DHCP Server Option If a...
Page 244 - Address
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 244 A50010-Y3-C150-2-7619 To select a recognition method of DHCP clients, use the following command. Command Mode Description ip dhcp database-key { client-id | hardware-address } Global Selects a recognition method of DHCP clients 8.8.1.12 IP Addr...
Page 246 - Displaying DHCP Pool Configuration; To display a DHCP pool configuration, use the following command.
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 246 A50010-Y3-C150-2-7619 The following is an example of displaying DHCP packet statistics. SWITCH(config)# show ip dhcp server statistics =========================================== Message Recieved/Error(0/0) -------------------------------------...
Page 247 - DHCP Address Allocation with Option 82; DHCP Class Capability; To create a DHCP class, use the following command.; Relay Agent Information Pattern
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 247 8.8.2 DHCP Address Allocation with Option 82 The DHCP server provided by the hiD 6615 S223/S323 can assign dynamic IP addresses based on DHCP option 82 information sent by the DHCP relay agent. The information sent via DHC...
Page 248 - Associating DHCP Class; A range of IP addresses specified with the; address range; command is valid only for a
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 248 A50010-Y3-C150-2-7619 To delete specified option 82 information for IP assignment, use the following command. Command Mode Description no relay-information remote-id ip A.B.C.D [ cir- cuit-id { hex HEXSTRING | index <0-65535> | text STRIN...
Page 249 - DHCP Lease Database; Database; Upon entering the; ip dhcp database; Displaying DHCP Lease Status; To display current DHCP lease status, use the following command.
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 249 8.8.3 DHCP Lease Database 8.8.3.1 DHCP Database Agent The hiD 6615 S223/S323 provides a feature that allows to a DHCP server automatically saves a DHCP lease database on a DHCP database agent. The DHCP database agent shoul...
Page 250 - Deleting DHCP Lease Database; To delete a DHCP lease database, use the following command.; Relay; Relay Agent 1; Example of DHCP Relay Agent
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 250 A50010-Y3-C150-2-7619 8.8.3.3 Deleting DHCP Lease Database To delete a DHCP lease database, use the following command. Command Mode Description clear ip dhcp leasedb A.B.C.D/M Deletes a DHCP lease database a specified subnet. clear ip dhcp leas...
Page 251 - Before configuring DHCP server or relay, you need to use the; command; To specify a packet forwarding address, use the following command.; Smart Relay Agent Forwarding
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 251 Before configuring DHCP server or relay, you need to use the service dhcp command first to activate the DHCP function in the system. 8.8.4.1 Packet Forwarding Address A DHCP client sends DHCP_DISCOVER message to a DHCP ser...
Page 252 - DHCP Option 82; Broadcast Forwarding
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 252 A50010-Y3-C150-2-7619 To enable the smart relay agent forwarding, use the following command. Command Mode Description ip dhcp smart-relay Enables a smart relay. no ip dhcp smart-relay Global Disables a smart relay. 8.8.5 DHCP Option 82 In some ...
Page 253 - Client Identifier Spoofing; DHCP Server; Enabling DHCP Option 82; To enable/disable the DHCP option 82, use the following command.; Option 82 Sub-Option; Remote ID; Note that, the remote ID must be globally unique.; Circuit ID; agents in forwarding DHCP responses back to the proper circuit.
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 253 Client Identifier Spoofing By using the agent-supplied remote ID option, the untrusted and as-yet unstandardized client identifier field need not be used by the DHCP server. Fig. 8.33 shows how the DHCP relay agent with th...
Page 254 - Option 82 Reforwarding Policy; Default Trust Policy
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 254 A50010-Y3-C150-2-7619 To specify a remote ID, use the following command. Command Mode Description system-remote-id hex HEXSTRING system-remote-id ip A.B.C.D system-remote-id text STRING Option 82 Specifies a remote ID. (default: system MAC addr...
Page 255 - If you specify the default trust policy as; deny; , the DHCP packet that carries the informa-; Trusted Remote ID; To specify a trusted remote ID, use the following command.; To delete a specified trusted remote ID, use the following command.; Trusted Physical Port; To specify a trusted physical port, use the following command.; Simplified DHCP Option 82
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 255 If you specify the default trust policy as deny , the DHCP packet that carries the informa- tion you specifies below will be permitted, and vice versa. Trusted Remote ID To specify a trusted remote ID, use the following co...
Page 256 - Enabling DHCP Client; To specify a client ID, use the following command.; DHCP Class ID; To specify a class ID, use the following command.; To specify a host name, use the following command.
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 256 A50010-Y3-C150-2-7619 8.8.6 DHCP Client An interface of the hiD 6615 S223/S323 can be configured as a DHCP client, which can obtain an IP address from a DHCP server. The configurable DHCP client functionality al-lows a DHCP client to use a user...
Page 257 - Displaying DHCP Client Configuration; To display a DHCP client configuration, use the following command.
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 257 8.8.6.5 IP Lease Time To specify IP lease time that is requested to a DHCP server, use the following command. Command Mode Description ip dhcp client lease <120-2147483637> Specifies IP lease time in the unit of seco...
Page 258 - Snooping; Enabling DHCP Snooping; ip dhcp snooping; To enable the DHCP snooping on a VLAN, use the following command; DHCP Trust State
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 258 A50010-Y3-C150-2-7619 8.8.7 DHCP Snooping For enhanced security, the hiD 6615 S223/S323 provides the DHCP snooping feature. The DHCP snooping filters untrusted DHCP messages and maintains a DHCP snooping binding table. An untrusted message is a...
Page 260 - DHCP Snooping Database Agent; Specifying DHCP Snooping Database Agent; Specifying DHCP Snooping Binding Entry
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 260 A50010-Y3-C150-2-7619 8.8.7.6 DHCP Snooping Database Agent When DHCP snooping is enabled, the system uses the DHCP snooping binding database to store information about untrusted interfaces. Each database entry (binding) has an IP address, assoc...
Page 261 - The DHCP snooping database agent should be TFTP server.; Displaying DHCP Snooping Configuration; To display DHCP snooping table, use the following command.; IP Source Guard; Source IP Address Filter; obtain an IP address.; Enabling IP Source Guard
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 261 The DHCP snooping database agent should be TFTP server. 8.8.7.7 Displaying DHCP Snooping Configuration To display DHCP snooping table, use the following command. Command Mode Description show ip dhcp snooping Shows a DHCP ...
Page 262 - Static IP Source Binding; ip dhcp verify source binding; Displaying IP Source Guard Configuration
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 262 A50010-Y3-C150-2-7619 To enable IP source guard, DHCP snooping needs to be enabled. To enable IP source guard with a source IP address filtering on a port, use the following command. Command Mode Description ip dhcp verify source PORTS Enables ...
Page 263 - DHCP Packet Filtering; DHCP Server Packet Filtering
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 263 8.8.9 DHCP Filtering 8.8.9.1 DHCP Packet Filtering For the hiD 6615 S223/S323, it is possible to block the specific client with MAC address. If the blocked MAC address by administrator requests IP address, the server does ...
Page 264 - DHCP Server A; DHCP; To enable/disable a DHCP debugging, use the following command.
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 264 A50010-Y3-C150-2-7619 DHCP Server A Client 1 Client 2 To prevent IP assignment from client 3, DHCP filtering is needed for the port hiX 5430 Client 3 The device that can be a DHCP server Request from client 1, 2 is transmitted to client 3 IP as...
Page 265 - Normal Node
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 265 8.9 Ethernet Ring Protection (ERP) The ERP is a Siemens protection protocol and procedure to protect Ethernet ring topolo-gies. It is a fast failure detection and recovery so that it decreases the time to prevent Loop unde...
Page 266 - Secondary port of RM node is
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 266 A50010-Y3-C150-2-7619 Normal Node Normal Node Normal Node RM Node P S 1. Secondary port of RM node is changed as unblocking state 2. Send Link Down Message 2. Send Link Down Message Fig. 8.36 Ring Protection When a Link Failure is recovered, a ...
Page 267 - Send RM Link Up message; Up message; ERP; Domain
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 267 3. Unblock the port recovered from Link Failure 2. Send RM Link Up message Normal Node Normal Node Normal Node RM Node P S 2. Send RM Link Up message 1. Block RM Node of secondary port Fig. 8.38 Ring Recovery 8.9.2 Loss of...
Page 268 - Node; To configure RM Node, use the following command.; Port of ERP domain; Primary port and secondary port should be different.; Activation; To configure ERP Protected Activation, use the following command.
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 268 A50010-Y3-C150-2-7619 8.9.3.2 RM Node To configure RM Node, use the following command. Command Mode Description erp rmnode DOMAIN-ID Configures RM node of ERP node mode. no erp rmnode DOMAIN-ID Bridge Configures ERP node mode as normal node. 8....
Page 269 - Manual Switch to Secondary; To disable Manual Switch to Secondary, use the following command.; To configure ERP Learning Disable Time, use the following command.; Test Packet Interval; To configure ERP Test Packet Interval, use the following command.
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 269 8.9.3.6 Manual Switch to Secondary To configure Manual Switch to Secondary, use the following command. Command Mode Description erp ms-s DOMAIN-ID Bridge Configures ERP manual switch to secondary To disable Manual Switch t...
Page 270 - To display a configuration for ERP, use the following command.; Example of Stacking
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 270 A50010-Y3-C150-2-7619 To return ERP Test Packet Interval as Default, use the following command. Command Mode Description no erp test-packet-interval DO- MAIN-ID Bridge Configures ERP test packet interval as default value 8.9.3.10 Displaying ERP...
Page 271 - The below steps are provided to configure stacking.; Master and Slave Switch; Designate Mater switch using the following command.
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 271 A switch, which is supposed to manage the other switches in stacking is named as Mas-ter switch and the other switches managed by Master switch are named as Slave switch. Regardless of installed place or connection state, ...
Page 272 - Stacking; To disable stacking, use the following command.; Displaying Stacking Status; [Sample Configuration 1] Configuring Stacking; Interface configuration
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 272 A50010-Y3-C150-2-7619 8.10.3 Disabling Stacking To disable stacking, use the following command. Command Mode Description no stack Global Disables the stacking function 8.10.4 Displaying Stacking Status Command Mode Description show stack Enable...
Page 274 - Broadcast Storm Control
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 274 A50010-Y3-C150-2-7619 [Sample Configuration 2] Accessing from Master Switch to Slave Switch The following is an example of accessing to Slave switch from Master switch configured in [Sample Configuration 1]. If you show the configuration of Sla...
Page 275 - Capacity
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 275 Command Mode Description no storm-control { broadcast | multicast | dlf } [ PORTS ] Bridge Disables broadcast, multicast, or DLF storm control respectively. To display a configuration of storm control, use the following co...
Page 276 - Blocking Direct Broadcast
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 276 A50010-Y3-C150-2-7619 port02 : 2200/ 1518 port03 : 2200/ 1518 port04 : 2200/ 1518 port05 : 2200/ 1518 port06 : 2200/ 1518 port07 : 2200/ 1518 port08 : 2200/ 1518 port09 : 2200/ 1518 port10 : 2200/ 1518 port11 : 1518/ 1518 port12 : 1518/ 1518 SW...
Page 277 - The following is an example of configuration to mtu size as 100.
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 277 The following is an example of configuration to mtu size as 100. SWITCH(config-if)# mtu 100 SWITCH(config-if)# show running-config interface 1 ! interface default mtu 100 bandwidth 1m ip address 10.27.41.181/24 SWITCH(conf...
Page 278 - Multicast; Layer 2 Network; PIM-SM Configuration Network
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 278 A50010-Y3-C150-2-7619 9 IP Multicast Traditional IP network provided unicast transmission a host to send packets to a single host or broadcast transmission. But multicast provides group transmission a host to send packets to a group of all host...
Page 279 - ing and PIM-SM should be configured at the same time.; More than one port; IGMP Snooping and PIM-SM Configuration Network; Multicast Routing Information Base; routing; daemon remains present, but does not perform multicast functions.; Limitation of MRIB Routing Entry
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 279 ing and PIM-SM should be configured at the same time. hiX 5430 More than one port on same interface Layer 3 Network Multicast Server PIM-SM Set-top Box Set-top Box Multicast data IGMP Join/Leave message IGMP Snooping Fig. ...
Page 280 - Clearing MRIB Information; Clearing Total or Partial Group Entry of MRIB; If you use the; clear ip mroute; command, the MRIB clears the multicast route entries in; clear; To delete the multicast route entries, use the following command.; Clearing Statistics of Multicast Routing Table
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 280 A50010-Y3-C150-2-7619 9.1.3 Clearing MRIB Information Clearing Total or Partial Group Entry of MRIB If you use the clear ip mroute command, the MRIB clears the multicast route entries in its multicast route table, and removes the entries from t...
Page 281 - Displaying MRIB Information; To display MRIB information, use the following commands; To display the contents of the MRIB VIF table, use this command.; Use this command to debug events in the multicast RIB.
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 281 9.1.4 Displaying MRIB Information To display MRIB information, use the following commands Command Mode Description show ip mroute { dense | sparse } { count | summary } show ip mroute GROUP-ADDR [ SRC-IP-ADDRESS ] { dense ...
Page 282 - Aging; To configure the multicast againg, use the following command.; To display about Againg information, use the following command.
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 282 A50010-Y3-C150-2-7619 9.1.7 Multicast Aging L2 and L3 Join information about Multicast Group used to apply on the chipset without Multicast Stream, which makes dissatisfaction for Maximum Multicast Entry. Multicast Ag-ing is to optimize Multica...
Page 283 - IGMP Basic Configuration; IGMP Version per Interface; IGMP Version 1; and leave a multicast group.; IGMP Version 2; any members of a particular group present on an attached network.; IGMP Version 3
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 283 9.2 Internet Group Management Protocol (IGMP) Internet Group Management Protocol (IGMP) is used by hosts and routers that support multicasting. All the systems on a network can know which hosts belong to which multi-cast g...
Page 284 - Removing IGMP Entry; To clear IGMP interface entries, use the following command.; Debug; Robustness; IGMP Static Join Setting
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 284 A50010-Y3-C150-2-7619 9.2.1.2 Removing IGMP Entry To clear IGMP interface entries, use the following command. Command Mode Description clear ip igmp interface INTER- FACE Clears IGMP interface entries on an interface. clear ip igmp group { * | ...
Page 285 - To configure IGMP static Join, use the following command.; Maximum Number of Groups; Query; To configure an IGMP query interval, use the following command.
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 285 IGMP cache, but the switch is not a member. Therefore it can support fast switching. To configure IGMP static Join, use the following command. Command Mode Description ip igmp static-group A.B.C.D vlan VLAN port PORT repor...
Page 286 - IGMP Maximum Response Time
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 286 A50010-Y3-C150-2-7619 querier for the interface after the previous querier has stopped querying. Command Mode Description ip igmp querier-timeout <60-300> Configures the IGMP queier timeout. 60-300: number of seconds that router waits aft...
Page 287 - IGMP v2 Fast Leave; ip igmp immediate-leave; command is enabled on an interface, the router; Displaying the IGMP Configuration
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 287 9.2.2.4 IGMP v2 Fast Leave In IGMP version 2, you can minimize the leave latency of IGMP memberships. This com-mand is used when only one receiver host is connected to each interface. When this command is not configured, t...
Page 288 - MFIB; IGMP Snooping Basic Configuration; Enabling IGMP Snooping per VLAN
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 288 A50010-Y3-C150-2-7619 9.2.3 L2 MFIB Occasionally, unknown multicast traffic is flooded because a MAC address has timed out or has not been learned by the switch. To guarantee that no multicast traffic is flooded to the port, use the following c...
Page 289 - Step 4; Robustness Count for IGMP v2 Snooping; IGMP v2 Snooping
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 289 Step 3 Enable IGMP snooping on a VLAN interface. Command Mode Description ip igmp snooping vlan VLANS Global Enables IGMP snooping on a VLAN interface. VLANS: 1-4094 Step 4 Return to Privileged EXEC Enable mode using the e...
Page 290 - Multicast Packet; Join message; IGMP v2 Snooping Fast Leave
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 290 A50010-Y3-C150-2-7619 Multicast Packet Multicast Router hiX 5430 1. Request the Multicast Packet 2. Transmit the Multicast packet to the port that send join massage Multicast Join request Multicast Packet Fig. 9.4 IP Multicasting IGMP Snooping ...
Page 291 - To disable IGMP snooping fast-leave, use the following command.; IGMP v2 Snooping Querier; Enabling IGMP Snooping; To enable the IGMP Snooping querier, use the following command.; To disable IGMP querier, use the following command.
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 291 To disable IGMP snooping fast-leave, use the following command. Command Mode Description no ip igmp snooping immediate- leave Deletes the fast-leave. no ip igmp snooping vlan VLAN- ID immediate-leave Global Deletes the fas...
Page 292 - The Query Interval of IGMP v2 Snooping Querier; The Timeout Value of IGMP v2 Snooping Querier’s General Query; To disable the
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 292 A50010-Y3-C150-2-7619 The Query Interval of IGMP v2 Snooping Querier To configure a query interval of the querier, use the following command. Command Mode Description ip igmp snooping querier query- interval <1-1800> Configures the IGMP s...
Page 293 - To display IGMP query parameter, use the following command.; If you configure; ip igmp snooping fast-leave; , it is meaningless to register time as multi-
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 293 To display IGMP query parameter, use the following command. Command Mode Description show ip igmp snooping [ vlan VLANS ] querier [ detail ] Enable Global Bridge Verifies that the IGMP snooping querier is enabled. 9.2.5.3 ...
Page 294 - IGMP v2 Snooping Report Method; Configuring Mrouter Port per VLAN
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 294 A50010-Y3-C150-2-7619 9.2.5.4 IGMP v2 Snooping Report Method When IGMP report suppression is enabled, the switch forwards only one IGMP report per multicast router query. When report suppression is disabled, all IGMP reports are for-warded to t...
Page 295 - Mrouter Port Learning Method; Displaying Mrouter Configuration; Multicast TCN Flooding
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 295 To disable the port where multicast router is connected, use the following command. Command Mode Description no ip igmp snooping mrouter port { PORTS | cpu } Disables the port where multicast router is connected on the sys...
Page 296 - ip igmp snooping tcn flood query count
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 296 A50010-Y3-C150-2-7619 To flood multicast traffic when TCN packet is received, use the following command. Command Mode Description ip igmp snooping tcn flood Designates the port where multicast router is con-nected to on the system. ip igmp snoo...
Page 297 - IGMP v3 Snooping; IGMP Snooping Version; Join Host Management
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 297 9.2.6 IGMP v3 Snooping This chapter consists of these sections • IGMP Snooping Version • Join Host Management • Immediate Block 9.2.6.1 IGMP Snooping Version The reports sent to the multicast router are sent based on the v...
Page 298 - Block; To configure the Immediate Block, use the following command.
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 298 A50010-Y3-C150-2-7619 To display a configuration, use the following command. Command Mode Description show ip igmp snooping explicit- tracking { vlan VLANS | port PORTS | group A.B.C.D } Enable Global Bridge Shows a configuration. 9.2.6.3 Immed...
Page 299 - MVR; To use the MVR, enable the MVR function with the following command.
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 299 9.2.7.1 Enabling MVR To use the MVR, enable the MVR function with the following command. Command Mode Description mvr Enables MVR on the system. no mvr Global Disables MVR on the system. 9.2.7.2 MVR Group Address Staticall...
Page 300 - Send and Receive Port; Source; belong to the single multicast VLAN.; Receiver; ports cannot belong to the multicast VLAN.; Displaying MVR Configuration; To display an MVR configuration, use the following command.; IGMP Filtering and Throttling
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 300 A50010-Y3-C150-2-7619 To delete the statically configured MVR group address, use the following command. Command Mode Description no mvr vlan VLAN helper Global Deletes a MVR group address. IP ADDRESS: specific IP address 9.2.7.4 Send and Receiv...
Page 301 - Creating IGMP Profile; To delete the created IGMP profile, use the; no ip igmp profile; mand on global mode.; Policy of IGMP Profile
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 301 dropped, and the port is not allowed to receive IP multicast traffic from that group. If the filtering action permits access to the multicast group, the IGMP report from the port is forwarded for normal processing. IGMP fi...
Page 302 - Applying IGMP Profile to the Filter Port; To cancel the applying of the profile, use the following command.; Max Number of IGMP Join Group; To return to the default setting, use the following command.
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 302 A50010-Y3-C150-2-7619 9.2.8.4 Applying IGMP Profile to the Filter Port To apply the configured IGMP Profile to the filter port, use the following command. Command Mode Description ip igmp filter port PORTS profile <1-2147483647> Global Co...
Page 303 - Displaying IGMP Snooping Table; To display an IGMP snooping table, use the following command.; RPT and SPT
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 303 9.2.9 Displaying IGMP Snooping Table To display an IGMP snooping table, use the following command. Command Mode Description show ip igmp snooping groups [ IP-ADDRESS ] show ip igmp snooping groups port [ PORT | cpu ] show ...
Page 304 - PIM Common Configuration
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 304 A50010-Y3-C150-2-7619 1. Multicast packet transmitted to RP (Rendezvous Point) A B C D E F 2. Ask RP for multicast packet 3. RP transmits multicast packet for the request RP 2. Ask RP for multicast packet 3. RP transmits multicast packet for th...
Page 305 - PIM-SM and Passive Mode; ip pim sparse-mode passive
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 305 9.3.1.1 PIM-SM and Passive Mode You need to open Interface Configuration mode of specified interface for activating PIM- SM on Ethernet interface. To open Interface Configuration mode, use the following com- mand. Command ...
Page 306 - Filters of Neighbor in PIM; To configure a query hold time, use the following command.
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 306 A50010-Y3-C150-2-7619 the DR. 9.3.1.3 Filters of Neighbor in PIM Enable filtering of neighbors on the interface. When configuring a neighbor filter-PIM-SM will either not establish adjacency with the neighbor, or terminate adjacency with the ex...
Page 307 - and
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 307 9.3.1.5 PIM Debug To activate PIM-SM debugging, use the following command. Command Mode Description debug pim { all | events | nexthop | mib | mfc | nsm | packet [ in | out ] | state | timer } Activates PIM debugging. all ...
Page 308 - Static RP for Certain Group
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 308 A50010-Y3-C150-2-7619 priority, becomes BSR among them. If there are routers, which have same priority, then one router, which has the highest IP address, becomes BSR. It is possible to configure the following messages, which are included in ca...
Page 309 - Enabling Transmission of Candidate RP Message
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 309 decide which IP address to be used as candidate-RP. This command is used to statically configure the RP address for multicast groups. To configure IP address to be used in candidate-RP, use the following command. Command M...
Page 310 - Ignoring RP Priority; Registration; Rate Limit of Register Message; command is not used.
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 310 A50010-Y3-C150-2-7619 9.3.4.3 KAT (Keep Alive Time) of RP You can configure KAT for (S, G) states at RP to monitor PIM Register packets, overriding the generic KAT timer value. Command Mode Description ip pim rp-register-kat <1-65535> Con...
Page 311 - Filters for Register Message from RP; Configure filtering out multicast sources.; To delete the above configuration, use the following command.; Source Address of Register Message; ip pim register-source; command. The configured address must
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 311 To configure the registration suppression time, use the following command. Command Mode Description ip pim register-suppression <1-65535> Configures the time of registration suppression. 1-65535: The register suppres...
Page 312 - Reachability for PIM Register Process; This command is disabled by default.; Switchover
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 312 A50010-Y3-C150-2-7619 sage in response. It is normally the loopback interface address, but can also be other physical addresses. This address must be advertised by unicast routing protocols on the DR. Command Mode Description ip pim register-so...
Page 313 - PIM Join/Prune Interoperability; Cisco Router Interoperability; Checksum of Full PIM Register Message
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 313 9.3.7 PIM Join/Prune Interoperability To configure the TX interval of PIM/Join/Prune Message, use the following command. Command Mode Description ip pim message-interval <1-65535> Configures Join/Prune timer value. 1...
Page 314 - Candidate RP Message with Cisco BSR
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 314 A50010-Y3-C150-2-7619 When the Register message is transmitted, the range of Checksum in header conforms to header part as RFC standard, but whole packet is included in the range of checksum in case of Cisco router. For compatibility with Cisco...
Page 315 - messages will be accepted or originated in the SSM range.; To configure PIM Snooping, use the following command.
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 315 9.3.9 PIM-SSM Group To define the Source Specific Multicast (SSM) range of IP multicast addresses, use the following command. When an SSM range of IP multicast addresses is defined by the ip pim ssm command, no Multicast S...
Page 316 - PIM-SM Configuration
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 316 A50010-Y3-C150-2-7619 To display the PIM Snooping configuration, use the following command. Command Mode Description show ip pim snooping Shows the PIM snooping configuration such as en-able/disable status and the enabled VLANs. show ip pim sno...
Page 317 - 0 IP Routing Protocol
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 317 10 IP Routing Protocol Routing functionalities such as RIP, OSPF, BGP and PIM-SM are only available for hiD 6615 S323. (Unavailable for hiD 6615 S223) 10.1 Border Gateway Protocol (BGP) The Border Gateway Protocol (BGP) is...
Page 318 - Configuration Type of BGP; Manual transmission of community information; the; neighbor; No synchronization; system disables the automatic network number summarization.; Enabling BGP Routing; To define an AS number and open
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 318 A50010-Y3-C150-2-7619 10.1.1 Basic Configuration 10.1.1.1 Configuration Type of BGP When configuring BGP, you can select BGP configuration type between standard BGP and ZebOS BGP for the hiD 6615 S323. The standard BGP is one of the general BGP...
Page 319 - Disabling BGP Routing
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 319 Step 2 To specify a network to operate with BGP, use the following command. Command Mode Description network A.B.C.D/M network A.B.C.D mask NET- MASK Router Adds BGP network to operate. A.B.C.D/M: network address with netm...
Page 321 - During the best-path selection process, use the; bgp; command if it compares MED values of lots of paths contained same; Choosing Best Path
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 321 10.1.2.3 Multi-Exit Discriminator (MED) During the best-path selection process, the switch compares weight, local preference and as-path in turn among the similar parameters of BGP routers. Then, the MED is consid-ered whe...
Page 322 - bgp bestpath as-path ignore; command before implementing the
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 322 A50010-Y3-C150-2-7619 To ignore AS-path for selecting the best path, use the following command. Command Mode Description bgp bestpath as-path ignore Ignores the information of AS-path as a factor in the algorithm for choosing the best route. no...
Page 323 - After; Restart
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 323 To compare MED values on the exchange of path information between Confederation Peers, use the following command. Command Mode Description bgp bestpath med confed [ miss- ing-as-worst ] bgp bestpath med missing-as- worst [...
Page 324 - Restart Time; Family Configuratio
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 324 A50010-Y3-C150-2-7619 • Restart Time It’s the waiting time for the restarting of Neighboring router’s BGP process. Restart time allows BGP process time to restart and implement the internal connection (The session). However, if it’s not working...
Page 325 - Neighbor
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 325 10.1.4 BGP Neighbor To assign IP address or peer group name for BGP Neighboring router within specified AS number, use the following command. Command Mode Description neighbor { NEIGHBOR-IP | WORD } remote-as <1-65535&g...
Page 326 - Map; Shutdown
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 326 A50010-Y3-C150-2-7619 To create a BGP Peer Group, use the following command. Command Mode Description neighbor NAME peer-group Create a BGP peer group. NAME: peer group name no neighbor NAME peer-group Router Delete the BGP peer group created b...
Page 327 - BGP Session Reset; Session Reset of All Peers; out
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 327 To disable the exchange information with a specified router or peer group, use the follow-ing command. Command Mode Description neighbor { NEIGHBOR-IP | WORD } shutdown Shutdowns any active session for the specified router...
Page 328 - Session Reset of Peers within Particular AS
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 328 A50010-Y3-C150-2-7619 To reset the sessions of all peers and initialize the details of route configurations, use the following command. Command Mode Description clear ip bgp * in [ prefix-filter ] clear ip bgp * ipv4 { unicast | multicast } in ...
Page 329 - Session Reset of Specific Route; Session Reset of External Peer
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 329 Command Mode Description clear ip bgp <1-65535> soft [ in | out ] clear ip bgp <1-65535> ipv4 { unicast | multicast } soft [ in | out ] Global Updates the route information only while the session is possible of...
Page 330 - Session Reset of Peer Group
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 330 A50010-Y3-C150-2-7619 See Section 10.1.5.1 when you configure the detail parameters. To reset the sessions of BGP router connected to external AS and initialize the details of route configurations, use the following command. Command Mode Descri...
Page 331 - Displaying and Managing BGP
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 331 Command Mode Description clear ip bgp peer-group GROUP out clear ip bgp peer-group GROUP ipv4 { unicast | multicast } out Resets the session for all members of specified peer group. GROUP: peer group name out: clears outgo...
Page 333 - OSPF
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 333 10.2 Open Shortest Path First (OSPF) Open shortest path first (OSPF) is an interior gateway protocol developed by the OSPF working group of Internet Engineering Task Force (IETF). OSPF designed for IP network supports IP s...
Page 334 - clear ip ospf process
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 334 A50010-Y3-C150-2-7619 Step1 Open Router Configuration mode from Global Configuration mode. Command Mode Description router ospf [<1-65535>] Opens Router Configuration mode with enabling OSPF. no router ospf [<1-65535>] Global Disabl...
Page 335 - Use the; command to specify a network to operate with OSPF.; area; must be IP address or OSPF area; ABR Type Configuration; To configure ABR type of OSPF, use the following command.; Support
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 335 Step 3 Use the network command to specify a network to operate with OSPF. There are two ways to show network information configurations. Firstly, shows IP address with bitmask like “10.0.0.0/8”. Secondly, shows IP address ...
Page 336 - To delete comfigured authentication, use the following command.; Key
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 336 A50010-Y3-C150-2-7619 10.2.4.1 Authentication Type Authentication encodes communications among the routers. This function is for security of information in OSPF router. To configure authentication of OSPF router for security, use the following ...
Page 337 - Cost; To configure an interface cost for OSPF, use the following command.
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 337 To configure an authentication key which is based on MD5 encoding, use the following command. Command Mode Description ip ospf message-digest-key <1- 255> md5 KEY [ active ] ip ospf message-digest-key <1- 255> ...
Page 338 - Blocking Transmission of Route Information Database; To release a blocked interface, use the following command.; Routing Protocol Interval; Hello Interval; packet transmission interval.; Retransmit Interval; transmission and retransmission.; Dead Interval; other router is stopped operating.; Transmit Delay
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 338 A50010-Y3-C150-2-7619 To delete a configured interface cost for OSPF, use the following command. Command Mode Description no ip ospf cost no ip ospf A.B.C.D cost Interface Deletes a configured an interface cost for OSPF. 10.2.4.4 Blocking Trans...
Page 340 - To configure a priority of OSPF router, use the following command.
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 340 A50010-Y3-C150-2-7619 10.2.4.6 OSPF Maximum Transmission Unit (MTU) Router verifies MTU when DD (Database Description) is exchanging among the routers on OSPF networks. Basically, OSPF network can not be organized if there are different sizes o...
Page 341 - OSPF Network Type; To select an OSPF network type, use the following command.; Network
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 341 To delete a configured priority of OSPF router, use the following command. Command Mode Description no ip ospf priority no ip ospf A.B.C.D priority Interface Deletes a configured priority of OSPF router. 10.2.4.8 OSPF Netw...
Page 342 - Area; ip ospf authentication-key
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 342 A50010-Y3-C150-2-7619 To delete a configured router communicated by non-broadcast type, use the following command. Command Mode Description no neighbor A.B.C.D cost [<1-65535>] no neighbor A.B.C.D priority [<0-255>] no neighbor A.B....
Page 343 - Default Cost of Area; To configure a default cost of Area, use the following command.; Blocking the Transmission of Routing Information Between Area; First of all, use the
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 343 10.2.6.2 Default Cost of Area The default cost of Area is configured only in ABR. ABR function is for delivering the summary default route to stub area or NSSA, in that cases the default cost of area must be required. Howe...
Page 346 - Range; advertise
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 346 A50010-Y3-C150-2-7619 10.2.6.5 Area Range In case of OSPF belongs to several Areas, Area routing information can be shown in one routing path. Like as above, various routing information of Area can be combined and summarized to transmit to outs...
Page 347 - Link
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 347 10.2.6.7 Stub Area Stub Area is that ABR is connected to Backbone Area. If it is assigned as Stub Area, ABR will notify the default path to Stub Area and other routing protocol information will not transmit to Stub Area. T...
Page 349 - To delete a configured virtual link, use the following command.; Metric; To classify costs to use line, use the following command.; To delete the configuration, use the following command.; Graceful Restart Support
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 349 To delete a configured virtual link, use the following command. Command Mode Description no area <0-4294967295> virtual-link A.B.C.D authentication [ message-digest | null ] no area <0-4294967295> virtual-link ...
Page 350 - helper
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 350 A50010-Y3-C150-2-7619 To configure the Graceful Restart, use the following command. Command Mode Description capability restart { graceful | reliable-graceful | signaling } Configures the Graceful Restart. no capability restart Router Releases ...
Page 351 - metric
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 351 To release the configuration, use the following command. Command Mode Description no ospf restart grace-period <1-1800> ospf restart helper never no ospf restart helper max-grace-period <1- 1800> Global Release...
Page 352 - default-information originate metric-type; Period
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 352 A50010-Y3-C150-2-7619 • route-map Transmits specific routing information to assigned route which has MAP-NAME. The detail options for default route configuration are classified in 4 as above, and those configurations can be selected more than 2...
Page 353 - External Routes to OSPF Network
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 353 To configure the period of finding, use the following command. Command Mode Description timers spf SPF-DELAY SPF- HOLD Router Configures the period of finding in the unit of second. SPF-DELAY: 0-2147483647 (default: 5) SPF...
Page 354 - Distance
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 354 A50010-Y3-C150-2-7619 The following example shows how to configure it with more than 2 options: • redistribute { bgp | connected | kernel | rip | static } metric <0-16777214> tag <0- 4294967295> • redistribute { bgp | connected | ke...
Page 355 - To make it as a default, use the following command.; To configure the passive interface, use the following command.
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 355 The following example shows how to configure the distance with more than 2 options: • distance ospf external <1-255> inter-area <1-255> • distance ospf inter-area <1-255> intra-area <1-255> To make ...
Page 356 - tag; OSPF Monitoring and Management
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 356 A50010-Y3-C150-2-7619 10.2.16 Blocking Routing Information The hiD 6615 S323 can classify and restrict the routing information. To configure this function, sort the specific routing information in access-list first, and block the routing in- fo...
Page 357 - Displaying OSPF Protocol Information; To display the OSPF database, use the following command.
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 357 10.2.18.1 Displaying OSPF Protocol Information You can verify several information about OSPF protocol. To display the information about OSPF protocol, use the following command. Command Mode Description show ip ospf Shows ...
Page 359 - To display the debugging information, use the following command.; Limiting Number of Database
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 359 10.2.18.2 Displaying Debugging Information The hiD 6615 S323 uses debug command to find the reason of problem. Use the follow-ing command. Command Mode Description debug ospf all Shows all the debugging information. debug ...
Page 360 - Maximum Process of LSA; When there is an overflow,; hard; configuration will stop the process, and; soft; tion will send a caution message.
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 360 A50010-Y3-C150-2-7619 10.2.18.4 Maximum Process of LSA The hiD 6615 S323 can configures maximum number of LSA to process. LSA is classified as internal route LSA and external route LSA, maximum number of LSA can configure on each class. And als...
Page 361 - RIP; To open
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 361 10.3 Routing Information Protocol (RIP) Routing Information Protocol (RIP), as it is more commonly used than any other Routing Protocols, for use in small, homogeneous networks. It is a classical distance-vector rout-ing p...
Page 362 - RIP Neighbor Router
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 362 A50010-Y3-C150-2-7619 Step 2 Configure the network to operate as RIP. Command Mode Description network { A.B.C.D/M | INTER- FACE } Establishes the network to operate as RIP. A.B.C.D/M: IP prefix (e.g. 35.0.0.0/8) INTERFACE: interface name no ne...
Page 363 - Version; To configure RIP version, use the following command.
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 363 Command Mode Description neighbor A.B.C.D Configures a neighbor router to exchange routing in-formation. A.B.C.D: neighbor address no neighbor A.B.C.D Router Deletes the neighbor router. You can block the routing informati...
Page 364 - Creating available Static Route only for RIP; This feature is provided only by Siemens’; route; command creates static route available; redistribute; Routing Information
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 364 A50010-Y3-C150-2-7619 Command Mode Description ip rip receive version 1 Receives RIP v1 type packet only from the interface. ip rip receive version 2 Receives RIP v2 type packet only from the interface. ip rip receive version 1 2 Interface Rece...
Page 366 - for
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 366 A50010-Y3-C150-2-7619 Command Mode Description match interface INTERFACE Transmits the information to specified interface only. INTERFACE: interface name match ip address {<1-199> | <1300-2699> | N AME } Transmits the information ma...
Page 367 - Originating Default Information
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 367 10.3.7 Administrative Distance Administrative distance is a measure of the trustworthiness of the source of the routing in-formation. In large scaled network, Administrative distance is the feature that routers use in orde...
Page 368 - Filtering Access List and Prefix List; Disabling the transmission to Interface; List
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 368 A50010-Y3-C150-2-7619 10.3.9.1 Filtering Access List and Prefix List The hiD 6615 S323 switch is able to permit and deny conditions that you can use to filter inbound or outbound routes by access-list or prefix-list. Use the distribute-list com...
Page 369 - To add the value of routing metrics, use the following command.; Number of RIP Routes; RIP Network Timer; Update; the routing table after 120 seconds.
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 369 To add the value of routing metrics, use the following command. Command Mode Description offset-list ACCESS-LIST { in | out } <0-16> [ INTERFACE ] Router Add an offset to incoming or outgoing metrics to routes learne...
Page 370 - Horizon
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 370 A50010-Y3-C150-2-7619 To adjust the timers, use the following command. Command Mode Description timers basic UPDATE TIMEOUT GARBAGE Adjusts RIP network timers. no timers basic UPDATE TIME- OUT GARBAGE Router Restores the default timers. 10.3.12...
Page 371 - To configure RIP authentication, use the following command.; To disable RIP authentication, use the following command.; To restart RIP system only, use the following command.; UDP Buffer Size of RIP
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 371 To configure RIP authentication, use the following command. Command Mode Description ip rip authentication key-chain NAME Enables authentication for RIP v2 packets and to spec-ify the set of keys that can be used on an int...
Page 372 - Monitoring and Managing RIP; To display RIP information, use the following command.; debug; command is useful for customers. To display in-
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 372 A50010-Y3-C150-2-7619 command. Command Mode Description recv-buffer size <8196- 2147483647> Sets the UDP Buffer size value for using RIP. 8196-2147483647: UDP buffer size value no recv-buffer size <8196- 2147483647> Router Restore t...
Page 373 - 1 System Software Upgrade; Upgrade; copy
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 373 11 System Software Upgrade For the system enhancement and stability, new system software may be released. Using this software, the hiD 6615 S223/323 can be upgraded without any hardware change. You can simply upgrade your ...
Page 374 - Boot Mode Upgrade; upgrading the system software in the boot mode.
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 374 A50010-Y3-C150-2-7619 ############################################################################## ############################################################################## ############################################################ 136...
Page 376 - load; command, the system will download the new system software from the
UMN:CLI User Manual SURPASS hiD 6615 S223/S323 R1.5 376 A50010-Y3-C150-2-7619 Step 3 Download the new system software via TFTP using the following command. Command Mode Description load { os1 | os2 } A.B.C.D FILE- NAME Boot Downloads the system software. os1 | os2: the area where the system software...
Page 377 - To exit the boot mode, use the following command.; Uploads the new system software using the following command.
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 377 Step 4 Reboot the system with the new system software using the following command. Command Mode Description reboot [ os1 | os2 ] Boot Reboots the system with specified system software. os1 | os2: the area where the system ...
Page 379 - 2 Abbreviations
User Manual UMN:CLI SURPASS hiD 6615 S223/S323 R1.5 A50010-Y3-C150-2-7619 379 12 Abbreviations ACL Access Control List ARP Address Resolution Protocol BGP Border Gateway Protocol CBS Committed Burst Size CE Communauté Européenne CIDR Classless Inter Domain Routing CIR Committed Information Rate CLI ...