User Guide
Page 4
... error-statistics ...105 Section 8. GVRP Commands 97 gvrp enable (Global) ...97 gvrp enable (Interface)...98 garp timer...99 gvrp vlan-creation-forbid ...100 gvrp registration-forbid ...101 clear gvrp statistics ...102 show gvrp configuration ...103 show gvrp statistics...104 show ip... interface ...117 arp...118 arp timeout ...119 clear arp-cache ...120 show ports storm-control...96 Section 7. TL-SG3109/TL-SL3428/TL-SL3452 Gigabit Managed Switch Family CLI Reference Guide show interfaces configuration 86 show interfaces status ...87 show interfaces description 89 show interfaces counters ...
... error-statistics ...105 Section 8. GVRP Commands 97 gvrp enable (Global) ...97 gvrp enable (Interface)...98 garp timer...99 gvrp vlan-creation-forbid ...100 gvrp registration-forbid ...101 clear gvrp statistics ...102 show gvrp configuration ...103 show gvrp statistics...104 show ip... interface ...117 arp...118 arp timeout ...119 clear arp-cache ...120 show ports storm-control...96 Section 7. TL-SG3109/TL-SL3428/TL-SL3452 Gigabit Managed Switch Family CLI Reference Guide show interfaces configuration 86 show interfaces status ...87 show interfaces description 89 show interfaces counters ...
User Guide
Page 6
...-server timeout ...177 radius-server deadtime ...178 show rmon log...193 rmon table-size ...195 Page 5 Port Monitor Commands 157 port monitor...157 port monitor vlan-tagging ...158 show qos map...171 Section 17. QoS Commands 160 qos ...160 show qos...161 priority-queue out num-of-queues 162 show qos... cos-map ...166 qos map dscp-queue ...167 qos trust (Global) ...168 qos trust (Interface)...169 qos cos...170 show ports monitor...159 Section 16. TL-SG3109/TL-SL3428/TL-SL3452 Gigabit Managed Switch Family CLI Reference Guide Section 15.
...-server timeout ...177 radius-server deadtime ...178 show rmon log...193 rmon table-size ...195 Page 5 Port Monitor Commands 157 port monitor...157 port monitor vlan-tagging ...158 show qos map...171 Section 17. QoS Commands 160 qos ...160 show qos...161 priority-queue out num-of-queues 162 show qos... cos-map ...166 qos map dscp-queue ...167 qos trust (Global) ...168 qos trust (Interface)...169 qos cos...170 show ports monitor...159 Section 16. TL-SG3109/TL-SL3428/TL-SL3452 Gigabit Managed Switch Family CLI Reference Guide Section 15.
User Guide
Page 9
... switchport protected...300 ip internal-usage-vlan...301 show vlan ...302 show vlan internal usage ...303 show ip http...312 Section 26. 802.1x Commands 313 aaa authentication dot1x...313 dot1x system-auth-control 314 dot1x port-control ...315 dot1x re-authentication ...316 Page 8 TL-SG3109/TL-SL3428/TL-SL3452 Gigabit Managed Switch Family CLI Reference Guide end...
... switchport protected...300 ip internal-usage-vlan...301 show vlan ...302 show vlan internal usage ...303 show ip http...312 Section 26. 802.1x Commands 313 aaa authentication dot1x...313 dot1x system-auth-control 314 dot1x port-control ...315 dot1x re-authentication ...316 Page 8 TL-SG3109/TL-SL3428/TL-SL3452 Gigabit Managed Switch Family CLI Reference Guide end...
User Guide
Page 10
TL-SG3109/TL-SL3428/TL-SL3452 Gigabit Managed Switch Family CLI Reference Guide dot1x timeout re-authperiod 317 dot1x re-authenticate ...318 dot1x timeout quiet-period 319 dot1x timeout tx-period ...320 dot1x max-req ...321 dot1x timeout supp-timeout 322 dot1x timeout server-timeout 323 show dot1x...324 show dot1x users ...327 show dot1x statistics ...329 ADVANCED FEATURES...331 dot1x auth-not-req...331 dot1x multiple-hosts ...332 dot1x single-host-violation 333 dot1x guest-vlan...334 dot1x guest-vlan enable...335 show dot1x advanced ...336 Troubleshooting ...338 Page 9
TL-SG3109/TL-SL3428/TL-SL3452 Gigabit Managed Switch Family CLI Reference Guide dot1x timeout re-authperiod 317 dot1x re-authenticate ...318 dot1x timeout quiet-period 319 dot1x timeout tx-period ...320 dot1x max-req ...321 dot1x timeout supp-timeout 322 dot1x timeout server-timeout 323 show dot1x...324 show dot1x users ...327 show dot1x statistics ...329 ADVANCED FEATURES...331 dot1x auth-not-req...331 dot1x multiple-hosts ...332 dot1x single-host-violation 333 dot1x guest-vlan...334 dot1x guest-vlan enable...335 show dot1x advanced ...336 Troubleshooting ...338 Page 9
User Guide
Page 13
TL-SG3109/TL-SL3428/TL-SL3452 Gigabit Managed Switch Family CLI Reference Guide 1.1.4 Global Configuration Mode Global Configuration mode commands apply to enter the Port Channel Interface Configuration mode. • SSH Public Key-chain - ... ports to enter the SSH Public Keychain Configuration mode. • QoS - The crypto key pubkey-chain ssh Global Configuration mode command is used to create a VLAN as line timeout settings, etc. The Global Configuration mode prompt consists of the following commands: • exit • end • The following example illustrates how...
TL-SG3109/TL-SL3428/TL-SL3452 Gigabit Managed Switch Family CLI Reference Guide 1.1.4 Global Configuration Mode Global Configuration mode commands apply to enter the Port Channel Interface Configuration mode. • SSH Public Key-chain - ... ports to enter the SSH Public Keychain Configuration mode. • QoS - The crypto key pubkey-chain ssh Global Configuration mode command is used to create a VLAN as line timeout settings, etc. The Global Configuration mode prompt consists of the following commands: • exit • end • The following example illustrates how...
User Guide
Page 30
... bridge table. mand). The address is deleted after the port changes mode to this command. TL-SG3109/TL-SL3428/TL-SL3452 Gigabit Managed Switch Family CLI Reference Guide Section 3. A valid Ethernet port. • port-channel-number - Command Mode Interface Configuration (VLAN) mode User Guidelines Using the no bridge address command. • delete-on -timeout | secure] no...
... bridge table. mand). The address is deleted after the port changes mode to this command. TL-SG3109/TL-SL3428/TL-SL3452 Gigabit Managed Switch Family CLI Reference Guide Section 3. A valid Ethernet port. • port-channel-number - Command Mode Interface Configuration (VLAN) mode User Guidelines Using the no bridge address command. • delete-on -timeout | secure] no...
User Guide
Page 31
... Global Configuration mode User Guidelines If multicast routers exist on the VLAN, do not change the unregistered multicast addresses state to enable forwarding all ports. Console(config)# bridge multicast filtering Page 30 Example In this command. TL-SG3109/TL-SL3428/TL-SL3452 Gigabit Managed Switch Family CLI Reference Guide bridge multicast filtering The bridge multicast filtering...
... Global Configuration mode User Guidelines If multicast routers exist on the VLAN, do not change the unregistered multicast addresses state to enable forwarding all ports. Console(config)# bridge multicast filtering Page 30 Example In this command. TL-SG3109/TL-SL3428/TL-SL3452 Gigabit Managed Switch Family CLI Reference Guide bridge multicast filtering The bridge multicast filtering...
User Guide
Page 32
... designate a range of ports. A valid MAC multicast address. • ip- a hyphen is used to the group. TL-SG3109/TL-SL3428/TL-SL3452 Gigabit Managed Switch Family CLI Reference Guide bridge multicast address The bridge multicast address Interface Configuration (VLAN) mode command registers a MAC-layer multicast address in the bridge database. If no option is specified, this...
... designate a range of ports. A valid MAC multicast address. • ip- a hyphen is used to the group. TL-SG3109/TL-SL3428/TL-SL3452 Gigabit Managed Switch Family CLI Reference Guide bridge multicast address The bridge multicast address Interface Configuration (VLAN) mode command registers a MAC-layer multicast address in the bridge database. If no option is specified, this...
User Guide
Page 33
... forbidden addresses are defined. Separate nonconsecutive valid port-channels with a comma and no spaces; multicast-address - TL-SG3109/TL-SL3428/TL-SL3452 Gigabit Managed Switch Family CLI Reference Guide bridge multicast forbidden address The bridge multicast forbidden address Interface Configuration (VLAN) mode command forbids adding a specific multicast address to the group. • remove - Separate nonconsecutive Ethernet...
... forbidden addresses are defined. Separate nonconsecutive valid port-channels with a comma and no spaces; multicast-address - TL-SG3109/TL-SL3428/TL-SL3452 Gigabit Managed Switch Family CLI Reference Guide bridge multicast forbidden address The bridge multicast forbidden address Interface Configuration (VLAN) mode command forbids adding a specific multicast address to the group. • remove - Separate nonconsecutive Ethernet...
User Guide
Page 34
... configuration, use the no spaces; Command Mode Interface Configuration (VLAN) mode User Guidelines There are forwarded. Do not force forwarding all multicast packets. • remove - Console(config)# interface vlan 2 Console(config-if)# bridge multicast forward-all add ethernet e8... designate a range of port-channels. a hyphen is disabled. TL-SG3109/TL-SL3428/TL-SL3452 Gigabit Managed Switch Family CLI Reference Guide bridge multicast forward-all The bridge multicast forward-all Interface Configuration (VLAN) mode command enables forwarding all multicast packets on port 8 are...
... configuration, use the no spaces; Command Mode Interface Configuration (VLAN) mode User Guidelines There are forwarded. Do not force forwarding all multicast packets. • remove - Console(config)# interface vlan 2 Console(config-if)# bridge multicast forward-all add ethernet e8... designate a range of port-channels. a hyphen is disabled. TL-SG3109/TL-SL3428/TL-SL3452 Gigabit Managed Switch Family CLI Reference Guide bridge multicast forward-all The bridge multicast forward-all Interface Configuration (VLAN) mode command enables forwarding all multicast packets on port 8 are...
User Guide
Page 35
.... • interface-list - To restore the default configuration, use the no spaces; Command Mode Interface Configuration (VLAN) mode User Guidelines IGMP snooping dynamically discovers multicast router ports. Example In this command. TL-SG3109/TL-SL3428/TL-SL3452 Gigabit Managed Switch Family CLI Reference Guide bridge multicast forbidden forward-all The bridge multicast forbidden forward-all Interface...
.... • interface-list - To restore the default configuration, use the no spaces; Command Mode Interface Configuration (VLAN) mode User Guidelines IGMP snooping dynamically discovers multicast router ports. Example In this command. TL-SG3109/TL-SL3428/TL-SL3452 Gigabit Managed Switch Family CLI Reference Guide bridge multicast forbidden forward-all The bridge multicast forbidden forward-all Interface...
User Guide
Page 40
TL-SG3109/TL-SL3428/TL-SL3452 Gigabit Managed Switch Family CLI Reference Guide show bridge address-table Use the show bridge address-table Aging time is 300 sec vlan --------3 3 3 3 3 mac address 00:00:00:55:55:66 00:03:47:cc:01:ce 00:06:1b:c9:6f:c5...80 Port ---3 3 3 3 3 Type ------dynamic dynamic dynamic dynamic dynamic Page 39 MAC address. Command Mode Privileged EXEC User Guidelines Internal usage VLANs (VLANs that are automatically allocated on routed ports) are presented in the bridge-forwarding database. Example Console# show bridge address-table Privileged EXEC command to ...
TL-SG3109/TL-SL3428/TL-SL3452 Gigabit Managed Switch Family CLI Reference Guide show bridge address-table Use the show bridge address-table Aging time is 300 sec vlan --------3 3 3 3 3 mac address 00:00:00:55:55:66 00:03:47:cc:01:ce 00:06:1b:c9:6f:c5...80 Port ---3 3 3 3 3 Type ------dynamic dynamic dynamic dynamic dynamic Page 39 MAC address. Command Mode Privileged EXEC User Guidelines Internal usage VLANs (VLANs that are automatically allocated on routed ports) are presented in the bridge-forwarding database. Example Console# show bridge address-table Privileged EXEC command to ...
User Guide
Page 41
...; interface - A valid port-channel number. Console# show bridge address-table static [vlan vlan] [ethernet interface | port-channel port-channel-number] Parameters • vlan - A valid Ethernet port. • port-channel-number - Default Configuration This command has no ...vlan ---1 1 200 mac address 00:60:70:4C:73:FF 00:60.70.8C.73:FF 00:10:0D:48:37:FF port ---8 8 9 type Permanent delete-on-timeout delete-on-reset Page 40 Command Mode Privileged EXEC mode User Guidelines There are displayed. Example In this command. TL-SG3109/TL-SL3428/TL-SL3452 Gigabit Managed Switch...
...; interface - A valid port-channel number. Console# show bridge address-table static [vlan vlan] [ethernet interface | port-channel port-channel-number] Parameters • vlan - A valid Ethernet port. • port-channel-number - Default Configuration This command has no ...vlan ---1 1 200 mac address 00:60:70:4C:73:FF 00:60.70.8C.73:FF 00:10:0D:48:37:FF port ---8 8 9 type Permanent delete-on-timeout delete-on-reset Page 40 Command Mode Privileged EXEC mode User Guidelines There are displayed. Example In this command. TL-SG3109/TL-SL3428/TL-SL3452 Gigabit Managed Switch...
User Guide
Page 42
...-table count Capacity: 8192 Free: 8083 Used: 109 Secure addresses: 2 Static addresses: 1 Dynamic addresses: 97 Internal addresses: 9 Page 41 Specifies a valid VLAN, such as VLAN 1. • interface - TL-SG3109/TL-SL3428/TL-SL3452 Gigabit Managed Switch Family CLI Reference Guide show bridge address-table count The show bridge address-table count Privileged EXEC mode command displays the...
...-table count Capacity: 8192 Free: 8083 Used: 109 Secure addresses: 2 Static addresses: 1 Dynamic addresses: 97 Internal addresses: 9 Page 41 Specifies a valid VLAN, such as VLAN 1. • interface - TL-SG3109/TL-SL3428/TL-SL3452 Gigabit Managed Switch Family CLI Reference Guide show bridge address-table count The show bridge address-table count Privileged EXEC mode command displays the...
User Guide
Page 43
... address table information. Command Mode Privileged EXEC mode User Guidelines A MAC address can be ip or mac. TL-SG3109/TL-SL3428/TL-SL3452 Gigabit Managed Switch Family CLI Reference Guide show bridge multicast address-table The show bridge multicast address-table [vlan vlan-id] [address mac-multicast-address | ip-multicast-address] [format ip | format mac] Parameters •...
... address table information. Command Mode Privileged EXEC mode User Guidelines A MAC address can be ip or mac. TL-SG3109/TL-SL3428/TL-SL3452 Gigabit Managed Switch Family CLI Reference Guide show bridge multicast address-table The show bridge multicast address-table [vlan vlan-id] [address mac-multicast-address | ip-multicast-address] [format ip | format mac] Parameters •...
User Guide
Page 44
Page 43 TL-SG3109/TL-SL3428/TL-SL3452 Gigabit Managed Switch Family CLI Reference Guide Console# show bridge multicast address-table format ip Vlan ---1 18 19 IP/MAC Address 224-239.130|2.2.3 224-239.130|2.2.8 224-239.130|2.2.8 Type -----static static dynamic Ports --------1,2 1-3 5-7 Forbidden ports for multicast addresses: Vlan ---1 19 IP/MAC Address 224-239.130|2.2.3 224-239.130|2.2.8 Ports -----8 8 Note A multicast MAC address maps to multiple IP addresses as shown above.
Page 43 TL-SG3109/TL-SL3428/TL-SL3452 Gigabit Managed Switch Family CLI Reference Guide Console# show bridge multicast address-table format ip Vlan ---1 18 19 IP/MAC Address 224-239.130|2.2.3 224-239.130|2.2.8 224-239.130|2.2.8 Type -----static static dynamic Ports --------1,2 1-3 5-7 Forbidden ports for multicast addresses: Vlan ---1 19 IP/MAC Address 224-239.130|2.2.3 224-239.130|2.2.8 Ports -----8 8 Note A multicast MAC address maps to multiple IP addresses as shown above.
User Guide
Page 45
... the multicast filtering configuration. Status ---------Filter Forward(s) Forward(d) Page 44 TL-SG3109/TL-SL3428/TL-SL3452 Gigabit Managed Switch Family CLI Reference Guide show bridge multicast filtering The show bridge multicast filtering 1 Filtering: Enabled VLAN: 1 Port ---1 2 3 Forward-Unregistered Static Status --------- --------- Forward(d) Forward-All Static --------Forbidden Forward - VLAN ID value. Default Configuration This command has no user guidelines...
... the multicast filtering configuration. Status ---------Filter Forward(s) Forward(d) Page 44 TL-SG3109/TL-SL3428/TL-SL3452 Gigabit Managed Switch Family CLI Reference Guide show bridge multicast filtering The show bridge multicast filtering 1 Filtering: Enabled VLAN: 1 Port ---1 2 3 Forward-Unregistered Static Status --------- --------- Forward(d) Forward-All Static --------Forbidden Forward - VLAN ID value. Default Configuration This command has no user guidelines...
User Guide
Page 59
... enable Default Configuration The SNTP client is disabled on Ethernet port 3. Command Mode Interface configuration (Ethernet, port-channel, VLAN) mode User Guidelines Use the sntp broadcast client enable Global Configuration mode command to enable anycast clients globally. Console(config... following example enables the SNTP client on an interface. TL-SG3109/TL-SL3428/TL-SL3452 Gigabit Managed Switch Family CLI Reference Guide sntp client enable (Interface) The sntp client enable Interface Configuration (Ethernet, port-channel, VLAN) mode command enables the Simple Network Time Protocol (SNTP...
... enable Default Configuration The SNTP client is disabled on Ethernet port 3. Command Mode Interface configuration (Ethernet, port-channel, VLAN) mode User Guidelines Use the sntp broadcast client enable Global Configuration mode command to enable anycast clients globally. Console(config... following example enables the SNTP client on an interface. TL-SG3109/TL-SL3428/TL-SL3452 Gigabit Managed Switch Family CLI Reference Guide sntp client enable (Interface) The sntp client enable Interface Configuration (Ethernet, port-channel, VLAN) mode command enables the Simple Network Time Protocol (SNTP...
User Guide
Page 65
Examples The following example shows the status of the Simple Network Time Protocol (SNTP). TL-SG3109/TL-SL3428/TL-SL3452 Gigabit Managed Switch Family CLI Reference Guide show sntp status The show sntp status Privileged EXEC mode command shows the status of the SNTP. Console....17.987 PDT Feb 19 2002 Offset [mSec] -----7.33 8.98 Delay [mSec] -----117.79 189.19 Anycast server: Server Interface --------176.1.11.8 ------VLAN 118 Status Last response ----Up 9:53:21.789 PDT Feb 19 2002 Offset [mSec] -----7.19 Delay [mSec] ----119.89 Broadcast: Interface --------176.9.1.1 IP...
Examples The following example shows the status of the Simple Network Time Protocol (SNTP). TL-SG3109/TL-SL3428/TL-SL3452 Gigabit Managed Switch Family CLI Reference Guide show sntp status The show sntp status Privileged EXEC mode command shows the status of the SNTP. Console....17.987 PDT Feb 19 2002 Offset [mSec] -----7.33 8.98 Delay [mSec] -----117.79 189.19 Anycast server: Server Interface --------176.1.11.8 ------VLAN 118 Status Last response ----Up 9:53:21.789 PDT Feb 19 2002 Offset [mSec] -----7.19 Delay [mSec] ----119.89 Broadcast: Interface --------176.9.1.1 IP...
User Guide
Page 98
...enables GVRP globally on the device, use the no user guidelines for the network, and all desired VLANs for this command. TL-SG3109/TL-SL3428/TL-SL3452 Gigabit Managed Switch Family CLI Reference Guide Section 7. With GVRP, a single device is manually configured with all other devices... on the network learn these VLANs dynamically. To disable GVRP on the device. The gvrp enable Global Configuration mode...
...enables GVRP globally on the device, use the no user guidelines for the network, and all desired VLANs for this command. TL-SG3109/TL-SL3428/TL-SL3452 Gigabit Managed Switch Family CLI Reference Guide Section 7. With GVRP, a single device is manually configured with all other devices... on the network learn these VLANs dynamically. To disable GVRP on the device. The gvrp enable Global Configuration mode...