Page tree
Skip to end of metadata
Go to start of metadata

Successfully pass the free certification exam at IW Academy and become an Infinet Certified Engineer.

To the certification exam

The switch can operate in one of the following modes: "isolate" or "transparent".

In "isolate" mode, packet switching is based on the port isolation rules. External ports are isolated from each other and traffic from each of them is redirected to the internal ports according to the port isolation rules, so that any direct traffic between the external ports is impossible. This is the basic mode, used by default, including situations when there are no any VLAN settings or 802.1Q-support is disabled in "transparent" mode.

In "transparent" mode, direct traffic transmission between external ports (without involving the internal ones) is possible, packet switching is performed according to the VLAN-tags and internal “port - VLAN-tag” correspondence table, if it exists.

Default settings

  • By default the switch operates in "isolate" mode, i.e. all the ports are isolated from each other, even if they are located in the same VLAN
  • All the ports operate in "trunk" mode with "native VLAN 1" for untagged traffic
  • radio interface is up and operates within the switch as a regular port
  • DHCP-client is enabled on the management interface "mgmt".

"port" command

Use this command for the built-in switch management.

Syntax: 

#1> port [arguments]

port [-scheme=SCHEME] [-mgmt=PORT_SET] [-radio=PORT_SET]
port -d1q[=[disable|enable]]
port -vlan={RANgeLIST} [{-priority=PRIO|-nopriority}]
port -vlan={RANgeLIST} [-stp] [-nostp] [{-spriority=STPPRIO|-nospriority}] [-sforward[=enable|disable]]
port -vlan={RANgeLIST} -remove={RANgeLIST}
port [PORT_SET] [-access=TAG] [-native=TAG] [-mode={access|trunk}]

port [PORT_SET] [-allow={RANgeLIST}] [-disallow={RANgeLIST}]
port [PORT_SET] [-limit={RATE_LIMIT}] [-nolimit] [-qosmode={wrr|st3|st23|strict}]
port [PORT_SET] stat|clear|vtt|stt [VID]|fdb-show|dump

RANgeLIST: RANge[,RANge...]
      RANge: {TAG[-TAG]|all}
      PRIO: {0..7}    - DOT1P frame priority
RATE_LIMIT: {0..1000} - port egress rate limit in Mbit/sec
    STPPRIO: {0..15} | {0,4096,8192...61440}
   Port set <PORT_SET>:
           enumeration of {[ge]0..[ge]1,s[fp],m,r}|*, for example 0,ge1,m
   Adjacency scheme <SCHEME>:
           {isolate, transparent}

Command arguments description is given in the table below:

CommandDescription
port [-scheme=SCHEME]
  • Select one of the switch modes:
    • isolate
    • transparent
port [-mgmt=PORT_SET] [-radio=PORT_SET]
  • Configure the port isolation rules for traffic redirection from external physical interfaces "ge0", "ge1" and/or "sfp" to the interfaces "radio" or "mgmt"
port -d1q[=[disable|enable]]
  • Disable/enable the switching rules based on VLAN-tags of the 802.1Q standard
  • In order to enable switching based on the port isolation rules even if the "transparent" mode is selected, disable the switching rules based on VLAN-tags of the 802.1Q standard
port -vlan={RANgeLIST}
  • Add VLANs to the system with numbers from 1 to 4094

Example,

port -vlan=50,52,60-64

adds VLANs 50, 52, 60, 61, 62, 63, 64

port -remove={RANgeLIST}
  • Remove any previously created VLANs from the system
port -vlan={RANgeLIST} {-priority=PRIO}
  • Set for the selected VLANs the priority according to 802.1p ranging from 0 to 7, where 0 - the lowest priority level, 7 - the highest

Example,

port -vlan=50 -priority 7

sets the priority 7 (Network control) to the VLAN 50

port -vlan={RANgeLIST} {-nopriority}
  • Remove the previously set priority for the selected VLAN
port -vlan={RANgeLIST} [-stp]
  • Enable STP support for the selected VLANs
  • Enable on the switch the support of PVST+ (Per-VLAN Spanning Tree Plus) protocol – the special version of STP, which allows creating a separate spanning tree for each VLAN
port -vlan={RANgeLIST} [-nostp]
  • Disable STP support for the selected VLANs
port -vlan={RANgeLIST} {-spriority=STPPRIO}
  • Set the bridge priority for STP in the selected VLAN ranging from 0 to 61440 in increments of 4096 (or from 0 to 16 in increments of 1)

Example,

port -vlan=50 -spriority=4096

sets the bridge priority 4096 for VLAN 50

port -vlan={RANgeLIST} {-nospriority}
  • Remove the bridge priority for STP in the selected VLAN
port -vlan={RANgeLIST} [-sforward[=enable|disable]]
  • Enable/disable the forwarding of STP packets in the selected VLAN
port [PORT_SET] [-mode={access|trunk}]
  • Select operation mode for the port:
    • "access" mode - allows untagged traffic only
    • "trunk" mode - allows tagged traffic only. If you need to allow both tagged and untagged traffic through the port, you can configure the "native VLAN" option that defines the only VLAN for receiving of all incoming untagged traffic in "trunk" mode ("VLAN 1" is configured as a "native VLAN" for all the ports of the switch by default)
port [PORT_SET] [-access=TAG]
  •  Define VLANs for the port operation in "access" mode

Example,

port 0 -access=50 -mode=access

sets the "access" mode for the port "ge0" and defines VLAN 50 for this port operation

 port [PORT_SET] [-allow={RANgeLIST}]
  • Define VLANs for the port operation in "trunk" mode

Example,

port 1 -allow=50-55 -mode=trunk

sets the "trunk" mode for the port "ge1" and allows operations with VLAN 50, 51, 52, 53, 54, 55

port [PORT_SET] [-native=TAG]
  • Set VLAN for operation as a "native VLAN" for the port in "trunk" mode
port [PORT_SET] [-disallow={RANgeLIST}]
  • Remove the selected VLANs from the port
port [PORT_SET] [-limit={RATE_LIMIT}]
  • Set on the selected port the limit for outgoing traffic (traffic shaper) in Mbps, ranging from 1 to 100 in increments of 1 or from 100 to 1000 in increments of 10

Example,


port 0,1 -limit=120 

sets the limit of 120 Mbps on the ports "ge0" and "ge1"

port [PORT_SET] [-nolimit]
  • Remove the limits of throughput on the port
port [PORT_SET] [-qosmode={wrr|st3|st23|strict}]
  • Select the QoS policy for the port (WRR is used by default):
    • wrr - use weighted round robin for all queues.
    • st3 - use strict priority for queue 3 and weighted round robin for queues 2, 1 and 0.
    • st23 - use strict priority for queue 3 and 2, and weighted round robin for queues 1 and 0.
    • strict - use strict priority for all queues.
port [PORT_SET] stat
  • Display statistics for the port
port [PORT_SET] clear
  • Reset statistics for the port
port vtt
  • View the VLAN-based switching matrix, STP status and VLAN priorities
port stt [VID]
  • View the information about operation of STP in the selected VLAN and on each of the associated ports

Example,

#1> port stt 30
STP state of VID 30:
ID:       100000043507A2A5 Priority: 4096  ID ext:-1
ROOT:     100000043507A2A5 Priority: 4096  ID ext: 0
Ports:
 Name  Prio   Cost       PVer    Role     State
====== ====  ========== ==== ========== ==========
ge1    128           55 RSTP DISABLED   DISCARDING
sfp    128           55 RSTP DISABLED   DISCARDING
port [PORT_SET] fdb-show
  • View MAC-addresses in the switching matrix (fdb) of the selected port

Example,

 #1> port 0 fdb-show
FDB total entries: 10
         VID  Destination    Port    Status  T-left
        ===== ============ ========= ======= ======
        v30   0016c8822d60         0 dynamic    330
        v30   001b21c5a964         0 dynamic    330
        v30   00043507a434         0 dynamic    282
        v30   00045f94b74a         0 dynamic    188
        v30   002170f485a5         0 dynamic     94
        v30   382c4ab2d932         0 dynamic     94
port [PORT_SET] dump
  • View general information about the port operation (traffic shaper limits, QoS policy, port status, and data transfer rate)

Example,

#1> port dump
        Port R-limit QOS Mode Link   Speed
        ==== ======= ======== ==== =========
          0  ------- wrr        UP 1000 Mbps
          1  ------- wrr        UP 1000 Mbps
          s  ------- wrr        UP 1000 Mbps
          r      420 strict     UP   21 Mbps
          m  ------- strict   ---- ---------
Table - "port" arguments description

Configuration examples

Configure the switch for operation in "isolate" mode. It is the default mode. If you need to switch from "transparent" mode, use the command:

  • port -scheme= isolate

Configure the port isolation rules for traffic redirection from external physical interfaces "ge0", "ge1" and/or "sfp" to the interfaces "radio" or "mgmt":

Assign access to the management interface through the "ge0" port:

  • port -mgmt=0

Assign the port "ge1" for data transfer to the port "radio":

  • port -radio=1

Configure the switch for operation in "transparent" mode.

See VLAN-based switching matrix with default settings below:

port vtt
        VID  0 1 2 r m STP Prio
        ==== = = = = = === ====
           1 N N N N N  - ----

In order to switch to "transparent" mode, execute the command:

  • port -scheme=transparent

Configuring of the switch starts with adding VLANs, which are necessary for data transfer and device management:

port -vlan=30,100
port vtt
        VID  0 1 2 r m STP Prio
        ==== = = = = = === ====
           1 N N N N N  -  ----
          30 t t t t t  -  ----
         100 t t t t t  -  ----

Set the parameters of processing of tagged or/and untagged traffic for each port.

Set access of untagged packets to VLAN 30 on the management interface "mgmt":

port m -access=30 -mode=access
port vtt
        VID  0 1 2 r m STP Prio
        ==== = = = = = === ====
           1 N N N N -  -  ----
          30 t t t t A  -  ----
         100 t t t t -  -  ----

Set access of untagged packets only to VLAN 30 on the port "ge0":

port 0 -access=30 -mode=access
port vtt
        VID  0 1 s r m STP Prio
        ==== = = = = = === ====
           1 - N N N -  -  ----
          30 A t t t A  -  ----
         100 - t t t -  -  ----

Set the "ge1" port for processing of tagged packets of the VLAN 30 only ("trunk" mode):

port 1 -allow=30 -mode=trunk
port vtt
        VID  0 1 s r m STP Prio
        ==== = = = = = === ====
           1 - - N N -  -  ----
          30 A t t t A  -  ----
         100 - - t t -  -  ----

Set the port "sfp" for processing of tagged packets of the VLAN 100 only ("trunk" mode):

port s -allow=100 -mode=trunk
port vtt
        VID  0 1 s r m STP Prio
        ==== = = = = = === ====
           1 - - - N -  -  ----
          30 A t - t A  -  ----
         100 - - t t -  -  ----

Set the port "radio" for processing of tagged packets of the VLAN 30 and VLAN 100 ("trunk" mode):

portr -allow=30,100 -mode=trunk
port vtt
        VID  0 1 s r m STP Prio
        ==== = = = = = === ====
          30 A t - t A  -  ----
         100 - - t t -  -  ----