Page tree

Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Hide_comments

Scroll Ignore

Table of Contents

Default settings

...

The switch can operate in one of the following modes: "isolate" or "transparent".

In "isolate" mode, packet switching is based on the port isolation rules. External ports are isolated from each other

...

PORT command description

Use this command for the built-in switch management.

Syntax: 

#1> port [arguments]

...

languagejava
themeDJango

...

and traffic from each of them is redirected to the internal ports according to the port isolation rules, so that any direct traffic between the external ports is impossible. This is the basic mode, used by default, including situations when there are no any VLAN settings or 802.1Q-support is disabled in "transparent" mode.

In "transparent" mode, direct traffic transmission between external ports (without involving the internal ones) is possible, packet switching is performed according to the VLAN-tags and internal “port - VLAN-tag” correspondence table, if it exists.

Scroll Ignore

Table of Contents

Default settings

  • By default the switch operates in "isolate" mode, i.e. all the ports are isolated from each other, even if they are located in the same VLAN
  • All the ports operate in "trunk" mode with "native VLAN 1" for untagged traffic
  • Radio interface is up and operates within the switch as a regular port
  • DHCP-client is enabled on the management interface "MGMT".

"port" command

Use this command for the built-in switch management.

Syntax: 

#1> port [arguments]

Code Block
languagejava
themeDJango
port [-scheme=SCHEME] [-mgmt=PORT_SET] [-radio=PORT_SET]
port -d1q[=[disableddisable|enabledenable]]
port -vlan={RANGELIST} [{-priority=PRIO|-nopriority}]
port -vlan={RANGELIST} [-stp] [-nostp] [{-spriority=STPPRIO|-nospriority}] [-sforward[=enable|disable]]
port -vlan={RANGELIST} -remove={RANGELIST}
port [PORT_SET] [-access=TAG] [-native=TAG] [-mode={access|trunk}]

port [PORT_SET] [-allow={RANGELIST}] [-disallow={RANGELIST}]
port [PORT_SET] [-limit={RATE_LIMIT}] [-nolimit] [-qosmode={wrr|st3|st23|strict}]
port [PORT_SET] stat|clear|vtt|stt [VID]|fdb-show|dump

RANGELIST: RANGE[,RANGE...]
      RANGE: {TAG[-TAG]|all}
      PRIO: {0..7}    - DOT1P frame priority
RATE_LIMIT: {0..1000} - port egress rate limit in Mbit/sec
    STPPRIO: {0..15} | {0,4096,8192...61440}
   Port set <PORT_SET>:
           enumeration of {[ge]0..[ge]1,s[fp],m,r}|*, for example 0,ge1,m
   Adjacency scheme <SCHEME>:
           {isolate, transparent}

Command arguments

The switch can operate in

description is given in the table below:

Center
Scroll Title
titleTable - "port" arguments description
CommandDescription
port [-scheme=SCHEME]
  • Select one of the
following
  • switch modes:
    • isolate
or
    • transparent
.

In isolate mode, packet switching is based on the port isolation rules. External ports are isolated from each other and traffic from each of them is redirected to the internal ports according to the port isolation rules, so that any direct traffic between the external ports is impossible. This is the basic mode, used by default, including situations when there are no any VLAN settings or 802.1Q-support is disabled in transparent mode.

In transparent mode, direct traffic transmission between external ports (without involving the internal ones) is possible; packet switching is performed according to the VLAN-tags and internal “port - VLAN-tag” correspondence table, if it exists.

The following command allows you to select one of the switch modes - isolate or transparent:

  • port [-scheme=SCHEME]

If you need to configure the port isolation rules for traffic redirection from external physical interfaces GE0, GE1 and/or SFP to the interfaces RADIO or MGMT, use the following command:

  • port [-mgmt=PORT_SET] [-radio=PORT_SET]

If you need to disable the switching rules based on 802.1Q-tags, even if the transparent mode is selected (and to enable switching based on the port isolation rules), use the command:

  • port -d1q=disabled

In order to add to the system the VLANs with the numbers from 1 to 4094, use the command:

  • port -vlan={RANGELIST}.

Example:

port [-mgmt=PORT_SET] [-radio=PORT_SET]
  • Configure the port isolation rules for traffic redirection from external physical interfaces "GE0", "GE1" and/or "SFP" to the interfaces "RADIO" or "MGMT"
port -d1q[=[disable|enable]]
  • Disable/enable the switching rules based on VLAN-tags of the 802.1Q standard
  • In order to enable switching based on the port isolation rules even if the "transparent" mode is selected, disable the switching rules based on VLAN-tags of the 802.1Q standard
port -vlan={RANGELIST}
  • Add VLANs to the system with numbers from 1 to 4094

Example,

Code Block
languagejava
themeDJango
port -vlan=50,52,60-64

adds VLANs 50, 52, 60, 61, 62, 63, 64

port -remove={RANGELIST}
  • Remove any previously created VLANs from the system
port -vlan={RANGELIST} {-priority=PRIO}
  • Set for the selected VLANs the priority according to 802.1p ranging from 0 to 7

Example,

Code Block
languagejava
themeDJango
port -vlan=50
,52,60-64

adds VLANs 50,52,60,61,62,63,64.

If you want to remove any previously created VLANs from the system, use the command:

  • port -remove={RANGELIST}
If you need to set for the selected VLANs the priority according to 802.1p ranging from 0 to 7, use the command:
 -priority 7

sets the priority 7 (Network control) to the VLAN 50

port -vlan={RANGELIST} {-nopriority}
  • Remove the previously set priority for the selected VLAN
port -vlan={RANGELIST} [-stp]
  • Enable STP support for the selected VLANs
  • Enable on the switch the support of PVST+ (Per-VLAN Spanning Tree Plus) protocol – the special version of STP, which allows creating a separate spanning tree for each VLAN
port -vlan={RANGELIST}
{-priority=PRIO}Example:
[-nostp]
  • Disable STP support for the selected VLANs
port -vlan={RANGELIST} {-spriority=STPPRIO}
  • Set the bridge priority for STP in the selected VLAN ranging from 0 to 61440 in increments of 4096 (or from 0 to 16 in increments of 1)

Example,

Code Block
languagejava
themeDJango
port -vlan=50 -
priority 7
spriority=4096 

sets the

priority 7 (Network control) to the VLAN 50.In order to remove the priority of the selected VLANs, perform the command:

bridge priority 4096 for VLAN 50

port -vlan={RANGELIST} {-nospriority}
  • Remove the bridge priority for STP in the selected VLAN
port -vlan={RANGELIST}
{-nopriority}

You can enable on the switch the support of PVST+ (Per-VLAN Spanning Tree Plus) protocol – the special version of STP, which allows creating a separate spanning tree for each VLAN.
In order to enable STP support for the selected VLANs, use the command:

  • port -vlan={RANGELIST} [-stp]

In order to disable STP support for the selected VLANs, use the command:

  • port -vlan={RANGELIST} [-nostp]

In order to set the bridge priority for STP in the selected VLAN ranging from 0 to 61440 in increments of 4096 (or from 0 to 16 in increments of 1), use the command:

  • port -vlan={RANGELIST} {-spriority=STPPRIO}
Example:
[-sforward[=enable|disable]]
  • Enable/disable the forwarding of STP packets in the selected VLAN
port [PORT_SET] [-mode={access|trunk}]
  • Select operation mode for the port:
    • "access" mode - allows untagged traffic only
    • "trunk" mode - allows tagged traffic only. If you need to allow both tagged and untagged traffic through the port, you can configure the "native VLAN" option that defines the only VLAN for receiving of all incoming untagged traffic in "trunk" mode ("VLAN 1" is configured as a "native VLAN" for all the ports of the switch by default)
port [PORT_SET] [-access=TAG]
  •  Define VLANs for the port operation in "access" mode

Example,

Code Block
languagejava
themeDJango
port 0 -
vlan
access=50 -
spriority
mode=
4096
access

sets the

bridge priority 4096 for VLANN 50.

In order to remove the bridge priority for STP in the selected VLAN, use the command:

  • port -vlan={RANGELIST} {-nospriority}

If you need to enable/disable the forwarding of STP packets in the selected VLAN, use the corresponding command:

  • port -vlan={RANGELIST} [-sforward[=enable|disable]]

Ports of the switch can operate in one of the two operation modes:

  • access mode (allows untagged traffic only) and
  • trunk mode (allows tagged traffic only). If you need to allow both tagged and untagged traffic through the port, you can configure the native VLAN option that defines the only VLAN for receiving of all incoming untagged traffic in trunk mode (VLAN 1 is configured as a Native VLAN for all the ports of the switch by default).
In order to select access or trunk mode for the port, use the command:

"access" mode for the port "GE0" and defines VLAN 50 for this port operation

 port [PORT_SET] [-allow={RANGELIST}]
  • Define VLANs for the port operation in "trunk" mode

Example,

Code Block
languagejava
themeDJango
port 1 -allow=50-55 -mode=trunk

sets the "trunk" mode for the port "GE1" and allows operations with VLAN 50, 51, 52, 53, 54, 55

port [PORT_SET] [-native=TAG]
  • Set VLAN for operation as a "native VLAN" for the port in "trunk" mode
port [PORT_SET] [-disallow={RANGELIST}]
  • Remove the selected VLANs from the port
port [PORT_SET] [-limit={RATE_LIMIT}]
  • Set on the selected port the limit for outgoing traffic (traffic shaper) in Mbps, ranging from 1 to 100 in increments of 1 or from 100 to 1000 in increments of 10

Example,

 

Code Block
languagejava
themeDJango
port 0,1 -limit=120 

sets the limit of 120 Mbps on the ports "GE0" and "GE1"

port [PORT_SET] [-
mode={access|trunk}]If you want to define VLANs for the port operation in access mode, use the command:
nolimit]
  • Remove the limits of throughput on the port
port [PORT_SET] [-
access=TAG]

Example:

Code Block
languagejava
themeDJango
port 0 -access=50 -mode=access

sets the access mode for the port GE0 and defines VLAN 50 for operation of this port.

If you want to define VLANs for the port operation in trunk mode, use the command:

  • port [PORT_SET] [-allow={RANGELIST}]
Example:
qosmode={wrr|st3|st23|strict}]
  • Select the QoS policy for the port (WRR is used by default)
port [PORT_SET] stat
  • Display statistics for the port
port [PORT_SET] clear
  • Reset statistics for the port
port vtt
  • View the VLAN-based switching matrix, STP status and VLAN priorities
port stt [VID]
  • View the information about operation of STP in the selected VLAN and on each of the associated ports

Example,

Code Block
languagejava
themeDJango
#1> port 
1 -allow=50-55 -mode=trunk

sets the trunk mode for the port GE1 and allows operations with VLAN 50,51,52,53,54,55.

If you need to set VLAN for operation as a Native VLAN for the port in trunk mode, use the command:

  • port [PORT_SET] [-native=TAG]

In order to remove the selected VLANs from the port, use the command:

  • port [PORT_SET] [-disallow={RANGELIST}]

If you need to set on the selected port the limit for outgoing traffic (traffic shaper) in Mbps, ranging from 1 to 100 in increments of 1 or from 100 to 1000 in increments of 10, use the command:

  • port [PORT_SET] [-limit={RATE_LIMIT}]

Example:

Code Block
languagejava
themeDJango
port 0,1 -limit=120 

sets the limit of 120 Mbps on the ports GE0 and GE1.

In order to remove the limits of throughput on the port, use the command:

  • port [PORT_SET] [-nolimit]

In order to select the QoS policy for the port (WRR is used by default), use the following command:

  • port [PORT_SET] [-qosmode={wrr|st3|st23|strict}]

Use these commands to get statistics data and information about current parameters of the device operation:

  • port [PORT_SET] stat|clear|vtt|stt [VID]|fdb-show|dump

In order to display statistics for the port, use the command:

  • port [PORT_SET] stat

In order to clear statistics for the port, use the command:

  • port [PORT_SET] clear

If you want to view the VLAN-based switching matrix, STP status and VLAN priorities, use the command:

  • port vtt

If you want to view the information about operation of STP in the selected VLAN and on each of the associated ports, use the command:

  • port stt [VID]

Example:

Code Block
languagejava
themeDJango
#1> port stt 30 STP state of VID 30: ID: 100000043507A2A5 Priority: 4096 ID ext: -1 ROOT: 100000043507A2A5 Priority: 4096 ID ext: 0 Ports: Name Prio Cost PVer Role State ====== ==== ========== ==== ========== ========== ge1 128
stt 30
STP state of VID 30:
ID:       100000043507A2A5 Priority: 4096  ID ext:-1
ROOT:     100000043507A2A5 Priority: 4096  ID ext: 0
Ports:
 Name  Prio   Cost       PVer    Role     State
====== ====  ========== ==== ========== ==========
ge1    128           55 RSTP DISABLED   DISCARDING
sfp    128           55 RSTP DISABLED   DISCARDING
port [PORT_SET] fdb-show
  • View MAC-addresses in the switching matrix (fdb) of the selected port

Example,

Code Block
languagejava
themeDJango
 #1> port 0 fdb-show
FDB total entries: 10
         VID  Destination    Port    Status  T-left
        ===== ============ ========= ======= ======
        v30   0016c8822d60         0 dynamic    330
        v30   001b21c5a964         0 dynamic    330
        v30   00043507a434         0 dynamic    282
        v30   00045f94b74a         0 dynamic    188
        v30   002170f485a5         
55
0 dynamic 
RSTP
 
DISABLED
   
DISCARDING
94
sfp
    
128
    v30   
382c4ab2d932   
55
 
RSTP
 
DISABLED
   
DISCARDING
If you want to view MAC-addresses in the switching matrix (FDB) of the selected port, use the command:
 0 dynamic     94
port [PORT_SET]
fdb-showIn order to view
dump
  • View general information about the port operation
:
  • (traffic shaper limits, QoS
policy
  •  policy, port status, and data transfer rate
, use the command:
  • port [PORT_SET] dump
Example:
  • )

Example,

Code Block
languagejava
themeDJango
#console>port dump
#1> port dump
        Port R-limit QOS Mode Link   Speed
        ==== ======= ======== ==== =========
          0  ------- wrr        UP 
100
1000 Mbps
          1  ------- wrr        UP 1000 
down
Mbps
          s  ------- wrr        UP 
down
1000 Mbps
          r     
r
 420 strict    
140
 
wrr
UP   21 Mbps
    
UP
  
26
 
Mbps
   m  ------- 
wrr
strict   ---- ---------

Configuration examples

Configure the switch for operation in "isolate" mode. It is the default mode. If you need to switch from "transparent" mode, use the command:

  • port -scheme= isolate

Configure the port isolation rules for traffic redirection from external physical interfaces "GE0", "GE1" and/or "SFP" to the interfaces "RADIO" or "MGMT":

Assign access to the management interface through the "GE0" port:

  • port -mgmt=0

Assign the port "GE1" for data transfer to the port "RADIO":

  • port -radio=1

Configure the switch for operation in "transparent" mode.

See VLAN-based switching matrix with default settings below:

Code Block
languagejava
themeDJango
port vtt
        VID  0 1 2 r m STP Prio
        ==== = = = = = === ====
           1 N N N N N  - ----

In order to switch to "transparent" mode, execute the command:

  • port -scheme=transparent

Configuring of the switch starts with adding VLANs, which are necessary for data transfer and device management:

Code Block
languagejava
themeDJango
port -vlan=30,100
port vtt
        VID  0 1 2 r m STP Prio
        ==== = = = = = === ====
           1 N N N N N  -  ----
          30 t t t t t  -  ----
         100 t t t t t  -  ----

Set the parameters of processing of tagged or/and untagged traffic for each port.

Set access of untagged packets to VLAN 30 on the management interface "MGMT":

Code Block
languagejava
themeDJango
port m -access=30 -mode=access
port vtt
        VID  0 1 2 r m STP Prio
        ==== = = = = = === ====
           1 N N N N -  -  ----
          30 t t t t A  -  ----
         100 t t t t -  -  ----

Set access of untagged packets only to VLAN 30 on the port "GE0":

Code Block
languagejava
themeDJango
port 0 -access=30 -mode=access
port vtt
        VID  0 1 s r m STP Prio
        ==== = = = = = === ====
           1 - N N N -  -  ----
          30 A t t t A  -  ----
         100 - t t t -  -  ----

Set the "GE1" port for processing of tagged packets of the VLAN 30 only ("trunk" mode):

Code Block
languagejava
themeDJango
port 1 -allow=30 -mode=trunk
port vtt
        VID  0 1 s r m STP Prio
        ==== = = = = = === ====
           1 - - N N -  -  ----
          30 A t t t A  -  ----
         100 - - t t -  -  ----

Set the port "SFP" for processing of tagged packets of the VLAN 100 only ("trunk" mode):

Code Block
languagejava
themeDJango
port s -allow=100 -mode=trunk
port vtt
        VID  0 1 s r m STP Prio
        ==== = = = = = === ====
           1 - - - N -  -  ----
          30 A t - t A  -  ----
         100 - - t t -  -  ----

Set the port "RADIO" for processing of tagged packets of the VLANs 30  30 and VLAN 100 ("trunk" mode):

Code Block
languagejava
themeDJango
portr -allow=30,100 -mode=trunk
port vtt
        VID  0 1 s r m STP Prio
        ==== = = = = = === ====
          30 A t - t A  -  ----
         100 - - t t -  -  ----