Page tree

Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Include Page
_IW Academy
_IW Academy

Hide_comments

Scroll Ignore

Table of Contents

Default settings

...

The switch can operate in one of the following modes: "isolate" or "transparent".

In "isolate" mode, packet switching is based on the port isolation rules. External ports are isolated from each other

...

PORT command description

Use this command for the built-in switch management.

Syntax: 

#1> port [arguments]

...

languagejava
themeDJango

...

and traffic from each of them is redirected to the internal ports according to the port isolation rules, so that any direct traffic between the external ports is impossible. This is the basic mode, used by default, including situations when there are no any VLAN settings or 802.1Q-support is disabled in "transparent" mode.

In "transparent" mode, direct traffic transmission between external ports (without involving the internal ones) is possible, packet switching is performed according to the VLAN-tags and internal “port - VLAN-tag” correspondence table, if it exists.

Scroll Ignore

Table of Contents

Default settings

  • By default the switch operates in "isolate" mode, i.e. all the ports are isolated from each other, even if they are located in the same VLAN
  • All the ports operate in "trunk" mode with "native VLAN 1" for untagged traffic
  • radio interface is up and operates within the switch as a regular port
  • DHCP-client is enabled on the management interface "mgmt".

"port" command

Use this command for the built-in switch management.

Syntax: 

#1> port [arguments]

Code Block
languagejava
themeDJango
port [-scheme=SCHEME] [-mgmt=PORT_SET] [-radio=PORT_SET]
port -d1q[=[disableddisable|enabledenable]]
port -vlan={RANGELISTRANgeLIST} [{-priority=PRIO|-nopriority}]
port -vlan={RANGELISTRANgeLIST} [-stp] [-nostp] [{-spriority=STPPRIO|-nospriority}] [-sforward[=enable|disable]]
port -vlan={RANGELISTRANgeLIST} -remove={RANGELISTRANgeLIST}
port [PORT_SET] [-access=TAG] [-native=TAG] [-mode={access|trunk}]

port [PORT_SET] [-allow={RANGELISTRANgeLIST}] [-disallow={RANGELISTRANgeLIST}]
port [PORT_SET] [-limit={RATE_LIMIT}] [-nolimit] [-qosmode={wrr|st3|st23|strict}]
port [PORT_SET] stat|clear|vtt|stt [VID]|fdb-show|dump

RANGELISTRANgeLIST: RANGERANge[,RANGERANge...]
      RANGERANge: {TAG[-TAG]|all}
      PRIO: {0..7}    - DOT1P frame priority
RATE_LIMIT: {0..1000} - port egress rate limit in Mbit/sec
    STPPRIO: {0..15} | {0,4096,8192...61440}
   Port set <PORT_SET>:
           enumeration of {[ge]0..[ge]1,s[fp],m,r}|*, for example 0,ge1,m
   Adjacency scheme <SCHEME>:
           {isolate, transparent}

Command arguments

The switch can operate in one of the following modes: isolate or transparent.

In isolate mode, packet switching is based on the port isolation rules. External ports are isolated from each other and traffic from each of them is redirected to the internal ports according to the port isolation rules, so that any direct traffic between the external ports is impossible. This is the basic mode, used by default, including situations when there are no any VLAN settings or 802.1Q-support is disabled in transparent mode.

In transparent mode, direct traffic transmission between external ports (without involving the internal ones) is possible; packet switching is performed according to the VLAN-tags and internal “port - VLAN-tag” correspondence table, if it exists.

The following command allows you to select one of the switch modes - isolate or transparent:

  • port [-scheme=SCHEME]

If you need to configure the port isolation rules for traffic redirection from external physical interfaces GE0, GE1 and/or SFP to the interfaces RADIO or MGMT, use the following command:

  • port [-mgmt=PORT_SET] [-radio=PORT_SET]

If you need to disable the switching rules based on 802.1Q-tags, even if the transparent mode is selected (and to enable switching based on the port isolation rules), use the command:

  • port -d1q=disabled

In order to add to the system the VLANs with the numbers from 1 to 4094, use the command:

  • port -vlan={RANGELIST}.

Example:

Code Block
languagejava
themeDJango
port -vlan=50,52,60-64

adds VLANs 50,52,60,61,62,63,64.

If you want to remove any previously created VLANs from the system, use the command:

  • port -remove={RANGELIST}
If you need to set for the selected VLANs the

description is given in the table below:

Center
Scroll Title
titleTable - "port" arguments description
CommandDescription
port [-scheme=SCHEME]
  • Select one of the switch modes:
    • isolate
    • transparent
port [-mgmt=PORT_SET] [-radio=PORT_SET]
  • Configure the port isolation rules for traffic redirection from external physical interfaces "ge0", "ge1" and/or "sfp" to the interfaces "radio" or "mgmt"
port -d1q[=[disable|enable]]
  • Disable/enable the switching rules based on VLAN-tags of the 802.1Q standard
  • In order to enable switching based on the port isolation rules even if the "transparent" mode is selected, disable the switching rules based on VLAN-tags of the 802.1Q standard
port -vlan={RANgeLIST}
  • Add VLANs to the system with numbers from 1 to 4094

Example,

Code Block
languagejava
themeDJango
port -vlan=50,52,60-64

adds VLANs 50, 52, 60, 61, 62, 63, 64

port -remove={RANgeLIST}
  • Remove any previously created VLANs from the system
port -vlan={RANgeLIST} {-priority=PRIO}
  • Set for the selected VLANs the priority according to 802.1p ranging from 0 to 7,
use the command:
  • port -vlan={RANGELIST} {-priority=PRIO}
Example:
  • where 0 - the lowest priority level, 7 - the highest

Example,

Code Block
languagejava
themeDJango
port -vlan=50 -priority 7

sets the priority 7 (Network control) to

the VLAN 50.In order to remove the priority of the selected VLANs, perform the command:

the VLAN 50

port -vlan={RANgeLIST} {-nopriority}
  • Remove the previously set priority for the selected VLAN
port -vlan={
RANGELIST
RANgeLIST}
{
[-
nopriority}You can enable
stp]
  • Enable STP support for the selected VLANs
  • Enable on the switch the support of PVST+ (Per-VLAN Spanning Tree Plus) protocol – the special version
of STP
  • of STP, which allows creating a separate spanning tree for
each VLAN.
In order to enable STP support for the selected VLANs, use the command:
  • each VLAN
port -vlan={
RANGELIST
RANgeLIST} [-
stp
nostp]
In order to disable STP support
  • Disable STP support for the
selected VLANs, use the command:
  • selected VLANs
port -vlan={
RANGELIST
RANgeLIST}
[-nostp]In order to set the bridge priority for STP in the selected VLAN ranging
{-spriority=STPPRIO}
  • Set the bridge priority for STP in the selected VLAN ranging from 0 to 61440 in increments of 4096 (or from 0 to 16 in increments of 1)
, use the command:port -vlan={RANGELIST} {-spriority=STPPRIO}

Example

:

,

Code Block
languagejava
themeDJango
port -vlan=50 -spriority=4096

sets the bridge priority 4096 for VLAN

N

50

.

In order to remove the bridge priority for STP in the selected VLAN, use the command:

port -vlan={
RANGELIST
RANgeLIST} {-nospriority}
If you need to enable/disable the forwarding of STP packets in the selected VLAN, use the corresponding command:
  • Remove the bridge priority for STP in the selected VLAN
port -vlan={
RANGELIST
RANgeLIST} [-sforward[=enable|disable]]

Ports of the switch can operate in one of the two operation modes:

access mode (
  • Enable/disable the forwarding of STP packets in the selected VLAN
port [PORT_SET] [-mode={access|trunk}]
  • Select operation mode for the port:
    • "access" mode - allows untagged traffic only
) and
    • "trunk" mode
(
    • - allows tagged traffic only
)
    • . If you need to allow both tagged and untagged traffic through the port, you can configure the "native VLAN" option that defines the
only VLAN for
    • only VLAN for receiving of all incoming untagged traffic in "trunk" mode (
VLAN 1
    • "VLAN 1" is configured as a
Native
    • "native VLAN" for all the ports of the switch by default)
.

In order to select access or trunk mode for the port, use the command:

port [PORT_SET] [-
mode={access|trunk}]If you want to define VLANs
access=TAG]
  •  Define VLANs for the port operation in "access" mode
, use the command:
  • port [PORT_SET] [-access=TAG]
Example:

Example,

Code Block
languagejava
themeDJango
port 0 -access=50 -mode=access

sets the "access" mode for the port

GE0 and defines VLAN 50 for operation of this port.

If you want to define VLANs for the port operation in trunk mode, use the command:

"ge0" and defines VLAN 50 for this port operation

 port [PORT_SET] [-allow={
RANGELIST
RANgeLIST}]

Example:

  • Define VLANs for the port operation in "trunk" mode

Example,

Code Block
languagejava
themeDJango
port 1 -allow=50-55 -mode=trunk

sets the "trunk" mode for the port

GE1

"ge1" and allows operations

with VLAN 50

with VLAN 50, 51, 52, 53, 54, 55

.If you need to set VLAN for operation as a Native VLAN

port [PORT_SET] [-native=TAG]
  • Set VLAN for operation as a "native VLAN" for the port in "trunk" mode
, use the command:
port [PORT_SET] [-
native
disallow=
TAG
{RANgeLIST}]
In order to remove the selected VLANs
  • Remove the selected VLANs from the port
, use the command:
port [PORT_SET] [-
disallow
limit={
RANGELIST
RATE_LIMIT}]
If you need to set
  • Set on the selected port the limit for outgoing traffic (traffic shaper) in Mbps, ranging from 1 to 100 in increments of 1 or from 100 to 1000 in increments of 10
, use the command:
  • port [PORT_SET] [-limit={RATE_LIMIT}]
Example:

Example,


Code Block
languagejava
themeDJango
port 0,1 -limit=120 

sets the limit of 120 Mbps on the ports

GE0 and GE1.

In order to remove the limits of throughput on the port, use the command:

port [PORT

"ge0" and "ge1"

port [PORT_SET] [-nolimit]
In order to select the QoS policy for the port (WRR is used by default), use the following command:
  • Remove the limits of throughput on the port
port [PORT_SET] [-qosmode={wrr|st3|st23|strict}]

Use these commands to get statistics data and information about current parameters of the device operation:

  • port [PORT_SET] stat|clear|vtt|stt [VID]|fdb-show|dump
In order to display statistics for the port, use the command:
  • Select the QoS policy for the port (WRR is used by default):
    • wrr - use weighted round robin for all queues.
    • st3 - use strict priority for queue 3 and weighted round robin for queues 2, 1 and 0.
    • st23 - use strict priority for queue 3 and 2, and weighted round robin for queues 1 and 0.
    • strict - use strict priority for all queues.
port [PORT_SET] stat
In order to clear
  • Display statistics for the port
, use the command:
port [PORT_SET] clear
If you want to view the VLAN
  • Reset statistics for the port
port vtt
  • View the VLAN-based switching matrix,
STP status and VLAN priorities, use the command:
  • port vtt
If you want to view
  •  STP status and VLAN priorities
port stt [VID]
  • View the information about operation
of STP in the selected VLAN and
  • of STP in the selected VLAN and on each of the associated ports
, use the command:
  • port stt [VID]

Example:

Code Block
languagejava
themeDJango
#1> port stt 30 STP state of VID 30: ID:

Example,

Code Block
languagejava
themeDJango
#1> port stt 30
STP state of VID 30:
ID:       100000043507A2A5 Priority: 4096  ID ext:-1
ROOT:     100000043507A2A5 Priority: 4096  ID ext: 0
Ports:
 Name  Prio   Cost       PVer    Role     State
====== ====  ========== ==== ========== ==========
ge1    128           55 RSTP DISABLED   DISCARDING
sfp    128           55 RSTP DISABLED   DISCARDING
port [PORT_SET] fdb-show
  • View MAC-addresses in the switching matrix (fdb) of the selected port

Example,

Code Block
languagejava
themeDJango
 #1> port 0 fdb-show
FDB total entries: 10
         VID  Destination    Port    Status  T-left
        ===== ============ ========= ======= ======
        v30   0016c8822d60         0 dynamic    330
        v30   001b21c5a964         0 dynamic    330
        
100000043507A2A5
v30 
Priority:
 
4096
 00043507a434 
ID
 
ext:
 
-1 ROOT:
     
100000043507A2A5
 
Priority:
0 
4096
dynamic  
ID
 
ext: 0 Ports:
 282
 
Name
  
Prio
   
Cost
  v30   00045f94b74a  
PVer
    
Role
   0 
State ====== ==== ========== ==== ========== ========== ge1
dynamic    188
        
128
v30   002170f485a5        
55
 
RSTP
0 
DISABLED
dynamic   
DISCARDING sfp
  94
  
128
      v30   382c4ab2d932  
55
 
RSTP
 
DISABLED
   
DISCARDING
If you want to view MAC-addresses in the switching matrix (FDB) of the selected port, use the command:
  0 dynamic     94
port [PORT_SET]
fdb-showIn order to view
dump
  • View general information about the port operation
:
  • (traffic shaper limits,
QoS policy
  •  QoS policy, port status, and data transfer rate
, use the command:
  • port [PORT_SET] dump
Example:
  • )

Example,

Code Block
languagejava
themeDJango
#console>port dump
#1> port dump
        Port R-limit QOS Mode Link   Speed
        ==== ======= ======== ==== =========
          0  ------- wrr        UP
100 Mbps 1
 1000 Mbps
          1  ------- wrr        UP 1000 Mbps
          s  ------- wrr        UP 1000 
down
Mbps
   
s
  
-------
 
wrr
    r  
down
   
r
 420 strict    
140
 
wrr
UP   21 Mbps
    
UP
  
26
 
Mbps
   m  ------- 
wrr
strict   ---- ---------

Configuration examples

Configure the switch for operation in "isolate" mode. It is the default mode. If you need to switch from "transparent" mode, use the command:

  • port -scheme= isolate

Configure the port isolation rules for traffic redirection from external physical interfaces GE0, GE1 "ge0", "ge1" and/or SFP "sfp" to the interfaces RADIO or MGMT"radio" or "mgmt":

Assign access to the management interface through the GE0 "ge0" port:

  • port -mgmt=0

Assign the port GE1 "ge1" for data transfer to the port RADIO"radio":

  • port -radio=1

Configure the switch for operation in "transparent" mode.

See VLAN-based switching matrix with default settings below:

Code Block
languagejava
themeDJango
port vtt
        VID  0 1 2 r m STP Prio
        ==== = = = = = === ====
           1 N N N N N  - ----

In order to switch to "transparent" mode, execute the command:

  • port -scheme=transparent

Configuring of the switch starts with adding VLANsVLANs, which are necessary for data transfer and device management:

Code Block
languagejava
themeDJango
port -vlan=30,100
port vtt
        VID  0 1 2 r m STP Prio
        ==== = = = = = === ====
           1 N N N N N  -  ----
          30 t t t t t  -  ----
         100 t t t t t  -  ----

Set the parameters of processing of tagged or/and untagged traffic for each port.

Set access of untagged packets to VLAN 30 VLAN 30 on the management interface MGMT"mgmt":

Code Block
languagejava
themeDJango
port m -access=30 -mode=access
port vtt
        VID  0 1 2 r m STP Prio
        ==== = = = = = === ====
           1 N N N N -  -  ----
          30 t t t t A  -  ----
         100 t t t t -  -  ----

Set access of untagged packets only to VLAN 30 VLAN 30 on the port GE0"ge0":

Code Block
languagejava
themeDJango
port 0 -access=30 -mode=access
port vtt
        VID  0 1 s r m STP Prio
        ==== = = = = = === ====
           1 - N N N -  -  ----
          30 A t t t A  -  ----
         100 - t t t -  -  ----

Set the GE1 "ge1" port for processing of tagged packets of the VLAN 30 VLAN 30 only ("trunk" mode):

Code Block
languagejava
themeDJango
port 1 -allow=30 -mode=trunk
port vtt
        VID  0 1 s r m STP Prio
        ==== = = = = = === ====
           1 - - N N -  -  ----
          30 A t t t A  -  ----
         100 - - t t -  -  ----

Set the port SFP "sfp" for processing of tagged packets of the VLAN 100 VLAN 100 only ("trunk" mode):

Code Block
languagejava
themeDJango
port s -allow=100 -mode=trunk
port vtt
        VID  0 1 s r m STP Prio
        ==== = = = = = === ====
           1 - - - N -  -  ----
          30 A t - t A  -  ----
         100 - - t t -  -  ----

Set the port RADIO "radio" for processing of tagged packets of the VLAN 30 and VLAN s 30 and 100 ("trunk" mode):

Code Block
languagejava
themeDJango
portr -allow=30,100 -mode=trunk
port vtt
        VID  0 1 s r m STP Prio
        ==== = = = = = === ====
          30 A t - t A  -  ----
         100 - - t t -  -  ----